Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Red Hat Enterprise Linux: RHSA-2020:2298-01 Moderate: Openvswitch Security

red hat
Calendar Grey May 26, 2020
Dist Redhat Esm H88
A new release of Open vSwitch features notable security updates and improvements tailored for Red Hat Enterprise Linux 7.
An update for openvswitch is now available in Fast Datapath for Red Hat Enterprise Linux 7

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)
* dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* OVS causing high pings and latency inside guest VM when an active DPDK port fails (BZ#1822198)
* SEGV after recirculation in batch processing in vswitchd 2.9.0 (BZ#1826886)

Topics%20covered

Topics Covered

security advisory Red Hat bug fix moderate severity networking openvswitch datapath

References

https://access.redhat.com/security/cve/CVE-2020-10722 https://access.redhat.com/security/cve/CVE-2020-10723 https://access.redhat.com/security/updates/classification/#moderate

Package List

Fast Datapath for Red Hat Enterprise Linux 7:
Source: openvswitch-2.9.0-130.el7fdp.src.rpm
noarch: openvswitch-test-2.9.0-130.el7fdp.noarch.rpm
ppc64le: openvswitch-2.9.0-130.el7fdp.ppc64le.rpm openvswitch-debuginfo-2.9.0-130.el7fdp.ppc64le.rpm openvswitch-devel-2.9.0-130.el7fdp.ppc64le.rpm openvswitch-ovn-central-2.9.0-130.el7fdp.ppc64le.rpm openvswitch-ovn-common-2.9.0-130.el7fdp.ppc64le.rpm openvswitch-ovn-host-2.9.0-130.el7fdp.ppc64le.rpm openvswitch-ovn-vtep-2.9.0-130.el7fdp.ppc64le.rpm python-openvswitch-2.9.0-130.el7fdp.ppc64le.rpm
s390x: openvswitch-2.9.0-130.el7fdp.s390x.rpm openvswitch-debuginfo-2.9.0-130.el7fdp.s390x.rpm openvswitch-devel-2.9.0-130.el7fdp.s390x.rpm openvswitch-ovn-central-2.9.0-130.el7fdp.s390x.rpm openvswitch-ovn-common-2.9.0-130.el7fdp.s390x.rpm openvswitch-ovn-host-2.9.0-130.el7fdp.s390x.rpm openvswitch-ovn-vtep-2.9.0-130.el7fdp.s390x.rpm python-openvswitch-2.9.0-130.el7fdp.s390x.rpm
x86_64: openvswitch-2.9.0-130.el7fdp.x86_64.rpm openvswitch-debuginfo-2.9.0-130.el7fdp.x86_64.rpm openvswitch-devel-2.9.0-130.el7fdp.x86_64.rpm openvswitch-ovn-central-2.9.0-130.el7fdp.x86_64.rpm openvswitch-ovn-common-2.9.0-130.el7fdp.x86_64.rpm openvswitch-ovn-host-2.9.0-130.el7fdp.x86_64.rpm openvswitch-ovn-vtep-2.9.0-130.el7fdp.x86_64.rpm

Read the Full Advisory


Advisory ID: RHSA-2020:2298-01
Product: Fast Datapath
Advisory URL: https://access.redhat.com/errata/RHSA-2020:2298
Issue date: 2020-05-26

Topic

An update for openvswitch is now available in Fast Datapath for Red HatEnterprise Linux 7.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat bug fix moderate severity networking openvswitch datapath

Relevant Releases Architectures

Fast Datapath for Red Hat Enterprise Linux 7 - noarch, ppc64le, s390x, x86_64

Bugs Fixed

1822198 - OVS causing high pings and latency inside guest VM when an active DPDK port fails

1826886 - SEGV after recirculation in batch processing in vswitchd 2.9.0

1828867 - CVE-2020-10722 dpdk: librte_vhost Interger overflow in vhost_user_set_log_base()

1828874 - CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.