RHSA-2020:4806: Important: dpdk security, bug fix, and enhancement update
First published: Tue Nov 03 2020(Updated: )
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.<br>The following packages have been upgraded to a later upstream version: dpdk (19.11.3). (BZ#1824905)<br>Security Fix(es):<br><li> dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor (CVE-2020-10725)</li> <li> dpdk: librte_vhost Integer overflow in vhost_user_set_log_base() (CVE-2020-10722)</li> <li> dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)</li> <li> dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS (CVE-2020-10726)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/dpdk | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-debuginfo | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-debugsource | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-devel | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-devel-debuginfo | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-doc | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-tools | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-debuginfo | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-debugsource | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-devel | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-devel-debuginfo | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk-tools | <19.11.3-1.el8 | 19.11.3-1.el8 |
| redhat/dpdk | <19.11.3-1.el8.aa | 19.11.3-1.el8.aa |
| redhat/dpdk-debuginfo | <19.11.3-1.el8.aa | 19.11.3-1.el8.aa |
| redhat/dpdk-debugsource | <19.11.3-1.el8.aa | 19.11.3-1.el8.aa |
| redhat/dpdk-devel | <19.11.3-1.el8.aa | 19.11.3-1.el8.aa |
| redhat/dpdk-devel-debuginfo | <19.11.3-1.el8.aa | 19.11.3-1.el8.aa |
| redhat/dpdk-tools | <19.11.3-1.el8.aa | 19.11.3-1.el8.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1801361
- https://bugzilla.redhat.com/show_bug.cgi?id=1813252
- https://bugzilla.redhat.com/show_bug.cgi?id=1824905
- https://bugzilla.redhat.com/show_bug.cgi?id=1828867
- https://bugzilla.redhat.com/show_bug.cgi?id=1828874
- https://bugzilla.redhat.com/show_bug.cgi?id=1828894
- https://bugzilla.redhat.com/show_bug.cgi?id=1828898
- https://bugzilla.redhat.com/show_bug.cgi?id=1868708
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
- https://access.redhat.com/errata/RHSA-2020:4806 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2020:4806?
The severity of RHSA-2020:4806 is categorized based on the specific vulnerabilities addressed by the dpdk update.
How do I fix RHSA-2020:4806?
To fix RHSA-2020:4806, upgrade the dpdk package to version 19.11.3-1.el8 or later.
Which packages are affected by RHSA-2020:4806?
The affected packages by RHSA-2020:4806 include dpdk, dpdk-debuginfo, dpdk-devel, and related utilities.
What type of vulnerabilities does RHSA-2020:4806 address?
RHSA-2020:4806 addresses vulnerabilities related to the Data Plane Development Kit that could impact packet processing.
Is it necessary to restart services after fixing RHSA-2020:4806?
Yes, it is advisable to restart relevant services after applying the fix for RHSA-2020:4806 to ensure changes take effect.
- agent/type
- agent/severity
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2020:4806
- agent/software-canonical-lookup
- agent/remedy
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/tags
- agent/source
- package-manager/redhat