Public bug reported: OVN v26.03 has not been updated in Ubuntu 26.04 LTS, including the v26.03.1 release that includes two security fixes for CVE-2026-5265 (6.5 score) and CVE-2026-5367 (8.6 score).
Upstream release list with release notes flagging CVE fixes: https://www.ovn.org/en/releases/26.03/ ** Affects: ovn (Ubuntu) Importance: Undecided Status: New ** CVE added: https://cve.org/CVERecord?id=CVE-2026-5367 ** CVE added: https://cve.org/CVERecord?id=CVE-2026-5265 ** Tags removed: cve-2026-5265 cve-2026-5367 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2163697 Title: [resolute] missing upstream v26.03 security fixes (CVE score >8) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ovn/+bug/2163697/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
