From 1ddca9b1ff88060b6c73539f4165d0d7faebdef3b753de1e9e3e84e29a8fc341 Mon Sep 17 00:00:00 2001 From: Nirmoy Das Date: Mon, 23 Apr 2018 16:10:42 +0000 Subject: [PATCH] Accepting request 600113 from home:mvarlese:branches:network - Update to 18.02.1 - Restrict untrusted guest to misuse virtio to corrupt host application(ovs-dpdk) memory which can lead all VM to lose connectivity(CVE-2018-1059,bsc#1089638). Changes: * Add deprecation notice for rte_vhost_gpa_to_vva() * Patch vhost-net and vhost-scsi examples * Fixes checkpatch warnings * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei) * Fix next chuncks translation access rights in Rx paths (Tiwei) * vhost: fix indirect descriptors table translation size * vhost: check all range is mapped when translating GPAs * vhost: introduce safe API for GPA translation * vhost: ensure all range is mapped when translating QVAs * vhost: add support for non-contiguous indirect descs tables * vhost: handle virtually non-contiguous buffers in Tx * vhost: handle virtually non-contiguous buffers in Rx * vhost: handle virtually non-contiguous buffers in Rx-mrg * examples/vhost: move to safe GPA translation API * examples/vhost_scsi: move to safe GPA translation API * vhost/crypto: move to safe GPA translation API * vhost: deprecate unsafe GPA translation API - Update to 18.02.1 - Restrict untrusted guest to misuse virtio to corrupt host application(ovs-dpdk) memory which can lead all VM to lose connectivity(CVE-2018-1059,bsc#1089638). Changes: * Add deprecation notice for rte_vhost_gpa_to_vva() * Patch vhost-net and vhost-scsi examples OBS-URL: https://build.opensuse.org/request/show/600113 OBS-URL: https://build.opensuse.org/package/show/network/dpdk?expand=0&rev=80 --- dpdk-18.02.1.tar.xz | 3 +++ dpdk-18.02.tar.xz | 3 --- dpdk-thunderx.changes | 26 ++++++++++++++++++++++++++ dpdk-thunderx.spec | 4 ++-- dpdk.changes | 26 ++++++++++++++++++++++++++ dpdk.spec | 4 ++-- 6 files changed, 59 insertions(+), 7 deletions(-) create mode 100644 dpdk-18.02.1.tar.xz delete mode 100644 dpdk-18.02.tar.xz diff --git a/dpdk-18.02.1.tar.xz b/dpdk-18.02.1.tar.xz new file mode 100644 index 0000000..1e89254 --- /dev/null +++ b/dpdk-18.02.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:47b8c5712accb91a36c4194ee749973e8373a61aefc373490a02e32f6cb4b6bd +size 10457900 diff --git a/dpdk-18.02.tar.xz b/dpdk-18.02.tar.xz deleted file mode 100644 index ad1c26a..0000000 --- a/dpdk-18.02.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:273665e2d9bc3700a07957e89258d1ed70a7ff950fc25621e252bc03970be1a1 -size 10457524 diff --git a/dpdk-thunderx.changes b/dpdk-thunderx.changes index ebe7645..dccbd35 100644 --- a/dpdk-thunderx.changes +++ b/dpdk-thunderx.changes @@ -1,3 +1,29 @@ +------------------------------------------------------------------- +Mon Apr 23 14:11:51 UTC 2018 - marco.varlese@suse.com + +- Update to 18.02.1 +- Restrict untrusted guest to misuse virtio to corrupt + host application(ovs-dpdk) memory which can lead all VM to lose + connectivity(CVE-2018-1059,bsc#1089638). + Changes: + * Add deprecation notice for rte_vhost_gpa_to_vva() + * Patch vhost-net and vhost-scsi examples + * Fixes checkpatch warnings + * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei) + * Fix next chuncks translation access rights in Rx paths (Tiwei) + * vhost: fix indirect descriptors table translation size + * vhost: check all range is mapped when translating GPAs + * vhost: introduce safe API for GPA translation + * vhost: ensure all range is mapped when translating QVAs + * vhost: add support for non-contiguous indirect descs tables + * vhost: handle virtually non-contiguous buffers in Tx + * vhost: handle virtually non-contiguous buffers in Rx + * vhost: handle virtually non-contiguous buffers in Rx-mrg + * examples/vhost: move to safe GPA translation API + * examples/vhost_scsi: move to safe GPA translation API + * vhost/crypto: move to safe GPA translation API + * vhost: deprecate unsafe GPA translation API + ------------------------------------------------------------------- Fri Apr 20 14:16:57 CEST 2018 - ndas@suse.de diff --git a/dpdk-thunderx.spec b/dpdk-thunderx.spec index b8ded96..a66ba88 100644 --- a/dpdk-thunderx.spec +++ b/dpdk-thunderx.spec @@ -48,7 +48,7 @@ # Do NOT edit this auto generated file! Edit dpdk.spec instead # and run 'pre_checkin.sh' before committing Name: dpdk-thunderx -Version: 18.02 +Version: 18.02.1 Release: 0 Summary: Set of libraries and drivers for fast packet processing (thunderx) License: BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only @@ -160,7 +160,7 @@ The DPDK Kernel NIC Interface (KNI) allows userspace applications access to the %prep # can't use %{name} because of dpdk-thunderx -%setup -q -n dpdk-%{version} +%setup -q -n dpdk-stable-%{version} %patch1 -p1 -z .enic %patch2 -p1 -z .enic diff --git a/dpdk.changes b/dpdk.changes index ebe7645..dccbd35 100644 --- a/dpdk.changes +++ b/dpdk.changes @@ -1,3 +1,29 @@ +------------------------------------------------------------------- +Mon Apr 23 14:11:51 UTC 2018 - marco.varlese@suse.com + +- Update to 18.02.1 +- Restrict untrusted guest to misuse virtio to corrupt + host application(ovs-dpdk) memory which can lead all VM to lose + connectivity(CVE-2018-1059,bsc#1089638). + Changes: + * Add deprecation notice for rte_vhost_gpa_to_vva() + * Patch vhost-net and vhost-scsi examples + * Fixes checkpatch warnings + * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei) + * Fix next chuncks translation access rights in Rx paths (Tiwei) + * vhost: fix indirect descriptors table translation size + * vhost: check all range is mapped when translating GPAs + * vhost: introduce safe API for GPA translation + * vhost: ensure all range is mapped when translating QVAs + * vhost: add support for non-contiguous indirect descs tables + * vhost: handle virtually non-contiguous buffers in Tx + * vhost: handle virtually non-contiguous buffers in Rx + * vhost: handle virtually non-contiguous buffers in Rx-mrg + * examples/vhost: move to safe GPA translation API + * examples/vhost_scsi: move to safe GPA translation API + * vhost/crypto: move to safe GPA translation API + * vhost: deprecate unsafe GPA translation API + ------------------------------------------------------------------- Fri Apr 20 14:16:57 CEST 2018 - ndas@suse.de diff --git a/dpdk.spec b/dpdk.spec index 3eac0a5..c5ff821 100644 --- a/dpdk.spec +++ b/dpdk.spec @@ -46,7 +46,7 @@ %define lname libdpdk-18_02-0 Name: dpdk -Version: 18.02 +Version: 18.02.1 Release: 0 Summary: Set of libraries and drivers for fast packet processing License: BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only @@ -158,7 +158,7 @@ The DPDK Kernel NIC Interface (KNI) allows userspace applications access to the %prep # can't use %{name} because of dpdk-thunderx -%setup -q -n dpdk-%{version} +%setup -q -n dpdk-stable-%{version} %patch1 -p1 -z .enic %patch2 -p1 -z .enic