SUSE-SU-2026:2463-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20262463-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2463-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:2463-1
- Upstream
CVE (2)
- CVE-2026-5265
- CVE-2026-5367
- Related
- Published
- 2026-06-19T09:44:07Z
- Modified
- 2026-06-20T08:45:05Z
- Summary
- Security update for openvswitch
- Details
-
This update for openvswitch fixes the following issues
Update ovn to 25.03.3:
- CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498).
- CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).
- References
Affected packages
SUSE:Linux Enterprise Module for Package Hub 15 SP7
SUSE:Linux Enterprise Module for Server Applications 15 SP7
openvswitch
Package
- Name
- openvswitch
- Purl
- pkg:rpm/suse/openvswitch&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.5.4-150700.41.18.1
Ecosystem specific
{
"binaries": [
{
"libopenvswitch-3_5-0": "3.5.4-150700.41.18.1",
"libovn-25_03-0": "25.03.3-150700.41.18.1",
"openvswitch": "3.5.4-150700.41.18.1",
"openvswitch-devel": "3.5.4-150700.41.18.1",
"openvswitch-ipsec": "3.5.4-150700.41.18.1",
"openvswitch-pki": "3.5.4-150700.41.18.1",
"openvswitch-test": "3.5.4-150700.41.18.1",
"openvswitch-vtep": "3.5.4-150700.41.18.1",
"ovn": "25.03.3-150700.41.18.1",
"ovn-central": "25.03.3-150700.41.18.1",
"ovn-devel": "25.03.3-150700.41.18.1",
"ovn-docker": "25.03.3-150700.41.18.1",
"ovn-host": "25.03.3-150700.41.18.1",
"ovn-vtep": "25.03.3-150700.41.18.1",
"python3-openvswitch": "3.5.4-150700.41.18.1"
}
]
}