[Medium] Patch ceph for CVE-2020-10723

SPECS/ceph/CVE-2020-10723.patch

@@ -0,0 +1,26 @@
+From 8558fe7d316167be9c0e1b25aabd4f96a5079250 Mon Sep 17 00:00:00 2001
+From: Kevin Lockwood <[email protected]>
+Date: Mon, 3 Feb 2025 16:23:59 -0800
+Subject: [PATCH] [Medium] Patch ceph for CVE-2020-10723
+
+Link: https://git.dpdk.org/dpdk/patch/?id=c78d94189dced04def987a17f16097fcb197a186
+---
+ src/seastar/dpdk/lib/librte_vhost/vhost_user.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/seastar/dpdk/lib/librte_vhost/vhost_user.c b/src/seastar/dpdk/lib/librte_vhost/vhost_user.c
+index c9e29ece8..1f84fc212 100644
+--- a/src/seastar/dpdk/lib/librte_vhost/vhost_user.c
++++ b/src/seastar/dpdk/lib/librte_vhost/vhost_user.c
+@@ -1841,7 +1841,7 @@ static int
+ vhost_user_check_and_alloc_queue_pair(struct virtio_net *dev,
+ 			struct VhostUserMsg *msg)
+ {
+-	uint16_t vring_idx;
++	uint32_t vring_idx;
+
+ 	switch (msg->request.master) {
+ 	case VHOST_USER_SET_VRING_KICK:
+-- 
+2.34.1
+

SPECS/ceph/ceph.spec

@@ -19,6 +19,7 @@ Patch4:         CVE-2020-22217.patch
 Patch5:         CVE-2015-9251.patch
 Patch6:         CVE-2012-6708.patch
 Patch7:         CVE-2012-2677.patch
+Patch8:         CVE-2020-10723.patch
 #
 # Copyright (C) 2004-2019 The Ceph Project Developers. See COPYING file
 # at the top-level directory of this distribution and at
@@ -2007,8 +2008,9 @@ exit 0
 %config %{_sysconfdir}/prometheus/ceph/ceph_default_alerts.yml
 
 %changelog
-* Thu Jan 30 2025 Kevin Lockwood <[email protected]> - 18.2.2-5
+* Mon Feb 03 2025 Kevin Lockwood <[email protected]> - 18.2.2-5
 - Fix for CVE-2012-2677
+- Fix for CVE-2020-10723
 
 * Tue Jan 28 2025 Kevin Lockwood <[email protected]> - 18.2.2-4
 - Fix for CVE-2014-5461