-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Feb 2024 16:46:26 +0100 Source: openvswitch Binary: openvswitch-common openvswitch-common-dbgsym openvswitch-ipsec openvswitch-switch openvswitch-switch-dbgsym openvswitch-testcontroller openvswitch-testcontroller-dbgsym openvswitch-vtep openvswitch-vtep-dbgsym python3-openvswitch python3-openvswitch-dbgsym Architecture: armel Version: 3.1.0-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Thomas Goirand Description: openvswitch-common - Open vSwitch common components openvswitch-ipsec - Open vSwitch IPsec tunneling support openvswitch-switch - Open vSwitch switch implementations openvswitch-testcontroller - Simple controller for testing OpenFlow setups openvswitch-vtep - Open vSwitch VTEP utilities python3-openvswitch - Python 3 bindings for Open vSwitch Closes: 1063492 Changes: openvswitch (3.1.0-2+deb12u1) bookworm-security; urgency=medium . * CVE-2023-5366: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. Added upstream patch: "Fix missing masks on a final stage with ports trie". * CVE-2023-3966: Invalid memory access in Geneve with HW offload. Added upstream patch: netdev-offload-tc: Check geneve metadata length (Closes: #1063492). Checksums-Sha1: e691e6dd11b5e005570f1650d3b253537d24cdeb 6062540 openvswitch-common-dbgsym_3.1.0-2+deb12u1_armel.deb 08a696040b3640d601ec05667abbd0709771f47c 1105804 openvswitch-common_3.1.0-2+deb12u1_armel.deb d47f843f87adfb87f082175a73987873493225e9 34196 openvswitch-ipsec_3.1.0-2+deb12u1_armel.deb ac3c751b7081c8def5a6251d74fc251476638c87 9850336 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_armel.deb fe82ac109ee31cf6382503f66f9587ba3b620d0b 1381212 openvswitch-switch_3.1.0-2+deb12u1_armel.deb f5fa1dd7666f2aa13d0cda32dcba2d9949da161f 3225164 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_armel.deb 116dcf400fd736ca1ff852a021c62e6de2081417 660988 openvswitch-testcontroller_3.1.0-2+deb12u1_armel.deb bbf488e4d62f3e895eeb73ffb1895bc98f17d388 884448 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_armel.deb 09569e146d584ee9fbbeaa5256096d2743f2cced 233532 openvswitch-vtep_3.1.0-2+deb12u1_armel.deb 939e47966e53f1402e50bb371aa29501d656e25b 13427 openvswitch_3.1.0-2+deb12u1_armel-buildd.buildinfo 3003442533c30cc5617c1e2af0c49d96b0f84d89 404372 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_armel.deb 741463d484848028e8eb73345e7c558d4aece5fc 223484 python3-openvswitch_3.1.0-2+deb12u1_armel.deb Checksums-Sha256: 44ad2a6997e6d579054f74f14935ab4f7358635553d19989f5dd57af1e6a10d0 6062540 openvswitch-common-dbgsym_3.1.0-2+deb12u1_armel.deb 55c8f804967e2bca17379451cd271f81b4a2055609ca918f35aa73afd23378eb 1105804 openvswitch-common_3.1.0-2+deb12u1_armel.deb dcf4c85160d219d3fba42db8318ba8a9779db57bd1d64f128573e5a25679514c 34196 openvswitch-ipsec_3.1.0-2+deb12u1_armel.deb 67cd2ed95dcaf237dad5129324dd8e2cad56cd439886e8964ff2dff0423cb403 9850336 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_armel.deb c40f6e42835747c9aefed1fd1e67e2306f2c40be8921739f329ac9852e97ec58 1381212 openvswitch-switch_3.1.0-2+deb12u1_armel.deb c6306017da7fbfcc5b232e64b64c15b8015bc71eade11b87433c9f50fd8d094f 3225164 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_armel.deb 52553d7c1636bb654b3d2c1e4069ba0061b3bbe8d46d05b7439c65fc2be2728a 660988 openvswitch-testcontroller_3.1.0-2+deb12u1_armel.deb c541cf56451ab8fbb09d7d6a06e466d168830d364688a0effa355a3dbd28a67a 884448 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_armel.deb 318d67928838fca6ad056d3701708866cc9a10504c19b8d38a44fcaf47258c74 233532 openvswitch-vtep_3.1.0-2+deb12u1_armel.deb 315b64dcf4d55e64ede34f2d6b677a23558ecb6980de8f31a730de37cac9676c 13427 openvswitch_3.1.0-2+deb12u1_armel-buildd.buildinfo 279a20fd1cc6295a243eb9ca41d11798d77a65c656e696f97371b6c31438c698 404372 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_armel.deb bf8e0f0c4f68d9957253c4f256ee9e58edee3ac6dcff0129fdcc29a148e852fa 223484 python3-openvswitch_3.1.0-2+deb12u1_armel.deb Files: b63a72f700c4a3892da6e1aa6f58c1f2 6062540 debug optional openvswitch-common-dbgsym_3.1.0-2+deb12u1_armel.deb 73bf31ed889e4fff524316ec4cb78bcc 1105804 net optional openvswitch-common_3.1.0-2+deb12u1_armel.deb 76c1ee26cd79bb1572da1c1c1acbdbd8 34196 net optional openvswitch-ipsec_3.1.0-2+deb12u1_armel.deb b3c342e46daa86bc21d03828f706d724 9850336 debug optional openvswitch-switch-dbgsym_3.1.0-2+deb12u1_armel.deb f4089f357456de442d4c96f2081955da 1381212 net optional openvswitch-switch_3.1.0-2+deb12u1_armel.deb b1c204596aa343ce2b228b9a117574e8 3225164 debug optional openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_armel.deb 644f1c7704f0a67fe60ce763e7c844e6 660988 net optional openvswitch-testcontroller_3.1.0-2+deb12u1_armel.deb 98db39205d91acfeba788a6f1812e3a5 884448 debug optional openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_armel.deb e42170505f6517dd34e08ab7b1252237 233532 net optional openvswitch-vtep_3.1.0-2+deb12u1_armel.deb 61cdb425480216483fc37cabcf549365 13427 net optional openvswitch_3.1.0-2+deb12u1_armel-buildd.buildinfo efbed887cc5a64817b24d37987bd2490 404372 debug optional python3-openvswitch-dbgsym_3.1.0-2+deb12u1_armel.deb 3b948eba32642399c540af2352d37e9a 223484 python optional python3-openvswitch_3.1.0-2+deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEw2TRpv7HYIvK+TsIbEMdCP/rlD8FAmXxyZcACgkQbEMdCP/r lD9ryhAAxUuMVFqpmk3bm++4J5/w4k9BhXPLf1XJOTtlgmmUFPLint/7shTaxTbA zf6cz4SR/37/nJljwvIMwImbp+hEtol7qgACDX6ogEYft1rwczrm28pml7HAufy8 tkxGzRK9UD074LrO4Gq6PTG88uUSPhL9kkW6tR78xIY9mefdS2d4/RKXM+GbRjKI AdDMLbmJMqW60JXO49aMF+CnxLFg9dvY4R0cSDH0mawR9I7S2Q2knuE1tGMNB0+u 1QtD5oOIJkzSx89APMlUSiTv7/aZw/irQKKLHwybNLUmkAy3tghRsHaCEvas5wiu 0c8ygMW9QAZkE7WTQxsNdcY3cMp7NBybRMFRw3AyQeXIB0aagSvn4CIWCw329EZv dPTfhddihtLPuo/9A492I+GR3lVsJ25ZJqxre/V8dkAeqNgUNKnGaoxFq7pVwAjZ hME9kL2hReCvN5k+LmNsoUX/wi88CFimMMf/y95iltb/VJgP6OG1CyyfqHD/oqF3 IvpgKuotMTuD5mQZYLV34aaVDaJ1Pu4aSkeZfFx4UluuavFc/6rXy6DNU8Qi0kWP 6U8N86AEI62CaeQZYvFO+C4DVDlXrhNfril/QLM6fJhuwTT+4PVIsgHXMpcrNouE 6Toaa9oH9mu2SvBp6PpkK3sIw/CFd4wxJlMpPfKVV3BCMYkKdz4= =ftWO -----END PGP SIGNATURE-----