Lucene search

K
suseSuseOPENSUSE-SU-2020:0693-1
HistoryMay 23, 2020 - 12:00 a.m.

Security update for dpdk (moderate)

2020-05-2300:00:00
lists.opensuse.org
103

0.001 Low

EPSS

Percentile

49.1%

An update that fixes 5 vulnerabilities is now available.

Description:

This update for dpdk fixes the following issues:

Security issues fixed:

  • CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base()
    (bsc#1171477).
  • CVE-2020-10723: Fixed an integer truncation in
    vhost_user_check_and_alloc_queue_pair() (bsc#1171477).
  • CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto
    (bsc#1171477).
  • CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors
    sent from a malicious guest (bsc#1171477).
  • CVE-2020-10726: Fixed a denial-of-service caused by
    VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2020-693=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.1x86_64< - openSUSE Leap 15.1 (x86_64):- openSUSE Leap 15.1 (x86_64):.x86_64.rpm
openSUSE Leap15.1noarch< - openSUSE Leap 15.1 (noarch):- openSUSE Leap 15.1 (noarch):.noarch.rpm