Advisories » MGASA-2016-0374

Updated quagga packages fix security vulnerability

Publication date: 11 Nov 2016
Modification date: 11 Nov 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-1245

Description

It was discovered that the zebra daemon in the Quagga routing suite
suffered from a stack-based buffer overflow when processing IPv6
Neighbor Discovery messages (CVE-2016-1245).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19619
• https://lists.quagga.net/pipermail/quagga-users/2016-October/014478.html
• https://www.debian.org/security/2016/dsa-3695
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1245

SRPMS

5/core

• quagga-0.99.22.4-4.3.mga5