SUSE-SU-2024:0937-1

Опубликовано: 19 мар. 2024

Источник: suse-cvrf

Описание

Security update for openvswitch

This update for openvswitch fixes the following issues:

CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload (bsc#1219465).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

SUSE Linux Enterprise Module for Legacy 15 SP5

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

python3-ovs-2.14.2-150400.24.23.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

SUSE Manager Proxy 4.3

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

SUSE Manager Server 4.3

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

openSUSE Leap 15.5

libopenvswitch-2_14-0-2.14.2-150400.24.23.1

libovn-20_06-0-20.06.2-150400.24.23.1

openvswitch-2.14.2-150400.24.23.1

openvswitch-devel-2.14.2-150400.24.23.1

openvswitch-doc-2.14.2-150400.24.23.1

openvswitch-ipsec-2.14.2-150400.24.23.1

openvswitch-pki-2.14.2-150400.24.23.1

openvswitch-test-2.14.2-150400.24.23.1

openvswitch-vtep-2.14.2-150400.24.23.1

ovn-20.06.2-150400.24.23.1

ovn-central-20.06.2-150400.24.23.1

ovn-devel-20.06.2-150400.24.23.1

ovn-doc-20.06.2-150400.24.23.1

ovn-docker-20.06.2-150400.24.23.1

ovn-host-20.06.2-150400.24.23.1

ovn-vtep-20.06.2-150400.24.23.1

python3-ovs-2.14.2-150400.24.23.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240937-1/
Link for SUSE-SU-2024:0937-1
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018200.html
E-Mail link for SUSE-SU-2024:0937-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1219465
SUSE Bug 1219465
https://www.suse.com/security/cve/CVE-2023-3966/
SUSE CVE CVE-2023-3966 page

Описание

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libopenvswitch-2_14-0-2.14.2-150400.24.23.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libovn-20_06-0-20.06.2-150400.24.23.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvswitch-2.14.2-150400.24.23.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvswitch-devel-2.14.2-150400.24.23.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-3966.html
CVE-2023-3966
https://bugzilla.suse.com/1219465
SUSE Bug 1219465

SUSE-SU-2024:0937-1

Описание

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Legacy 15 SP5

SUSE Linux Enterprise Module for Package Hub 15 SP5

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-3966

Описание

Затронутые продукты

Ссылки