Stay Secure with the Latest Linux Advisories

security advisoryFedoramemory leak

Fedora 26: 2017-45625fecca critical: Open vSwitch Network Threats

Add a symlink of the OCF script in the OCF resources folder ---- Updated to Open vSwitch 2.7.3 and DPDK 16.11.3 for CVE-2017-14970 ---- Security fix for CVE-2017-9263, CVE-2017-9265 ---- Updated to Open vSwitch 2.7.1 and DPDK 16.11.2 (#1468234). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-45625fecca 2017-10-16 15:51:47.722264 --------------------------------------------------------------------------------Name : openvswitch Product : Fedora 26 Version : 2.7.3 Release : 2.fc26 URL : http://www.openvswitch.org/ Summary : Open vSwitch daemon/database/utilities Description : Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. --------------------------------------------------------------------------------Update Information: Add a symlink of the OCF script in the OCF resources folder ---- Updated to Open vSwitch 2.7.3 and DPDK 16.11.3 for CVE-2017-14970 ---- Security fix for CVE-2017-9263, CVE-2017-9265 ---- Updated to Open vSwitch 2.7.1 and DPDK 16.11.2 (#1468234) --------------------------------------------------------------------------------References: [ 1 ] Bug #1497966 - CVE-2017-14970 openvswitch: Multiple memory leaks in lib/ofp-util.c while parsing malformed OpenFlow group mod messages https://bugzilla.redhat.com/show_bug.cgi?id=1497966 [ 2 ] Bug #1457327 - CVE-2017-9263 openvswitch: Invalid processing of a malicious OpenFlow role status message https://bugzilla.redhat.com/show_bug.cgi?id=1457327 [ 3 ] Bug #1457335 - CVE-2017-9265 openvswitch: Buffer over-read while parsing the group mod OpenFlow message https://bugzilla.redhat.com/show_bug.cgi?id=1457335 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade openvswitch' at the command line. Formore information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . An important patch for Open vSwitch has been released to fix various security loopholes affecting Fedora 26. Detailed upgrade guidelines are included.. Open vSwitch Security,Fedora Update,Network Threats,Security Patch. . Severity: Critical. LinuxSecurity.com Team

Oct 16, 2017 •Critical Fedora