Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

openSUSE Leap 15.3 SUSE-SU-2023:4508-1 critical: openvswitch DoS

opensuse
Calendar Grey November 21, 2023
Dist Opensuse Esm H88
Important patch for openvswitch related to CVE-2023-5366, effectively mitigating security risks on openSUSE platforms.
This update for openvswitch fixes the following issues: CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002).

Description

This update for openvswitch fixes the following issues:

* CVE-2023-5366: Fixed missing masks on a final stage with ports trie

(bsc#1216002).

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.3

zypper in -t patch SUSE-2023-4508=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3

zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4508=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4508=1

* SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3

zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4508=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP3

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4508=1

* SUSE Enterprise Storage 7.1

zypper in -t patch SUSE-Storage-7.1-2023-4508=1

Package List

* openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)

* libopenvswitch-2_14-0-2.14.2-150300.19.11.1

* openvswitch-debugsource-2.14.2-150300.19.11.1

* libopenvswitch-2_14-0-debuginfo-2.14.2-150300.19.11.1

* openvswitch-test-debuginfo-2.14.2-150300.19.11.1

* openvswitch-debuginfo-2.14.2-150300.19.11.1

* ovn-20.06.2-150300.19.11.1

* openvswitch-vtep-debuginfo-2.14.2-150300.19.11.1

* ovn-host-20.06.2-150300.19.11.1

* python3-ovs-2.14.2-150300.19.11.1

* openvswitch-vtep-2.14.2-150300.19.11.1

* libovn-20_06-0-debuginfo-20.06.2-150300.19.11.1

* ovn-central-debuginfo-20.06.2-150300.19.11.1

* openvswitch-2.14.2-150300.19.11.1

* openvswitch-test-2.14.2-150300.19.11.1

* openvswitch-devel-2.14.2-150300.19.11.1

* ovn-host-debuginfo-20.06.2-150300.19.11.1

* ovn-central-20.06.2-150300.19.11.1

* libovn-20_06-0-20.06.2-150300.19.11.1

* openvswitch-pki-2.14.2-150300.19.11.1

* ovn-vtep-20.06.2-150300.19.11.1

* ovn-docker-20.06.2-150300.19.11.1

* openvswitch-ipsec-2.14.2-150300.19.11.1

* ovn-devel-20.06.2-150300.19.11.1

*...

Read the Full Advisory

References

* bsc#1216002

## References:

* https://www.suse.com/security/cve/CVE-2023-5366.html

* https://bugzilla.suse.com/show_bug.cgi?id=1216002

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:4508-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here