Debian Package Tracker

general

source: openvswitch (main)
version: 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-3
maintainer: Debian OpenStack [DMD]
uploaders: Thomas Goirand [DMD] – Ben Pfaff [DMD] – Simon Horman [DMD]
arch: all
std-ver: 4.1.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.4.2+git20120612-9.1~deb7u1.1
oldstable: 2.3.0+git20140819-3+deb8u1
old-sec: 2.3.0+git20140819-3+deb8u1
stable: 2.6.2~pre+git20161223-3
testing: 2.8.1+dfsg1-7
unstable: 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-3

versioned links

1.4.2+git20120612-9.1~deb7u1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.3.0+git20140819-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.6.2~pre+git20161223-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.8.1+dfsg1-7: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

openvswitch-common
openvswitch-dbg
openvswitch-dev
openvswitch-pki
openvswitch-switch
openvswitch-testcontroller
openvswitch-vtep
ovn-central
ovn-controller-vtep
ovn-host
python-openvswitch
python3-openvswitch

action needed

Marked for autoremoval on 03 October: #900153 high

Version 2.8.1+dfsg1-7 of openvswitch is marked for autoremoval from testing on Wed 03 Oct 2018. It is affected by #900153. The removal of openvswitch will also cause the removal of (transitive) reverse dependencies: networking-arista, networking-bagpipe, networking-baremetal, networking-bgpvpn, networking-l2gw, networking-mlnx, networking-ovn, networking-sfc, neutron, neutron-dynamic-routing, neutron-fwaas, neutron-lbaas, neutron-taas, neutron-vpnaas, python-ovsdbapp, ryu. You should try to prevent the removal by fixing these RC bugs.

Created: 2018-08-23 Last update: 2018-09-24 18:11

The VCS repository is not up to date, push the missing commits. high

vcswatch reports that the current version of the package is not in its VCS.
Either you need to push your commits, or the information about the package's VCS are out of date. A common cause of the latter issue when using the Git VCS is not specifying the correct branch when the packaging is not in the default one (remote HEAD branch), which is usually "master" but can be modified in salsa.debian.org in the project's general settings with the "Default Branch" field). Alternatively the Vcs-Git field in debian/control can contain a "-b <branch-name>" suffix to indicate what branch is used for the Debian packaging.

Created: 2018-09-11 Last update: 2018-09-24 04:34

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2018-17206: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.
CVE-2018-17204: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
CVE-2018-17205: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.

Please fix them.

Created: 2018-09-20 Last update: 2018-09-21 03:55

4 security issues in stretch high

There are 4 open security issues in stretch.

3 important issues:

CVE-2018-17206: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.
CVE-2018-17204: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
CVE-2018-17205: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.

1 issue skipped by the security teams:

CVE-2017-9214: In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.

Please fix them.

Created: 2017-05-24 Last update: 2018-09-21 03:55

3 security issues in jessie high

There are 3 open security issues in jessie.

3 important issues:

CVE-2018-17206: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.
CVE-2018-17204: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
CVE-2018-17205: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.

Please fix them.

Created: 2018-09-20 Last update: 2018-09-21 03:55

3 security issues in buster high

There are 3 open security issues in buster.

3 important issues:

CVE-2018-17206: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.
CVE-2018-17204: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
CVE-2018-17205: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.

Please fix them.

Created: 2018-09-20 Last update: 2018-09-21 03:55

lintian reports 7 errors and 42 warnings high

Lintian reports 7 errors and 42 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2014-07-03 Last update: 2018-09-18 05:50

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2018-09-16 Last update: 2018-09-24 17:33

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2018-06-23 Last update: 2018-09-24 14:03

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2016-07-02 Last update: 2017-11-01 13:21

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.1 instead of 4.1.1).

Created: 2018-01-24 Last update: 2018-09-11 14:54

testing migrations

This package is part of the ongoing testing transition known as python3.7. Please avoid uploads unrelated to this transition, they would likely delay it and require supplementary work from the release managers. On the other hand, if your package has problems preventing it to migrate to testing, please fix them as soon as possible. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
excuses:
- 13 days old (5 needed)
- missing build on armel: openvswitch-common, openvswitch-dbg, openvswitch-dev, openvswitch-switch, openvswitch-testcontroller, openvswitch-vtep, ovn-central, ovn-controller-vtep, ovn-host (from 2.8.1+dfsg1-7)
- missing build on mips: openvswitch-common, openvswitch-dbg, openvswitch-dev, openvswitch-switch, openvswitch-testcontroller, openvswitch-vtep, ovn-central, ovn-controller-vtep, ovn-host (from 2.8.1+dfsg1-7)
- missing build on mips64el: openvswitch-common, openvswitch-dbg, openvswitch-dev, openvswitch-switch, openvswitch-testcontroller, openvswitch-vtep, ovn-central, ovn-controller-vtep, ovn-host (from 2.8.1+dfsg1-7)
- missing build on mipsel: openvswitch-common, openvswitch-dbg, openvswitch-dev, openvswitch-switch, openvswitch-testcontroller, openvswitch-vtep, ovn-central, ovn-controller-vtep, ovn-host (from 2.8.1+dfsg1-7)
- old binaries left on all: openvswitch-pki, python-openvswitch, python3-openvswitch (from 2.8.1+dfsg1-7) (but ignoring cruft, so nevermind)
- Updating openvswitch introduces new bugs: #908978
- Updating openvswitch fixes old bugs: #900153
- Piuparts tested OK - https://piuparts.debian.org/sid/source/o/openvswitch.html
- Not considered

news

[rss feed]

[2018-09-11] Accepted openvswitch 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-3 (source amd64 all) into unstable (Thomas Goirand)
[2018-09-05] Accepted openvswitch 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-2 (source amd64 all) into unstable (Thomas Goirand)
[2018-09-03] Accepted openvswitch 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-1 (source amd64 all) into unstable (Thomas Goirand)
[2018-06-23] openvswitch 2.8.1+dfsg1-7 MIGRATED to testing (Debian testing watch)
[2018-06-18] Accepted openvswitch 2.8.1+dfsg1-7 (source amd64 all) into unstable (Thomas Goirand)
[2018-02-06] openvswitch 2.8.1+dfsg1-6 MIGRATED to testing (Debian testing watch)
[2018-01-29] Accepted openvswitch 2.8.1+dfsg1-6 (source amd64 all) into unstable (Thomas Goirand)
[2018-01-24] Accepted openvswitch 2.8.1+dfsg1-5 (source amd64 all) into unstable (Thomas Goirand)
[2017-11-30] Accepted openvswitch 2.8.1+dfsg1-4 (source amd64 all) into unstable (Thomas Goirand)
[2017-11-01] Accepted openvswitch 2.8.1+dfsg1-3 (source amd64 all) into unstable (Thomas Goirand)
[2017-11-01] Accepted openvswitch 2.8.1+dfsg1-2 (source amd64 all) into unstable (Thomas Goirand)
[2017-10-26] Accepted openvswitch 2.8.1+dfsg1-1 (source amd64 all) into experimental, experimental (Thomas Goirand)
[2017-01-24] openvswitch 2.6.2~pre+git20161223-3 MIGRATED to testing (Debian testing watch)
[2017-01-10] Accepted openvswitch 2.6.2~pre+git20161223-3 (source i386 all) into unstable (Ben Pfaff)
[2017-01-03] openvswitch 2.6.2~pre+git20161223-2 MIGRATED to testing (Debian testing watch)
[2016-12-24] Accepted openvswitch 2.6.2~pre+git20161223-2 (source i386 all) into unstable (Ben Pfaff)
[2016-12-23] Accepted openvswitch 2.6.2~pre+git20161223-1 (source i386 all) into unstable (Ben Pfaff)
[2016-11-24] Accepted openvswitch 2.6.1+git20161123-1 (source i386 all) into unstable, unstable (Ben Pfaff)
[2016-07-01] Accepted openvswitch 2.5.1~pre+git20160626-2 (source i386 all) into unstable (Ben Pfaff)
[2016-06-28] Accepted openvswitch 2.5.1~pre+git20160626-1 (source i386 all) into unstable, unstable (Ben Pfaff)
[2016-04-08] Accepted openvswitch 2.3.0+git20140819-3+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-03-31] openvswitch 2.3.0+git20140819-4 MIGRATED to testing (Debian testing watch)
[2016-03-29] Accepted openvswitch 2.3.0+git20140819-4 (source i386 all) into unstable (Ben Pfaff)
[2015-01-20] Accepted openvswitch 1.4.2+git20120612-9.1~deb7u1.1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Jonathan Dupart) (signed by: Thomas Goirand)
[2014-12-24] openvswitch 2.3.0+git20140819-3 MIGRATED to testing (Britney)
[2014-12-19] Accepted openvswitch 2.3.0+git20140819-3 (source i386 all) into unstable (Simon Horman)
[2014-10-10] openvswitch 2.3.0+git20140819-2 MIGRATED to testing (Britney)
[2014-08-20] Accepted openvswitch 2.3.0+git20140819-2 (source i386 all) into unstable (Ben Pfaff)
[2014-08-19] Accepted openvswitch 2.3.0+git20140819-1 (source i386 all) into unstable (Ben Pfaff)
[2014-06-24] openvswitch 2.1.0+git20140411-3 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 13
RC: 1
I&N: 10
M&W: 2
F&P: 0
patch: 0

links

homepage
lintian (7, 42)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.10.0-0ubuntu2
12 bugs (1 patch)
patches for 2.10.0-0ubuntu2