-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Feb 2024 16:46:26 +0100 Source: openvswitch Binary: openvswitch-common openvswitch-common-dbgsym openvswitch-ipsec openvswitch-switch openvswitch-switch-dbgsym openvswitch-testcontroller openvswitch-testcontroller-dbgsym openvswitch-vtep openvswitch-vtep-dbgsym python3-openvswitch python3-openvswitch-dbgsym Architecture: s390x Version: 3.1.0-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Thomas Goirand Description: openvswitch-common - Open vSwitch common components openvswitch-ipsec - Open vSwitch IPsec tunneling support openvswitch-switch - Open vSwitch switch implementations openvswitch-testcontroller - Simple controller for testing OpenFlow setups openvswitch-vtep - Open vSwitch VTEP utilities python3-openvswitch - Python 3 bindings for Open vSwitch Closes: 1063492 Changes: openvswitch (3.1.0-2+deb12u1) bookworm-security; urgency=medium . * CVE-2023-5366: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. Added upstream patch: "Fix missing masks on a final stage with ports trie". * CVE-2023-3966: Invalid memory access in Geneve with HW offload. Added upstream patch: netdev-offload-tc: Check geneve metadata length (Closes: #1063492). Checksums-Sha1: df27b11dc73055cd1e21c32a225073b64b4bfe17 6102956 openvswitch-common-dbgsym_3.1.0-2+deb12u1_s390x.deb 9661be8fc63c13fcda081a442b613fc3a061f138 1212904 openvswitch-common_3.1.0-2+deb12u1_s390x.deb a785b2c12c363aad06a011791239cc84dd796e1e 34196 openvswitch-ipsec_3.1.0-2+deb12u1_s390x.deb b0bd5f8d8dfcd3b4d8483f2f0401ed3c5f894f2f 9760388 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_s390x.deb 13d374b237bc7044b005a06515c6547ac91f10bc 1526924 openvswitch-switch_3.1.0-2+deb12u1_s390x.deb 3d092ec3db0519cfd44c1c6196b48bc9e69088d4 3184040 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_s390x.deb a5991ff296188efea124207d5af200623aa434dd 705184 openvswitch-testcontroller_3.1.0-2+deb12u1_s390x.deb 53039062e8be4dd9d7e55385f08c8568dabb53c5 891572 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_s390x.deb 2d26bddf4e49c42fdf7aa540a8d1099b01f5aec9 261232 openvswitch-vtep_3.1.0-2+deb12u1_s390x.deb 8a6ab8a8ff56d33c470437656b627e93ff7b79f4 13468 openvswitch_3.1.0-2+deb12u1_s390x-buildd.buildinfo 336dfbea50d23ffd79e5bb154826048b00443c0c 406188 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_s390x.deb 1823e8eba3c4f2e3df6467032c9fed95235dd83c 235372 python3-openvswitch_3.1.0-2+deb12u1_s390x.deb Checksums-Sha256: 7c9ac7c77d003e0c0187d8f39fb29853eb95b68c4e400d361fa8089bc703cb11 6102956 openvswitch-common-dbgsym_3.1.0-2+deb12u1_s390x.deb bf4196ebdeacac94a3b93b636053db6a8155aaf921636a0b0637b9ef933f1fa5 1212904 openvswitch-common_3.1.0-2+deb12u1_s390x.deb 78561d5190611a239c8d6000b17b6d8dea47e820380edd19e1551f7d7c4e2de6 34196 openvswitch-ipsec_3.1.0-2+deb12u1_s390x.deb f098c68c0149e5932254c1604e3901e34caeaaf80d49cd9ae44a38e40d28c017 9760388 openvswitch-switch-dbgsym_3.1.0-2+deb12u1_s390x.deb 09f9a5f5d08884a376449ef5087ec2463f618a8f433748fc7ba26db88eb6d300 1526924 openvswitch-switch_3.1.0-2+deb12u1_s390x.deb e3fe94cf459b11bd5c00dbbdcc7c298109523c1d01f7c7b57588dc2630ed5917 3184040 openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_s390x.deb da0835df85fe987713e9c883ea96fa2eb5c6f311330bbaa1b405e8cb20e4a655 705184 openvswitch-testcontroller_3.1.0-2+deb12u1_s390x.deb dfc085d586e88d9edcb261ef6385f4f07563e5ef26d6e56b7a98481202e5cf5d 891572 openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_s390x.deb d033a869b6aca0106fccaa896109b6772f99d135acda39891acf34c7f29cbcea 261232 openvswitch-vtep_3.1.0-2+deb12u1_s390x.deb daa65f3bbb53d5474a692c307e9ae8d423028c63694a697b11caa640ec5b51f4 13468 openvswitch_3.1.0-2+deb12u1_s390x-buildd.buildinfo 9d257cb93983e1744823fd98a87b2e1c48f16b55dcdd70cb06e3236d1897c1a7 406188 python3-openvswitch-dbgsym_3.1.0-2+deb12u1_s390x.deb 524ad52a97fc3ee7946926154dc8fdead3d398174c6a7dd3b2b9acc2028610d5 235372 python3-openvswitch_3.1.0-2+deb12u1_s390x.deb Files: 851c0118c7c4c8901d872e031f7ccdee 6102956 debug optional openvswitch-common-dbgsym_3.1.0-2+deb12u1_s390x.deb 7b8eb8eef839ba0c1ba234c16d569023 1212904 net optional openvswitch-common_3.1.0-2+deb12u1_s390x.deb 1867bc4ac6d66fc15387095d10c0761f 34196 net optional openvswitch-ipsec_3.1.0-2+deb12u1_s390x.deb f63635d7f2b58455408aabb9732ee3ae 9760388 debug optional openvswitch-switch-dbgsym_3.1.0-2+deb12u1_s390x.deb 742f23bf339bef2bc8f1a8bfbacc4d3f 1526924 net optional openvswitch-switch_3.1.0-2+deb12u1_s390x.deb 92327e81f8d5fda19f20db7e62ef2d2f 3184040 debug optional openvswitch-testcontroller-dbgsym_3.1.0-2+deb12u1_s390x.deb 33a12f5fe0947359f56d80cfdcba85de 705184 net optional openvswitch-testcontroller_3.1.0-2+deb12u1_s390x.deb 475cf04e60f9bc547aab30348e71442d 891572 debug optional openvswitch-vtep-dbgsym_3.1.0-2+deb12u1_s390x.deb feefe5eec6aeb12d508669404274d0c7 261232 net optional openvswitch-vtep_3.1.0-2+deb12u1_s390x.deb 2c981b887ae91e0dbfa28e2fa5aa71ce 13468 net optional openvswitch_3.1.0-2+deb12u1_s390x-buildd.buildinfo c8d4690e763032fef8a6038d3d18903e 406188 debug optional python3-openvswitch-dbgsym_3.1.0-2+deb12u1_s390x.deb 329d9642f7c5973eb1f84587915d7182 235372 python optional python3-openvswitch_3.1.0-2+deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETdQgQHyJW2hcXsTC6b+AMjGgQHgFAmXxxNYACgkQ6b+AMjGg QHimuxAAp2gBMKLuF11kczETf/uzlI80JzDhIL3Dy/OxkQ2o6MszCGT/eIUBQp/0 1CUsoAlgiAdtgKS1GrD8uLnaMcw7cQ25AVn7mwowNEhsTmsryGVeVCUs3FlFtBNw zjJBjXPHg8QkEzbVZKhOeio+q6LFGpIInDxGcayPggG36uRGQA8T7My3eLWmj4Y1 NsXBs8QGhHACtbQf465ajUKZVh5PLm5/LE9OW5eZV8KL1ZIArPaLQCykTzt2lTUL 5q5z0E77DO8pfpkLfk7IgMo0q8aYfyWMvo4GnTudcrBusDlWgKk+TZxyjukovuVs JOvGsK5wa4n9jE+mtU7m09hLYnKZ8CMOAVrYZhF8yssUSkALRBrYpKRUsLIX3T/z WIdylBW0HIr88i8fVxBum3f4b9bGxcT9Nfh2OyTYLOW+E2BMmcmuPQP3w7fGH2Sm i1qBnIamV/OhWodhaNjk+Uxjmqs4zC0cQOkMicZqfKAzPMsZYlNOlhbFU6o3tFaW QJdTiuH6ZoK1SCVN/gnO2Ag7D4WpQM40VqthF4ti8VRS9/DM7aa0YLVAObSKLvFe InD/RQhz/0+S0j9+MsrZzNtizqJy79xWlA22Zh6amEO7fqj3T0HABM3ktwzy8XO8 qXMcsZu484GzQcPYEFn6oC1TPqAsnNz3Nzi4HZBEhWo6Sit5VwM= =ll3X -----END PGP SIGNATURE-----