Security update for openvswitch3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3710-1 Final 1 1 2023-09-20T16:05:17Z current 2023-09-20T16:05:17Z 2023-09-20T16:05:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openvswitch3 This update for openvswitch3 fixes the following issues: - CVE-2023-3153: Fixed service monitor MAC flow is not rate limited (bsc#1212125). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-3710,SUSE-SLE-Module-Server-Applications-15-SP5-2023-3710,openSUSE-SLE-15.5-2023-3710 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233710-1/ Link for SUSE-SU-2023:3710-1 https://lists.suse.com/pipermail/sle-security-updates/2023-September/016259.html E-Mail link for SUSE-SU-2023:3710-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1212125 SUSE Bug 1212125 https://www.suse.com/security/cve/CVE-2023-3152/ SUSE CVE CVE-2023-3152 page https://www.suse.com/security/cve/CVE-2023-3153/ SUSE CVE CVE-2023-3153 page SUSE Linux Enterprise Module for Server Applications 15 SP5 openSUSE Leap 15.5 libopenvswitch-3_1-0-3.1.0-150500.3.6.2 libovn-23_03-0-23.03.0-150500.3.6.2 openvswitch3-3.1.0-150500.3.6.2 openvswitch3-devel-3.1.0-150500.3.6.2 openvswitch3-doc-3.1.0-150500.3.6.2 openvswitch3-ipsec-3.1.0-150500.3.6.2 openvswitch3-pki-3.1.0-150500.3.6.2 openvswitch3-test-3.1.0-150500.3.6.2 openvswitch3-vtep-3.1.0-150500.3.6.2 ovn3-23.03.0-150500.3.6.2 ovn3-central-23.03.0-150500.3.6.2 ovn3-devel-23.03.0-150500.3.6.2 ovn3-doc-23.03.0-150500.3.6.2 ovn3-docker-23.03.0-150500.3.6.2 ovn3-host-23.03.0-150500.3.6.2 ovn3-vtep-23.03.0-150500.3.6.2 python3-ovs3-3.1.0-150500.3.6.2 libopenvswitch-3_1-0-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libovn-23_03-0-23.03.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 openvswitch3-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 openvswitch3-devel-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 openvswitch3-ipsec-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 openvswitch3-pki-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 openvswitch3-test-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 openvswitch3-vtep-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 ovn3-23.03.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 ovn3-central-23.03.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 ovn3-devel-23.03.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 ovn3-docker-23.03.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 ovn3-host-23.03.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 ovn3-vtep-23.03.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 python3-ovs3-3.1.0-150500.3.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libopenvswitch-3_1-0-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 libovn-23_03-0-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 openvswitch3-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 openvswitch3-devel-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 openvswitch3-doc-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 openvswitch3-ipsec-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 openvswitch3-pki-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 openvswitch3-test-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 openvswitch3-vtep-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 ovn3-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 ovn3-central-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 ovn3-devel-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 ovn3-doc-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 ovn3-docker-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 ovn3-host-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 ovn3-vtep-23.03.0-150500.3.6.2 as a component of openSUSE Leap 15.5 python3-ovs3-3.1.0-150500.3.6.2 as a component of openSUSE Leap 15.5 A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability. CVE-2023-3152 SUSE Linux Enterprise Module for Server Applications 15 SP5:libopenvswitch-3_1-0-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:libovn-23_03-0-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-devel-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-ipsec-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-pki-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-test-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-vtep-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-central-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-devel-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-docker-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-host-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-vtep-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:python3-ovs3-3.1.0-150500.3.6.2 openSUSE Leap 15.5:libopenvswitch-3_1-0-3.1.0-150500.3.6.2 openSUSE Leap 15.5:libovn-23_03-0-23.03.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-devel-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-doc-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-ipsec-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-pki-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-test-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-vtep-3.1.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-central-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-devel-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-doc-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-docker-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-host-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-vtep-23.03.0-150500.3.6.2 openSUSE Leap 15.5:python3-ovs3-3.1.0-150500.3.6.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233710-1/ https://www.suse.com/security/cve/CVE-2023-3152.html CVE-2023-3152 A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured. CVE-2023-3153 SUSE Linux Enterprise Module for Server Applications 15 SP5:libopenvswitch-3_1-0-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:libovn-23_03-0-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-devel-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-ipsec-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-pki-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-test-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:openvswitch3-vtep-3.1.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-central-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-devel-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-docker-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-host-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:ovn3-vtep-23.03.0-150500.3.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP5:python3-ovs3-3.1.0-150500.3.6.2 openSUSE Leap 15.5:libopenvswitch-3_1-0-3.1.0-150500.3.6.2 openSUSE Leap 15.5:libovn-23_03-0-23.03.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-devel-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-doc-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-ipsec-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-pki-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-test-3.1.0-150500.3.6.2 openSUSE Leap 15.5:openvswitch3-vtep-3.1.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-central-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-devel-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-doc-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-docker-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-host-23.03.0-150500.3.6.2 openSUSE Leap 15.5:ovn3-vtep-23.03.0-150500.3.6.2 openSUSE Leap 15.5:python3-ovs3-3.1.0-150500.3.6.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233710-1/ https://www.suse.com/security/cve/CVE-2023-3153.html CVE-2023-3153 https://bugzilla.suse.com/1212125 SUSE Bug 1212125