[USN-6482-1] Quagga vulnerabilities

-----BEGIN PGP SIGNATURE-----
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=z8u0
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6482-1
November 15, 2023

quagga vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

Quagga could be made to crash if it received specially crafted network
traffic.

Software Description:
- quagga: BGP/OSPF/RIP routing daemon

Details:

It was discovered that Quagga incorrectly handled certain BGP messages. A
remote attacker could possibly use this issue to cause Quagga to crash,
resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
quagga 1.2.4-4ubuntu0.4
quagga-bgpd 1.2.4-4ubuntu0.4

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6482-1
CVE-2022-37032, CVE-2023-46753

Package Information:
https://launchpad.net/ubuntu/+source/quagga/1.2.4-4ubuntu0.4