Описание
Security update for openvswitch
This update for openvswitch fixes the following issues:
- CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
Список пакетов
SUSE Linux Enterprise Module for Package Hub 15 SP3
python3-ovs-2.14.2-150300.19.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP3
libopenvswitch-2_14-0-2.14.2-150300.19.3.1
libovn-20_06-0-20.06.2-150300.19.3.1
openvswitch-2.14.2-150300.19.3.1
openvswitch-devel-2.14.2-150300.19.3.1
openvswitch-ipsec-2.14.2-150300.19.3.1
openvswitch-pki-2.14.2-150300.19.3.1
openvswitch-test-2.14.2-150300.19.3.1
openvswitch-vtep-2.14.2-150300.19.3.1
ovn-20.06.2-150300.19.3.1
ovn-central-20.06.2-150300.19.3.1
ovn-devel-20.06.2-150300.19.3.1
ovn-docker-20.06.2-150300.19.3.1
ovn-host-20.06.2-150300.19.3.1
ovn-vtep-20.06.2-150300.19.3.1
python3-ovs-2.14.2-150300.19.3.1
openSUSE Leap 15.3
libopenvswitch-2_14-0-2.14.2-150300.19.3.1
libovn-20_06-0-20.06.2-150300.19.3.1
openvswitch-2.14.2-150300.19.3.1
openvswitch-devel-2.14.2-150300.19.3.1
openvswitch-doc-2.14.2-150300.19.3.1
openvswitch-ipsec-2.14.2-150300.19.3.1
openvswitch-pki-2.14.2-150300.19.3.1
openvswitch-test-2.14.2-150300.19.3.1
openvswitch-vtep-2.14.2-150300.19.3.1
ovn-20.06.2-150300.19.3.1
ovn-central-20.06.2-150300.19.3.1
ovn-devel-20.06.2-150300.19.3.1
ovn-doc-20.06.2-150300.19.3.1
ovn-docker-20.06.2-150300.19.3.1
ovn-host-20.06.2-150300.19.3.1
ovn-vtep-20.06.2-150300.19.3.1
python3-ovs-2.14.2-150300.19.3.1
Ссылки
- Link for SUSE-SU-2022:3116-1
- E-Mail link for SUSE-SU-2022:3116-1
- SUSE Security Ratings
- SUSE Bug 1188524
- SUSE CVE CVE-2021-36980 page
Описание
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP3:python3-ovs-2.14.2-150300.19.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP3:libopenvswitch-2_14-0-2.14.2-150300.19.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP3:libovn-20_06-0-20.06.2-150300.19.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP3:openvswitch-2.14.2-150300.19.3.1
Ссылки
- CVE-2021-36980
- SUSE Bug 1188524
- SUSE Bug 1196498