File _patchinfo of Package patchinfo.12453
<patchinfo incident="12453">
<issue tracker="cve" id="2019-14818"/>
<issue tracker="fate" id="327817"/>
<issue tracker="bnc" id="1157179">After update dpdk show core running testpmd</issue>
<issue tracker="bnc" id="1156146">VUL-0: EMBARGOED: CVE-2019-14818: dpdk: malicious container can trigger a denial of service</issue>
<issue tracker="bnc" id="1134968">openvswitch: nothing provides dpdk-devel = 18.11</issue>
<issue tracker="bnc" id="1145713">[TRACKERBUG] FATE#327817: [ECO] Upgrade OVS from 2.8 to 2.11</issue>
<issue tracker="bnc" id="1151455">Please switch dpdk / dpdk to _multibuild</issue>
<issue tracker="fate" id="325951"/>
<issue tracker="fate" id="325916"/>
<issue tracker="fate" id="326992"/>
<issue tracker="fate" id="326025"/>
<issue tracker="jsc" id="SLE-4715"/>
<issue tracker="jsc" id="ECO-274"/>
<packager>ndas</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for dpdk</summary>
<description>This update of dpdk to version 18.11.3 provides the following fixes:
dpdk was updated to 18.11.3 (fate#327817, bsc#1145713, jsc#ECO-274, fate#325916,
fate#325951 fate#326025, fate#326992, bsc#1134968, jsc#SLE-4715)
Security issue fixed:
- CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicius
container may lead to to denial of service (bsc#1156146).
Other issues addressed:
- Fixed a regression by inserting version numbers to the drivers (bsc#1157179).
- Changed to multibuild (bsc#1151455).
- Added support for using externally allocated memory in DPDK.
- Added check for ensuring allocated memory is addressable by devices.
- Updated the C11 memory model version of the ring library.
- Added NXP CAAM JR PMD.
- Added support for GEN3 devices to Intel QAT driver.
- Added Distributed Software Eventdev PMD.
- Updated KNI kernel module, rte_kni library, and KNI sample application.
- Add a new sample application for vDPA.
- Updated mlx5 driver.
* Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
* Reworked flow engine to supported e-switch flow rules (transfer attribute).
* Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple
flow groups with e-switch flow rules.
* Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
* Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
* Added support for meson build.
* Fixed build issue with PPC.
* Added support for BlueField VF.
* Added support for externally allocated static memory for DMA.
</description>
</patchinfo>