Sunday October 28, 2007 Random ramblings
Sunday October 28, 2007 Quagga has been updated in Solaris. The following bugs are fixed in both Solaris Nevada SFW gate (build 76) and the SFW10 gate (from which any S10u5 would be built):
- 6554276 bgpd is vulnerable to a DoS if configured peers send a malformed MP_(UN)REACH_NLRI attribute
- 6578890 Quagga should be updated to 0.99.7+
- 6606039 Quagga's vty_address SMF property is not effective
- 6607647 Quagga bgpd vulnerable to DoS from configured peers sending malformed OPEN or COMMUNITY
- 6610223 vty-address should be vty_address in /usr/sbin/quaggaadm
- 6610228 /usr/sbin/quaggaadm should use vty_port
Additionally, the following bug is fixed only in SFWNV:
- 6517793 Quagga needs to be updated to match IP Instances SMF changes
which means you can now run any Quagga daemon in a zone with an exclusive IP. On S10, you can run only bgpd in a zone - we could try fix this for S10 too (all the bits are in fact putback to the gate, it'd just need some hackery to enable them..), if interested in this please register your interest on the bug.
Enjoy 
