quagga 0.99.20.1-0+squeeze5 source package in Debian

Changelog

quagga (0.99.20.1-0+squeeze5) oldstable-security; urgency=high


  * SECURITY:
     ospfd: CVE-2013-2236, stack overrun in apiserver
 
     the OSPF API-server (exporting the LSDB and allowing announcement of
     Opaque-LSAs) writes past the end of fixed on-stack buffers.  This leads
     to an exploitable stack overflow.

     For this condition to occur, the following two conditions must be true:
     - Quagga is configured with --enable-opaque-lsa
     - ospfd is started with the "-a" command line option
     Closes: #726724
  * Re-upload with corrected distribution.

 -- Christian Hammers <email address hidden>  Sun, 24 Nov 2013 15:41:48 +0100