kritik
SUSE-SU-2024:3426-1
Security update for quagga
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for quagga fixes the following issues: - CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. (bsc#1230866) - CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. (bsc#1229438) - CVE-2022-37032: out-of-bounds read when parsing a BGP capability message due to incorrect size check. (bsc#1202023) Bug fixes: - References to /var/adm/fillup-templates replaced with new %_fillupdir macro. (bsc#1069468)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | libfpm_pb0, libospf0, libospfapiclient0 ve 4 tane daha | 1.1.1-17.13.1 |
1 kaynaktaki 7 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | libfpm_pb0 | 1.1.1-17.13.1 |
| SUSE Linux Enterprise 12.5 | libospf0 | 1.1.1-17.13.1 |
| SUSE Linux Enterprise 12.5 | libospfapiclient0 | 1.1.1-17.13.1 |
| SUSE Linux Enterprise 12.5 | libquagga_pb0 | 1.1.1-17.13.1 |
| SUSE Linux Enterprise 12.5 | libzebra1 | 1.1.1-17.13.1 |
| SUSE Linux Enterprise 12.5 | quagga | 1.1.1-17.13.1 |
| SUSE Linux Enterprise 12.5 | quagga-devel | 1.1.1-17.13.1 |
Referanslar
- https://bugzilla.suse.com/1069468
- https://bugzilla.suse.com/1079798
- https://bugzilla.suse.com/1079799
- https://bugzilla.suse.com/1079800
- https://bugzilla.suse.com/1079801
- https://bugzilla.suse.com/1202023
- https://bugzilla.suse.com/1229438
- https://bugzilla.suse.com/1230866
18 referansın hepsi
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019517.html
- https://www.suse.com/security/cve/CVE-2017-15865/
- https://www.suse.com/security/cve/CVE-2018-5378/
- https://www.suse.com/security/cve/CVE-2018-5379/
- https://www.suse.com/security/cve/CVE-2018-5380/
- https://www.suse.com/security/cve/CVE-2018-5381/
- https://www.suse.com/security/cve/CVE-2022-37032/
- https://www.suse.com/security/cve/CVE-2024-44070/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2024/suse-su-20243426-1/