File _patchinfo of Package patchinfo.8207
<patchinfo incident="8207"> <issue id='2018-1059' tracker='cve' /> <issue id='1089638' tracker='bnc'>VUL-0: CVE-2018-1059: dpdk: Vulnerability in the vhost-user library</issue> <category>security</category> <rating>moderate</rating> <description> This update fixes the following issues: - CVE-2018-1059: The DPDK vhost-user interface did not check to verify that all the requested guest physical range was mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may have lead to a malicious guest exposing vhost-user backend process memory (bsc#1089638). This update was imported from the SUSE:SLE-12-SP3:Update update project.</description> <packager>ndas</packager> <summary>Security update for dpdk-thunderxdpdk</summary> </patchinfo>