Hi all, Here is a new stable release: http://fast.dpdk.org/rel/dpdk-18.02.1.tar.xz The git tree is at: http://dpdk.org/browse/dpdk-stable/ This stable release fixes CVE-2018-1059, all users of the vhost library are strongly encouraged to upgrade as soon as possible. Know issues: compilation with VHOST_DEBUG is currently broken, will be fixed in a followup release. Luca Boccassi --- doc/guides/rel_notes/release_18_02.rst | 18 +++ examples/vhost/virtio_net.c | 94 ++++++++++-- examples/vhost_scsi/vhost_scsi.c | 56 ++++++-- lib/librte_eal/common/include/rte_version.h | 2 +- lib/librte_vhost/rte_vhost.h | 46 ++++++ lib/librte_vhost/rte_vhost_version.map | 6 + lib/librte_vhost/vhost.c | 39 ++--- lib/librte_vhost/vhost.h | 8 +- lib/librte_vhost/vhost_user.c | 58 +++++--- lib/librte_vhost/virtio_net.c | 411 ++++++++++++++++++++++++++++++++++++++++++++++------- pkg/dpdk.spec | 2 +- 11 files changed, 622 insertions(+), 118 deletions(-) Luca Boccassi (1): version: 18.02.1 Maxime Coquelin (11): vhost: fix indirect descriptors table translation size (fixes CVE-2018-1059) vhost: check all range is mapped when translating GPAs (fixes CVE-2018-1059) vhost: introduce safe API for GPA translation (fixes CVE-2018-1059) vhost: ensure all range is mapped when translating QVAs (fixes CVE-2018-1059) vhost: add support for non-contiguous indirect descs tables (fixes CVE-2018-1059) vhost: handle virtually non-contiguous buffers in Tx (fixes CVE-2018-1059) vhost: handle virtually non-contiguous buffers in Rx (fixes CVE-2018-1059) vhost: handle virtually non-contiguous buffers in Rx-mrg (fixes CVE-2018-1059) examples/vhost: move to safe GPA translation API examples/vhost_scsi: move to safe GPA translation API vhost: deprecate unsafe GPA translation API (fixes CVE-2018-1059)