Security update for openvswitch SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0284-1 Final 1 1 2021-02-02T12:08:46Z current 2021-02-02T12:08:46Z 2021-02-02T12:08:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openvswitch This update for openvswitch fixes the following issues: - openvswitch was updated to 2.7.12 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345) A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in order to obtain a list of all changes. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2021-284,SUSE-2021-284,SUSE-OpenStack-Cloud-8-2021-284,SUSE-OpenStack-Cloud-Crowbar-8-2021-284,SUSE-SLE-SAP-12-SP3-2021-284,SUSE-SLE-SERVER-12-SP3-2021-284,SUSE-SLE-SERVER-12-SP3-BCL-2021-284,SUSE-Storage-5-2021-284 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210284-1/ Link for SUSE-SU-2021:0284-1 https://lists.suse.com/pipermail/sle-security-updates/2021-February/008266.html E-Mail link for SUSE-SU-2021:0284-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1117483 SUSE Bug 1117483 https://bugzilla.suse.com/1181345 SUSE Bug 1181345 https://www.suse.com/security/cve/CVE-2020-27827/ SUSE CVE CVE-2020-27827 page HPE Helion OpenStack 8 SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 openvswitch-2.7.12-3.36.1 openvswitch-devel-2.7.12-3.36.1 openvswitch-ovn-central-2.7.12-3.36.1 openvswitch-ovn-common-2.7.12-3.36.1 openvswitch-ovn-docker-2.7.12-3.36.1 openvswitch-ovn-host-2.7.12-3.36.1 openvswitch-ovn-vtep-2.7.12-3.36.1 openvswitch-pki-2.7.12-3.36.1 openvswitch-test-2.7.12-3.36.1 openvswitch-vtep-2.7.12-3.36.1 python-ovs-2.7.12-3.36.1 openvswitch-2.7.12-3.36.1 as a component of HPE Helion OpenStack 8 openvswitch-2.7.12-3.36.1 as a component of SUSE Enterprise Storage 5 openvswitch-2.7.12-3.36.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL openvswitch-2.7.12-3.36.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS openvswitch-2.7.12-3.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openvswitch-2.7.12-3.36.1 as a component of SUSE OpenStack Cloud 8 openvswitch-2.7.12-3.36.1 as a component of SUSE OpenStack Cloud Crowbar 8 A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability. CVE-2020-27827 HPE Helion OpenStack 8:openvswitch-2.7.12-3.36.1 SUSE Enterprise Storage 5:openvswitch-2.7.12-3.36.1 SUSE Linux Enterprise Server 12 SP3-BCL:openvswitch-2.7.12-3.36.1 SUSE Linux Enterprise Server 12 SP3-LTSS:openvswitch-2.7.12-3.36.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openvswitch-2.7.12-3.36.1 SUSE OpenStack Cloud 8:openvswitch-2.7.12-3.36.1 SUSE OpenStack Cloud Crowbar 8:openvswitch-2.7.12-3.36.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210284-1/ https://www.suse.com/security/cve/CVE-2020-27827.html CVE-2020-27827 https://bugzilla.suse.com/1181345 SUSE Bug 1181345