openvswitch (2.5.2-0ubuntu0.16.04.2) xenial-security; urgency=medium
* SECURITY UPDATE: DoS while parsing OFPT_QUEUE_GET_CONFIG_REPLY message
- debian/patches/CVE-2017-9214.patch: properly check length in
lib/ofp-util.c.
- CVE-2017-9214
* SECURITY UPDATE: DoS while parsing OpenFlow role status message
- debian/patches/CVE-2017-9263.patch: don't abort on unknown reason in
lib/ofp-print.c.
- CVE-2017-9263
* SECURITY UPDATE: DoS while parsing group mod OpenFlow message
- debian/patches/CVE-2017-9265.patch: check length in lib/ofp-util.c.
- CVE-2017-9265
-- Marc Deslauriers <email address hidden> Thu, 24 Aug 2017 14:15:05 -0400