CVE-2020-27827 · cross-distro fix matrix

CVE-2020-27827: A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Affects 8 Linux releases across 16 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2020-27827 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

lldpd→ fixed in1.0.8-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y lldpd
```
openvswitch→ fixed in2.15.0~git20210104.def6eb1ea+dfsg1-4urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y openvswitch
```

Source: Debian Security Tracker

lldpd→ fixed in1.0.8-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y lldpd
```
openvswitch→ fixed in2.15.0~git20210104.def6eb1ea+dfsg1-4urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y openvswitch
```

Source: Debian Security Tracker

lldpd→ fixed in1.0.8-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y lldpd
```
openvswitch→ fixed in2.15.0~git20210104.def6eb1ea+dfsg1-4urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y openvswitch
```