- ------------------------------------------------------------------------- Debian LTS Advisory DLA-3388-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 10, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : lldpd Version : 1.0.3-1+deb10u1 CVE IDs : CVE-2020-27827 CVE-2021-43612 Debian Bug : 980132 It was discovered that there were two potential denial of service (DoS) attacks in lldpd, a implementation of the IEEE 802.1ab (LLDP) protocol used to administer and monitor networking devices. For Debian 10 buster, these problems have been fixed in version 1.0.3-1+deb10u1. We recommend that you upgrade your lldpd packages. For the detailed security status of lldpd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/lldpd Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS