From 83f8742b0e17b7cce7ec748b7922ee0a7ec41afc Mon Sep 17 00:00:00 2001 From: Xiangyu Chen Date: Wed, 28 Dec 2022 11:56:20 +0800 Subject: openvswitch: backport patch to fix CVE-2022-4337 and CVE-2022-4338 CVE-2022-4337: openvswitch: Out-of-Bounds Read in Organization Specific TLV CVE-2022-4338: openvswitch: Integer Underflow in Organization Specific TLV Reference: https://github.com/openvswitch/ovs/pull/405 https://github.com/openvswitch/ovs/commit/7490f281f09a8455c48e19b0cf1b99ab758ee4f4 Signed-off-by: Xiangyu Chen Signed-off-by: Bruce Ashfield --- recipes-networking/openvswitch/openvswitch_git.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'recipes-networking/openvswitch/openvswitch_git.bb') diff --git a/recipes-networking/openvswitch/openvswitch_git.bb b/recipes-networking/openvswitch/openvswitch_git.bb index f5d85f3f..4f4efe75 100644 --- a/recipes-networking/openvswitch/openvswitch_git.bb +++ b/recipes-networking/openvswitch/openvswitch_git.bb @@ -27,6 +27,7 @@ SRC_URI += "git://github.com/openvswitch/ovs.git;protocol=https;branch=branch-2. file://kernel_module.patch \ file://systemd-update-tool-paths.patch \ file://systemd-create-runtime-dirs.patch \ + file://0001-lldp-Fix-bugs-when-parsing-malformed-AutoAttach.patch \ " LIC_FILES_CHKSUM = "file://LICENSE;md5=1ce5d23a6429dff345518758f13aaeab" -- cgit v1.2.3-54-g00ecf