-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Feb 2024 16:46:26 +0100 Source: openvswitch Binary: openvswitch-common openvswitch-common-dbgsym openvswitch-ipsec openvswitch-switch openvswitch-switch-dbgsym openvswitch-testcontroller openvswitch-testcontroller-dbgsym openvswitch-vtep openvswitch-vtep-dbgsym python3-openvswitch python3-openvswitch-dbgsym Architecture: mips64el Version: 3.1.0-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Thomas Goirand Description: openvswitch-common - Open vSwitch common components openvswitch-ipsec - Open vSwitch IPsec tunneling support openvswitch-switch - Open vSwitch switch implementations openvswitch-testcontroller - Simple controller for testing OpenFlow setups openvswitch-vtep - Open vSwitch VTEP utilities python3-openvswitch - Python 3 bindings for Open vSwitch Closes: 1063492 Changes: openvswitch (3.1.0-2+deb12u1) bookworm-security; urgency=medium . * CVE-2023-5366: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. Added upstream patch: "Fix missing masks on a final stage with ports trie". * CVE-2023-3966: Invalid memory access in Geneve with HW offload. Added upstream patch: netdev-offload-tc: Check geneve metadata length (Closes: #1063492). Checksums-Sha1: 2492ddf0a8029798743af9c349f481f54b2f56ff 6616680 openvswitch-common-dbgsym_3.1.0-2+deb12u1_mips64el.deb df8d1a75b92d22fe5e7fa2ce3b20350767e13cb2 1296308 openvswitch-common_3.1.0-2+deb12u1_mips64el.deb 15a498427fc89c4019e8540022baeabca9627ed7 34188 openvswitch-ipsec_3.1.0-2+deb12u1_mips64el.deb 70321ab5c826e12c7909f0ff9fa5b20541369e60 10660996 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_mips64el.deb 3121f85f429c7014c257bb3b7a7a00ee38b93b03 1578716 openvswitch-switch_3.1.0-2+deb12u1_mips64el.deb 52879e3765b2d543db3de8be6c91992a84307b7e 3468820 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_mips64el.deb 919f3e51d2195966251d1a6a0508980cb23ac9fb 722068 openvswitch-testcontroller_3.1.0-2+deb12u1_mips64el.deb 0c66c9a5a9df37d327e40c4dc355c3e0e9cd1907 959388 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_mips64el.deb 979506e94f3ee8ee9d710114bccc8cc6a9236eed 267112 openvswitch-vtep_3.1.0-2+deb12u1_mips64el.deb 8190022f80dabb64142fe4f8f56d0d5d3bfe63cd 13514 openvswitch_3.1.0-2+deb12u1_mips64el-buildd.buildinfo 8cc193eddb9131ed92f1825a21f4ede9e0eac7ae 437676 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_mips64el.deb 3f2cd7e60d84e657ddfbcb5373fb5add5108192f 233776 python3-openvswitch_3.1.0-2+deb12u1_mips64el.deb Checksums-Sha256: 54e405a43533d4ac800395cd6a86d26f27490f7ac2da87f814fc7c82fdab3612 6616680 openvswitch-common-dbgsym_3.1.0-2+deb12u1_mips64el.deb 183c62821fc4bef79306c8e2b996773b49ee05254efdbbc5cbfd8d139600297f 1296308 openvswitch-common_3.1.0-2+deb12u1_mips64el.deb 3fcfd16b64c189175341017e4ca75948f0601db0f75e32bab59ff70c0bb6447c 34188 openvswitch-ipsec_3.1.0-2+deb12u1_mips64el.deb c168294b4a1df88a137f42ca8f62015f2df411916905eefe6d78063678bbf401 10660996 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_mips64el.deb 53f322b7a9586ccfdc2737e0b035fab03831202b91b37e6af242c9aabab14945 1578716 openvswitch-switch_3.1.0-2+deb12u1_mips64el.deb eb5df42bb705d82b80ee978a1cfbabc8b581cfb3a2f281db431378e357e25ad2 3468820 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_mips64el.deb 93b06e37fbf80cbddde7ee6fc71da6a5f1bd9531fb6ccd0e59b6f84d4d484b01 722068 openvswitch-testcontroller_3.1.0-2+deb12u1_mips64el.deb 61eade017d95c13c75b3867123daf1227f92d97a9896600d59148550ebf578c2 959388 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_mips64el.deb c1260bd8932ccdbf66ac965460032dad3cf40a15d7fc6a581f0024d94bd5fccb 267112 openvswitch-vtep_3.1.0-2+deb12u1_mips64el.deb 7609cac3836514355fd7dd8812403f5613339c5bcf5df0d4c4727320c77a425f 13514 openvswitch_3.1.0-2+deb12u1_mips64el-buildd.buildinfo 9ba34c89025684fc89c2a232535dbfcac89b810e263483c926ea9798c9a4921e 437676 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_mips64el.deb 3973b4111e32f1729838828891c70d39b33bcce359c9a6fdc52295653725b89d 233776 python3-openvswitch_3.1.0-2+deb12u1_mips64el.deb Files: 44490525793a55f817b4e753e77e5441 6616680 debug optional openvswitch-common-dbgsym_3.1.0-2+deb12u1_mips64el.deb ac1163d638849d2485c9a00fbc79224a 1296308 net optional openvswitch-common_3.1.0-2+deb12u1_mips64el.deb fd4b3fb44e06926e2579f07a1beaf461 34188 net optional openvswitch-ipsec_3.1.0-2+deb12u1_mips64el.deb b1c7b2dad7b2c0094a001c3ed2a7b9c6 10660996 debug optional openvswitch-switch-dbgsym_3.1.0-2+deb12u1_mips64el.deb 93f2b92ffd1e7d37aac30b9264365c51 1578716 net optional openvswitch-switch_3.1.0-2+deb12u1_mips64el.deb aa714fda6c92f8d2030b461263c22ea8 3468820 debug optional openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_mips64el.deb 8038bac3266e2c4ebfd8b53ead3d6ccc 722068 net optional openvswitch-testcontroller_3.1.0-2+deb12u1_mips64el.deb f1d30be733aeae066b516a6ed2fa0fdc 959388 debug optional openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_mips64el.deb da6641e87fce513053652886cf9399fe 267112 net optional openvswitch-vtep_3.1.0-2+deb12u1_mips64el.deb 78eb76780665ec0e9d634bfa48e78fbd 13514 net optional openvswitch_3.1.0-2+deb12u1_mips64el-buildd.buildinfo a4298d11641d0ae14272b54b8378e38d 437676 debug optional python3-openvswitch-dbgsym_3.1.0-2+deb12u1_mips64el.deb 44fe15555542ab2403484bca7c986aab 233776 python optional python3-openvswitch_3.1.0-2+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEunmvxaaGKuI+hxxClmZGXOM83t8FAmXxyxEACgkQlmZGXOM8 3t9PaBAAt/5LgBejzh+2cYzUncIqbVu2lXzYadWgbtaKmcSRoOcVYxUK5Piczvvf YtAtB2irgVfrUmJZbxvlvqP17B37Yx6/LQrG10U+YU8RjkIbTvM2zukVpm1oPfd9 zTPFsYbFk+3YCgbJSXRtup/tlPWhGyRCKVRoMcob9v1FMpSFM9Iiq3QHvwW0mCVD I9a2vuxsp0QDcwFMQP/+X7ggiggh9OJhSKtAag+YWc0dBFc3B9Y6aR2wUT8oY0oE fikmMz2dOpxQ4ZtlhgtdRtvlzzv+VyY8+yNSe3ZoCezQJD9Xe1gSnLNemU8NHYuh XMFBR6o2xQGGNG2d23kLWYLJeTcki5IDQFK+Y6Slz8C0KpwaCtOz7PXdpJyw5dCD uvB0ag97biCVBHXG2Dzv7XfDeVYeeuIFHuzv386BzceqKVdNFCx73QCOuXUJsjOF C/JvfTwcyW9TVUfp/6xCNg83uzvZKz96bk7oIxWUPq8Xhw369GViF6uasjBIPdi5 35zTSdeBFeRbJZ2uNLhBl/fBFk8yT0Qg6vogs5sKRF8Jq6jdhtoGVqVqE9gm4q6C Xfpq5O/nLpMflXdzm73JDEZv8cwzMOiWjQODzQkPpjdrRHtzGb/4Kne7HoW0MZXL 90NIzY0zPZp6bWgKUv8y23V5qqHSPhMJ+noSdvWgxPUx3yUEsR0= =Jlyv -----END PGP SIGNATURE-----