Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dpdk for openSUSE:Factory checked in at 2021-05-23 00:06:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dpdk (Old) and /work/SRC/openSUSE:Factory/.dpdk.new.2988 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dpdk" Sun May 23 00:06:13 2021 rev:48 rq:894929 version:19.11.8 Changes: -------- --- /work/SRC/openSUSE:Factory/dpdk/dpdk.changes 2021-04-22 18:06:18.806729318 +0200 +++ /work/SRC/openSUSE:Factory/.dpdk.new.2988/dpdk.changes 2021-05-23 00:06:18.382568629 +0200 @@ -1,0 +2,25 @@ +Fri May 14 11:58:06 UTC 2021 - Ferdinand Thiessen <r...@fthiessen.de> + +- Update LTS version to maintenance release 19.11.8 + * vhost/crypto: fix data length check (CVE-2020-14374) + * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378) + * vhost/crypto: fix incorrect write back source + * vhost/crypto: fix missed request check for copy mode + (CVE-2020-14376 CVE-2020-14377) + * vhost/crypto: fix pool allocation + * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375) + * Changes from 19.11.6: + https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14 + * Changes from 19.11.7: + https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18 +- Drop security patches, fixed with 19.11.5 + * 0001-vhost-crypto-fix-pool-allocation.patch + * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch + * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch + * 0004-vhost-crypto-fix-incorrect-write-back-source.patch + * 0005-vhost-crypto-fix-data-length-check.patch + * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch +- Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6 +- Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch + +------------------------------------------------------------------- Old: ---- 0001-kni-fix-build-with-Linux-5.9.patch 0001-vhost-crypto-fix-pool-allocation.patch 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch 0004-vhost-crypto-fix-incorrect-write-back-source.patch 0005-vhost-crypto-fix-data-length-check.patch 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch dpdk-19.11.4.tar.xz New: ---- dpdk-19.11.8.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dpdk.spec ++++++ --- /var/tmp/diff_new_pack.MzPsv6/_old 2021-05-23 00:06:19.746561371 +0200 +++ /var/tmp/diff_new_pack.MzPsv6/_new 2021-05-23 00:06:19.750561350 +0200 @@ -53,7 +53,7 @@ # Add option to build without tools %bcond_without tools Name: dpdk%{name_tag} -Version: 19.11.4 +Version: 19.11.8 Release: 0 Summary: Set of libraries and drivers for fast packet processing License: BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only @@ -63,13 +63,6 @@ Source1: preamble Patch1: 0001-fix-cpu-compatibility.patch Patch2: 0001-SLE15-SP3-compatibility-patch-for-kni.patch -Patch3: 0001-vhost-crypto-fix-pool-allocation.patch -Patch4: 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch -Patch5: 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch -Patch6: 0004-vhost-crypto-fix-incorrect-write-back-source.patch -Patch7: 0005-vhost-crypto-fix-data-length-check.patch -Patch8: 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch -Patch9: 0001-kni-fix-build-with-Linux-5.9.patch BuildRequires: doxygen BuildRequires: fdupes BuildRequires: libelf-devel @@ -168,13 +161,6 @@ %setup -q -n dpdk-stable-%{version} %patch1 -p1 -z .init %patch2 -p1 -z .init -%patch3 -p1 -z .init -%patch4 -p1 -z .init -%patch5 -p1 -z .init -%patch6 -p1 -z .init -%patch7 -p1 -z .init -%patch8 -p1 -z .init -%patch9 -p1 -z .init # This fixes CROSS compilation (broken) in the mk file for ThunderX sed -i '/^CROSS /s/^/#/' mk/machine/thunderx/rte.vars.mk @@ -351,6 +337,9 @@ ln -s %{_bindir}/dpdk-procinfo %{buildroot}%{_bindir}/dpdk_proc_info ln -s %{_sbindir}/dpdk-devbind %{buildroot}%{_sbindir}/dpdk_nic_bind +# Fix interpreter +find %{buildroot} -name "*.py" -exec sed -i 's|env python|python|' \{\} + + # Remove duplicates %fdupes %{buildroot}/%{_prefix} ++++++ 0001-SLE15-SP3-compatibility-patch-for-kni.patch ++++++ --- /var/tmp/diff_new_pack.MzPsv6/_old 2021-05-23 00:06:19.770561244 +0200 +++ /var/tmp/diff_new_pack.MzPsv6/_new 2021-05-23 00:06:19.770561244 +0200 @@ -3,14 +3,11 @@ Date: Mon, 21 Sep 2020 14:50:13 +0200 Subject: [PATCH] SLE15 SP3 compatibility patch for kni ---- - kernel/linux/kni/compat.h | 8 ++++++-- - 1 file changed, 6 insertions(+), 2 deletions(-) +Updated 2021-05-14 -diff --git a/kernel/linux/kni/compat.h b/kernel/linux/kni/compat.h -index 9ee45dbf6..9dee63af2 100644 ---- a/kernel/linux/kni/compat.h -+++ b/kernel/linux/kni/compat.h +diff -Nur dpdk-stable-19.11.8/kernel/linux/kni/compat.h new/kernel/linux/kni/compat.h +--- dpdk-stable-19.11.8/kernel/linux/kni/compat.h 2021-04-16 10:13:47.000000000 +0200 ++++ new/kernel/linux/kni/compat.h 2021-05-14 14:19:13.576601634 +0200 @@ -14,7 +14,10 @@ #define SLE_VERSION(a, b, c) KERNEL_VERSION(a, b, c) #endif @@ -23,15 +20,11 @@ /* SLES12SP3 is at least 4.4.57+ based */ #define SLE_VERSION_CODE SLE_VERSION(12, 3, 0) #elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 12, 28)) -@@ -131,6 +134,7 @@ - #define HAVE_IOVA_TO_KVA_MAPPING_SUPPORT +@@ -132,6 +135,7 @@ #endif --#if KERNEL_VERSION(5, 6, 0) <= LINUX_VERSION_CODE -+#if KERNEL_VERSION(5, 6, 0) <= LINUX_VERSION_CODE || \ -+ (SLE_VERSION_CODE && SLE_VERSION_CODE == SLE_VERSION(15, 3, 0)) + #if KERNEL_VERSION(5, 6, 0) <= LINUX_VERSION_CODE || \ ++ (SLE_VERSION_CODE && SLE_VERSION_CODE == SLE_VERSION(15, 3, 0)) || \ + (defined(RHEL_RELEASE_CODE) && \ + RHEL_RELEASE_VERSION(8, 3) <= RHEL_RELEASE_CODE) #define HAVE_TX_TIMEOUT_TXQUEUE - #endif --- -2.26.2 - ++++++ dpdk-19.11.4.tar.xz -> dpdk-19.11.8.tar.xz ++++++ /work/SRC/openSUSE:Factory/dpdk/dpdk-19.11.4.tar.xz /work/SRC/openSUSE:Factory/.dpdk.new.2988/dpdk-19.11.8.tar.xz differ: char 26, line 1