newsQuagga Routing Software - News: Quagga 1.1.1 Released

 
 
Latest News
Quagga 1.2.4 Released posted by paul, Mon 19 Feb 2018 09:49:01 PM UTC - 0 replies
Quagga 1.2.3 Release, with significant BGP security fixes posted by paul, Thu 15 Feb 2018 09:38:08 PM UTC - 0 replies
Quagga 1.2.2 release posted by balajig81, Tue 03 Oct 2017 05:00:55 PM UTC - 0 replies
Quagga 1.2.1 release posted by paul, Fri 10 Mar 2017 01:39:20 PM UTC - 0 replies
Quagga 1.2.0 has been released posted by paul, Wed 08 Feb 2017 03:40:08 PM UTC - 0 replies
[Submit News]
[25 news in archive]

Quagga 1.1.1 Released

Item posted by Paul Jakma <paul> on Mon 23 Jan 2017 06:41:12 PM UTC.

Quagga 1.1.1 has been released. This is a security and bug fix release, addressing primarily:

amounts of memory, leading to DoS.

  • Bugzilla 885: ospf6d broken
  • Fixing building on OpenBSD
  • Removing the "duplicate command" warnings from normal builds.

There is a known regression with IPv6 BGP sessions, see Bugzilla #870.

This release is available in the usual place:

http://download.savannah.gnu.org/releases/quagga/

The full Changelog:

commit 3b0e3008e41c967e459f87b6ca8658ef26f49bc9
Author: Paul Jakma <paul@jakma.org>
Date: Mon Jan 23 15:14:08 2017 +0000

configure: Bump version to 1.1.1

commit f0705d523420ece274410c3df9f4b8fb043094c0
Author: Paul Jakma <paul@jakma.org>
Date: Wed Jan 11 10:02:32 2017 +0000

HACKING: Update useful URLs

commit a66b46208f10f4453dd63cec8a99a2218c7b4764
Author: Paul Jakma <paul@jakma.org>
Date: Mon Jan 9 13:06:56 2017 +0000

HACKING: Add 'Objectives', 'Governance', and an initial 'Code of Conduct'

commit e992eb98d1ec8da84c7d0dffb1388bfbe935f16b
Author: Paul Jakma <paul@jakma.org>
Date: Thu Jan 5 12:46:17 2017 +0000

HACKING: set a4paper by default

commit 126b0e7c2915fb7ec3e5f72e625433a83568c7d6
Author: Paul Jakma <paul.jakma@hpe.com>
Date: Fri Nov 18 14:40:41 2016 +0000

vty: Add ctrl-v <literal> to allow, e.g., '?' to be input for regex

* Support the standard ctrl-v <literal> control sequence. Otherwise there
is no way to do this from the venerable telnet vty. vtysh supports this
(configurably) via readline.
* lib/vty.c: (VTY_ESC_LITERAL) New mode, for ctrl-v.
(vty_read) Additional mode to go ctrl-v -> VTY_ESC_LITERAL, and
always insert next char.

Acked-by: Vincent.Jardin@6wind.com

commit f5a4488a0dda521f19e96f2615f4a8b134c5878b
Author: Jafar Al-Gharaibeh <jafar@atcorp.com>
Date: Mon Aug 1 18:14:38 2016 -0500

vtysh: Fix, guard against NULL pointer dereference

getpwuid() may fail returning a null value leaving subsequent
code vulnerable to a null pointer dereference.

Tested-by: NetDEF CI System <cisystem@netdef.org>

commit 71e0ba780bd7ba1a6fdc71ff673e3ef5aee61e08
Author: Nick Hilliard <nick@foobar.org>
Date: Tue Dec 27 22:51:51 2016 +0000

vtysh: make warnings about node installs a non-default compile-time option

* lib/command.c: (install_element) Suppress duplicate command install warnings
for vtysh

commit a64c66b105929b0f0fc19743f34dc29c760df967
Author: Renato Westphal <renato@opensourcerouting.org>
Date: Fri Jan 6 16:30:03 2017 +0700

zebra: fix build on OpenBSD >= 5.9

RTF_XRESOLVE was removed from the OpenBSD tree recently.

commit 99e00a19bb8afcf081d1551b886c6d85188e6c60
Author: Paul Jakma <paul@jakma.org>
Date: Mon Jan 23 14:47:32 2017 +0000

lib: Bump library version-info

commit 7d66284a5817a1613b1e4d64a0775ec04fdf8c01
Author: Paul Jakma <paul@jakma.org>
Date: Thu Jan 19 10:39:23 2017 +0000

lib: ensure vty buf is nul terminated and wrap puts to it with checks

* vty.c: Fix str* overruns in previous commit, which I reported to the
author. Add bit more checking of updates to vty buffer.
Swap VTY_BUFSIZ over to vty->max, as that should be the external API.
* vty.c: (vty_buf_assert) conditions that should always be assertable for
vty buffer.
(vty_buf_put) little wrapper to check char puts to vty input buffer,
and unconditionally write nul at very end of buffer as guard.
Won't always work, as some places use mem* to manipulate.
(vty_self_insert{,_overwrite}) Length check needs to leave room for nul.
Use vty_buf_put.
(vty_insert_word_overwrite) Length check needs to leave room for nul.
(*) Add vty_buf_assert calls.

Merging in fixes from Quentin Young <qlyoung@cumulusnetworks.com>

commit b7ceefea77a246fe5c1dcd1b91bf6079d1b97c02
Author: Quentin Young <qlyoung@cumulusnetworks.com>
Date: Tue Jan 10 23:33:50 2017 +0000

lib: limit size of vty buffer to 4096 bytes

This removes the automatic resizing of the vty input buffer and places a
hard size cap of 4096 bytes. It also fixes a potentially unsafe strcpy.

[Edits by Paul Jakma, paul@jakma.org]

commit 5477ee7b9d8d24d2bb61335c62f3d6c5e99fc901
Author: Paul Jakma <paul@jakma.org>
Date: Wed Jan 11 11:18:22 2017 +0000

Revert "opsf6d: Update router-LSA when nbr's interface-ID changes"

This reverts commit e509af86e3579944b7cde942ca3ee3427db1936a.

See Bug #885
[paul@stoner a]$ cat quagga-1.1.1.changelog.txt
commit 3b0e3008e41c967e459f87b6ca8658ef26f49bc9
Author: Paul Jakma <paul@jakma.org>
Date: Mon Jan 23 15:14:08 2017 +0000

configure: Bump version to 1.1.1

commit f0705d523420ece274410c3df9f4b8fb043094c0
Author: Paul Jakma <paul@jakma.org>
Date: Wed Jan 11 10:02:32 2017 +0000

HACKING: Update useful URLs

commit a66b46208f10f4453dd63cec8a99a2218c7b4764
Author: Paul Jakma <paul@jakma.org>
Date: Mon Jan 9 13:06:56 2017 +0000

HACKING: Add 'Objectives', 'Governance', and an initial 'Code of Conduct'

commit e992eb98d1ec8da84c7d0dffb1388bfbe935f16b
Author: Paul Jakma <paul@jakma.org>
Date: Thu Jan 5 12:46:17 2017 +0000

HACKING: set a4paper by default

commit 126b0e7c2915fb7ec3e5f72e625433a83568c7d6
Author: Paul Jakma <paul.jakma@hpe.com>
Date: Fri Nov 18 14:40:41 2016 +0000

vty: Add ctrl-v <literal> to allow, e.g., '?' to be input for regex

* Support the standard ctrl-v <literal> control sequence. Otherwise there
is no way to do this from the venerable telnet vty. vtysh supports this
(configurably) via readline.
* lib/vty.c: (VTY_ESC_LITERAL) New mode, for ctrl-v.
(vty_read) Additional mode to go ctrl-v -> VTY_ESC_LITERAL, and
always insert next char.

Acked-by: Vincent.Jardin@6wind.com

commit f5a4488a0dda521f19e96f2615f4a8b134c5878b
Author: Jafar Al-Gharaibeh <jafar@atcorp.com>
Date: Mon Aug 1 18:14:38 2016 -0500

vtysh: Fix, guard against NULL pointer dereference

getpwuid() may fail returning a null value leaving subsequent
code vulnerable to a null pointer dereference.

Tested-by: NetDEF CI System <cisystem@netdef.org>

commit 71e0ba780bd7ba1a6fdc71ff673e3ef5aee61e08
Author: Nick Hilliard <nick@foobar.org>
Date: Tue Dec 27 22:51:51 2016 +0000

vtysh: make warnings about node installs a non-default compile-time option

* lib/command.c: (install_element) Suppress duplicate command install warnings
for vtysh

commit a64c66b105929b0f0fc19743f34dc29c760df967
Author: Renato Westphal <renato@opensourcerouting.org>
Date: Fri Jan 6 16:30:03 2017 +0700

zebra: fix build on OpenBSD >= 5.9

RTF_XRESOLVE was removed from the OpenBSD tree recently.

commit 99e00a19bb8afcf081d1551b886c6d85188e6c60
Author: Paul Jakma <paul@jakma.org>
Date: Mon Jan 23 14:47:32 2017 +0000

lib: Bump library version-info

commit 7d66284a5817a1613b1e4d64a0775ec04fdf8c01
Author: Paul Jakma <paul@jakma.org>
Date: Thu Jan 19 10:39:23 2017 +0000

lib: ensure vty buf is nul terminated and wrap puts to it with checks

* vty.c: Fix str* overruns in previous commit, which I reported to the
author. Add bit more checking of updates to vty buffer.
Swap VTY_BUFSIZ over to vty->max, as that should be the external API.
* vty.c: (vty_buf_assert) conditions that should always be assertable for
vty buffer.
(vty_buf_put) little wrapper to check char puts to vty input buffer,
and unconditionally write nul at very end of buffer as guard.
Won't always work, as some places use mem* to manipulate.
(vty_self_insert{,_overwrite}) Length check needs to leave room for nul.
Use vty_buf_put.
(vty_insert_word_overwrite) Length check needs to leave room for nul.
(*) Add vty_buf_assert calls.

Merging in fixes from Quentin Young <qlyoung@cumulusnetworks.com>

commit b7ceefea77a246fe5c1dcd1b91bf6079d1b97c02
Author: Quentin Young <qlyoung@cumulusnetworks.com>
Date: Tue Jan 10 23:33:50 2017 +0000

lib: limit size of vty buffer to 4096 bytes

This removes the automatic resizing of the vty input buffer and places a
hard size cap of 4096 bytes. It also fixes a potentially unsafe strcpy.

[Edits by Paul Jakma, paul@jakma.org]

commit 5477ee7b9d8d24d2bb61335c62f3d6c5e99fc901
Author: Paul Jakma <paul@jakma.org>
Date: Wed Jan 11 11:18:22 2017 +0000

Revert "opsf6d: Update router-LSA when nbr's interface-ID changes"

This reverts commit e509af86e3579944b7cde942ca3ee3427db1936a.

See Bug #885

No messages in Quagga 1.1.1 Released

 

Back to the top


Powered by Savane 3.1-cleanup1