-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Feb 2024 16:46:26 +0100 Source: openvswitch Binary: openvswitch-common openvswitch-common-dbgsym openvswitch-ipsec openvswitch-switch openvswitch-switch-dbgsym openvswitch-testcontroller openvswitch-testcontroller-dbgsym openvswitch-vtep openvswitch-vtep-dbgsym python3-openvswitch python3-openvswitch-dbgsym Architecture: mipsel Version: 3.1.0-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: mips64el Build Daemon (mipsel-osuosl-02) Changed-By: Thomas Goirand Description: openvswitch-common - Open vSwitch common components openvswitch-ipsec - Open vSwitch IPsec tunneling support openvswitch-switch - Open vSwitch switch implementations openvswitch-testcontroller - Simple controller for testing OpenFlow setups openvswitch-vtep - Open vSwitch VTEP utilities python3-openvswitch - Python 3 bindings for Open vSwitch Closes: 1063492 Changes: openvswitch (3.1.0-2+deb12u1) bookworm-security; urgency=medium . * CVE-2023-5366: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. Added upstream patch: "Fix missing masks on a final stage with ports trie". * CVE-2023-3966: Invalid memory access in Geneve with HW offload. Added upstream patch: netdev-offload-tc: Check geneve metadata length (Closes: #1063492). Checksums-Sha1: 008bef12611380d17afbd64285585c6a4c483377 6435960 openvswitch-common-dbgsym_3.1.0-2+deb12u1_mipsel.deb bb42dc1f513e3ff99580e9d69b608c3b69c713d5 1320932 openvswitch-common_3.1.0-2+deb12u1_mipsel.deb c6e4b992532e43ca96b9580cb489ad5578ca6463 34196 openvswitch-ipsec_3.1.0-2+deb12u1_mipsel.deb 1879226a5b0eae9d0b368e89eda6915e0eb76313 10405776 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_mipsel.deb c94e8c980e964d55ad07d917a1301af094d8b5b4 1608072 openvswitch-switch_3.1.0-2+deb12u1_mipsel.deb 62f28cf2f743f40f3f68248a915bfd6cbd635dc1 3395416 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_mipsel.deb aa976c474ef03af8a617d629ba09a6f297b59561 737952 openvswitch-testcontroller_3.1.0-2+deb12u1_mipsel.deb faa6bc4fee119b69ae6e9c24a1a6f2f3a07f5951 934528 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_mipsel.deb 01b6521a367d37b48b2a49270ed13386aca0dfcd 269316 openvswitch-vtep_3.1.0-2+deb12u1_mipsel.deb 26e3f13d2397f49bfaec8d2c295f4c8502f7c0d7 13466 openvswitch_3.1.0-2+deb12u1_mipsel-buildd.buildinfo a3f15aaad902f1f42351e8386abfc699d1a20604 425760 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_mipsel.deb 112ce6ce7523e5699f1a39b4397975f75e0cbc1a 235068 python3-openvswitch_3.1.0-2+deb12u1_mipsel.deb Checksums-Sha256: cde8be609c682c8f24d4c9b77e2675d50cf08073db04f988fcf0d04c533d82dc 6435960 openvswitch-common-dbgsym_3.1.0-2+deb12u1_mipsel.deb f90c804906c6e79138f254f53d31fe1680cf79fe20d1fa75041035bc0b51b2aa 1320932 openvswitch-common_3.1.0-2+deb12u1_mipsel.deb 4f3b636b25887e6353b80af122c812019c771c0beb7ac258250f902df9804d4b 34196 openvswitch-ipsec_3.1.0-2+deb12u1_mipsel.deb 330e41fbe591ded3ee0dc8c58588c49998420a613a87f067db41f48df0fded7d 10405776 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_mipsel.deb fd0b95f7cc077afe42c66bd73f5438b2d4bf75adfa8ca87c13cc963e01090cb3 1608072 openvswitch-switch_3.1.0-2+deb12u1_mipsel.deb e8c29f2134add9c73494adda8bbeab182ca5d43813931e0ef904796d838020fa 3395416 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_mipsel.deb 6a20687b6dcc1e549909dbc3950cc8199c4fdc8a2408e1f6833949762b37d606 737952 openvswitch-testcontroller_3.1.0-2+deb12u1_mipsel.deb c8e3f39e42450571b144b91a37711627785770b157bd0eea5a5b49e20506ca58 934528 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_mipsel.deb 6e5b43ed0bd32c97b2eaf3b1eaa0f88cd3243cae1ad1d7cb30d07cba2357c1c5 269316 openvswitch-vtep_3.1.0-2+deb12u1_mipsel.deb 62cdbe4b7f255bcf10bc95f8a34b6335a989787e17f75f9d237eb890c6133a27 13466 openvswitch_3.1.0-2+deb12u1_mipsel-buildd.buildinfo 53151760a8712d02e42ba52d6cb0fa543f45089788b0ec85ac6c325cb3548790 425760 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_mipsel.deb d78c68e5dd6f9c40ec7bdb5eda48271ef5f063014c349360bd2e7e6b1a82d84d 235068 python3-openvswitch_3.1.0-2+deb12u1_mipsel.deb Files: 47256d10e43095fc4752034915fbb263 6435960 debug optional openvswitch-common-dbgsym_3.1.0-2+deb12u1_mipsel.deb 83162bca3c9f859e0073adc671a8dbb6 1320932 net optional openvswitch-common_3.1.0-2+deb12u1_mipsel.deb 896fce2c54455d0f3b06799a59a10d5b 34196 net optional openvswitch-ipsec_3.1.0-2+deb12u1_mipsel.deb aace6432f2f10f27afbf325472dda1f9 10405776 debug optional openvswitch-switch-dbgsym_3.1.0-2+deb12u1_mipsel.deb fa2d173420c53031b552ce20671e21ca 1608072 net optional openvswitch-switch_3.1.0-2+deb12u1_mipsel.deb db775cb04aca3e128087d02e7fe856c8 3395416 debug optional openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_mipsel.deb ea5070417c842b62a7516b8d695be4a7 737952 net optional openvswitch-testcontroller_3.1.0-2+deb12u1_mipsel.deb efe3d83eb5a37563a97c3506f9a0aed3 934528 debug optional openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_mipsel.deb b963b0aed1bd3711f441670bdc13d57f 269316 net optional openvswitch-vtep_3.1.0-2+deb12u1_mipsel.deb e65e4a20ed9d6cdd985545623bb9eba2 13466 net optional openvswitch_3.1.0-2+deb12u1_mipsel-buildd.buildinfo 603fcf5c0828219c344fed045957eafc 425760 debug optional python3-openvswitch-dbgsym_3.1.0-2+deb12u1_mipsel.deb adcaacfbd2344565be12bd1f8568e320 235068 python optional python3-openvswitch_3.1.0-2+deb12u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYcmCPDWR4qV//tHLzb9skZtf/dwFAmXx0NQACgkQzb9skZtf /dwWtg/+IuvBnFQfwdbOzBagmyN6tOMQ1cDCNRzdd057GLbsRQrddQ+XKErxkIDM 84PMtz+Th4qOz1DMecIKkga4oy9gZE1Zi9KaI0iAk84sL9l3cOhZErzwNEz6w9wH /g6SB9NgRbk4Gf8Xvoi60Q+DUQO+Qe/JJbdT5+gO/modxUWYWNJXC8mUve4USsVC ZwitUv3czkUbjMgWkbG+a235HZeN8UndLr/arEDC4edwwQqRzqKmz8sQpToB66GI 9FsVBPK+clhXwMLtwK4uBNUc3V5ByAE2cFR9Lz+d6vJPKXH0WNnApTo0LbLmMJFI kMvbPlNUgWcM+7Zexxp9rAtHJI09b+VXdZtliqKjFIKHMTqZssOjY65yLv5LoB9b lQXkTyJam+qJcyhQjec+cyzgnRN9zpF49yQKuV8j+M9r8oXp5vG+7vZl97JHTaeD rTIQspo+XRKpm5xrvRaG7TmTpe+vd+NEEpXOXT+mGUcjt9KGHgvlAW2qetfBvRnH Gnq9EoBhxPdftA5D0wx8OWZ9kC56NXBHuoLxJ6sVIzoZOOTU56hHQK2eCYUkVYh5 2HF/3F1LPVk3EaUaiNu/x6EaTM10ylNMaO1RuYatz90yxXh1lX/GHiBgkY8BpuFa 5wBf/BPGfElDkP59g2cY/FsEZ7G6vm7IlzIW6+Bh4fkCKXIVipQ= =6tl9 -----END PGP SIGNATURE-----