[ovs-dev] Bug#863655: openvswitch: CVE-2017-9263

2017-05-29 Thread Salvatore Bonaccorso
HI Ben, On Mon, May 29, 2017 at 01:35:58PM -0700, Ben Pfaff wrote: > notfound 863655 2.3.0+git20140819-1 > found 863655 2.6.2~pre+git20161223-3 > severity 863655 normal > thanks > > On Mon, May 29, 2017 at 09:44:13PM +0200, Salvatore Bonaccorso wrote: > > Source: openvswitch > > Version: 2.3.0+gi

[ovs-dev] Bug#863661: openvswitch: CVE-2017-9264

2017-05-29 Thread Salvatore Bonaccorso
Hi On Mon, May 29, 2017 at 04:35:30PM -0700, Ben Pfaff wrote: > severity 863661 normal > thanks > > On Mon, May 29, 2017 at 10:14:49PM +0200, Salvatore Bonaccorso wrote: > > Source: openvswitch > > Version: 2.6.2~pre+git20161223-3 > > Severity: important > > Tags: patch upstream security > > > >

[ovs-dev] Processed: Re: Bug#863661: openvswitch: CVE-2017-9264

2017-05-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 863661 normal Bug #863661 [src:openvswitch] openvswitch: CVE-2017-9264 Severity set to 'normal' from 'important' > thanks Stopping processing here. Please contact me if you need assistance. -- 863661: http://bugs.debian.org/cgi-bin/bugr

[ovs-dev] Bug#863661: openvswitch: CVE-2017-9264

2017-05-29 Thread Ben Pfaff
severity 863661 normal thanks On Mon, May 29, 2017 at 10:14:49PM +0200, Salvatore Bonaccorso wrote: > Source: openvswitch > Version: 2.6.2~pre+git20161223-3 > Severity: important > Tags: patch upstream security > > Hi, > > the following vulnerability was published for openvswitch. > > CVE-2017-

[ovs-dev] Processed: Re: Bug#863655: openvswitch: CVE-2017-9263

2017-05-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > notfound 863655 2.3.0+git20140819-1 Bug #863655 [src:openvswitch] openvswitch: CVE-2017-9263 No longer marked as found in versions openvswitch/2.3.0+git20140819-1. > found 863655 2.6.2~pre+git20161223-3 Bug #863655 [src:openvswitch] openvswitch: C

[ovs-dev] Bug#863655: openvswitch: CVE-2017-9263

2017-05-29 Thread Ben Pfaff
notfound 863655 2.3.0+git20140819-1 found 863655 2.6.2~pre+git20161223-3 severity 863655 normal thanks On Mon, May 29, 2017 at 09:44:13PM +0200, Salvatore Bonaccorso wrote: > Source: openvswitch > Version: 2.3.0+git20140819-1 > Severity: important > Tags: security upstream patch > > Hi, > > the

[ovs-dev] Bug#863662: openvswitch: CVE-2017-9265

2017-05-29 Thread Salvatore Bonaccorso
Source: openvswitch Version: 2.6.2~pre+git20161223-3 Severity: normal Tags: upstream patch security Hi, the following vulnerability was published for openvswitch. CVE-2017-9265[0]: | In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing | the group mod OpenFlow message sent fro

[ovs-dev] Bug#863661: openvswitch: CVE-2017-9264

2017-05-29 Thread Salvatore Bonaccorso
Source: openvswitch Version: 2.6.2~pre+git20161223-3 Severity: important Tags: patch upstream security Hi, the following vulnerability was published for openvswitch. CVE-2017-9264[0]: | In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) | 2.6.1, there is a buffer over-read w

[ovs-dev] OFFIZIELLEGEWINNE

2017-05-29 Thread INTERNACIONALE LOTTO COMMISSION
Die oben genannten ANHANG Anforderungen sind erforderlich. Gluckwunsche noch einmal.Herzlichs Mit freundlichen Grussen PEDRO SANCHEZ PABLO HEAD, ONLINE LOTTERY DEPARTMENT EURO MILLION PROMOTION Alle Warenzeichen und eingetragenen Warenzeichen sind Eigentum der jeweilige Inhaber. Copyright © 20

[ovs-dev] Bug#863655: openvswitch: CVE-2017-9263

2017-05-29 Thread Salvatore Bonaccorso
Source: openvswitch Version: 2.3.0+git20140819-1 Severity: important Tags: security upstream patch Hi, the following vulnerability was published for openvswitch. CVE-2017-9263[0]: | In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status | message, there is a call to the abort() funct

[ovs-dev] [PATCH 3/3] netdev-linux: maintain original device's state

2017-05-29 Thread Flavio Leitner
It is important to maintain the original state when the device already exists in the system. Signed-off-by: Flavio Leitner --- lib/netdev-linux.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/netdev-linux.c b/lib/netdev-linux.c index d181e4f..efcb7ac 100644 --- a/lib/netdev-linux.c +++

[ovs-dev] [PATCH 2/3] netdev-linux: make tap devices persistent.

2017-05-29 Thread Flavio Leitner
When using data path type "netdev", bridge port is a tun device and when OVS restarts, that device and its network configuration is lost. This patch enables the tap device to persist instead. Signed-off-by: Flavio Leitner --- lib/netdev-linux.c | 8 1 file changed, 8 insertions(+) dif

[ovs-dev] [PATCH 1/3] ovs-router: fix refcnt leak when program terminates.

2017-05-29 Thread Flavio Leitner
Install a handler to flush routes and release devices when the program is terminating. Signed-off-by: Flavio Leitner --- lib/ovs-router.c | 34 ++ 1 file changed, 26 insertions(+), 8 deletions(-) diff --git a/lib/ovs-router.c b/lib/ovs-router.c index 96871d1..dd2

[ovs-dev] [PATCH 0/3] Allow restart to keep network configuration

2017-05-29 Thread Flavio Leitner
This patchset changes OVS to allow restarts to preserve bridge's network configuration when using netdev datapath. Flavio Leitner (3): ovs-router: fix refcnt leak when program terminates. netdev-linux: make tap devices persistent. netdev-linux: maintain original device's state lib/netdev-

[ovs-dev] [PATCH] debian.rst: Clarify that "dpkg" needs manual help with dependencies.

2017-05-29 Thread Ben Pfaff
Reported-by: Mircea Ulinic Signed-off-by: Ben Pfaff --- AUTHORS.rst| 1 + Documentation/intro/install/debian.rst | 14 +- 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/AUTHORS.rst b/AUTHORS.rst index a8bf1ee0c6af..6c02711780d4 100644 ---

[ovs-dev] Sage Users List

2017-05-29 Thread diana . johnson
Hi, Would you be interested Sage Users contact information for your marketing campaigns? We also have other technology users like: Oracle users, PeopleSoft users, JD Edwards’s users, Informatica users, Infor users, Microsoft Dynamics users, Epicor and many more... Below are the few titles

Re: [ovs-dev] [PATCH RFC 4/4] dpif-netdev: Don't uninit emc on reload.

2017-05-29 Thread Ferriter, Cian
> -Original Message- > From: ovs-dev-boun...@openvswitch.org [mailto:ovs-dev- > boun...@openvswitch.org] On Behalf Of Daniele Di Proietto > Sent: 10 March 2017 04:35 > To: Ilya Maximets > Cc: d...@openvswitch.org; Heetae Ahn > Subject: Re: [ovs-dev] [PATCH RFC 4/4] dpif-netdev: Don't unin

Re: [ovs-dev] [PATCH 2/4] dpif-netdev: Incremental addition/deletion of PMD threads.

2017-05-29 Thread Ferriter, Cian
> -Original Message- > From: ovs-dev-boun...@openvswitch.org [mailto:ovs-dev- > boun...@openvswitch.org] On Behalf Of Daniele Di Proietto > Sent: 10 March 2017 04:13 > To: Ilya Maximets > Cc: d...@openvswitch.org; Heetae Ahn > Subject: Re: [ovs-dev] [PATCH 2/4] dpif-netdev: Incremental >

[ovs-dev] [PATCH] rhel: install firewalld ovn files with chmod 644 instead of 755

2017-05-29 Thread Timothy Redaelli
Signed-off-by: Timothy Redaelli --- rhel/openvswitch-fedora.spec.in | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rhel/openvswitch-fedora.spec.in b/rhel/openvswitch-fedora.spec.in index 3200040..9fc5f27 100644 --- a/rhel/openvswitch-fedora.spec.in +++ b/rhel/openvswitch-

Re: [ovs-dev] [PATCH 3/4] dpif-netdev: Avoid port's reconfiguration on pmd-cpu-mask changes.

2017-05-29 Thread Ilya Maximets
On 29.05.2017 18:00, Kevin Traynor wrote: > On 05/29/2017 02:31 PM, Ilya Maximets wrote: >> On 29.05.2017 16:26, Kevin Traynor wrote: >>> On 05/29/2017 01:22 PM, Ilya Maximets wrote: On 26.05.2017 20:14, Kevin Traynor wrote: > On 05/26/2017 03:55 PM, Ilya Maximets wrote: >> On 10.03.20

Re: [ovs-dev] [PATCH RFC v2] Conntrack: Avoid recirculation for established connections.

2017-05-29 Thread Fischetti, Antonio
Thanks Joe for your feedback and the interesting insights in conntrack in your earlier communication. We have added all the details that we considered for this first implementation. Also, some answers are inline. The purpose of this implementation is to avoid recirculation just for those packe

Re: [ovs-dev] [PATCH 1/2] docs: Clarify the superiority of dpdkvhostuserclient

2017-05-29 Thread Kevin Traynor
On 05/26/2017 03:12 PM, Stephen Finucane wrote: > Apparently dpdkvhostuser interfaces are inferior to dpdkvhostuserclient. > Explain why. > > Signed-off-by: Stephen Finucane > Cc: Ciara Loftus > Cc: Kevin Traynor > --- > I'd like to note what happens to traffic when OVS or a VM is restarted > f

Re: [ovs-dev] [PATCH 2/2] docs: Document dpdkr ports

2017-05-29 Thread Kevin Traynor
On 05/26/2017 03:12 PM, Stephen Finucane wrote: > I has an idea what these were but that idea was somewhat incorrect and > out-of-date. Add a minimal guide to fill in these gaps, along with a > warning about how useless these things generally are now (yay, > vhost-user). > > Signed-off-by: Stephen

Re: [ovs-dev] [PATCH RFC] Conntrack: Avoid recirculation for established connections.

2017-05-29 Thread Fischetti, Antonio
Thanks Joe for your feedback. I'm continuing this discussion on the v2 thread http://patchwork.ozlabs.org/patch/767007/ because this patch didn't show up on patchwork, due to my wrong git setting. Antonio > -Original Message- > From: Joe Stringer [mailto:j...@ovn.org] > Sent: Thursday, M

Re: [ovs-dev] [PATCH 3/4] dpif-netdev: Avoid port's reconfiguration on pmd-cpu-mask changes.

2017-05-29 Thread Kevin Traynor
On 05/29/2017 02:31 PM, Ilya Maximets wrote: > On 29.05.2017 16:26, Kevin Traynor wrote: >> On 05/29/2017 01:22 PM, Ilya Maximets wrote: >>> On 26.05.2017 20:14, Kevin Traynor wrote: On 05/26/2017 03:55 PM, Ilya Maximets wrote: > On 10.03.2017 07:27, Daniele Di Proietto wrote: >> 2017-

Re: [ovs-dev] [PATCH 3/4] dpif-netdev: Avoid port's reconfiguration on pmd-cpu-mask changes.

2017-05-29 Thread Ilya Maximets
On 29.05.2017 16:26, Kevin Traynor wrote: > On 05/29/2017 01:22 PM, Ilya Maximets wrote: >> On 26.05.2017 20:14, Kevin Traynor wrote: >>> On 05/26/2017 03:55 PM, Ilya Maximets wrote: On 10.03.2017 07:27, Daniele Di Proietto wrote: > 2017-02-21 6:49 GMT-08:00 Ilya Maximets : >> Reconfig

Re: [ovs-dev] [PATCH 3/4] dpif-netdev: Avoid port's reconfiguration on pmd-cpu-mask changes.

2017-05-29 Thread Kevin Traynor
On 05/29/2017 01:22 PM, Ilya Maximets wrote: > On 26.05.2017 20:14, Kevin Traynor wrote: >> On 05/26/2017 03:55 PM, Ilya Maximets wrote: >>> On 10.03.2017 07:27, Daniele Di Proietto wrote: 2017-02-21 6:49 GMT-08:00 Ilya Maximets : > Reconfiguration of HW NICs may lead to packet drops.

Re: [ovs-dev] [PATCH v2 1/3] netdev-dpdk: Fix Rx checksum reconfigure.

2017-05-29 Thread Kevin Traynor
On 05/26/2017 03:04 PM, Chandran, Sugesh wrote: > > > Regards > _Sugesh > > >> -Original Message- >> From: Chandran, Sugesh >> Sent: Wednesday, May 17, 2017 10:50 AM >> To: Kevin Traynor >> Cc: d...@openvswitch.org >> Subject: RE: [PATCH v2 1/3] netdev-dpdk: Fix Rx checksum reconfigure

Re: [ovs-dev] [PATCH 3/4] dpif-netdev: Avoid port's reconfiguration on pmd-cpu-mask changes.

2017-05-29 Thread Ilya Maximets
On 26.05.2017 20:14, Kevin Traynor wrote: > On 05/26/2017 03:55 PM, Ilya Maximets wrote: >> On 10.03.2017 07:27, Daniele Di Proietto wrote: >>> 2017-02-21 6:49 GMT-08:00 Ilya Maximets : Reconfiguration of HW NICs may lead to packet drops. In current model all physical ports will be reconf

Re: [ovs-dev] [PATCH] ovn-ctl: Add commands to manage OVN DB ovsdb-servers individually

2017-05-29 Thread Miguel Angel Ajo Pelayo
Acked-By: Miguel Angel Ajo On Fri, May 26, 2017 at 7:36 PM, Andy Zhou wrote: > On Fri, May 26, 2017 at 4:48 AM, Numan Siddique > wrote: > > > > > > On Fri, May 26, 2017 at 3:30 AM, Andy Zhou wrote: > >> > >> On Thu, May 25, 2017 at 1:55 AM, wrote: > >> > From: Numan Siddique > >> > > >> >

Re: [ovs-dev] [PATCH] ovn-northd: Fix uninitialized reference in build_static_route_flow().

2017-05-29 Thread Miguel Angel Ajo Pelayo
Acked-by: Miguel Angel Ajo On Sat, May 27, 2017 at 12:57 AM, Ben Pfaff wrote: > It was apparently possible for lrp_addr_s to be uninitialized in a logical > router with no ports. > > Found by Coverity. > > Reported-at: https://scan3.coverity.com/reports.htm#v16889/p10449/ > fileInstanceId=14763

Re: [ovs-dev] [PATCH] ovn-controller: Fix memory leak in create_br_int().

2017-05-29 Thread Miguel Angel Ajo Pelayo
Acked-By: Miguel Angel Ajo On Sat, May 27, 2017 at 1:17 AM, Ben Pfaff wrote: > Found by Coverity. > > Reported-at: https://scan3.coverity.com/reports.htm#v16889/p10449/ > fileInstanceId=14763066&defectInstanceId=4305324&mergedDefectId=180404& > fileStart=251&fileEnd=500 > Signed-off-by: Ben Pfa

Re: [ovs-dev] [PATCH] ovn-nbctl, ovn-sbctl, ovs-vsctl: Remove gratuitous NULL checks.

2017-05-29 Thread Miguel Angel Ajo Pelayo
Acked-by: Miguel Angel Ajo On Sat, May 27, 2017 at 5:44 AM, Ben Pfaff wrote: > These functions all set txn and do not un-set it within their main > command execution function, so it's gratuitous to check it along this path. > > Found by Coverity. > > Reported-at: https://scan3.coverity.com/repo

Re: [ovs-dev] [PATCH] rhel-systemd: start vswitchd after udev

2017-05-29 Thread Karthik Sundaravel
Hi Tested-by: ksund...@redhat.com I've tested the patch. Please see https://bugzilla.redhat. com/show_bug.cgi?id=1397299#c17. Regards Karthik S On Fri, May 19, 2017 at 3:21 AM, Ben Pfaff wrote: > On Thu, May 18, 2017 at 05:11:03PM -0400, Aaron Conole wrote: > > Ben Pfaff writes: > > > > > On

Re: [ovs-dev] [PATCH] ovn: Fix encoding of large logical output ports for STT.

2017-05-29 Thread Miguel Angel Ajo Pelayo
Acked-By: Miguel Angel Ajo $ cat test.c #include #include void main(void) { printf("uint16_t<<24=%Lx\n", ((uint16_t)0xf123)<<24); printf("uint64_t<<24=%Lx\n", ((uint64_t)0xf123)<<24); } linux: vagrant@gw1 in ~/ovs on $ ./test uint16_t<<24=2300 uint64_t<<24=f12300 I tested it

Re: [ovs-dev] [PATCH] ovn-northd: Avoid null deref for missing outport in build_static_route_flow().

2017-05-29 Thread Miguel Angel Ajo Pelayo
Acked-By: Miguel Angel Ajo On Sat, May 27, 2017 at 7:39 AM, Ben Pfaff wrote: > Found by Coverity. > > Reported-at: https://scan3.coverity.com/reports.htm#v16889/p10449/ > fileInstanceId=14763080&defectInstanceId=4305186&mergedDefectId=179788 > Signed-off-by: Ben Pfaff > --- > ovn/northd/ovn-n

Re: [ovs-dev] [PATCH] ovsdb: Check null before deref in ovsdb_monitor_table_condition_update().

2017-05-29 Thread Liran Schour
Thanks, - Liran ovs-dev-boun...@openvswitch.org wrote on 27/05/2017 06:51:15 AM: > From: Ben Pfaff > To: d...@openvswitch.org > Cc: Ben Pfaff > Date: 27/05/2017 06:51 AM > Subject: [ovs-dev] [PATCH] ovsdb: Check null before deref in > ovsdb_monitor_table_condition_update(). > Sent by: ovs-dev

Re: [ovs-dev] [PATCH V9 13/31] netdev-tc-offloads: Implement netdev flow dump api using tc interface

2017-05-29 Thread Roi Dayan
On 28/05/2017 14:59, Roi Dayan wrote: From: Paul Blakey Signed-off-by: Paul Blakey Reviewed-by: Roi Dayan Reviewed-by: Simon Horman --- lib/netdev-tc-offloads.c | 184 --- 1 file changed, 175 insertions(+), 9 deletions(-) diff --git a/lib/netde