File _patchinfo of Package patchinfo.15016

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.15016

<patchinfo incident="15016">
  <issue tracker="bnc" id="1171477">VUL-0: CVE-2020-10722,CVE-2020-10723,CVE-2020-10724,CVE-2020-10725,CVE-2020-10726 :dpdk: multiple vhost related issues</issue>
  <issue tracker="cve" id="2020-10726"/>
  <issue tracker="cve" id="2020-10722"/>
  <issue tracker="cve" id="2020-10723"/>
  <issue tracker="cve" id="2020-10725"/>
  <issue tracker="cve" id="2020-10724"/>
  <packager>jaicaa</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for dpdk</summary>
  <description>This update for dpdk fixes the following issues:

Security issues fixed:

- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).
- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).
- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).
- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).
- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.15016

Places