Fedora 26: FEDORA-2017-671e8c760f Critical: Openvswitch Security Issues

Open vSwitch provides standard network bridging functions and

support for the OpenFlow protocol for remote per-flow control of

traffic.

Security fix for CVE-2017-9264 ---- Security fix for CVE-2017-9214

[ 1 ] Bug #1457329 - CVE-2017-9264 openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets

https://bugzilla.redhat.com/show_bug.cgi?id=1457329

[ 2 ] Bug #1456795 - CVE-2017-9214 openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function

https://bugzilla.redhat.com/show_bug.cgi?id=1456795

su -c 'dnf upgrade openvswitch' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org