Ubuntu 23.10: USN-6692-1 High Risk: OVN Network Interruption

ubuntu

March 12, 2024

OVN could be made to disrupt traffic.

Summary

OVN could be made to disrupt traffic.

Software Description:

- ovn: system to support virtual network abstraction

Details:

It was discovered that OVN incorrectly enabled OVS Bidirectional Forwarding

Detection on logical ports. A remote attacker could possibly use this issue

to disrupt traffic.

Topics Covered

security advisory critical Ubuntu traffic disruption OVN

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   ovn-central                     23.09.0-1ubuntu0.1
   ovn-common                      23.09.0-1ubuntu0.1
   ovn-host                        23.09.0-1ubuntu0.1
   ovn-ic                          23.09.0-1ubuntu0.1

Ubuntu 22.04 LTS:
   ovn-central                     22.03.3-0ubuntu0.22.04.2
   ovn-common                      22.03.3-0ubuntu0.22.04.2
   ovn-host                        22.03.3-0ubuntu0.22.04.2
   ovn-ic                          22.03.3-0ubuntu0.22.04.2

Ubuntu 20.04 LTS:
   ovn-central                     20.03.2-0ubuntu0.20.04.5
   ovn-common                      20.03.2-0ubuntu0.20.04.5
   ovn-host                        20.03.2-0ubuntu0.20.04.5
   ovn-ic                          20.03.2-0ubuntu0.20.04.5

In general, a standard system update will make all the necessary changes.