[ubuntu/groovy-updates] openvswitch 2.13.1-0ubuntu1.2 (Accepted)

Wed Jan 13 17:58:36 UTC 2021

openvswitch (2.13.1-0ubuntu1.2) groovy-security; urgency=medium

  * SECURITY UPDATE: buffer overflow decoding malformed packets in lldp
    - debian/patches/CVE-2015-8011.patch: check lengths in lib/lldp/lldp.c.
    - CVE-2015-8011
  * SECURITY UPDATE: Externally triggered memory leak in lldp
    - debian/patches/CVE-2020-27827.patch: properly free memory in
      lib/lldp/lldp.c.
    - CVE-2020-27827

Date: 2021-01-08 14:13:09.601189+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/openvswitch/2.13.1-0ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.