- Issued:
- 2021-05-20
- Updated:
- 2021-05-20
RHSA-2021:2077 - Important: openvswitch security update
Synopsis
Important: openvswitch security update
Type/Severity
Security Advisory Important
Topic
An update for openvswitch is now available in Fast Datapath for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
-
lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c (CVE-2015-8011)
-
openvswitch: limitation in the OVS packet parsing in userspace leads to DoS (CVE-2020-35498)
-
lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)
Solution
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Virtualization - Extended Update Support | 4.2 | x86_64 |
| Red Hat Enterprise Linux Fast Datapath | 7 | x86_64 |
| Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) | 7 | ppc64le |
| Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) | 7 | s390x |
Updated Packages
- openvswitch-devel-2.9.9-1.el7fdp.ppc64le.rpm
- openvswitch-devel-2.9.9-1.el7fdp.s390x.rpm
- openvswitch-debuginfo-2.9.9-1.el7fdp.x86_64.rpm
- python-openvswitch-2.9.9-1.el7fdp.s390x.rpm
- python-openvswitch-2.9.9-1.el7fdp.x86_64.rpm
- openvswitch-devel-2.9.9-1.el7fdp.x86_64.rpm
- python-openvswitch-2.9.9-1.el7fdp.ppc64le.rpm
- openvswitch-test-2.9.9-1.el7fdp.noarch.rpm
- openvswitch-2.9.9-1.el7fdp.x86_64.rpm
- openvswitch-debuginfo-2.9.9-1.el7fdp.ppc64le.rpm
- openvswitch-debuginfo-2.9.9-1.el7fdp.s390x.rpm
- openvswitch-2.9.9-1.el7fdp.ppc64le.rpm
- openvswitch-2.9.9-1.el7fdp.s390x.rpm
- openvswitch-2.9.9-1.el7fdp.src.rpm
Fixes
- This content is not included.BZ - 1896536
- This content is not included.BZ - 1908845
- This content is not included.BZ - 1921438
- This content is not included.BZ - 1950032
CVEs
References
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/security/updates/classification#important
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.