-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Feb 2024 16:46:26 +0100 Source: openvswitch Binary: openvswitch-common openvswitch-common-dbgsym openvswitch-ipsec openvswitch-switch openvswitch-switch-dbgsym openvswitch-switch-dpdk openvswitch-switch-dpdk-dbgsym openvswitch-testcontroller openvswitch-testcontroller-dbgsym openvswitch-vtep openvswitch-vtep-dbgsym python3-openvswitch python3-openvswitch-dbgsym Architecture: amd64 Version: 3.1.0-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Thomas Goirand Description: openvswitch-common - Open vSwitch common components openvswitch-ipsec - Open vSwitch IPsec tunneling support openvswitch-switch - Open vSwitch switch implementations openvswitch-switch-dpdk - DPDK enabled Open vSwitch switch implementation openvswitch-testcontroller - Simple controller for testing OpenFlow setups openvswitch-vtep - Open vSwitch VTEP utilities python3-openvswitch - Python 3 bindings for Open vSwitch Closes: 1063492 Changes: openvswitch (3.1.0-2+deb12u1) bookworm-security; urgency=medium . * CVE-2023-5366: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. Added upstream patch: "Fix missing masks on a final stage with ports trie". * CVE-2023-3966: Invalid memory access in Geneve with HW offload. Added upstream patch: netdev-offload-tc: Check geneve metadata length (Closes: #1063492). Checksums-Sha1: 9b5ce569f8a2aa340bca54210d04815a66f8ca14 17474812 openvswitch-common-dbgsym_3.1.0-2+deb12u1_amd64.deb 3b52a3fefa5eff89cc99ac6481813d21ab343b28 1913756 openvswitch-common_3.1.0-2+deb12u1_amd64.deb f6f915c486e5db9d6d84b83873e4c0a19273108e 34196 openvswitch-ipsec_3.1.0-2+deb12u1_amd64.deb 94a58990503fc7843bd8d41454279ce0fc3dc869 11248432 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_amd64.deb ae81a831469266f286fdb3ffda70d03aafc1aa47 4753096 openvswitch-switch-dpdk-dbgsym_3.1.0-2+deb12u1_amd64.deb 0ad9fa44de392ba956a7886d43755fc02d367814 1082536 openvswitch-switch-dpdk_3.1.0-2+deb12u1_amd64.deb a6419f9c834d20b231c73c3e8de561105e6b3e04 1693380 openvswitch-switch_3.1.0-2+deb12u1_amd64.deb 1fce5019987b441c3a5d18831239405b394cb35a 3388792 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_amd64.deb c09efb9c754548283f549de1759b1d3bdabf22f6 788944 openvswitch-testcontroller_3.1.0-2+deb12u1_amd64.deb a4d38afb8930deec7a85ba784e8d5e0ca6df935e 3550448 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_amd64.deb 5acd1b495a06b4d71fbed66288a36157ec9c93f6 841592 openvswitch-vtep_3.1.0-2+deb12u1_amd64.deb ce5268ec2d597eecf22039791425e29399f1961a 23548 openvswitch_3.1.0-2+deb12u1_amd64-buildd.buildinfo 1178e9d599e8e6506800092176e08dc31c8c7013 3282260 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_amd64.deb 0a04adb412710c1453ee0405f4a81fbefc05b6e2 925776 python3-openvswitch_3.1.0-2+deb12u1_amd64.deb Checksums-Sha256: e77268752a023affd97da9381b16834767f6b63d140b6c4baaae943ad1fba81d 17474812 openvswitch-common-dbgsym_3.1.0-2+deb12u1_amd64.deb 834c1ae20e36e843f44dd524b8a942f134cbc45cc9702012949bce42f6b41ddc 1913756 openvswitch-common_3.1.0-2+deb12u1_amd64.deb a64c27742d707ca90c315981f76be6d1b303b1aa83ffd576bf5130a3a7e96330 34196 openvswitch-ipsec_3.1.0-2+deb12u1_amd64.deb e6a71154465efe1cb7b16247f76cb32c096558310ff557882ee16cfdb513e160 11248432 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_amd64.deb 951a4e79305b2c00fa2e96ca07490950ce7e4ac7dea2eba9251e405ce62a3802 4753096 openvswitch-switch-dpdk-dbgsym_3.1.0-2+deb12u1_amd64.deb 98bdef59b3e302ff292dc58b0f458500df17e67c8ad9576d71826789824ffc3f 1082536 openvswitch-switch-dpdk_3.1.0-2+deb12u1_amd64.deb b955d4a95700bbe723e4d82b5cf72d0fe096d599dc5c46c202bb6b12d2f2e83f 1693380 openvswitch-switch_3.1.0-2+deb12u1_amd64.deb ae8e8fd007a73d8d183b03290243a58b3801ae94fde2d78b1a99869c6162fbf3 3388792 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_amd64.deb 4a9eac14a1d93f94c0de51ef52ddc590b07589ef39df648e3424f6e4d8a69373 788944 openvswitch-testcontroller_3.1.0-2+deb12u1_amd64.deb dec0b1364ad42dc3e4ed4f3cea6d900fedc44bc3c75e28f1cd7ec9191e105734 3550448 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_amd64.deb ae201b715955605c1d5ec4864ec3f216e3a14becfd8757b5f9995433a08e7eea 841592 openvswitch-vtep_3.1.0-2+deb12u1_amd64.deb c6d7cff8522afb97e32686c7dd0359bda5fc7305de0bf5bc2f3ec4d7617a71f0 23548 openvswitch_3.1.0-2+deb12u1_amd64-buildd.buildinfo 138f4e59dc62a58ee179c1ae39f95fbdfe24ae2a2e54615d8ddd8cdebb9378d4 3282260 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_amd64.deb 158369b027b2052a2e72631df0f4f9ffe8ddfdf7a3dd7c8f068285c749e53f1d 925776 python3-openvswitch_3.1.0-2+deb12u1_amd64.deb Files: 87d4281769ee569a409650c40b242184 17474812 debug optional openvswitch-common-dbgsym_3.1.0-2+deb12u1_amd64.deb 582bdb2c3b67ff2fb6d9c0149d887d35 1913756 net optional openvswitch-common_3.1.0-2+deb12u1_amd64.deb 5cc9982c092b8b0224b40663b84a9afe 34196 net optional openvswitch-ipsec_3.1.0-2+deb12u1_amd64.deb edf972bb17e8be2a8756ef018fd35940 11248432 debug optional openvswitch-switch-dbgsym_3.1.0-2+deb12u1_amd64.deb 8858a3b6a63e1839e553bc69e2ccb71c 4753096 debug optional openvswitch-switch-dpdk-dbgsym_3.1.0-2+deb12u1_amd64.deb 1b2a1f418d40c5db365e2e401f17ced9 1082536 net optional openvswitch-switch-dpdk_3.1.0-2+deb12u1_amd64.deb 35f1bd259334381c2ade6ff6978e167b 1693380 net optional openvswitch-switch_3.1.0-2+deb12u1_amd64.deb 2c162abf3915400ff6da35e375678169 3388792 debug optional openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_amd64.deb 4e58e728b23ddcbd405dab98700cd90c 788944 net optional openvswitch-testcontroller_3.1.0-2+deb12u1_amd64.deb c38fca65f1f3c525d0739636d15f04fe 3550448 debug optional openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_amd64.deb ca243bdd64cd16733699c4326023b8d7 841592 net optional openvswitch-vtep_3.1.0-2+deb12u1_amd64.deb ee439ceeccbfea872c4bfbfa59995531 23548 net optional openvswitch_3.1.0-2+deb12u1_amd64-buildd.buildinfo 95a1cfaec99452913aef25e89f77f3fd 3282260 debug optional python3-openvswitch-dbgsym_3.1.0-2+deb12u1_amd64.deb ef54107c616f25720a00649918c6acd9 925776 python optional python3-openvswitch_3.1.0-2+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEm6ockFjr4GqAKQq+9fU2VPgRs1YFAmXxxVsACgkQ9fU2VPgR s1Y6ug/9FCaoIrK5uCaDBHGrn0qrwoX1q2yvlIqKUPZQWgguKxzYTrrsNBWRDzll v1SpqBw+KjJW8c3eEtcx/eBZ0TErxA5hhruakHZeKo6B2iu4EQwekVtCKuz7aZSC pH3KY/DFet+u1LujLjgJv6+yUnrD0fzLSiL3IuUTL6CeJiEMubI+JyurkiIBtoM5 SSGBBbM5EbM6ajsbEXv2+DAJ0nxWdKzHDrJ/0Hz/4YMtX1AuUApOJ9vqZ1JJzfCZ EQ5BpeaF7Cfuub2l66RC3DsUuaZ7Sn+gkHNuL+V7uY7jxEh8bolv6uarU4q65uGT MLhO8IO+eV58ib2USp1rYv/9qmLgOZeFnjy9qfY8GPFbA76/tpcaZalzOdk3SeOR ToCT8PWFJ+dcD6IiXKfBXzUC+QCntj0iG2fPcqVvUBQkhzpF72sA1i9JRGoA5AD9 vsLqStUB5HPzo8OKZq3/M/RJ3F0H4uzTBhl52NorxMrP/C7eVOudSxEccsLueKPz e9VrbW+TpLqw0HqHa2f8cgZOdYZ7JlEvsPov1i3Fo/SkjWwlX4TqK1Hfcyl6+o+P MLoqmrUUH10rMx1kFykXnleMCjVOtPtM5ZfxVBYEAur6XXHyl1O3aaaPCjC0DCg+ 1obT6oanCJIL/5JnFID2wHOOmByxbFNy+Go9IMKXYrsyUn/AdB4= =KUYO -----END PGP SIGNATURE-----