SUSE-SU-2026:0280-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20260280-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0280-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:0280-1
- Upstream
- Related
- Published
- 2026-01-23T15:33:56Z
- Modified
- 2026-03-11T07:31:15.959645Z
- Summary
- Security update for openvswitch
- Details
-
This update for openvswitch fixes the following issues:
Update to v3.1.7:
- CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).
- CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).
- CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
- CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
- CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20260280-1/
- https://bugzilla.suse.com/1210054
- https://bugzilla.suse.com/1212125
- https://bugzilla.suse.com/1216002
- https://bugzilla.suse.com/1219465
- https://bugzilla.suse.com/1255435
- https://www.suse.com/security/cve/CVE-2023-1668
- https://www.suse.com/security/cve/CVE-2023-3152
- https://www.suse.com/security/cve/CVE-2023-3153
- https://www.suse.com/security/cve/CVE-2023-3966
- https://www.suse.com/security/cve/CVE-2023-5366
- https://www.suse.com/security/cve/CVE-2024-2182
- https://www.suse.com/security/cve/CVE-2025-0650
Affected packages
openSUSE:Leap 15.6
openvswitch
Package
- Name
- openvswitch
- Purl
- pkg:rpm/opensuse/openvswitch&distro=openSUSE%20Leap%2015.6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.1.7-150600.33.9.1
Ecosystem specific
{
"binaries": [
{
"ovn-docker": "23.03.3-150600.33.9.1",
"openvswitch-doc": "3.1.7-150600.33.9.1",
"openvswitch": "3.1.7-150600.33.9.1",
"ovn-doc": "23.03.3-150600.33.9.1",
"openvswitch-ipsec": "3.1.7-150600.33.9.1",
"python3-ovs": "3.1.7-150600.33.9.1",
"ovn-central": "23.03.3-150600.33.9.1",
"openvswitch-pki": "3.1.7-150600.33.9.1",
"openvswitch-devel": "3.1.7-150600.33.9.1",
"ovn-devel": "23.03.3-150600.33.9.1",
"openvswitch-test": "3.1.7-150600.33.9.1",
"openvswitch-vtep": "3.1.7-150600.33.9.1",
"libovn-23_03-0": "23.03.3-150600.33.9.1",
"libopenvswitch-3_1-0": "3.1.7-150600.33.9.1",
"ovn": "23.03.3-150600.33.9.1",
"ovn-vtep": "23.03.3-150600.33.9.1",
"ovn-host": "23.03.3-150600.33.9.1"
}
]
}SUSE:Linux Enterprise Server 15 SP6-LTSS
openvswitch
Package
- Name
- openvswitch
- Purl
- pkg:rpm/suse/openvswitch&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.1.7-150600.33.9.1
Ecosystem specific
{
"binaries": [
{
"ovn-docker": "23.03.3-150600.33.9.1",
"openvswitch": "3.1.7-150600.33.9.1",
"openvswitch-ipsec": "3.1.7-150600.33.9.1",
"python3-ovs": "3.1.7-150600.33.9.1",
"ovn-central": "23.03.3-150600.33.9.1",
"openvswitch-pki": "3.1.7-150600.33.9.1",
"openvswitch-devel": "3.1.7-150600.33.9.1",
"ovn-devel": "23.03.3-150600.33.9.1",
"openvswitch-test": "3.1.7-150600.33.9.1",
"openvswitch-vtep": "3.1.7-150600.33.9.1",
"libovn-23_03-0": "23.03.3-150600.33.9.1",
"libopenvswitch-3_1-0": "3.1.7-150600.33.9.1",
"ovn": "23.03.3-150600.33.9.1",
"ovn-vtep": "23.03.3-150600.33.9.1",
"ovn-host": "23.03.3-150600.33.9.1"
}
]
}SUSE:Linux Enterprise Server for SAP Applications 15 SP6
openvswitch
Package
- Name
- openvswitch
- Purl
- pkg:rpm/suse/openvswitch&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.1.7-150600.33.9.1
Ecosystem specific
{
"binaries": [
{
"ovn-docker": "23.03.3-150600.33.9.1",
"openvswitch": "3.1.7-150600.33.9.1",
"openvswitch-ipsec": "3.1.7-150600.33.9.1",
"python3-ovs": "3.1.7-150600.33.9.1",
"ovn-central": "23.03.3-150600.33.9.1",
"openvswitch-pki": "3.1.7-150600.33.9.1",
"openvswitch-devel": "3.1.7-150600.33.9.1",
"ovn-devel": "23.03.3-150600.33.9.1",
"openvswitch-test": "3.1.7-150600.33.9.1",
"openvswitch-vtep": "3.1.7-150600.33.9.1",
"libovn-23_03-0": "23.03.3-150600.33.9.1",
"libopenvswitch-3_1-0": "3.1.7-150600.33.9.1",
"ovn": "23.03.3-150600.33.9.1",
"ovn-vtep": "23.03.3-150600.33.9.1",
"ovn-host": "23.03.3-150600.33.9.1"
}
]
}