summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorMichael Phelan <michael.phelan@intel.com>2022-09-21 15:08:47 +0000
committerIan Stokes <ian.stokes@intel.com>2022-10-04 10:03:57 +0100
commit9b1a897e25ab6e96d64bc20ee5b2738d26ae25b1 (patch)
tree5d0ae4b8f7a1163b8eab572a2c6af741c246eb7d /NEWS
parent5a686267d36c5c4229ec801a9616ceb60740fbe3 (diff)
downloadopenvswitch-9b1a897e25ab6e96d64bc20ee5b2738d26ae25b1.tar.gz
dpdk: Use DPDK 21.11.2 release.
Update OVS CLI and relevant documentation to use DPDK 21.11.2. DPDK 21.11.2 contains fixes for the CVEs listed below: CVE-2022-28199 [1] CVE-2022-2132 [2] A bug was introduced in DPDK 21.11.1 by the commit 01e3dee29c02 ("vhost: fix unsafe vring addresses modifications"). This bug can cause a deadlock when vIOMMU is enabled and NUMA reallocation of the virtqueues happen. A fix [3] has been posted and pushed to the DPDK 21.11 branch. If a user wishes to avoid the issue then it is recommended to use DPDK 21.11.0 until the release of DPDK 21.11.3. It should be noted that DPDK 21.11.0 does not benefit from the numerous bug and CVE fixes addressed since its release. If a user wishes to benefit from these fixes it is recommended to use DPDK 21.11.2. [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28199 [2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2132 [3] https://patches.dpdk.org/project/dpdk/patch/20220725203206.427083-2-david.marchand@redhat.com/ Signed-off-by: Michael Phelan <michael.phelan@intel.com> Acked-by: Kevin Traynor <ktraynor@redhat.com> Signed-off-by: Ian Stokes <ian.stokes@intel.com>
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS18
1 files changed, 18 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index d5ec09813..ff77ee404 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,24 @@ Post-v3.0.0
"--names" option.
- Windows:
* Conntrack IPv6 fragment support.
+ - DPDK:
+ * OVS validated with DPDK 21.11.2.
+ DPDK 21.11.2 contains fixes for the following CVEs:
+ CVE-2022-28199 cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28199
+ CVE-2022-2132 cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2132
+ A bug was introduced in DPDK 21.11.1 by the commit
+ 01e3dee29c02 ("vhost: fix unsafe vring addresses modifications").
+ This bug can cause a deadlock when vIOMMU is enabled and NUMA
+ reallocation of the virtqueues happen.
+ A fix has been posted and pushed to the DPDK 21.11 branch.
+ It can be found here:
+ https://patches.dpdk.org/project/dpdk/patch/20220725203206.427083-2-david.marchand@redhat.com/.
+ If a user wishes to avoid the issue then it is recommended to use
+ DPDK 21.11.0 until the release of DPDK 21.11.3.
+ It should be noted that DPDK 21.11.0 does not benefit from the numerous
+ bug and CVE fixes addressed since its release.
+ If a user wishes to benefit from these fixes it is recommended to use
+ DPDK 21.11.2.
v3.0.0 - 15 Aug 2022