Stay Secure with the Latest Linux Advisories

security advisoryFedoranetwork configuration

Fedora 27 lldpad Security Patch: CVE-2018-10932 Critical Sanitization Flaw

- Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV (CVE-2018-10932). - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-e9d1ec6dbc 2018-11-16 03:41:37.813095 --------------------------------------------------------------------------------Name : lldpad Product : Fedora 27 Version : 1.0.1 Release : 9.git036e314.fc27 URL : https://www.resiliencecounselling.uk.com/ Summary : Intel LLDP Agent Description : This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center. --------------------------------------------------------------------------------Update Information: - Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV (CVE-2018-10932). - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. --------------------------------------------------------------------------------ChangeLog: * Thu Aug 16 2018 Petr Machata - 1.0.1-9.git036e314 - Add open-lldp-v1.0.1-29-basman_clif-print-the-OID-properly.patch (BZ 1614932, 1614896 (CVE-2018-10932) - Add open-lldp-v1.0.1-28-support-DSCP-selectors.patch (BZ 1618377) --------------------------------------------------------------------------------References: [ 1 ] Bug #1614896 - CVE-2018-10932 lldptool: improper sanitization of shell-escape codes https://bugzilla.redhat.com/show_bug.cgi?id=1614896 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-e9d1ec6dbc' at the command line. Formore information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora has released a patch addressing vulnerabilities related to insufficient sanitization in lldpad, alongside enhancements to its packet prioritization features.. Fedora Update,lldpad Security Fix,Improper Sanitization,DSCP Selectors,Network Device Configuration. . Severity: Critical. LinuxSecurity.com Team

Nov 16, 2018 •Critical Fedora