Debian/python-os-vif: critical 9.1
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both
Action: Upgrade python-os-vif to 1.15.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.2-1 | - |
Fixed versions
| 1.15.2-1 |
Sources
- osv: DEBIAN-CVE-2019-15753#Debian:14/python-os-vif
- https://security-tracker.debian.org/tracker/CVE-2019-15753
published · modified · JSON