DPDK announcements
 help / color / Atom feed
* [dpdk-announce] DPDK 19.11.2 released
@ 2020-05-18 14:50 Luca Boccassi
  0 siblings, 0 replies; only message in thread
From: Luca Boccassi @ 2020-05-18 14:50 UTC (permalink / raw)
  To: announce

Hi all,

Here is a new stable release:
	https://fast.dpdk.org/rel/dpdk-19.11.2.tar.xz

The git tree is at:
	https://dpdk.org/browse/dpdk-stable/?h=19.11

This release fixes the following security issues:

CVE-2020-10722
CVE-2020-10723
CVE-2020-10724
CVE-2020-10725
CVE-2020-10726

A malicious guess/container can cause resource leak resulting a
Denial-of-Service, or memory corruption and crash, or information leak
in vhost-user backend application.

Thanks to the issue reporters, to the developers for fixing them, and
to RedHat and Intel for validating the fixes.

Luca Boccassi

---
 VERSION                                |  2 +-
 doc/guides/rel_notes/release_19_11.rst | 63
++++++++++++++++++++++++++++++++++
 lib/librte_vhost/vhost_crypto.c        | 17 +++++++++
 lib/librte_vhost/vhost_user.c          | 30 ++++++++++++----
 lib/librte_vhost/virtio_net.c          |  4 +++
 5 files changed, 108 insertions(+), 8 deletions(-)
Luca Boccassi (1):
      version: 19.11.2

Marvin Liu (1):
      vhost: fix translated address not checked

Maxime Coquelin (3):
      vhost: check log mmap offset and size overflow
      vhost: fix vring index check
      vhost/crypto: validate keys lengths

Xiaolong Ye (1):
      vhost: fix potential memory space leak

Xuan Ding (1):
      vhost: fix potential fd leak

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, back to index

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-05-18 14:50 [dpdk-announce] DPDK 19.11.2 released Luca Boccassi

DPDK announcements

Archives are clonable:
	git clone --mirror http://inbox.dpdk.org/announce/0 announce/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 announce announce/ http://inbox.dpdk.org/announce \
		announce@dpdk.org
	public-inbox-index announce


Newsgroup available over NNTP:
	nntp://inbox.dpdk.org/inbox.dpdk.announce


AGPL code for this site: git clone https://public-inbox.org/ public-inbox