Groups > linux.debian.announce.security > #3861 > unrolled thread

[SECURITY] [DSA 5319-1] openvswitch security update

Started by	Moritz Muehlenhoff <jmm@debian.org>
First post	2023-01-13 20:40 +0100
Last post	2023-01-13 20:40 +0100
Articles	1 — 1 participant

Back to article view | Back to linux.debian.announce.security

  [SECURITY] [DSA 5319-1] openvswitch security update Moritz Muehlenhoff <jmm@debian.org> - 2023-01-13 20:40 +0100

#3861 — [SECURITY] [DSA 5319-1] openvswitch security update

From	Moritz Muehlenhoff <jmm@debian.org>
Date	2023-01-13 20:40 +0100
Subject	[SECURITY] [DSA 5319-1] openvswitch security update
Message-ID	<FNy49-bAc-1@gated-at.bofh.it>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5319-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
January 13, 2023                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openvswitch
CVE ID         : CVE-2022-4337 CVE-2022-4338
Debian Bug     : 1027273

Two vulnerabilities were discovered in the LLPD implementation of Open
vSwitch, software-based Ethernet virtual switch, which could result in
denial of service.

For the stable distribution (bullseye), these problems have been fixed in
version 2.15.0+ds1-2+deb11u2.

We recommend that you upgrade your openvswitch packages.

For the detailed security status of openvswitch please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openvswitch

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=a4Zt
-----END PGP SIGNATURE-----

[toc] | [standalone]

csiph-web

[SECURITY] [DSA 5319-1] openvswitch security update

Contents

#3861 — [SECURITY] [DSA 5319-1] openvswitch security update