UbuntuUpdates.org

Package "ovn-ic"

Name: ovn-ic

Description:

Open Virtual Network interconnection controller

Latest version: 24.03.2-0ubuntu0.24.04.2
Release: noble (24.04)
Level: security
Repository: universe
Head package: ovn
Homepage: http://openvswitch.org/

Links


Download "ovn-ic"


Other versions of "ovn-ic" in Noble

Repository Area Version
base universe 24.03.1-2ubuntu3
updates universe 24.03.2-0ubuntu0.24.04.2

Changelog

Version: 24.03.2-0ubuntu0.24.04.2 2025-03-31 16:07:42 UTC

  ovn (24.03.2-0ubuntu0.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: ACL bypass in logical switch with DNS records
    - debian/patches/CVE-2025-0650.patch: skip only OVN DNS responder
      packets from OUT_ACL in controller/pinctrl.c,
      include/ovn/logical-fields.h, lib/logical-fields.c, northd/northd.c,
      tests/ovn.at.
    - CVE-2025-0650

 -- Marc Deslauriers <email address hidden> Fri, 31 Jan 2025 09:53:26 -0500

CVE-2025-0650 A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations



About   -   Send Feedback to @ubuntu_updates