[Bug 1575119] Update Released

James Page james.page at ubuntu.com
Tue Jun 21 15:35:15 UTC 2016


The verification of the Stable Release Update for openvswitch has
completed successfully and the package has now been released to
-updates. In the event that you encounter a regression using the package
from -updates please report a new bug using ubuntu-bug and tag the bug
report regression-update so we can easily find any regressions.

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to openvswitch in Ubuntu.
https://bugs.launchpad.net/bugs/1575119

Title:
  [SRU] Open vSwitch 2.4.1, 2.3.3 stable updates

Status in Ubuntu Cloud Archive:
  Invalid
Status in Ubuntu Cloud Archive kilo series:
  Triaged
Status in Ubuntu Cloud Archive liberty series:
  Fix Released
Status in openvswitch package in Ubuntu:
  Invalid
Status in openvswitch source package in Wily:
  Fix Released

Bug description:
  The Open vSwitch team is pleased to announce the release of Open
  vSwitch 2.4.1:

          http://openvswitch.org/releases/openvswitch-2.4.1.tar.gz

  and Open vSwitch 2.3.3:

          http://openvswitch.org/releases/openvswitch-2.3.3.tar.gz

  Both of these releases contain bug fixes.  Most importantly, they
  address a remote execution vulnerability in MPLS parsing
  (CVE-2016-2074):

  http://openvswitch.org/pipermail/announce/2016-March/000082.html

  We recommend immediately upgrading to a patched version.  If you do
  not want the other fixes, the advisory above contain patches that may
  be applied to the previous releases.

  Note that Open vSwitch 2.5.x is not affected by this issue.

  We would like to thank the reporters: Kashyap Thimmaraju and Bhargava
  Shastry.

  Enjoy!

  --The Open vSwitch Team

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1575119/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list