<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6463c69c301e0624506afed76827648f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3508">
  <id>dbg111-quagga</id>
  <title>quagga: security update</title>
  <release>openSUSE 11.1 DEBUGINFO</release>
  <issued date="1289498040"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634300" id="634300" title="bug number 634300" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2949" id="CVE-2010-2949" title="CVE-2010-2949" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2948" id="CVE-2010-2948" title="CVE-2010-2948" type="cve"/>
  </references>
  <description>This update of quagga fixes two security issues:
- CVE-2010-2948: CVSS v2 Base Score: 6.5 (MEDIUM)
  (AV:N/AC:L/Au:S/C:P/I:P/A:P) Stack-based buffer overflow
  while processing malformed Route-Refresh messages.
- CVE-2010-2949: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P) Denial of service while
  processing malformed BGP update AS path messages
</description>
  <pkglist>
    <collection>
        <package name="quagga-debuginfo" arch="i586" version="0.99.17" release="1.1.1">
          <filename>quagga-debuginfo-0.99.17-1.1.1.i586.rpm</filename>
        </package>
        <package name="quagga-debuginfo" arch="ppc" version="0.99.17" release="1.1.1">
          <filename>quagga-debuginfo-0.99.17-1.1.1.ppc.rpm</filename>
        </package>
        <package name="quagga-debuginfo" arch="x86_64" version="0.99.17" release="1.1.1">
          <filename>quagga-debuginfo-0.99.17-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="quagga-debugsource" arch="i586" version="0.99.17" release="1.1.1">
          <filename>quagga-debugsource-0.99.17-1.1.1.i586.rpm</filename>
        </package>
        <package name="quagga-debugsource" arch="ppc" version="0.99.17" release="1.1.1">
          <filename>quagga-debugsource-0.99.17-1.1.1.ppc.rpm</filename>
        </package>
        <package name="quagga-debugsource" arch="x86_64" version="0.99.17" release="1.1.1">
          <filename>quagga-debugsource-0.99.17-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
