openvswitch (2.5.9-0ubuntu0.16.04.3) xenial-security; urgency=medium

  * SECURITY UPDATE: packet parsing vulnerability
    - debian/patches/CVE-2020-35498.patch: support extra padding length in
      lib/dp-packet.h, lib/flow.c, tests/classifier.at.
    - CVE-2020-35498

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 28 Jan 2021 14:49:45 -0500

openvswitch (2.5.9-0ubuntu0.16.04.2) xenial-security; urgency=medium

  * SECURITY UPDATE: buffer overflow decoding malformed packets in lldp
    - debian/patches/CVE-2015-8011.patch: check lengths in lib/lldp/lldp.c.
    - CVE-2015-8011
  * SECURITY UPDATE: Externally triggered memory leak in lldp
    - debian/patches/CVE-2020-27827.patch: properly free memory in
      lib/lldp/lldp.c.
    - CVE-2020-27827

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 08 Jan 2021 07:30:54 -0500

openvswitch (2.5.9-0ubuntu0.16.04.1) xenial; urgency=medium

  * Bump nofiles to 1048576 for ovs daemons when running under
    upstart (LP: #1737866).
  * d/watch: Misc tweaks for upstream layout changes.
  * New upstream release (LP: #1888198).

 -- James Page <james.page@ubuntu.com>  Mon, 20 Jul 2020 15:36:21 +0100

openvswitch (2.5.5-0ubuntu0.16.04.1) xenial; urgency=medium

  * Bump nofiles to 1048576 for ovs daemons (LP: #1737866).
  * d/watch: Update for upstream website changes.
  * New upstream point release (LP: #1788103).
  * d/p/CVE-2017-9214.patch: Dropped, included upstream.

 -- James Page <james.page@ubuntu.com>  Wed, 22 Aug 2018 09:36:55 +0100

openvswitch (2.5.4-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream point release (LP: #1726927):
    - d/p/CVE-2017-9265.patch: Drop, included upstream.

 -- James Page <james.page@ubuntu.com>  Mon, 30 Oct 2017 10:38:01 +0000

openvswitch (2.5.2-0ubuntu0.16.04.3) xenial; urgency=medium

  * d/openvswitch-switch.postinst: Do not modify
    /etc/default/openvswitch-switch as this file is now managed
    as a configuration file by dpkg (LP: #1723480).

 -- Frode Nordahl <frode.nordahl@gmail.com>  Tue, 17 Oct 2017 16:38:57 +0000

openvswitch (2.5.2-0ubuntu0.16.04.2) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS while parsing OFPT_QUEUE_GET_CONFIG_REPLY message
    - debian/patches/CVE-2017-9214.patch: properly check length in
      lib/ofp-util.c.
    - CVE-2017-9214
  * SECURITY UPDATE: DoS while parsing OpenFlow role status message
    - debian/patches/CVE-2017-9263.patch: don't abort on unknown reason in
      lib/ofp-print.c.
    - CVE-2017-9263
  * SECURITY UPDATE: DoS while parsing group mod OpenFlow message
    - debian/patches/CVE-2017-9265.patch: check length in lib/ofp-util.c.
    - CVE-2017-9265

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 24 Aug 2017 14:15:05 -0400

openvswitch (2.5.2-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream point release (LP: #1673063).

 -- James Page <james.page@ubuntu.com>  Wed, 15 Mar 2017 13:55:24 +0000

openvswitch (2.5.0-0ubuntu1) xenial; urgency=medium

  * New upstream release.

 -- James Page <james.page@ubuntu.com>  Thu, 10 Mar 2016 14:09:14 +0000

openvswitch (2.5.0~git20160219.522aca6-0ubuntu3) xenial; urgency=medium

  * d/rules,control,openvswitch-switch-dpdk.*: Install DPDK enabled binaries
    into a new package (replacing the one from src:openvswitch-dpdk) rather
    than shipping alongside the vanilla binaries (LP: #1550254).
  * d/openvswitch-switch.*: Tidy up alternatives related to ovs-vswitchd-dpdk
    in 2.5.0~git20160219.522aca6-0ubuntu2.
  * d/tests/*: Refactor, exercise vanilla and dpdk enabled binaries where
    possible.

 -- James Page <james.page@ubuntu.com>  Fri, 26 Feb 2016 12:39:27 +0000

# For older changelog entries, run 'apt-get changelog openvswitch-test'
