==========================================================================
Ubuntu Security Notice USN-4550-1
September 28, 2020
dpdk vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in DPDK.
Software Description:
– dpdk: set of libraries for fast packet processing
Details:
Ryan Hall discovered that DPDK incorrectly handled vhost crypto. An
attacker inside a guest could use these issues to perform multiple attacks,
including denial of service attacks, obtaining sensitive information from
the host, and possibly executing arbitrary code on the host.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
dpdk 19.11.3-0ubuntu0.2
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4550-1
CVE-2020-14374, CVE-2020-14375, CVE-2020-14376, CVE-2020-14377,
CVE-2020-14378
Package Information:
https://launchpad.net/ubuntu/+source/dpdk/19.11.3-0ubuntu0.2
—–BEGIN PGP SIGNATURE—–
iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAl9yKCgACgkQZWnYVadE
vpPBYRAAr67kaJqg4x/mZSYdRvgNWMDPe3A3MzC2VenaPqJvcRXFeHESdUdkQH7E
SknmVMSf3I+V9dlcoI5KXdIGkzT3BPj0khD1ic+Am8RLZP8iMkx+1sRdtAPNLDcj
15++EudU8QWTSizgj/lFpzy3QliPKwi7nvD6l9DjLEZ9txBUWP4z4P4Su2EijBcw
j3MYrizf/03jhTd6xKxzG6ULq9GmpELhh7o//Q9NhzZZTpa5FTK31UabEOB83/bc
SRAKJR/LeTrcCnkny23mNrAcSNLB7sUCE666knMgpK5syLY7hWhAozAH09MM7pBC
dDRqOBE6KUGWNVNT4IwFDpPHvDlt3NHy3TgyzwzA537uqWIAmVShed+s6ekdb1bs
dlLAP7I6H6v1USEnmnM7ygwXAWZNhlsH249Ts5gMmLHC9n3jtQSSNL3SZSZFRcUR
9JIS+j61Rj86ZxgeP21SLZxn/iuZVXvdx3vIURV8qllyA3hjPk1sVoZ7bTvA2dGK
vy+Ya/Xap6Fd9cWy4HtKstE4Atz0DrrYUZZ6gf+7o3mRQtScd1l+gZKwrtIx5iFm
UunCaIo9J+UvDFXbWhYxanovitPYpl5vw0GZlY2Sk6wZsqCkBoQlNna7qEq6A/eg
Aot36jCsYyLJAYkAiTj0yzTC6X3BwVyeLYb0wpAGXDbwfdtoU20=
=CH8g
—–END PGP SIGNATURE—–
—