SciLinux: SLSA-2018-0377-1 Critical: Quagga Double Free Risk

quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code (CVE-2018-5379) SL7 x86_64 quagga-0.99.22.4-5.el7_4.i686.rpm quagga-0.99.22.4-5.el7_4.x86_64.rpm quagga-debuginfo-0.99.22.4-5.el7_4.i686.rpm quagga-debuginfo-0.99.22.4-5.el7_4.x86_64.rpm quagga-contrib-0.99.22.4-5.el7_4.x86_64. [More...]

Synopsis:          Important: quagga security update
Advisory ID:       SLSA-2018:0377-1
Issue Date:        2018-02-28
CVE Numbers:       CVE-2018-5379
--

Security Fix(es):

* quagga: Double free vulnerability in bgpd when processing certain forms
of UPDATE message allowing to crash or potentially execute arbitrary code
(CVE-2018-5379)
--

SL7
  x86_64
    quagga-0.99.22.4-5.el7_4.i686.rpm
    quagga-0.99.22.4-5.el7_4.x86_64.rpm
    quagga-debuginfo-0.99.22.4-5.el7_4.i686.rpm
    quagga-debuginfo-0.99.22.4-5.el7_4.x86_64.rpm
    quagga-contrib-0.99.22.4-5.el7_4.x86_64.rpm
    quagga-devel-0.99.22.4-5.el7_4.i686.rpm
    quagga-devel-0.99.22.4-5.el7_4.x86_64.rpm

- Scientific Linux Development Team