RHSA-2020:4806: Important: dpdk security, bug fix, and enhancement update
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.The following packages have been upgraded to a later upstream version: dpdk (19.11.3). (BZ#1824905)Security Fix(es): dpdk: librtevhost Malicious guest could cause segfault by sending invalid Virtio descriptor (CVE-2020-10725) dpdk: librtevhost Integer overflow in vhostusersetlogbase() (CVE-2020-10722) dpdk: librtevhost Integer truncation in vhostusercheckandallocqueuepair() (CVE-2020-10723) dpdk: librtevhost VHOSTUSERGETINFLIGHTFD message flooding to result in a DoS (CVE-2020-10726) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/dpdkto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8 - Upgrade
Upgrade
redhat/dpdk-debuginfoto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8 - Upgrade
Upgrade
redhat/dpdk-debugsourceto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8 - Upgrade
Upgrade
redhat/dpdk-develto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8 - Upgrade
Upgrade
redhat/dpdk-devel-debuginfoto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8 - Upgrade
Upgrade
redhat/dpdk-docto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8 - Upgrade
Upgrade
redhat/dpdk-toolsto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8 - Upgrade
Upgrade
redhat/dpdkto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8.aa - Upgrade
Upgrade
redhat/dpdk-debuginfoto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8.aa - Upgrade
Upgrade
redhat/dpdk-debugsourceto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8.aa - Upgrade
Upgrade
redhat/dpdk-develto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8.aa - Upgrade
Upgrade
redhat/dpdk-devel-debuginfoto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8.aa - Upgrade
Upgrade
redhat/dpdk-toolsto a version that resolves this vulnerability.Fixed in 19.11.3-1.el8.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:4806?
The severity of RHSA-2020:4806 is categorized based on the specific vulnerabilities addressed by the dpdk update.
How do I fix RHSA-2020:4806?
To fix RHSA-2020:4806, upgrade the dpdk package to version 19.11.3-1.el8 or later.
Which packages are affected by RHSA-2020:4806?
The affected packages by RHSA-2020:4806 include dpdk, dpdk-debuginfo, dpdk-devel, and related utilities.
What type of vulnerabilities does RHSA-2020:4806 address?
RHSA-2020:4806 addresses vulnerabilities related to the Data Plane Development Kit that could impact packet processing.
Is it necessary to restart services after fixing RHSA-2020:4806?
Yes, it is advisable to restart relevant services after applying the fix for RHSA-2020:4806 to ensure changes take effect.