https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-crypticcoder-meowppa/resolute/amd64/o/ovn/20261007_104157_3d067@/log.gz https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-crypticcoder-meowppa/resolute/s390x/o/ovn/20261008_121509_0b279@/log.gz
passing testsuite ** Description changed: [Impact] This release sports mostly bug-fixes and we would like to make sure all of our supported customers have access to these improvements. The update contains the following package updates: * ovn 26.03.2 * ovn 26.03.1 For more details see: * https://github.com/ovn-org/ovn/releases/tag/v26.03.2 * https://github.com/ovn-org/ovn/releases/tag/v26.03.1 * https://github.com/ovn-org/ovn/compare/v26.03.0...v26.03.2 [Test Case] The following SRU process was followed: https://wiki.ubuntu.com/OpenStack/StableReleaseUpdates In order to avoid regression of existing consumers, the OpenStack team will run their continuous integration test against the packages that are in -proposed. A successful run of all available tests will be required before the proposed packages can be let into -updates. The OpenStack team will be in charge of attaching the output summary of the executed tests. The OpenStack team members will not mark ‘verification-done’ until this has happened. [Regression Potential] In order to mitigate the regression potential, the results of the aforementioned tests are attached to this bug. [Other Info] This is a regular update, following a previous OVN point release: * (#2044491) [SRU] ovn 22.09.3 point release This release fixes the following CVEs "CVE-2026-5265", "CVE-2026-5367" as they were fixed upstream as part of OVN 26.03.1 Changelog: - * new upstream point release 26.03.2. - * d/p/lp-2147468-tests-replace-unsupported-protocol-test.patch: - drop, included in upstream at bd06e7a11. - - * new upstream point release 26.03.1 (lp: #2154315). - * fix security issues (closes: #1134486): - - cve-2026-5265: heap over-read in icmp error response generation. - - cve-2026-5367: heap over-read in ovn dhcpv6 client id processing. - * d/t: drop skip for "unsupported protocol message" test (lp: #2147468). - * d/p/lp-2147468-tests-replace-unsupported-protocol-test.patch: add patch to - fix "unsupported protocol message" test from upstream (26.03.2) (lp: #2147468). + * New upstream point release 26.03.2 (LP: #2154315). + * Fix security issues (Closes: #1134486): + - CVE-2026-5265: Heap Over-Read in ICMP Error Response Generation. + - CVE-2026-5367: Heap over-read in OVN DHCPv6 Client ID processing. + * d/t: Drop skip for "Unsupported protocol message" test (LP: #2147468). + * d/p/lp-2169748-tests-Fix-ACL-CT-TCP-sender-EOF-handling.patch: Use EOF-aware + netcat senders in the ACL CT translation TCP tests (LP: #2169748). + * d/p/lp-2169749-tests-Synchronize-ACL-datapath-checks.patch: Wait for datapath + revalidation in ACL system tests and preserve fractional ping loss output + (LP: #2169749). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2154315 Title: [SRU] ovn 26.03.2 point release To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ovn/+bug/2154315/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
