Accepted openvswitch 2.6.10-0+deb9u1 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 15 Feb 2021 19:03:02 +0100
Source: openvswitch
Binary: openvswitch-common openvswitch-switch ovn-common ovn-controller-vtep ovn-host ovn-central ovn-docker openvswitch-ipsec openvswitch-pki openvswitch-testcontroller openvswitch-dbg python-openvswitch openvswitch-test openvswitch-vtep openvswitch-dev
Architecture: source amd64 all
Version: 2.6.10-0+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Open vSwitch developers <dev@openvswitch.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
openvswitch-common - Open vSwitch common components
openvswitch-dbg - Debug symbols for Open vSwitch packages
openvswitch-dev - Open vSwitch development package
openvswitch-ipsec - Open vSwitch GRE-over-IPsec support
openvswitch-pki - Open vSwitch public key infrastructure dependency package
openvswitch-switch - Open vSwitch switch implementations
openvswitch-test - Open vSwitch test package
openvswitch-testcontroller - Simple controller for testing OpenFlow setups
openvswitch-vtep - Open vSwitch VTEP utilities
ovn-central - OVN central components
ovn-common - OVN common components
ovn-controller-vtep - OVN vtep controller
ovn-docker - OVN Docker drivers
ovn-host - OVN host components
python-openvswitch - Python bindings for Open vSwitch
Changes:
openvswitch (2.6.10-0+deb9u1) stretch-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* New upstream point release
among bug fixes, this release contains fixes for
* CVE-2020-35498
Denial of service attacks, in which crafted network packets
could cause the packet lookup to ignore network header fields
from layers 3 and 4. The crafted network packet is an ordinary
IPv4 or IPv6 packet with Ethernet padding length above 255 bytes.
This causes the packet sanity check to abort parsing header
fields after layer 2.
* CVE-2020-27827
Denial of service attacks using crafted LLDP packets.
* CVE-2018-17206
Buffer over-read issue during BUNDLE action decoding.
* CVE-2018-17204
Assertion failure due to not validating information (group type
and command) in OF1.5 decoder.
* CVE-2017-9214
Buffer over-read that is caused by an unsigned integer underflow.
* CVE-2015-8011
Buffer overflow in the lldp_decode function in
daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote
attackers to cause a denial of service (daemon crash) and
possibly execute arbitrary code via vectors involving large
management addresses and TLV boundaries.
Checksums-Sha1:
ea52f480d9f7585c5ee109f7481181bf79823aa5 3103 openvswitch_2.6.10-0+deb9u1.dsc
d4c80991901f5aae5b750e80beb642c1bde8a5bf 5294571 openvswitch_2.6.10.orig.tar.gz
9dd2525eb610cac8bacc8bd74407da4c3d6158bc 53840 openvswitch_2.6.10-0+deb9u1.debian.tar.xz
4057ebe932e6e1a4a0cd19c811b591a020f79fb0 1210720 openvswitch-common_2.6.10-0+deb9u1_amd64.deb
83245897d3ca84905734a31b274c8d1849439b04 3461452 openvswitch-dbg_2.6.10-0+deb9u1_amd64.deb
bfe06b8af5bbc7d3c375351e1ad8041dee111470 1412780 openvswitch-dev_2.6.10-0+deb9u1_amd64.deb
6cd07b0cf2c7d227b106f4c188d1719e7b895318 44096 openvswitch-ipsec_2.6.10-0+deb9u1_amd64.deb
13be74af4cb2be95063fb8c8f246b562ce653595 37458 openvswitch-pki_2.6.10-0+deb9u1_all.deb
22d1b66633882ff46ff92682f1fd67af2b6abb4c 264278 openvswitch-switch_2.6.10-0+deb9u1_amd64.deb
20de4d59320898029049791999412c4dea38edc1 53312 openvswitch-test_2.6.10-0+deb9u1_all.deb
441248bc18f52abd8cb1e8bd63b5b1982849c72b 53222 openvswitch-testcontroller_2.6.10-0+deb9u1_amd64.deb
04c83ab3efc77ffaa874d054e4d53c97771c4355 60088 openvswitch-vtep_2.6.10-0+deb9u1_amd64.deb
2cc9b64017bb6cf41637c055f86e54ac28dd6ff3 12907 openvswitch_2.6.10-0+deb9u1_amd64.buildinfo
b3c618428bd009a25e75715547563ffcac5dcff5 81026 ovn-central_2.6.10-0+deb9u1_amd64.deb
a4871b54de30a3eb9266b111d8daae097d68b5ae 151526 ovn-common_2.6.10-0+deb9u1_amd64.deb
e0c3f5c0f9acfb90bc99cc4aba702b15df3dc1cc 49452 ovn-controller-vtep_2.6.10-0+deb9u1_amd64.deb
703a5370b9f538b17b2ab7f3bbb4713e1c0a172b 41322 ovn-docker_2.6.10-0+deb9u1_amd64.deb
177033de5e10d8e084eae2ab72f1d41ca7ac4311 78854 ovn-host_2.6.10-0+deb9u1_amd64.deb
3c7cc4bdd56d707b83755f821ab51742ee06c0ce 92094 python-openvswitch_2.6.10-0+deb9u1_all.deb
Checksums-Sha256:
c9c89f9ebafde683942c90a53310b1163ba7b43252aee6670e0d5865c81a4d88 3103 openvswitch_2.6.10-0+deb9u1.dsc
dc9017013e57e90806a5ee11d5a6b815bc37fab7bec3d713296a16c749c01084 5294571 openvswitch_2.6.10.orig.tar.gz
a896f11611a44819f3d193e2d4fa700c184a32e84dbe6b20b03916b2c1d7637f 53840 openvswitch_2.6.10-0+deb9u1.debian.tar.xz
053bd8bdbf57b19c16e4d86aff6e9ec0a40e6ec0bcf4c678ddb1dd2e13bf6bea 1210720 openvswitch-common_2.6.10-0+deb9u1_amd64.deb
6beaf73d88f6d239d3d2f1d4ef80b68d5626cc1b939bfc3ae12d573fd101d593 3461452 openvswitch-dbg_2.6.10-0+deb9u1_amd64.deb
43dc5d4c5750973f709a2e06a6159c0bc108626ff69047a270a447be35a77711 1412780 openvswitch-dev_2.6.10-0+deb9u1_amd64.deb
321ed291826de7a1abd0ba8d7c9aa82a560e9f05dc01659004c2aba238bb0a41 44096 openvswitch-ipsec_2.6.10-0+deb9u1_amd64.deb
19cfe7d6c55cb5f7d074923a7fbaf2b07e687f5f981b8152c0674cc95274bb28 37458 openvswitch-pki_2.6.10-0+deb9u1_all.deb
508d30092c9f9e7f92cfdefd335b1a47a3bf68fb5482f92f5bca43358cae520b 264278 openvswitch-switch_2.6.10-0+deb9u1_amd64.deb
12a4207a6b80c33a5af96f3b129920a3d23ba5d7d14a7c391eefd92e96843a62 53312 openvswitch-test_2.6.10-0+deb9u1_all.deb
d4fd10f6460e0f45c146f4b1add38d5d07cb87b71dea83788c109a24bd6ab93b 53222 openvswitch-testcontroller_2.6.10-0+deb9u1_amd64.deb
5742783626389e0db133c8cb3199d9d01343faf9107db0726d96a4ffae8e02cc 60088 openvswitch-vtep_2.6.10-0+deb9u1_amd64.deb
14dfb3511ac8529ffbeca45c54d639a8d30f3c8ab2a3845e1068a7c658210173 12907 openvswitch_2.6.10-0+deb9u1_amd64.buildinfo
33b7a1d2ebe5c18dd309eb3b177fb5719b787e4d7124a560b9ccaa5df7f5d4b2 81026 ovn-central_2.6.10-0+deb9u1_amd64.deb
82e5997b31e37bed7342f93c4206f3b0295c4f832f28fbf12ec40507729edfef 151526 ovn-common_2.6.10-0+deb9u1_amd64.deb
3e00399617eea146664993fd187ecdc365d5b1e0dd85931bd269e51915dc9a76 49452 ovn-controller-vtep_2.6.10-0+deb9u1_amd64.deb
766f091e48d8aafc3dbcba7124a434d3319255d5278d1919fbd43abfe92c2561 41322 ovn-docker_2.6.10-0+deb9u1_amd64.deb
4f17c7e97a8253a9dcd5cbf839e09aae6fadad6e72eb904d9a365bf11d74d0eb 78854 ovn-host_2.6.10-0+deb9u1_amd64.deb
b8a95559d81157925b6da20f6416c43f38b0501d8981ef28683df301d577c8a0 92094 python-openvswitch_2.6.10-0+deb9u1_all.deb
Files:
a520250ad33a222e5a5b31083dd44988 3103 net extra openvswitch_2.6.10-0+deb9u1.dsc
cee18b75260a35ff1d00c8553a7dcb06 5294571 net extra openvswitch_2.6.10.orig.tar.gz
03764746f8ff9bcb8c499a8fdcfb3150 53840 net extra openvswitch_2.6.10-0+deb9u1.debian.tar.xz
88b39cb8145e7fb2d6678bef0fbac146 1210720 net extra openvswitch-common_2.6.10-0+deb9u1_amd64.deb
2673016efd54da447232eafc508b8d7c 3461452 debug extra openvswitch-dbg_2.6.10-0+deb9u1_amd64.deb
8c120c0d4ad90248799306361ac675b4 1412780 net extra openvswitch-dev_2.6.10-0+deb9u1_amd64.deb
4a0f813d7c7ce5841eb742cbb1432135 44096 net extra openvswitch-ipsec_2.6.10-0+deb9u1_amd64.deb
960b55694a0af427b47b12250500b1d0 37458 net extra openvswitch-pki_2.6.10-0+deb9u1_all.deb
bb1177e0cc72517e579e6b3748f66e46 264278 net extra openvswitch-switch_2.6.10-0+deb9u1_amd64.deb
cb5ce3cb2d4a89ec6474b04e3813336d 53312 net extra openvswitch-test_2.6.10-0+deb9u1_all.deb
376628b9f37656a919357f01995ebbd5 53222 net extra openvswitch-testcontroller_2.6.10-0+deb9u1_amd64.deb
fff50e80937b83a79ed217f7b4687bc8 60088 net extra openvswitch-vtep_2.6.10-0+deb9u1_amd64.deb
5a4b292746cbefbe678f8753a6d32a1d 12907 net extra openvswitch_2.6.10-0+deb9u1_amd64.buildinfo
8de49b6d553c0d430cf3ab759eaa6053 81026 net extra ovn-central_2.6.10-0+deb9u1_amd64.deb
25bf023244b5787f5c8d69153fadc2e9 151526 net extra ovn-common_2.6.10-0+deb9u1_amd64.deb
a76d01affeae2db8be93894bb0bfdd10 49452 net extra ovn-controller-vtep_2.6.10-0+deb9u1_amd64.deb
7370d51a4965408af9e5c67a139aea4a 41322 net extra ovn-docker_2.6.10-0+deb9u1_amd64.deb
97e29c39372abe7abe508a1eba9cc2c9 78854 net extra ovn-host_2.6.10-0+deb9u1_amd64.deb
f733e88ce76fa573c8cecee2e339c7cf 92094 python extra python-openvswitch_2.6.10-0+deb9u1_all.deb
-----BEGIN PGP SIGNATURE-----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=kD77
-----END PGP SIGNATURE-----