Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 10 Quagga 0.99.12-1 Critical ASN4 Assert Crash Mitigation

The latest upstream version fixes serious assert crashing with ASN4's.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-5284 2009-05-21 23:03:20 -------------------------------------------------------------------------------- Name : quagga Product : Fedora 10 Version : 0.99.12 Release : 1.fc10 URL : Summary : Routing daemon Description : Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Route Reflector. It is not a toolkit, it provides full routing power under a new architecture. Quagga by design has a process for each protocol. Quagga is a fork of GNU Zebra. -------------------------------------------------------------------------------- Update Information: The latest upstream version fixes serious assert crashing with ASN4's. -------------------------------------------------------------------------------- ChangeLog: * Wed May 20 2009 Jiri Skala - 0.99.12-1 - update to latest upstream version - fix #499960 - BGPd in Quagga prior to 0.99.12 has a serious assert problem crashing with ASN4's * Mon May 4 2009 Jiri Skala - 0.99.10-3 - fixes #498832 - bgpd crashes on as paths containing more 6 digit as numbers-------------------------------------------------------------------------------- References: [ 1 ] Bug #499033 - CVE-2009-1572 quagga: crash in bgpd when receiving updates containing asn32 https://bugzilla.redhat.com/show_bug.cgi?id=499033 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update quagga' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the FedoraProject GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Quagga routing service patch for Fedora 10 resolves ASN4 assertion failure bug. Update is advised for enhanced network reliability.. Quagga Routing Daemon,Fedora Update,ASN4 Crash Fix,Network Management Software. . Severity: Critical. LinuxSecurity.com Team

May 21, 2009 •Critical Fedora