CVSROOT: /cvs
Module name: ports
Changes by: st...@cvs.openbsd.org 2011/09/27 03:45:53
Modified files:
net/quagga : Makefile distinfo
net/quagga/patches: patch-doc_Makefile_in
patch-ospfclient_Makefile_in
net/quagga/pkg : DESCR PFRAG.shared PLIST
Removed files:
net/quagga/patches: patch-bgpd_bgp_attr_c patch-ospfd_ospf_lsa_h
patch-ospfd_ospf_nsm_c
patch-ospfd_ospf_opaque_c
patch-ospfd_ospf_opaque_h
Log message:
SECURITY update to quagga 0.99.19
CVE-2011-3323: ospf6d *stack-based buffer overflow*, inter-area-prefix LSAs
CVE-2011-3324: ospf6d assertion failure; DD LSAs with over-length header
CVE-2011-3325: ospf crash(?) if a hello has a truncated header or invalid type
CVE-2011-3326: ospf null deref if a link state update LSA has an unknown type
CVE-2011-3327: bgp buffer overflow with malformed UPDATE (extended communities)
