All ProjectsArch LinuxCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#56250 - [quagga] denial of service (CVE-2017-16227)

Task Type Bug Report Category Security Status Closed Assigned To Sébastien Luttringer (seblu) Architecture All Severity Medium Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 1 Christian Rebischke (Shibumi) (2017-11-05) Private No

Details Summary ======= The package quagga is vulnerable to denial of service via CVE-2017-16227. Guidance ======== Apply the Patch to fix this issue: https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html References ========== https://security.archlinux.org/AVG-481 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879474 https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=7a42b78be9a4108d98833069a88e6fddb9285008