Explore top 10 tips to secure your open-source projects now. Read More
×An update that solves three vulnerabilities can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:22152-1 Release Date: 2026-06-17T08:37:36Z Rating: important References: * bsc#1261273 * bsc#1262498 * bsc#1262499 Cross-References: * CVE-2026-34956 * CVE-2026-5265 * CVE-2026-5367 CVSS scores: * CVE-2026-34956 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34956 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-5265 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5265 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-5367 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5367 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for openvswitch fixes the following issues * CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). * CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). * CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273). Changes for openvswitch: * Update ovn to 25.03.3 * Bug fixes * Add support for special port_security prefix "VRRPv3". This prefix allows CMS to allow all required traffic for a VRRPv3 virtual router behind LSP. See ovn-nb(5) man page for more details. * Fixed support for fragmented traffic in the userspace datapath. Added the "acl_ct_translation" NB_Global option to enable connection tracking based L4 field translation for stateful ACLs. When enabled allows proper handling of IP fragmentation in userspace datapaths. This option may break hardware offloadingand is disabled by default. * Added disable_garp_rarp option to logical_router table in order to disable GARP/RARP announcements by all the peer ports of this logical router. * Update openvswitch to 3.5.4 * Full changelog https://www.openvswitch.org/releases/NEWS-3.5.4.txt * OVS validated with DPDK 24.11.4. * Fixed buffer overflow during conntrack processing of alg=ftp in userspace datapath (CVE-2026-34956) (bsc#1261273). * Update openvswitch to 3.5.3 * Full changelog https://www.openvswitch.org/releases/NEWS-3.5.3.txt * Bug fixes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-937=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-937=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * ovn-25.03.3-160000.4.1 * ovn-debuginfo-25.03.3-160000.4.1 * openvswitch-pki-3.5.4-160000.4.1 * ovn-host-debuginfo-25.03.3-160000.4.1 * openvswitch-debugsource-3.5.4-160000.4.1 * openvswitch-devel-3.5.4-160000.4.1 * libovn-25_03-0-debuginfo-25.03.3-160000.4.1 * openvswitch-vtep-3.5.4-160000.4.1 * python3-openvswitch-3.5.4-160000.4.1 * python3-openvswitch-debuginfo-3.5.4-160000.4.1 * openvswitch-vtep-debuginfo-3.5.4-160000.4.1 * libopenvswitch-3_5-0-debuginfo-3.5.4-160000.4.1 * openvswitch-ipsec-3.5.4-160000.4.1 * ovn-vtep-25.03.3-160000.4.1 * ovn-vtep-debuginfo-25.03.3-160000.4.1 * openvswitch-3.5.4-160000.4.1 * ovn-devel-25.03.3-160000.4.1 * ovn-docker-25.03.3-160000.4.1 * ovn-central-debuginfo-25.03.3-160000.4.1 * libopenvswitch-3_5-0-3.5.4-160000.4.1 * libovn-25_03-0-25.03.3-160000.4.1 * ovn-host-25.03.3-160000.4.1 * openvswitch-debuginfo-3.5.4-160000.4.1 *ovn-central-25.03.3-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * ovn-doc-25.03.3-160000.4.1 * openvswitch-doc-3.5.4-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * ovn-25.03.3-160000.4.1 * ovn-debuginfo-25.03.3-160000.4.1 * openvswitch-pki-3.5.4-160000.4.1 * ovn-host-debuginfo-25.03.3-160000.4.1 * openvswitch-debugsource-3.5.4-160000.4.1 * openvswitch-devel-3.5.4-160000.4.1 * libovn-25_03-0-debuginfo-25.03.3-160000.4.1 * openvswitch-vtep-3.5.4-160000.4.1 * python3-openvswitch-3.5.4-160000.4.1 * python3-openvswitch-debuginfo-3.5.4-160000.4.1 * openvswitch-vtep-debuginfo-3.5.4-160000.4.1 * libopenvswitch-3_5-0-debuginfo-3.5.4-160000.4.1 * openvswitch-ipsec-3.5.4-160000.4.1 * ovn-vtep-25.03.3-160000.4.1 * ovn-vtep-debuginfo-25.03.3-160000.4.1 * openvswitch-3.5.4-160000.4.1 * ovn-devel-25.03.3-160000.4.1 * ovn-docker-25.03.3-160000.4.1 * ovn-central-debuginfo-25.03.3-160000.4.1 * libopenvswitch-3_5-0-3.5.4-160000.4.1 * libovn-25_03-0-25.03.3-160000.4.1 * ovn-host-25.03.3-160000.4.1 * openvswitch-debuginfo-3.5.4-160000.4.1 * ovn-central-25.03.3-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * ovn-doc-25.03.3-160000.4.1 * openvswitch-doc-3.5.4-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34956.html * https://www.suse.com/security/cve/CVE-2026-5265.html * https://www.suse.com/security/cve/CVE-2026-5367.html * https://bugzilla.suse.com/show_bug.cgi?id=1261273 * https://bugzilla.suse.com/show_bug.cgi?id=1262498 * https://bugzilla.suse.com/show_bug.cgi?id=1262499 . Update for SUSE addresses three issues in Open vSwitch, including buffer overflows and memory access problems. Take action.. SUSE Linux, openvswitch update, security updates, patch instructions, buffer overflow fix. . Severity: Important. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:2475-1 Release Date: 2026-06-22T08:23:52Z Rating: important References: * bsc#1262498 * bsc#1262499 Cross-References: * CVE-2026-5265 * CVE-2026-5367 CVSS scores: * CVE-2026-5265 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5265 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-5367 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5367 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for openvswitch fixes the following issues * CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). * CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2475=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2475=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2475=1 ## Package List: * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libopenvswitch-3_1-0-3.1.7-150600.33.15.1 * libopenvswitch-3_1-0-debuginfo-3.1.7-150600.33.15.1 * ovn-docker-23.03.3-150600.33.15.1 * ovn-central-debuginfo-23.03.3-150600.33.15.1 * ovn-vtep-debuginfo-23.03.3-150600.33.15.1 * ovn-devel-23.03.3-150600.33.15.1 * python3-ovs-3.1.7-150600.33.15.1 * ovn-debuginfo-23.03.3-150600.33.15.1 * openvswitch-devel-3.1.7-150600.33.15.1 * ovn-host-debuginfo-23.03.3-150600.33.15.1 * openvswitch-3.1.7-150600.33.15.1 * ovn-vtep-23.03.3-150600.33.15.1 * openvswitch-ipsec-3.1.7-150600.33.15.1 * openvswitch-vtep-debuginfo-3.1.7-150600.33.15.1 * openvswitch-debugsource-3.1.7-150600.33.15.1 * openvswitch-test-debuginfo-3.1.7-150600.33.15.1 * libovn-23_03-0-23.03.3-150600.33.15.1 * openvswitch-vtep-3.1.7-150600.33.15.1 * ovn-host-23.03.3-150600.33.15.1 * ovn-central-23.03.3-150600.33.15.1 * ovn-23.03.3-150600.33.15.1 * libovn-23_03-0-debuginfo-23.03.3-150600.33.15.1 * openvswitch-debuginfo-3.1.7-150600.33.15.1 * openvswitch-test-3.1.7-150600.33.15.1 * openvswitch-pki-3.1.7-150600.33.15.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libopenvswitch-3_1-0-3.1.7-150600.33.15.1 * libopenvswitch-3_1-0-debuginfo-3.1.7-150600.33.15.1 * ovn-docker-23.03.3-150600.33.15.1 * ovn-central-debuginfo-23.03.3-150600.33.15.1 * ovn-vtep-debuginfo-23.03.3-150600.33.15.1 * ovn-devel-23.03.3-150600.33.15.1 * python3-ovs-3.1.7-150600.33.15.1 * ovn-debuginfo-23.03.3-150600.33.15.1 * openvswitch-devel-3.1.7-150600.33.15.1 * ovn-host-debuginfo-23.03.3-150600.33.15.1 * openvswitch-3.1.7-150600.33.15.1 * ovn-vtep-23.03.3-150600.33.15.1 * openvswitch-ipsec-3.1.7-150600.33.15.1 * openvswitch-vtep-debuginfo-3.1.7-150600.33.15.1 * libovn-23_03-0-23.03.3-150600.33.15.1 * openvswitch-debugsource-3.1.7-150600.33.15.1 * openvswitch-test-debuginfo-3.1.7-150600.33.15.1 * openvswitch-vtep-3.1.7-150600.33.15.1 * ovn-host-23.03.3-150600.33.15.1 * ovn-central-23.03.3-150600.33.15.1 * libovn-23_03-0-debuginfo-23.03.3-150600.33.15.1 * openvswitch-debuginfo-3.1.7-150600.33.15.1 * ovn-23.03.3-150600.33.15.1 * openvswitch-test-3.1.7-150600.33.15.1 * openvswitch-pki-3.1.7-150600.33.15.1 * openSUSELeap 15.6 (noarch) * openvswitch-doc-3.1.7-150600.33.15.1 * ovn-doc-23.03.3-150600.33.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libopenvswitch-3_1-0-3.1.7-150600.33.15.1 * libopenvswitch-3_1-0-debuginfo-3.1.7-150600.33.15.1 * ovn-docker-23.03.3-150600.33.15.1 * ovn-central-debuginfo-23.03.3-150600.33.15.1 * ovn-vtep-debuginfo-23.03.3-150600.33.15.1 * ovn-devel-23.03.3-150600.33.15.1 * python3-ovs-3.1.7-150600.33.15.1 * ovn-debuginfo-23.03.3-150600.33.15.1 * openvswitch-devel-3.1.7-150600.33.15.1 * ovn-host-debuginfo-23.03.3-150600.33.15.1 * openvswitch-3.1.7-150600.33.15.1 * ovn-vtep-23.03.3-150600.33.15.1 * openvswitch-ipsec-3.1.7-150600.33.15.1 * openvswitch-vtep-debuginfo-3.1.7-150600.33.15.1 * libovn-23_03-0-23.03.3-150600.33.15.1 * openvswitch-test-debuginfo-3.1.7-150600.33.15.1 * openvswitch-debugsource-3.1.7-150600.33.15.1 * openvswitch-vtep-3.1.7-150600.33.15.1 * ovn-host-23.03.3-150600.33.15.1 * ovn-central-23.03.3-150600.33.15.1 * ovn-23.03.3-150600.33.15.1 * openvswitch-debuginfo-3.1.7-150600.33.15.1 * libovn-23_03-0-debuginfo-23.03.3-150600.33.15.1 * openvswitch-test-3.1.7-150600.33.15.1 * openvswitch-pki-3.1.7-150600.33.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-5265.html * https://www.suse.com/security/cve/CVE-2026-5367.html * https://bugzilla.suse.com/show_bug.cgi?id=1262498 * https://bugzilla.suse.com/show_bug.cgi?id=1262499 . # Security update for openvswitch Announcement ID: SUSE-SU-2026:2475-1 Release Date: 2026-06-22T08:2. update, solves, vulnerabilities, installed, security, openvswitch. . Severity: Important. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:2481-1 Release Date: 2026-06-22T10:55:16Z Rating: important References: * bsc#1262498 * bsc#1262499 Cross-References: * CVE-2026-5265 * CVE-2026-5367 CVSS scores: * CVE-2026-5265 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5265 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-5367 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5367 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openvswitch fixes the following issues * CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). * CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2481=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2481=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patchSUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2481=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2481=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2481=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2481=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2481=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * openvswitch-devel-2.14.2-150400.24.35.1 * openvswitch-test-2.14.2-150400.24.35.1 * ovn-vtep-debuginfo-20.06.2-150400.24.35.1 * openvswitch-debuginfo-2.14.2-150400.24.35.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.35.1 * openvswitch-debugsource-2.14.2-150400.24.35.1 * ovn-host-20.06.2-150400.24.35.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.35.1 * ovn-debuginfo-20.06.2-150400.24.35.1 * libopenvswitch-2_14-0-2.14.2-150400.24.35.1 * ovn-host-debuginfo-20.06.2-150400.24.35.1 * openvswitch-2.14.2-150400.24.35.1 * ovn-central-debuginfo-20.06.2-150400.24.35.1 * openvswitch-test-debuginfo-2.14.2-150400.24.35.1 * openvswitch-pki-2.14.2-150400.24.35.1 * python3-ovs-2.14.2-150400.24.35.1 * libovn-20_06-0-20.06.2-150400.24.35.1 * ovn-20.06.2-150400.24.35.1 * openvswitch-ipsec-2.14.2-150400.24.35.1 * ovn-vtep-20.06.2-150400.24.35.1 * openvswitch-vtep-2.14.2-150400.24.35.1 * ovn-docker-20.06.2-150400.24.35.1 * ovn-central-20.06.2-150400.24.35.1 * ovn-devel-20.06.2-150400.24.35.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.35.1 * openSUSE Leap 15.4 (noarch) * ovn-doc-20.06.2-150400.24.35.1 * openvswitch-doc-2.14.2-150400.24.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * openvswitch-devel-2.14.2-150400.24.35.1 * openvswitch-test-2.14.2-150400.24.35.1 *ovn-vtep-debuginfo-20.06.2-150400.24.35.1 * openvswitch-debuginfo-2.14.2-150400.24.35.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.35.1 * openvswitch-debugsource-2.14.2-150400.24.35.1 * ovn-host-20.06.2-150400.24.35.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.35.1 * ovn-debuginfo-20.06.2-150400.24.35.1 * libopenvswitch-2_14-0-2.14.2-150400.24.35.1 * ovn-host-debuginfo-20.06.2-150400.24.35.1 * openvswitch-2.14.2-150400.24.35.1 * ovn-central-debuginfo-20.06.2-150400.24.35.1 * openvswitch-test-debuginfo-2.14.2-150400.24.35.1 * openvswitch-pki-2.14.2-150400.24.35.1 * python3-ovs-2.14.2-150400.24.35.1 * libovn-20_06-0-20.06.2-150400.24.35.1 * ovn-20.06.2-150400.24.35.1 * openvswitch-ipsec-2.14.2-150400.24.35.1 * ovn-vtep-20.06.2-150400.24.35.1 * openvswitch-vtep-2.14.2-150400.24.35.1 * ovn-docker-20.06.2-150400.24.35.1 * ovn-central-20.06.2-150400.24.35.1 * ovn-devel-20.06.2-150400.24.35.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.35.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * openvswitch-devel-2.14.2-150400.24.35.1 * openvswitch-test-2.14.2-150400.24.35.1 * ovn-vtep-debuginfo-20.06.2-150400.24.35.1 * openvswitch-debuginfo-2.14.2-150400.24.35.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.35.1 * openvswitch-debugsource-2.14.2-150400.24.35.1 * ovn-host-20.06.2-150400.24.35.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.35.1 * ovn-debuginfo-20.06.2-150400.24.35.1 * libopenvswitch-2_14-0-2.14.2-150400.24.35.1 * ovn-host-debuginfo-20.06.2-150400.24.35.1 * openvswitch-2.14.2-150400.24.35.1 * ovn-central-debuginfo-20.06.2-150400.24.35.1 * openvswitch-test-debuginfo-2.14.2-150400.24.35.1 * openvswitch-pki-2.14.2-150400.24.35.1 * python3-ovs-2.14.2-150400.24.35.1 * libovn-20_06-0-20.06.2-150400.24.35.1 * ovn-20.06.2-150400.24.35.1 * openvswitch-ipsec-2.14.2-150400.24.35.1 *ovn-vtep-20.06.2-150400.24.35.1 * openvswitch-vtep-2.14.2-150400.24.35.1 * ovn-docker-20.06.2-150400.24.35.1 * ovn-central-20.06.2-150400.24.35.1 * ovn-devel-20.06.2-150400.24.35.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.35.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openvswitch-devel-2.14.2-150400.24.35.1 * openvswitch-test-2.14.2-150400.24.35.1 * ovn-vtep-debuginfo-20.06.2-150400.24.35.1 * openvswitch-debuginfo-2.14.2-150400.24.35.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.35.1 * openvswitch-debugsource-2.14.2-150400.24.35.1 * ovn-host-20.06.2-150400.24.35.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.35.1 * ovn-debuginfo-20.06.2-150400.24.35.1 * libopenvswitch-2_14-0-2.14.2-150400.24.35.1 * ovn-host-debuginfo-20.06.2-150400.24.35.1 * ovn-central-debuginfo-20.06.2-150400.24.35.1 * openvswitch-2.14.2-150400.24.35.1 * openvswitch-test-debuginfo-2.14.2-150400.24.35.1 * openvswitch-pki-2.14.2-150400.24.35.1 * python3-ovs-2.14.2-150400.24.35.1 * libovn-20_06-0-20.06.2-150400.24.35.1 * ovn-20.06.2-150400.24.35.1 * openvswitch-ipsec-2.14.2-150400.24.35.1 * ovn-vtep-20.06.2-150400.24.35.1 * openvswitch-vtep-2.14.2-150400.24.35.1 * ovn-docker-20.06.2-150400.24.35.1 * ovn-central-20.06.2-150400.24.35.1 * ovn-devel-20.06.2-150400.24.35.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.35.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openvswitch-devel-2.14.2-150400.24.35.1 * openvswitch-test-2.14.2-150400.24.35.1 * ovn-vtep-debuginfo-20.06.2-150400.24.35.1 * openvswitch-debuginfo-2.14.2-150400.24.35.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.35.1 * openvswitch-debugsource-2.14.2-150400.24.35.1 * ovn-host-20.06.2-150400.24.35.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.35.1 * ovn-debuginfo-20.06.2-150400.24.35.1 * libopenvswitch-2_14-0-2.14.2-150400.24.35.1 * ovn-host-debuginfo-20.06.2-150400.24.35.1 * ovn-central-debuginfo-20.06.2-150400.24.35.1 * openvswitch-2.14.2-150400.24.35.1 * openvswitch-test-debuginfo-2.14.2-150400.24.35.1 * openvswitch-pki-2.14.2-150400.24.35.1 * python3-ovs-2.14.2-150400.24.35.1 * libovn-20_06-0-20.06.2-150400.24.35.1 * ovn-20.06.2-150400.24.35.1 * openvswitch-ipsec-2.14.2-150400.24.35.1 * ovn-vtep-20.06.2-150400.24.35.1 * openvswitch-vtep-2.14.2-150400.24.35.1 * ovn-docker-20.06.2-150400.24.35.1 * ovn-central-20.06.2-150400.24.35.1 * ovn-devel-20.06.2-150400.24.35.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openvswitch-devel-2.14.2-150400.24.35.1 * openvswitch-test-2.14.2-150400.24.35.1 * ovn-vtep-debuginfo-20.06.2-150400.24.35.1 * openvswitch-debuginfo-2.14.2-150400.24.35.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.35.1 * openvswitch-debugsource-2.14.2-150400.24.35.1 * ovn-host-20.06.2-150400.24.35.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.35.1 * ovn-debuginfo-20.06.2-150400.24.35.1 * libopenvswitch-2_14-0-2.14.2-150400.24.35.1 * ovn-host-debuginfo-20.06.2-150400.24.35.1 * openvswitch-2.14.2-150400.24.35.1 * ovn-central-debuginfo-20.06.2-150400.24.35.1 * openvswitch-test-debuginfo-2.14.2-150400.24.35.1 * openvswitch-pki-2.14.2-150400.24.35.1 * python3-ovs-2.14.2-150400.24.35.1 * libovn-20_06-0-20.06.2-150400.24.35.1 * ovn-20.06.2-150400.24.35.1 * openvswitch-ipsec-2.14.2-150400.24.35.1 * ovn-vtep-20.06.2-150400.24.35.1 * openvswitch-vtep-2.14.2-150400.24.35.1 * ovn-docker-20.06.2-150400.24.35.1 * ovn-central-20.06.2-150400.24.35.1 * ovn-devel-20.06.2-150400.24.35.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.35.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openvswitch-devel-2.14.2-150400.24.35.1 *openvswitch-test-2.14.2-150400.24.35.1 * ovn-vtep-debuginfo-20.06.2-150400.24.35.1 * openvswitch-debuginfo-2.14.2-150400.24.35.1 * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.35.1 * openvswitch-debugsource-2.14.2-150400.24.35.1 * ovn-host-20.06.2-150400.24.35.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.35.1 * ovn-debuginfo-20.06.2-150400.24.35.1 * libopenvswitch-2_14-0-2.14.2-150400.24.35.1 * ovn-host-debuginfo-20.06.2-150400.24.35.1 * openvswitch-2.14.2-150400.24.35.1 * ovn-central-debuginfo-20.06.2-150400.24.35.1 * openvswitch-test-debuginfo-2.14.2-150400.24.35.1 * openvswitch-pki-2.14.2-150400.24.35.1 * python3-ovs-2.14.2-150400.24.35.1 * libovn-20_06-0-20.06.2-150400.24.35.1 * ovn-20.06.2-150400.24.35.1 * openvswitch-ipsec-2.14.2-150400.24.35.1 * ovn-vtep-20.06.2-150400.24.35.1 * openvswitch-vtep-2.14.2-150400.24.35.1 * ovn-docker-20.06.2-150400.24.35.1 * ovn-central-20.06.2-150400.24.35.1 * ovn-devel-20.06.2-150400.24.35.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.35.1 ## References: * https://www.suse.com/security/cve/CVE-2026-5265.html * https://www.suse.com/security/cve/CVE-2026-5367.html * https://bugzilla.suse.com/show_bug.cgi?id=1262498 * https://bugzilla.suse.com/show_bug.cgi?id=1262499 . Update for openvswitch addresses critical heap over-read issues affecting multiple SUSE Linux distributions.. openvswitch update, SUSE security patch, Linux vulnerabilities, heap over-read fixes. . Severity: Important. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:2463-1 Release Date: 2026-06-19T09:44:08Z Rating: important References: * bsc#1262498 * bsc#1262499 Cross-References: * CVE-2026-5265 * CVE-2026-5367 CVSS scores: * CVE-2026-5265 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5265 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-5367 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5367 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for openvswitch fixes the following issues Update ovn to 25.03.3: * CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). * CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-2463=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2463=1 ## Package List: * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-openvswitch-3.5.4-150700.41.18.1 * ovn-central-debuginfo-25.03.3-150700.41.18.1 * openvswitch-test-debuginfo-3.5.4-150700.41.18.1 * ovn-host-25.03.3-150700.41.18.1 * openvswitch-ipsec-3.5.4-150700.41.18.1 *ovn-central-25.03.3-150700.41.18.1 * ovn-25.03.3-150700.41.18.1 * ovn-vtep-debuginfo-25.03.3-150700.41.18.1 * ovn-vtep-25.03.3-150700.41.18.1 * python3-openvswitch-debuginfo-3.5.4-150700.41.18.1 * openvswitch-devel-3.5.4-150700.41.18.1 * openvswitch-debuginfo-3.5.4-150700.41.18.1 * libopenvswitch-3_5-0-3.5.4-150700.41.18.1 * openvswitch-pki-3.5.4-150700.41.18.1 * libovn-25_03-0-25.03.3-150700.41.18.1 * openvswitch-vtep-debuginfo-3.5.4-150700.41.18.1 * ovn-docker-25.03.3-150700.41.18.1 * ovn-host-debuginfo-25.03.3-150700.41.18.1 * openvswitch-test-3.5.4-150700.41.18.1 * ovn-devel-25.03.3-150700.41.18.1 * openvswitch-3.5.4-150700.41.18.1 * libovn-25_03-0-debuginfo-25.03.3-150700.41.18.1 * openvswitch-debugsource-3.5.4-150700.41.18.1 * ovn-debuginfo-25.03.3-150700.41.18.1 * libopenvswitch-3_5-0-debuginfo-3.5.4-150700.41.18.1 * openvswitch-vtep-3.5.4-150700.41.18.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-openvswitch-3.5.4-150700.41.18.1 * openvswitch-debugsource-3.5.4-150700.41.18.1 * openvswitch-debuginfo-3.5.4-150700.41.18.1 * python3-openvswitch-debuginfo-3.5.4-150700.41.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-5265.html * https://www.suse.com/security/cve/CVE-2026-5367.html * https://bugzilla.suse.com/show_bug.cgi?id=1262498 * https://bugzilla.suse.com/show_bug.cgi?id=1262499 . Update for OpenvSwitch addresses serious security issues. Install promptly to enhance system protection.. OpenvSwitch Security Update, SUSE Important Patch, Heap Over-Read Vulnerability. . Severity: Important. LinuxSecurity.com Team
An update that solves three vulnerabilities can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:22145-1 Release Date: 2026-06-17T08:39:16Z Rating: important References: * bsc#1261273 * bsc#1262498 * bsc#1262499 Cross-References: * CVE-2026-34956 * CVE-2026-5265 * CVE-2026-5367 CVSS scores: * CVE-2026-34956 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34956 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-5265 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5265 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-5367 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5367 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for openvswitch fixes the following issues * CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). * CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). * CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273). Changes for openvswitch: * Update ovn to 25.03.3 * Bug fixes * Add support for special port_security prefix "VRRPv3". This prefix allows CMS to allow all required traffic for a VRRPv3 virtual router behind LSP. See ovn-nb(5) man page for more details. * Fixed support for fragmented traffic in the userspace datapath. Added the "acl_ct_translation" NB_Global option to enable connection tracking based L4 field translation for stateful ACLs. When enabled allows proper handling of IP fragmentation in userspace datapaths. This option may break hardware offloading and is disabled by default. * Added disable_garp_rarp option tological_router table in order to disable GARP/RARP announcements by all the peer ports of this logical router. * Update openvswitch to 3.5.4 * Full changelog https://www.openvswitch.org/releases/NEWS-3.5.4.txt * OVS validated with DPDK 24.11.4. * Fixed buffer overflow during conntrack processing of alg=ftp in userspace datapath (CVE-2026-34956) (bsc#1261273). * Update openvswitch to 3.5.3 * Full changelog https://www.openvswitch.org/releases/NEWS-3.5.3.txt * Bug fixes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-937=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * python3-openvswitch-debuginfo-3.5.4-160000.4.1 * libopenvswitch-3_5-0-debuginfo-3.5.4-160000.4.1 * openvswitch-3.5.4-160000.4.1 * openvswitch-debuginfo-3.5.4-160000.4.1 * libopenvswitch-3_5-0-3.5.4-160000.4.1 * openvswitch-debugsource-3.5.4-160000.4.1 * python3-openvswitch-3.5.4-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34956.html * https://www.suse.com/security/cve/CVE-2026-5265.html * https://www.suse.com/security/cve/CVE-2026-5367.html * https://bugzilla.suse.com/show_bug.cgi?id=1261273 * https://bugzilla.suse.com/show_bug.cgi?id=1262498 * https://bugzilla.suse.com/show_bug.cgi?id=1262499 . Update for openvswitch resolves important issues, enhancing security against vulnerabilities and improving performance.. openvswitch security update, SUSE Linux Micro 6.2, heap over-read fix, invalid memory access. . Severity: Important. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:22105-1 Release Date: 2026-06-15T09:22:32Z Rating: important References: * bsc#1262498 * bsc#1262499 Cross-References: * CVE-2026-5265 * CVE-2026-5367 CVSS scores: * CVE-2026-5265 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5265 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-5367 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-5367 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for openvswitch fixes the following issues * CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). * CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-755=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libopenvswitch-3_1-0-debuginfo-3.1.7-6.1 * openvswitch-debugsource-3.1.7-6.1 * libopenvswitch-3_1-0-3.1.7-6.1 * openvswitch-debuginfo-3.1.7-6.1 * openvswitch-3.1.7-6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-5265.html * https://www.suse.com/security/cve/CVE-2026-5367.html * https://bugzilla.suse.com/show_bug.cgi?id=1262498 * https://bugzilla.suse.com/show_bug.cgi?id=1262499 . Update for SUSE Linux Micro 6.0 fixes important issues in Open vSwitch, addressing heap over-read vulnerabilities.. SUSE Linux Micro, Open vSwitch Update, Heap Over-read, CVE-2026-5265. . Severity: Important. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:22068-1 Release Date: 2026-06-04T12:11:16Z Rating: moderate References: * bsc#1261273 Cross-References: * CVE-2026-34956 CVSS scores: * CVE-2026-34956 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34956 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for openvswitch fixes the following issue * CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-564=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * openvswitch-debuginfo-3.1.7-slfo.1.1_3.1 * openvswitch-debugsource-3.1.7-slfo.1.1_3.1 * libopenvswitch-3_1-0-3.1.7-slfo.1.1_3.1 * openvswitch-3.1.7-slfo.1.1_3.1 * libopenvswitch-3_1-0-debuginfo-3.1.7-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34956.html * https://bugzilla.suse.com/show_bug.cgi?id=1261273 . SUSE's security update addresses a critical memory access issue in openvswitch, enhancing system safety.. openvswitch update, SUSE security patch, moderate severity issue. . Severity: moderate. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for openvswitch Announcement ID: SUSE-SU-2026:1871-1 Release Date: 2026-05-15T15:22:14Z Rating: moderate References: * bsc#1261273 Cross-References: * CVE-2026-34956 CVSS scores: * CVE-2026-34956 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34956 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for openvswitch fixes the following issue: * CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1871=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libopenvswitch-2_14-0-debuginfo-2.14.2-150400.24.32.1 * openvswitch-debugsource-2.14.2-150400.24.32.1 * openvswitch-pki-2.14.2-150400.24.32.1 * libovn-20_06-0-20.06.2-150400.24.32.1 * ovn-vtep-debuginfo-20.06.2-150400.24.32.1 * python3-ovs-2.14.2-150400.24.32.1 * ovn-vtep-20.06.2-150400.24.32.1 * libovn-20_06-0-debuginfo-20.06.2-150400.24.32.1 * ovn-docker-20.06.2-150400.24.32.1 * ovn-20.06.2-150400.24.32.1 * openvswitch-test-debuginfo-2.14.2-150400.24.32.1 * ovn-central-20.06.2-150400.24.32.1 * openvswitch-2.14.2-150400.24.32.1 * openvswitch-vtep-debuginfo-2.14.2-150400.24.32.1 * openvswitch-vtep-2.14.2-150400.24.32.1 * ovn-host-debuginfo-20.06.2-150400.24.32.1 * ovn-central-debuginfo-20.06.2-150400.24.32.1 * ovn-host-20.06.2-150400.24.32.1 * openvswitch-test-2.14.2-150400.24.32.1 *openvswitch-ipsec-2.14.2-150400.24.32.1 * libopenvswitch-2_14-0-2.14.2-150400.24.32.1 * ovn-debuginfo-20.06.2-150400.24.32.1 * openvswitch-debuginfo-2.14.2-150400.24.32.1 * ovn-devel-20.06.2-150400.24.32.1 * openvswitch-devel-2.14.2-150400.24.32.1 * openSUSE Leap 15.4 (noarch) * openvswitch-doc-2.14.2-150400.24.32.1 * ovn-doc-20.06.2-150400.24.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34956.html * https://bugzilla.suse.com/show_bug.cgi?id=1261273 . Update available for openvswitch on openSUSE fixing moderate issue with invalid memory access leading to potential risk.. openvswitch security update, SUSE patch information, memory access vulnerability. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.