[Buildroot] [PATCH] quagga: add upstream security fix for CVE-2017-16227

Peter Korsgaard peter at korsgaard.com
Sun Nov 26 09:13:19 UTC 2017


>>>>> "Peter" == Peter Korsgaard <peter at korsgaard.com> writes:

 > From the advisory:
 > http://www.openwall.com/lists/oss-security/2017/10/30/4

 > It was discovered that the bgpd daemon in the Quagga routing suite does
 > not properly calculate the length of multi-segment AS_PATH UPDATE
 > messages, causing bgpd to drop a session and potentially resulting in
 > loss of network connectivity.

 > Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

Committed to 2017.02.x and 2017.08.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list