Sync from SUSE:SLFO:Main openvswitch revision a07ae0a1dda8d857f0669725d53c3f95

openvswitch.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Mon Jan 27 12:52:52 UTC 2025 - Clemens Famulla-Conrad <cfamullaconrad@suse.com>
+
+- Update openvswitch to 3.3.2. For a list of changes, check
+  https://github.com/openvswitch/ovs/blob/v3.3.2/NEWS
+- Update OVN to 24.03.5. For a list of changes, check
+  https://github.com/ovn-org/ovn/blob/v24.03.5/NEWS
+  - This update fix CVE-2025-0650 ovn: egress ACLs may be bypassed
+    via specially crafted UDP packet (bsc#1236353)
+
+-------------------------------------------------------------------
+Mon Dec 16 15:15:56 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Add proper dependency on /usr/sbin/ipsec on openvswitch-ipsec:
+  without the binary present, the service crashes on startup
+  (boo#1234617).
+
 -------------------------------------------------------------------
 Wed Aug 28 05:18:36 UTC 2024 - Duraisankar P <Duraisankar.pitchumani@suse.com>
 

openvswitch.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package openvswitch
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,8 +20,8 @@
 %define skip_python2 1
 %define ovs_lname libopenvswitch-3_3-0
 %define ovn_lname libovn-24_03-0
-%define ovs_version 3.3.1
-%define ovn_version 24.03.3
+%define ovs_version 3.3.2
+%define ovn_version 24.03.5
 %define ovs_dir ovs-%{ovs_version}
 %define ovn_dir ovn-%{ovn_version}
 %define rpmstate %{_rundir}/openvswitch-rpm-state-
@@ -80,8 +80,8 @@ Patch4:         install-ovsdb-tools.patch
 #OVN patches
 # PATCH-FIX-OPENSUSE: 0001-Run-ovn-as-openvswitch-openvswitch.patch
 Patch20:        0001-Run-ovn-as-openvswitch-openvswitch.patch
-BuildRequires:  autoconf
 BuildRequires:  %{python_module setuptools}
+BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  fdupes
 BuildRequires:  graphviz
@@ -238,6 +238,7 @@ Summary:        Open vSwitch IPsec tunneling support
 License:        Apache-2.0
 Group:          Productivity/Networking/System
 Requires:       %{name} = %{version}
+Requires:       /usr/sbin/ipsec
 Requires:       python3-ovs = %{version}
 Requires:       strongswan