Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 5 articles for you...
197

Debian 10: Critical Security Advisory DLA-3232-1 for Virglrenderer DoS

Several security vulnerabilities were discovered in virglrenderer, a virtual GPU for KVM virtualization. CVE-2019-18388 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3232-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Tobias Frost December 07, 2022 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : virglrenderer Version : 0.7.0-2+deb10u1 CVE ID : CVE-2019-18388 CVE-2019-18389 CVE-2019-18390 CVE-2019-18391 CVE-2020-8002 CVE-2020-8003 CVE-2022-0135 Debian Bug : 946942 949954 1009073 Several security vulnerabilities were discovered in virglrenderer, a virtual GPU for KVM virtualization. CVE-2019-18388 A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands. CVE-2019-18389 A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. CVE-2019-18390 An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands. CVE-2019-18391 A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. CVE-2020-8002 A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing aCompute Shader (CS). CVE-2020-8003 A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrend_renderer_resource_allocated_texture is not an appropriate place for a free. CVE-2022-0135 An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution. For Debian 10 buster, these problems have been fixed in version 0.7.0-2+deb10u1. We recommend that you upgrade your virglrenderer packages. For the detailed security status of virglrenderer please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/virglrenderer Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The DLA-3232-1 security advisory for Debian LTS fixes crucial vulnerabilities in virglrenderer, critical for OpenGL rendering in virtualization, urging updates. Virglrenderer Security Update, Debian LTS Advisory, Denial of Service Threats. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 07, 2022 Critical Debian LTS
91

Gentoo: GLSA-202210-05 High Severity: Virglrenderer Remote Code Execution

Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202210-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: virglrenderer: Multiple vulnerabilities Date: October 16, 2022 Bugs: #866821 ID: 202210-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution. Background ========= A virtual 3D GPU library, that allows the guest operating system to use the host GPU to accelerate 3D rendering. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/virglrenderer < 0.10.1 > = 0.10.1 Description ========== Multiple vulnerabilities have been discovered in virglrenderer. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All virglrenderer users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-libs/virglrenderer-0.10.1" References ========= [ 1 ] CVE-2022-0135 https://nvd.nist.gov/vuln/detail/CVE-2022-0135 [ 2 ] CVE-2022-0175 https://nvd.nist.gov/vuln/detail/CVE-2022-0175 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202210-05 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2022 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Gentoo GLSA 202210-05 highlights severe weaknesses in virglrenderer, presenting a considerable threat of remote code execution. Take immediate action!. Gentoo Security Advisory, virglrenderer, remote execution risk. . LinuxSecurity.com Team

Calendar 2 Oct 16, 2022 Gentoo
100

SUSE: 2022:2395-1 Important: Virglrenderer Out-of-Bounds Fix

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2395-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fix OOB in read_transfer_data. (bsc#1195389) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2395=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2395=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirglrenderer1-0.9.1-150400.3.3.1 libvirglrenderer1-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debugsource-0.9.1-150400.3.3.1 virglrenderer-devel-0.9.1-150400.3.3.1 virglrenderer-test-server-0.9.1-150400.3.3.1 virglrenderer-test-server-debuginfo-0.9.1-150400.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libvirglrenderer1-0.9.1-150400.3.3.1 libvirglrenderer1-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debugsource-0.9.1-150400.3.3.1 virglrenderer-devel-0.9.1-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . SUSE has released a crucial security update for virglrenderer vulnerabilities, recommended for all affected products to mitigate risks from potential exploits and ensure system security. virglrenderer update, SUSE security, out-of-bounds fix, security patch. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 14, 2022 Important SuSE
172

Ubuntu 21.10 and 20.04 LTS USN-5309-1: Virglrenderer Denial of Service

Several security issues were fixed in virglrenderer.. =========================================================================Ubuntu Security Notice USN-5309-1 February 28, 2022 virglrenderer vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 20.04 LTS Summary: Several security issues were fixed in virglrenderer. Software Description: - virglrenderer: virtual GPU for KVM virtualization Details: It was discovered that virglrenderer incorrectly handled memory. An attacker inside a guest could use this issue to cause virglrenderer to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-0135) It was discovered that virglrenderer incorrectly initialized memory. An attacker inside a guest could possibly use this issue to obtain sensitive host information. (CVE-2022-0175) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.10: libvirglrenderer1 0.8.2-5ubuntu0.21.10.1 Ubuntu 20.04 LTS: libvirglrenderer1 0.8.2-1ubuntu1.1 After a standard system update you need to restart all virtual machines to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5309-1 CVE-2022-0135, CVE-2022-0175 Package Information: https://launchpad.net/ubuntu/+source/virglrenderer/0.8.2-5ubuntu0.21.10.1 https://launchpad.net/ubuntu/+source/virglrenderer/0.8.2-1ubuntu1.1 . Patches have been implemented to mitigate various virglrenderer security flaws in Ubuntu 21.10 and 20.04 LTS, focusing on resolving memory management concerns.. Virglrenderer Security Flaws, Ubuntu 21.10 Updates, Memory Crash Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 28, 2022 Critical Ubuntu
100

SUSE: 2022:0478-1 Important: Virglrenderer Out-Of-Bounds Write

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0478-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: HPE Helion Openstack 8 SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-478=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2022-478=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-478=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2022-478=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-478=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-478=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2022-478=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-478=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-478=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2022-478=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-478=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-478=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2022-478=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE OpenStack Cloud 9 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE OpenStack Cloud 8 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): virglrenderer-debugsource-0.5.0-12.9.1 virglrenderer-devel-0.5.0-12.9.1 - SUSE Linux Enterprise Server for SAP12-SP4 (ppc64le x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - HPE Helion Openstack 8 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . SUSE has released a Security Update targeting CVE-2022-0135 pertaining to virglrenderer, providing guidance for impacted distributions.. virglrenderer update, SUSE vulnerability, SAP security update, OpenStack patches. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 17, 2022 Important SuSE
100

SUSE: 2022:0479-1 Important: Virglrenderer Out-of-Bounds Write Fix

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0479-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-479=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-479=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-479=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-479=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-479=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-479=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-479=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-479=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-479=1 - SUSELinux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-479=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-479=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-479=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-479=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-479=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-479=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-479=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-479=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Manager Proxy 4.1 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE CaaS Platform 4.0 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . SUSE Security Patch resolves CVE-2022-0136 impacting virglrenderer, reinforcing system safety with essential corrections.. SUSE Update, Virglrenderer Security, Linux Patch Management, Critical Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 17, 2022 Important SuSE
202

openSUSE: 2022:0479-1 Important: virglrenderer Buffer Overflow

An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0479-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-479=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-479=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 virglrenderer-test-server-0.6.0-4.9.1 virglrenderer-test-server-debuginfo-0.6.0-4.9.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . Crucial openSUSE upgrade for mesa, tackling significant vulnerabilities and enhancing overall system protection.. openSUSE Security Update, virglrenderer Fixes, ImportantSecurity Patches, Security Update Process. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 17, 2022 Important OpenSUSE
202

openSUSE Leap 15.3: 2022:0111-1 Important: Virglrenderer Security Update

An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0111-1 Rating: important References: #1194601 Cross-References: CVE-2022-0175 CVSS scores: CVE-2022-0175 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0175: Fixed missing initialization of res-> ptr (bsc#1194601). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-111=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.6.1 libvirglrenderer0-debuginfo-0.6.0-4.6.1 virglrenderer-debuginfo-0.6.0-4.6.1 virglrenderer-debugsource-0.6.0-4.6.1 virglrenderer-devel-0.6.0-4.6.1 virglrenderer-test-server-0.6.0-4.6.1 virglrenderer-test-server-debuginfo-0.6.0-4.6.1 References: https://www.suse.com/security/cve/CVE-2022-0175.html https://bugzilla.suse.com/1194601 . The latest openSUSE Security Update for virglrenderer resolves the critical vulnerability CVE-2022-0175. It is essential to implement the required patch promptly.. virglrenderer update, openSUSE security, CVE-2022-0175 fix, software security patch. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 18, 2022 Important OpenSUSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here