Your message dated Fri, 16 Mar 2012 22:35:35 +0000
with message-id <[email protected]>
and subject line Bug#664033: fixed in quagga 0.99.20.1-1
has caused the Debian Bug report #664033,
regarding quagga: 0.99.20.1 security release available
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
664033: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=664033
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: quagga
Version: 0.99.20
Severity: important
Tags: security
Quagga 0.99.20.1 has been released
This is a security-fix release that addresses 3 pending CVEs, one in bgpd
and two in ospfd. The CVEs will be linked once released.
However, the changelog tells more:
http://download.savannah.gnu.org/releases/quagga/quagga-0.99.20.1.changelog.txt
Please upload updated packages ASAP.
-- System Information:
Debian Release: 6.0.4
APT prefers proposed-updates
APT policy: (990, 'proposed-updates'), (990, 'stable'), (500,
'stable-updates')
Architecture: amd64 (x86_64)
Kernel: Linux 3.0.24+ (SMP w/8 CPU cores)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
--- End Message ---
--- Begin Message ---
Source: quagga
Source-Version: 0.99.20.1-1
We believe that the bug you reported is fixed in the latest version of
quagga, which is due to be installed in the Debian FTP archive:
quagga-dbg_0.99.20.1-1_amd64.deb
to main/q/quagga/quagga-dbg_0.99.20.1-1_amd64.deb
quagga-doc_0.99.20.1-1_all.deb
to main/q/quagga/quagga-doc_0.99.20.1-1_all.deb
quagga_0.99.20.1-1.debian.tar.gz
to main/q/quagga/quagga_0.99.20.1-1.debian.tar.gz
quagga_0.99.20.1-1.dsc
to main/q/quagga/quagga_0.99.20.1-1.dsc
quagga_0.99.20.1-1_amd64.deb
to main/q/quagga/quagga_0.99.20.1-1_amd64.deb
quagga_0.99.20.1.orig.tar.bz2
to main/q/quagga/quagga_0.99.20.1.orig.tar.bz2
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Christian Hammers <[email protected]> (supplier of updated quagga package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 16 Mar 2012 22:14:05 +0100
Source: quagga
Binary: quagga quagga-dbg quagga-doc
Architecture: source amd64 all
Version: 0.99.20.1-1
Distribution: unstable
Urgency: high
Maintainer: Christian Hammers <[email protected]>
Changed-By: Christian Hammers <[email protected]>
Description:
quagga - BGP/OSPF/RIP routing daemon
quagga-dbg - BGP/OSPF/RIP routing daemon (debug symbols)
quagga-doc - documentation files for quagga
Closes: 664033
Changes:
quagga (0.99.20.1-1) unstable; urgency=high
.
* SECURITY:
CVE-2012-0249 - Quagga ospfd DoS on malformed LS-Update packet
CVE-2012-0250 - Quagga ospfd DoS on malformed Network-LSA data
CVE-2012-0255 - Quagga bgpd DoS on malformed OPEN message
* New upstream release. Closes: #664033
Checksums-Sha1:
01bba02730ee7aee381cb763c1e4688daa6b505c 1451 quagga_0.99.20.1-1.dsc
4a2c0b2f6df7df202fb121582ffc595d070f66e2 1797724 quagga_0.99.20.1.orig.tar.bz2
9e3d4e2b969ff7940ab0b0eb28910994735b0beb 35760 quagga_0.99.20.1-1.debian.tar.gz
f3f9a960e668887c85b7b04d5b7ffbc55e68d715 1610796 quagga_0.99.20.1-1_amd64.deb
e98da602255ce768adbc769f7bd509c8889a3bf5 1744720
quagga-dbg_0.99.20.1-1_amd64.deb
3924ec9115513c2d846f5b4f0c174adcdb7f1714 641330 quagga-doc_0.99.20.1-1_all.deb
Checksums-Sha256:
e0b469285fa67234c12e85df66d297c2da8df392ced10bb0a5c9fbe7f41e01e7 1451
quagga_0.99.20.1-1.dsc
706eb760604e83a71c66591b7244cb497740334e2f16c42a8112036771ba0a0c 1797724
quagga_0.99.20.1.orig.tar.bz2
b7f553fbbf812279ceee08266582c7a6bcf93c11ee2b9b3f626ce328089399e2 35760
quagga_0.99.20.1-1.debian.tar.gz
7e4413d623b2aa89242ff6159eea5bd2f7d722aae7ca2f354e3a718dab7ed2e0 1610796
quagga_0.99.20.1-1_amd64.deb
de136c93ff3de7d661520fccb6a35256e8ed81f32cca0308aad68fb289d96460 1744720
quagga-dbg_0.99.20.1-1_amd64.deb
34dd5d136396b9e7ce9bbbae00ed8ec790151f9c9621ed245242dc573b5cf702 641330
quagga-doc_0.99.20.1-1_all.deb
Files:
5083d643b17bf90fb09395da6c193247 1451 net optional quagga_0.99.20.1-1.dsc
457d70062020f488028c972a8bd37549 1797724 net optional
quagga_0.99.20.1.orig.tar.bz2
3aaf9a4c903841d01aadb525d3e42e73 35760 net optional
quagga_0.99.20.1-1.debian.tar.gz
c65c6735552c8367371970b59fe5de10 1610796 net optional
quagga_0.99.20.1-1_amd64.deb
230d6b3c6500b15d81e9b8c2e67da120 1744720 debug extra
quagga-dbg_0.99.20.1-1_amd64.deb
1876eb0b1943eba686d6790c221da431 641330 net optional
quagga-doc_0.99.20.1-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAk9jvZMACgkQkR9K5oahGOYILgCeOcnfvtODpMl2F1BVX2wubSMC
iA8An1O/4v+NXfNNKQgcPii8a/CptVm0
=50Q+
-----END PGP SIGNATURE-----
--- End Message ---
