UbuntuUpdates.org

Package "ovn"

Name: ovn

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • OVN vtep controller
  • OVN Docker drivers
  • Open Virtual Network interconnection controller
  • Open Virtual Network interconnection controller databases
Latest version: 24.09.0-1ubuntu0.1
Release: oracular (24.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "ovn" in Oracular

Repository Area Version
base universe 24.09.0-1
base main 24.09.0-1
security main 24.09.0-1ubuntu0.1
updates main 24.09.0-1ubuntu0.1
updates universe 24.09.0-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 24.09.0-1ubuntu0.1 2025-03-31 16:07:47 UTC

  ovn (24.09.0-1ubuntu0.1) oracular-security; urgency=medium

  * SECURITY UPDATE: ACL bypass in logical switch with DNS records
    - debian/patches/CVE-2025-0650.patch: skip only OVN DNS responder
      packets from OUT_ACL in controller/pinctrl.c,
      include/ovn/logical-fields.h, lib/logical-fields.c, northd/northd.c,
      tests/ovn.at.
    - CVE-2025-0650

 -- Marc Deslauriers <email address hidden> Fri, 31 Jan 2025 09:49:19 -0500
CVE-2025-0650 A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations


About   -   Send Feedback to @ubuntu_updates