Описание
Security update for dpdk
This update of dpdk to version 18.11.3 provides the following fixes:
dpdk was updated to 18.11.3 (fate#327817, bsc#1145713, jsc#ECO-274, fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jsc#SLE-4715)
Security issue fixed:
- CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicius container may lead to to denial of service (bsc#1156146).
Other issues addressed:
- Fixed a regression by inserting version numbers to the drivers (bsc#1157179).
- Changed to multibuild (bsc#1151455).
- Added support for using externally allocated memory in DPDK.
- Added check for ensuring allocated memory is addressable by devices.
- Updated the C11 memory model version of the ring library.
- Added NXP CAAM JR PMD.
- Added support for GEN3 devices to Intel QAT driver.
- Added Distributed Software Eventdev PMD.
- Updated KNI kernel module, rte_kni library, and KNI sample application.
- Add a new sample application for vDPA.
- Updated mlx5 driver.
- Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
- Reworked flow engine to supported e-switch flow rules (transfer attribute).
- Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
- Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
- Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
- Added support for meson build.
- Fixed build issue with PPC.
- Added support for BlueField VF.
- Added support for externally allocated static memory for DMA.
Список пакетов
SUSE Linux Enterprise Module for Server Applications 15
dpdk-18.11.3-3.16.1
dpdk-devel-18.11.3-3.16.1
dpdk-kmp-default-18.11.3_k4.12.14_150.41-3.16.1
dpdk-thunderx-18.11.3-3.16.1
dpdk-thunderx-devel-18.11.3-3.16.1
dpdk-thunderx-kmp-default-18.11.3_k4.12.14_150.41-3.16.1
dpdk-tools-18.11.3-3.16.1
libdpdk-18_11-18.11.3-3.16.1
Ссылки
- Link for SUSE-SU-2019:3179-1
- E-Mail link for SUSE-SU-2019:3179-1
- SUSE Security Ratings
- SUSE Bug 1134968
- SUSE Bug 1145713
- SUSE Bug 1151455
- SUSE Bug 1156146
- SUSE Bug 1157179
- SUSE CVE CVE-2019-14818 page
- SUSE Bug ECO-274
- SUSE Bug SLE-4715
Описание
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.
Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15:dpdk-18.11.3-3.16.1
SUSE Linux Enterprise Module for Server Applications 15:dpdk-devel-18.11.3-3.16.1
SUSE Linux Enterprise Module for Server Applications 15:dpdk-kmp-default-18.11.3_k4.12.14_150.41-3.16.1
SUSE Linux Enterprise Module for Server Applications 15:dpdk-thunderx-18.11.3-3.16.1
Ссылки
- CVE-2019-14818
- SUSE Bug 1156146