File _patchinfo of Package patchinfo.32098
<patchinfo incident="32098">
<issue tracker="jsc" id="PED-6852"/>
<issue tracker="bnc" id="1212749">lldpad service crashes and is affecting Slingshot, the HPE high speed network internal to the system</issue>
<packager>tabraham1</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for open-lldp</summary>
<description>This update for open-lldp fixes the following issues:
- open-lldp was updated to version v1.1+77.75e83b6fb98e:
* Fixed issue with `lldpad.service` failing in login/sched nodes (bsc#1212749)
* Fixed various NULL pointer dereference issues
* dcbx: Fixed memory vulnerability (UAF)
* dcbx: Fixed leak when receiving legacy TLVs with mismatched mode
* lldp: Reject frames with duplicate TLVs
* dcbx: Free manifest in rchange callback
* dcbx: Avoid memory leak if ifup is called twice
* ctrl_iface: Fixed a memory leak in ctrl_iface_deinit
* lldp: Avoid sending uninitialized data
* Reverted "Use interface index instead of name in libconfig"
* agent: Reset frame status on message delete
* basman: Use return address when pulling address
* 8021Qaz: Check for rx block validity
* 8021qaz: Fixed squelch initialization errors
* macvtap: Fixed error condition
* vdp22: converted command parsing to null term
</description>
</patchinfo>