<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="12720fe34fa1f6df34c77ec7a3683b77"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sdkp3-quagga-7237"
    timestamp="1289842312"
    engine="1.0">
  <yum:name>sdkp3-quagga</yum:name>
  <summary lang="en">Security update for quagga</summary>
  <description lang="en">
This update of quagga fixes two security issues:

    * CVE-2010-2948: CVSS v2 Base Score: 6.5 (MEDIUM)
      (AV:N/AC:L/Au:S/C:P/I:P/A:P) Stack-based buffer overflow while
      processing malformed Route-Refresh messages.
    * CVE-2010-2949: CVSS v2 Base Score: 5.0 (MEDIUM)
      (AV:N/AC:L/Au:N/C:N/I:N/A:P) Denial of service while processing
      malformed BGP update AS path messages

Security Issue references:

    * CVE-2010-2949
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2949&gt;
    * CVE-2010-2948
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2948&gt;

</description>
  <yum:version ver="7237" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="quagga" epoch="0" ver="0.99.9" rel="14.7.1" flags="EQ"/>
    <rpm:entry kind="atom" name="quagga-devel" epoch="0" ver="0.99.9" rel="14.7.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>quagga</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.99.9" rel="14.7.1"/>
      <checksum type="sha" pkgid="YES">e6e0423f3fc011d13654f79ae03a754859512b37</checksum>
      <time file="1289842328" build="1289842312"/>
      <size package="970625" installed="3598251" archive="3607204"/>
      <location xml:base="media://#1" href="suse/x86_64/quagga-0.99.9-14.7.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="quagga" epoch="0" ver="0.99.9" rel="14.7.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="quagga"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>quagga-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.99.9" rel="14.7.1"/>
      <checksum type="sha" pkgid="YES">86f0ad713fed4b1db5fd18d22fbf90a8d8b0de25</checksum>
      <time file="1289842328" build="1289842312"/>
      <size package="368465" installed="1843784" archive="1851568"/>
      <location xml:base="media://#1" href="suse/x86_64/quagga-devel-0.99.9-14.7.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="quagga-devel" epoch="0" ver="0.99.9" rel="14.7.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="quagga-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
