Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1439-1

Опубликовано: 17 апр. 2026
Источник: suse-cvrf

Описание

Security update for openvswitch

This update for openvswitch fixes the following issue:

Security updates:

  • CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273).

Other updates:

  • Update openvswitch to 3.5.4

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7
python3-openvswitch-3.5.4-150700.41.15.1
SUSE Linux Enterprise Module for Server Applications 15 SP7
libopenvswitch-3_5-0-3.5.4-150700.41.15.1
libovn-25_03-0-25.03.2-150700.41.15.1
openvswitch-3.5.4-150700.41.15.1
openvswitch-devel-3.5.4-150700.41.15.1
openvswitch-ipsec-3.5.4-150700.41.15.1
openvswitch-pki-3.5.4-150700.41.15.1
openvswitch-test-3.5.4-150700.41.15.1
openvswitch-vtep-3.5.4-150700.41.15.1
ovn-25.03.2-150700.41.15.1
ovn-central-25.03.2-150700.41.15.1
ovn-devel-25.03.2-150700.41.15.1
ovn-docker-25.03.2-150700.41.15.1
ovn-host-25.03.2-150700.41.15.1
ovn-vtep-25.03.2-150700.41.15.1
python3-openvswitch-3.5.4-150700.41.15.1

Ссылки

Описание

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:python3-openvswitch-3.5.4-150700.41.15.1
SUSE Linux Enterprise Module for Server Applications 15 SP7:libopenvswitch-3_5-0-3.5.4-150700.41.15.1
SUSE Linux Enterprise Module for Server Applications 15 SP7:libovn-25_03-0-25.03.2-150700.41.15.1
SUSE Linux Enterprise Module for Server Applications 15 SP7:openvswitch-3.5.4-150700.41.15.1
Ссылки