Stay Secure with the Latest Linux Advisories

security advisorysoftware updatemoderate severity

Fedora 40: FEDORA-2024-1f26ce7731 Moderate: Open vSwitch SSL Fix

Update to 3.3.0 Remove network-scripts subpackage starting from Fedora 40 Backport a simple fix to avoid "SSL db: implementation" test to fail It also indirectly fix CVE-2023-3966 and CVE-2023-5366. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-1f26ce7731 2024-03-23 00:20:56.399634 -------------------------------------------------------------------------------- Name : openvswitch Product : Fedora 40 Version : 3.3.0 Release : 1.fc40 URL : https://www.openvswitch.org/ Summary : Open vSwitch daemon/database/utilities Description : Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. -------------------------------------------------------------------------------- Update Information: Update to 3.3.0 Remove network-scripts subpackage starting from Fedora 40 Backport a simple fix to avoid "SSL db: implementation" test to fail It also indirectly fix CVE-2023-3966 and CVE-2023-5366 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 21 2024 Timothy Redaelli - 3.3.0-1 - Update to 3.3.0 (#2245052) - Remove network-scripts subpackage starting from Fedora 40 (#2263335) - Backport a simple fix to avoid "SSL db: implementation" test to fail * Thu Jan 25 2024 Fedora Release Engineering - 3.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 3.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2240831 - openvswitch: openvswitch don't match packets on nd_target field [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2240831 [ 2 ] Bug #2245052 - openvswitch-3.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2245052 [ 3 ] Bug #2263335 - F40FailsToInstall: network-scripts-openvswitch https://bugzilla.redhat.com/show_bug.cgi?id=2263335 [ 4 ] Bug #2264263 - CVE-2023-3966 openvswitch: openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2264263 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-1f26ce7731' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 40's Open vSwitch 3.3.0 offers significant updates and improvements aimed at boosting performance and reliability.. Open vSwitch Update, Fedora 40 Security, Network Scripts Removal, SSL DB Fix, Open vSwitch Enhancements. . LinuxSecurity.com Team

Mar 23, 2024 Fedora