diff options
| author | Timo Teräs <timo.teras@iki.fi> | 2016-10-19 09:12:13 +0300 |
|---|---|---|
| committer | Timo Teräs <timo.teras@iki.fi> | 2016-10-19 09:12:13 +0300 |
| commit | 1540cc086ca2d8a5f34db0ab3f4dbcc323352b0a (patch) | |
| tree | 3c7533c4268fd78289f3b0af946706e651d95514 /main | |
| parent | eead0b601d355faae2d7169afc8088ca631fb33e (diff) | |
| download | aports-1540cc086ca2d8a5f34db0ab3f4dbcc323352b0a.tar.bz2 aports-1540cc086ca2d8a5f34db0ab3f4dbcc323352b0a.tar.xz | |
main/quagga: upgrade to 1.1.0, two CVEs
CVE-2016-1245 Stack buffer overflow in zebra on Linux, if IPv6 and
IPv6 neighbour discovery router advertisements (SLAC) are enabled ("no
ipv6 nd suppress-ra"). Thanks to David Lamparter for reporting and
fixing this issue.
CVE-2016-4049 A controlled crash, leading to a DoS, in the BGP MRT
route dumping code, if a prefix had too many entries to write to one
record. Thanks to Evgeny Uskov for reporting and fixing this issue.
Diffstat (limited to 'main')
| -rw-r--r-- | main/quagga/APKBUILD | 27 |
1 files changed, 9 insertions, 18 deletions
diff --git a/main/quagga/APKBUILD b/main/quagga/APKBUILD index 48523f8bf3..d92512ea04 100644 --- a/main/quagga/APKBUILD +++ b/main/quagga/APKBUILD @@ -1,7 +1,7 @@ # Maintainer: Natanael Copa <ncopa@alpinelinux.org> pkgname=quagga -pkgver=1.0.20160315 -pkgrel=1 +pkgver=1.1.0 +pkgrel=0 pkgdesc="A free routing daemon replacing Zebra supporting RIP, OSPF and BGP." url="http://quagga.net/" arch="all" @@ -12,7 +12,7 @@ install="$pkgname.pre-install $pkgname.post-install $pkgname.post-upgrade" subpackages="$pkgname-dev $pkgname-doc $pkgname-dbg" pkgusers="quagga" pkggroups="quagga" -source="http://download.savannah.gnu.org/releases/quagga/quagga-$pkgver.tar.xz +source="http://download.savannah.gnu.org/releases/quagga/quagga-$pkgver.tar.gz dont-hook-core-signals.patch bgpd.initd @@ -20,19 +20,10 @@ source="http://download.savannah.gnu.org/releases/quagga/quagga-$pkgver.tar.xz zebra.confd " -_builddir="$srcdir"/$pkgname-$pkgver -prepare() { - cd "$_builddir" - update_config_sub || return 1 - for i in $source; do - case $i in - *.patch) msg $i; patch -p1 -i "$srcdir"/$i || return 1;; - esac - done -} +builddir="$srcdir"/$pkgname-$pkgver build() { - cd "$_builddir" + cd "$builddir" quagga_cv_ipforward_method=proc \ ./configure \ --build=$CBUILD \ @@ -58,7 +49,7 @@ build() { } package() { - cd "$_builddir" + cd "$builddir" make DESTDIR="$pkgdir" install || return 1 install -o quagga -g quagga -d "$pkgdir"/var/run/quagga @@ -71,17 +62,17 @@ package() { install -Dm644 "$srcdir/zebra.confd" "$pkgdir"/etc/conf.d/zebra install -o quagga -g quagga -d -m755 "$pkgdir"/etc/quagga } -md5sums="61bfd0c8fb696dd778234ee8b05821bc quagga-1.0.20160315.tar.xz +md5sums="daa303871e07ea5856aae6fd79e89722 quagga-1.1.0.tar.gz 1224ba91ea6b6e81f583bad7813aba98 dont-hook-core-signals.patch 09a77e2e84e71c43f5a449738c026261 bgpd.initd 916f1dd1a286ee7b862cda4fe56cbf21 zebra.initd 34e06a1d2bc602ce691abc9ed169dd15 zebra.confd" -sha256sums="d284af5dd875dbba90ab875d40db5d68fdc9ede17a76f2af525f85344be56767 quagga-1.0.20160315.tar.xz +sha256sums="f7a43a9c59bfd3722002210530b2553c8d5cc05bfea5acd56d4f102b9f55dc63 quagga-1.1.0.tar.gz 4b71588e34ac14f8d6e72e6064b5e4ec302f286ebbe43df94c97411cceb66a23 dont-hook-core-signals.patch aab037454c6a70cd5cb45e14c47b7dfea358f8d81c7d12418edcf7e58a86c679 bgpd.initd c1d7526581927e990e687cbd5d08447eb060f76a439475572785b5b90c60c460 zebra.initd f7a52d383f60270a5a8fee5d4ac522c5c0ec2b7c4b5252cff54e260f32d9b323 zebra.confd" -sha512sums="ad633d189017a2cef68cf1653b85e082a0dc4fe146720a985da8cdf2aa4c61f2df8a8339419c986e9d74aa88f7f7109bc6d0c13d9ff4904a23852cee3e112edc quagga-1.0.20160315.tar.xz +sha512sums="3b29a90c4f05593714bda3c702fd2c8886ce48fba2fbfb98f55cc04d1025edd5427944e9a9fb7cd630e5e8ccea388b72a8e611ab65c370e760f3f319d03f090f quagga-1.1.0.tar.gz 5ef5c5e6d70d991b33b13a062e25b6fbde395dceee36aea29384b0640a48d2957ed5f50d416a1f2f770bf69bae2340133e35b1114be7e1fa722eb6d3d021f37a dont-hook-core-signals.patch 13b5b57e10df013bd2d931abc49bf76b8c4dee59dbceab22c9f151ccb988b2c5f7167f2909027d5e0f990b59da8de115667b02484aee9a67d347625700f6cacd bgpd.initd 1638a4a64ffd066b1884f7e5a4243edab68739aabd83bd35ea8c9608af7b8623eece1d59fb08feead84e4386b6d1da4220764ccf5fd7f2a9959a8470d5cce86a zebra.initd |