ALT-BU-2017-3274-1
Branch p8 update bulletin.
Package openvswitch updated to version 2.7.2-alt1.M80P.1 for branch p8 in task 186352.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2017-9214
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
- RHSA-2017:2418
- RHSA-2017:2418
- RHSA-2017:2553
- RHSA-2017:2553
- RHSA-2017:2648
- RHSA-2017:2648
- RHSA-2017:2665
- RHSA-2017:2665
- RHSA-2017:2692
- RHSA-2017:2692
- RHSA-2017:2698
- RHSA-2017:2698
- RHSA-2017:2727
- RHSA-2017:2727
- [debian-lts-announce] 20210219 [SECURITY] [DLA 2571-1] openvswitch security update
- [debian-lts-announce] 20210219 [SECURITY] [DLA 2571-1] openvswitch security update
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html
Modified: 2024-11-21
CVE-2017-9263
In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.
- RHSA-2017:2418
- RHSA-2017:2418
- RHSA-2017:2553
- RHSA-2017:2553
- RHSA-2017:2648
- RHSA-2017:2648
- RHSA-2017:2665
- RHSA-2017:2665
- RHSA-2017:2692
- RHSA-2017:2692
- RHSA-2017:2698
- RHSA-2017:2698
- RHSA-2017:2727
- RHSA-2017:2727
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html
Modified: 2024-11-21
CVE-2017-9265
In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.
- RHSA-2017:2418
- RHSA-2017:2418
- RHSA-2017:2553
- RHSA-2017:2553
- RHSA-2017:2648
- RHSA-2017:2648
- RHSA-2017:2665
- RHSA-2017:2665
- RHSA-2017:2692
- RHSA-2017:2692
- RHSA-2017:2698
- RHSA-2017:2698
- RHSA-2017:2727
- RHSA-2017:2727
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332965.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332965.html
Package python-module-cryptography updated to version 2.0.0-alt0.M80P.1 for branch p8 in task 186128.
Closed bugs
Нужен cryptography>=1.3.4
Package mate-session updated to version 1.12.1-alt1_1.M80P.1 for branch p8 in task 186585.
Closed bugs
Разные поля Exec
Package update-kernel updated to version 0.9.10-alt1 for branch p8 in task 186630.
Closed bugs
update-kernel обломался обновить модули для ядра