Format: 1.8
Date: Thu, 25 Oct 2018 09:48:22 -0400
Source: openvswitch
Binary: openvswitch-common openvswitch-dbg openvswitch-doc openvswitch-pki openvswitch-switch openvswitch-switch-dpdk openvswitch-test openvswitch-testcontroller openvswitch-vtep ovn-central ovn-common ovn-controller-vtep ovn-docker ovn-host python-openvswitch python3-openvswitch
Architecture: source
Version: 2.9.2-0ubuntu0.18.04.3
Distribution: bionic-security
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 openvswitch-common - Open vSwitch common components
 openvswitch-dbg - Debug symbols for Open vSwitch packages
 openvswitch-doc - Open vSwitch documentation
 openvswitch-pki - Open vSwitch public key infrastructure dependency package
 openvswitch-switch - Open vSwitch switch implementations
 openvswitch-switch-dpdk - DPDK enabled Open vSwitch switch implementation
 openvswitch-test - Open vSwitch test package
 openvswitch-testcontroller - Simple controller for testing OpenFlow setups
 openvswitch-vtep - Open vSwitch VTEP utilities
 ovn-central - OVN central components
 ovn-common - OVN common components
 ovn-controller-vtep - OVN vtep controller
 ovn-docker - OVN Docker drivers
 ovn-host   - OVN host components
 python-openvswitch - Python bindings for Open vSwitch
 python3-openvswitch - Python 3 bindings for Open vSwitch
Changes:
 openvswitch (2.9.2-0ubuntu0.18.04.3) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: assertion failure when decoding a group mod
     - debian/patches/CVE-2018-17204.patch: don't assert-fail decoding bad
       OF1.5 group mod type or command in lib/ofp-util.c.
     - CVE-2018-17204
   * SECURITY UPDATE: assertion failure when adding flows
     - debian/patches/CVE-2018-17205.patch: fix OVS crash when reverting old
       flows in bundle commit in ofproto/ofproto.c.
     - CVE-2018-17205
   * SECURITY UPDATE: buffer overread during BUNDLE action decoding
     - debian/patches/CVE-2018-17206.patch: avoid overread in
       lib/ofp-actions.c.
     - CVE-2018-17206
Checksums-Sha1:
 5131d62a36854b57d969bda31c5ad91c41bf0dc2 3629 openvswitch_2.9.2-0ubuntu0.18.04.3.dsc
 63e948919d0f07aa11ce91958159f2b552f460d3 52120 openvswitch_2.9.2-0ubuntu0.18.04.3.debian.tar.xz
 568a800548bac38b44acf68043a913bc023bfbe5 13837 openvswitch_2.9.2-0ubuntu0.18.04.3_source.buildinfo
Checksums-Sha256:
 8acfe070cf822382a224948a704e1235fa25e811ee4e118c770fd85ae08ff130 3629 openvswitch_2.9.2-0ubuntu0.18.04.3.dsc
 c52a3b45ae96a51cd8b8cd552ac2d89f4cdcc16618dd9ee7a673b2c57f4eefcc 52120 openvswitch_2.9.2-0ubuntu0.18.04.3.debian.tar.xz
 046e604f7b76c594173325749511e7ed211dc886e28514e1556979a84a332ecb 13837 openvswitch_2.9.2-0ubuntu0.18.04.3_source.buildinfo
Files:
 713d42e9842ab27823961138bbbcbbef 3629 net optional openvswitch_2.9.2-0ubuntu0.18.04.3.dsc
 c46fcb85adbfefe6b946e4f9abe97631 52120 net optional openvswitch_2.9.2-0ubuntu0.18.04.3.debian.tar.xz
 ed2a5dcf88597ad6cbf99f7ec93f09d2 13837 net optional openvswitch_2.9.2-0ubuntu0.18.04.3_source.buildinfo
Original-Maintainer: Open vSwitch developers <dev@openvswitch.org>