CVSROOT:        /cvs
Module name:    ports
Changes by:     st...@cvs.openbsd.org   2011/09/27 03:47:24

Modified files:
        net/quagga     : Tag: OPENBSD_5_0 Makefile distinfo 
        net/quagga/patches: Tag: OPENBSD_5_0 patch-doc_Makefile_in 
                            patch-ospfclient_Makefile_in 
        net/quagga/pkg : Tag: OPENBSD_5_0 DESCR PFRAG.shared PLIST 
Removed files:
        net/quagga/patches: Tag: OPENBSD_5_0 patch-bgpd_bgp_attr_c 
                            patch-ospfd_ospf_lsa_h 
                            patch-ospfd_ospf_nsm_c 
                            patch-ospfd_ospf_opaque_c 
                            patch-ospfd_ospf_opaque_h 

Log message:
MFC: SECURITY update to quagga 0.99.19

CVE-2011-3323: ospf6d *stack-based buffer overflow*, inter-area-prefix LSAs
CVE-2011-3324: ospf6d assertion failure; DD LSAs with over-length header
CVE-2011-3325: ospf crash(?) if a hello has a truncated header or invalid type
CVE-2011-3326: ospf null deref if a link state update LSA has an unknown type
CVE-2011-3327: bgp buffer overflow with malformed UPDATE (extended communities)

Reply via email to