UbuntuUpdates.org

Package "ovn-common"

Name: ovn-common

Description:

OVN common components
Latest version: 2.5.9-0ubuntu0.16.04.3
Release: xenial (16.04)
Level: updates
Repository: universe
Head package: openvswitch
Homepage: http://openvswitch.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ovn-common"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "ovn-common" in Xenial

Repository Area Version
base universe 2.5.0-0ubuntu1
security universe 2.5.9-0ubuntu0.16.04.3

Changelog

Version: 2.5.2-0ubuntu0.16.04.3 2017-10-26 17:06:41 UTC

  openvswitch (2.5.2-0ubuntu0.16.04.3) xenial; urgency=medium

  * d/openvswitch-switch.postinst: Do not modify
    /etc/default/openvswitch-switch as this file is now managed
    as a configuration file by dpkg (LP: #1723480).

 -- Frode Nordahl <email address hidden> Tue, 17 Oct 2017 16:38:57 +0000
Source diff to previous version

Version: 2.5.2-0ubuntu0.16.04.2 2017-10-11 16:07:04 UTC

  openvswitch (2.5.2-0ubuntu0.16.04.2) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS while parsing OFPT_QUEUE_GET_CONFIG_REPLY message
    - debian/patches/CVE-2017-9214.patch: properly check length in
      lib/ofp-util.c.
    - CVE-2017-9214
  * SECURITY UPDATE: DoS while parsing OpenFlow role status message
    - debian/patches/CVE-2017-9263.patch: don't abort on unknown reason in
      lib/ofp-print.c.
    - CVE-2017-9263
  * SECURITY UPDATE: DoS while parsing group mod OpenFlow message
    - debian/patches/CVE-2017-9265.patch: check length in lib/ofp-util.c.
    - CVE-2017-9265

 -- Marc Deslauriers <email address hidden> Thu, 24 Aug 2017 14:15:05 -0400
Source diff to previous version
CVE-2017-9214 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsi
CVE-2017-9263 In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons
CVE-2017-9265 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` i

Version: 2.5.2-0ubuntu0.16.04.1 2017-04-12 13:06:47 UTC

  openvswitch (2.5.2-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream point release (LP: #1673063).

 -- James Page <email address hidden> Wed, 15 Mar 2017 13:55:24 +0000
1673063 [SRU] openvswitch 2.5.2


About   -   Send Feedback to @ubuntu_updates