Zwei Probleme in Open vSwitch
ID: | FEDORA-2017-671e8c760f |
Distribution: | Fedora |
Plattformen: | Fedora 26 |
Datum: | Mo, 19. Juni 2017, 16:44 |
Referenzen: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9214
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9264 |
Applikationen: | Open vSwitch |
Originalnachricht |
|
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-671e8c760f 2017-06-19 14:32:24.980915 -------------------------------------------------------------------------------- Name : openvswitch Product : Fedora 26 Version : 2.7.0 Release : 5.fc26 URL : http://openvswitch.org Summary : Open vSwitch daemon/database/utilities Description : Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-9264 ---- Security fix for CVE-2017-9214 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1457329 - CVE-2017-9264 openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets https://bugzilla.redhat.com/show_bug.cgi?id=1457329 [ 2 ] Bug #1456795 - CVE-2017-9214 openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function https://bugzilla.redhat.com/show_bug.cgi?id=1456795 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade openvswitch' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org |