-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Feb 2024 16:46:26 +0100 Source: openvswitch Binary: openvswitch-common openvswitch-common-dbgsym openvswitch-ipsec openvswitch-switch openvswitch-switch-dbgsym openvswitch-switch-dpdk openvswitch-switch-dpdk-dbgsym openvswitch-testcontroller openvswitch-testcontroller-dbgsym openvswitch-vtep openvswitch-vtep-dbgsym python3-openvswitch python3-openvswitch-dbgsym Architecture: i386 Version: 3.1.0-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Thomas Goirand Description: openvswitch-common - Open vSwitch common components openvswitch-ipsec - Open vSwitch IPsec tunneling support openvswitch-switch - Open vSwitch switch implementations openvswitch-switch-dpdk - DPDK enabled Open vSwitch switch implementation openvswitch-testcontroller - Simple controller for testing OpenFlow setups openvswitch-vtep - Open vSwitch VTEP utilities python3-openvswitch - Python 3 bindings for Open vSwitch Closes: 1063492 Changes: openvswitch (3.1.0-2+deb12u1) bookworm-security; urgency=medium . * CVE-2023-5366: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. Added upstream patch: "Fix missing masks on a final stage with ports trie". * CVE-2023-3966: Invalid memory access in Geneve with HW offload. Added upstream patch: netdev-offload-tc: Check geneve metadata length (Closes: #1063492). Checksums-Sha1: 5cb2274550f8cc6dc7cf63835ff5e929d4dd96a1 15160156 openvswitch-common-dbgsym_3.1.0-2+deb12u1_i386.deb 2bbe6c7a002849042e5242b5a6c06ea21a47262a 2119496 openvswitch-common_3.1.0-2+deb12u1_i386.deb e0f25f96394714d8d36226479dcdfdb400cf5ef0 34192 openvswitch-ipsec_3.1.0-2+deb12u1_i386.deb 7aa12d9850ab72e71092c720f807d3f0708e0c79 9819720 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_i386.deb 048ed5b3bfb7cf2bc070a9a7178db796a7b4e970 4193636 openvswitch-switch-dpdk-dbgsym_3.1.0-2+deb12u1_i386.deb 7e566870339b95fe422f4c3a8d45194209f5e885 1210968 openvswitch-switch-dpdk_3.1.0-2+deb12u1_i386.deb fd2d987eeb794db62ef26cfe17394f601da68557 1870632 openvswitch-switch_3.1.0-2+deb12u1_i386.deb 2cf93b47fdeb5a5a09f6456a31847ea5ffc62c6b 2944084 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_i386.deb 46ed597cabf7ba2abb8b0704109b377622f33982 880200 openvswitch-testcontroller_3.1.0-2+deb12u1_i386.deb 07f088608900815950a308ac270250d28652d2f7 3049364 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_i386.deb dbc963e7b3f6949c00a6609f00d2f843fad7f828 937000 openvswitch-vtep_3.1.0-2+deb12u1_i386.deb 1c008dd7f9d2e3b1bd61ae6599d7cf72260eea17 22161 openvswitch_3.1.0-2+deb12u1_i386-buildd.buildinfo 5c8ff9178e89aeefac865d3bda135c4382169cda 2849752 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_i386.deb 52c8a3f86c8ca978d60b6a96122ce4acc14a5906 1013424 python3-openvswitch_3.1.0-2+deb12u1_i386.deb Checksums-Sha256: fa0f19ee6631e9a54214376141f8429e78938ab6a71daa0bd91c1f5dceb56790 15160156 openvswitch-common-dbgsym_3.1.0-2+deb12u1_i386.deb 6fe4c922d80b1f6cbdf571ba79c6be3580a193c92467024bda6ec086afd32ae8 2119496 openvswitch-common_3.1.0-2+deb12u1_i386.deb 7f88dcfe24a54a290c4064abe731a1cfc24d2ed8d49126fe9de4d845367fa52e 34192 openvswitch-ipsec_3.1.0-2+deb12u1_i386.deb 77d56db740635c860d1512262aa3f10a530ae52df0280010e1c774ea521808a2 9819720 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_i386.deb 8c33d9f0ce76ab2eaa3b265d0b52bffe004abf8f2f12f1eee0de2603cb6b4fb7 4193636 openvswitch-switch-dpdk-dbgsym_3.1.0-2+deb12u1_i386.deb 57ccf5c8abe2c83d89b2981e1466833f1241ef0042d7ef96821b6402f43029aa 1210968 openvswitch-switch-dpdk_3.1.0-2+deb12u1_i386.deb 528ddbfdf4f88599eaf48d4bc6520557f3b9478de295795db88402c040265f14 1870632 openvswitch-switch_3.1.0-2+deb12u1_i386.deb 81c7bb444c94fd43e3a9927cf69758c07b5876beb66da5dc27701f7b2ba597c5 2944084 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_i386.deb 643718ab9d969a7069d72e55cb0d7012284cff080a0332684c761482f16f29b6 880200 openvswitch-testcontroller_3.1.0-2+deb12u1_i386.deb 30b5ffa12c38da4085235c304b43d9dff911a714e9279959874544fa0877c0d4 3049364 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_i386.deb 601813f0049640da7cd36effbdb6543cc648335c3114689777e3c213a531b44f 937000 openvswitch-vtep_3.1.0-2+deb12u1_i386.deb 46e298bdd785ff1a7f1930209590b50cb9f5b0d75dd8362373d0922fae0a6778 22161 openvswitch_3.1.0-2+deb12u1_i386-buildd.buildinfo b78b959f7b5000d12b51367f240f93b67458e5d44cdb9f1c7b7d7452b0a75111 2849752 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_i386.deb 2fd787066b6f87f65a9020c2beb4baf188b274b1f279bb7851276f73c4a255e6 1013424 python3-openvswitch_3.1.0-2+deb12u1_i386.deb Files: 2b4ae046136332e86bf6465a0ac608b1 15160156 debug optional openvswitch-common-dbgsym_3.1.0-2+deb12u1_i386.deb 96f0cdc8c92af9ab4133b8ab05311f18 2119496 net optional openvswitch-common_3.1.0-2+deb12u1_i386.deb 5434bcb004bdee148b95d00dd04c71d7 34192 net optional openvswitch-ipsec_3.1.0-2+deb12u1_i386.deb 0d49034b708882c66ad3b4ade518abf1 9819720 debug optional openvswitch-switch-dbgsym_3.1.0-2+deb12u1_i386.deb 0f854e30069f42a0c9eba6c024dddeb9 4193636 debug optional openvswitch-switch-dpdk-dbgsym_3.1.0-2+deb12u1_i386.deb ade930ee842b642bd28ca44cbd7c749e 1210968 net optional openvswitch-switch-dpdk_3.1.0-2+deb12u1_i386.deb ee2b9e42a59dbc87c33b5c6c9277328a 1870632 net optional openvswitch-switch_3.1.0-2+deb12u1_i386.deb bdcf60f1d272a114583eeedd38834e84 2944084 debug optional openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_i386.deb b1918bf8e9f6f649eb9e42ce47c6ff42 880200 net optional openvswitch-testcontroller_3.1.0-2+deb12u1_i386.deb d29cc308f822ab9fbfdce2f9467d8b67 3049364 debug optional openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_i386.deb de9440493a73240292bb64fa659390af 937000 net optional openvswitch-vtep_3.1.0-2+deb12u1_i386.deb 7633ffcb255a1c078aa03a82563cb34f 22161 net optional openvswitch_3.1.0-2+deb12u1_i386-buildd.buildinfo a0b1370309c0ee9e1eba30df5ef5f5ec 2849752 debug optional python3-openvswitch-dbgsym_3.1.0-2+deb12u1_i386.deb 21ec996b7b54908b8d75b8d715556daf 1013424 python optional python3-openvswitch_3.1.0-2+deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEqYm4ZPyuLwhx8Meo2VckltclZ4AFAmXxzgcACgkQ2Vckltcl Z4BNKBAAp0lnoSRNq9wry8Ib6jWhZ0nd1MGQz+FzKE9hd1kzRGjiwLPFBkLEFG0H yBCBtCXQmFaQtInvXqUVlRmAAxllXv07CJmFr/NTub8CrrDxfJyDhJlBIu9G0Ex/ y2V9/EeQw5qqYtgRVxTgpcs7RIYb07EjEE/c/CPzJQUMbt4lSd6gTzJohv43U10i ODKfBpU4FbUIlNhsXdWiSDUSqqelIEabosfTFzfl1S3PzLbqowniIgL/Ht7nWjIL jeo/S4BACQlXVbkrGTAlbr8V6Xx+R74JBU+JPzOVINiRMLZmhMn4ywWp4jya1vwg A2LBenDPhU/YhpNfV8PONllCRsiP+TRMzt0xykv3VgHXj/X8AaM/0bAkTPGSPCpF 3Us5cKJG4A9xJQs9k+/UVgf6+I2/yRpydkjCZ8ppIfqt3ZPg7Y6c9Pazirwcjb9G WGFN3UHgb2ysQkWUYXtxIqElYpgX4hqwqpYyU+k+XuJ9yu+rRmL1Ga49O+6k3nK1 A4MxyHuXM+tT2kvmTfZlm2EhV2DL2nyXGMpYGu71OVtrkfgL2BQSioW2nzQsptc5 OG+wKTE9kx1onbx2RY+91sebAA/a0wSgn1mD87izvYzPfvGWq1x/78U7vyVcUC+f yEu99M65BQJuru2wXMpeFjNu/yQcUqbguzj4PWc7k3fUQfkhzEg= =Hm2c -----END PGP SIGNATURE-----