RedHat: RHSA-2018-1267:01 Moderate: openvswitch security and bug fix update
Summary
Open vSwitch provides standard network bridging functions and support for
the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual
address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Bug Fix(es):
* The openvswitch packages have been upgraded to upstream version 2.9.0,
which provides a number of bug fixes and enhancements over the previous
version. (BZ#1560628)
Summary
Solution
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
References
https://access.redhat.com/security/cve/CVE-2018-1059 https://access.redhat.com/security/updates/classification/#moderate
Package List
Channel to provide early releases to layered products:
Source:
openvswitch-2.9.0-19.el7fdp.src.rpm
noarch:
openvswitch-test-2.9.0-19.el7fdp.noarch.rpm
python-openvswitch-2.9.0-19.el7fdp.noarch.rpm
x86_64:
openvswitch-2.9.0-19.el7fdp.x86_64.rpm
openvswitch-debuginfo-2.9.0-19.el7fdp.x86_64.rpm
openvswitch-devel-2.9.0-19.el7fdp.x86_64.rpm
openvswitch-ovn-central-2.9.0-19.el7fdp.x86_64.rpm
openvswitch-ovn-common-2.9.0-19.el7fdp.x86_64.rpm
openvswitch-ovn-host-2.9.0-19.el7fdp.x86_64.rpm
openvswitch-ovn-vtep-2.9.0-19.el7fdp.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
Topic
An update for openvswitch is now available for Fast Datapath for Red HatEnterprise Linux 7.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.
Topic
Relevant Releases Architectures
Channel to provide early releases to layered products - noarch, x86_64
Bugs Fixed
1544298 - CVE-2018-1059 dpdk: Information exposure in unchecked guest physical to host virtual address translations
1560628 - [fdProd] Align to fdNext 2.9.0-19