openSUSE-SU-2020:1599-1
Security update for dpdk
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest and causing partially denial of service in the host(bsc#1176590). - For a list of fixes check: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8 denial of service in the host (bsc#1176590). This update was imported from the SUSE:SLE-15-SP2:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | dpdk, dpdk-devel, dpdk-doc y 5 más | 19.11.4-lp152.2.8.1 y 1 más |
Mostrar las 8 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | dpdk | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-devel | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-doc | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-examples | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-kmp-default | 19.11.4_k5.3.18_lp152.41-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-kmp-preempt | 19.11.4_k5.3.18_lp152.41-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-tools | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | libdpdk-20_0 | 19.11.4-lp152.2.8.1 |
Referencias
- https://bugzilla.suse.com/1176590
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YBSGY453NNB4LDJYA3J7SNEOJKG5HCAD/
- https://www.suse.com/security/cve/CVE-2020-14374/
- https://www.suse.com/security/cve/CVE-2020-14375/
- https://www.suse.com/security/cve/CVE-2020-14376/
- https://www.suse.com/security/cve/CVE-2020-14377/
- https://www.suse.com/security/cve/CVE-2020-14378/
- https://www.suse.com/support/security/rating/