Several security vulnerabilities were discovered in virglrenderer, a virtual GPU for KVM virtualization. CVE-2019-18388 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3232-1
Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202210-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: virglrenderer: Multiple vulnerabilities Date: October 16, 2022 Bugs: #866821 ID: 202210-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution. Background ========= A virtual 3D GPU library, that allows the guest operating system to use the host GPU to accelerate 3D rendering. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/virglrenderer < 0.10.1 > = 0.10.1 Description ========== Multiple vulnerabilities have been discovered in virglrenderer. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All virglrenderer users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-libs/virglrenderer-0.10.1" References ========= [ 1 ] CVE-2022-0135 https://nvd.nist.gov/vuln/detail/CVE-2022-0135 [ 2 ] CVE-2022-0175 https://nvd.nist.gov/vuln/detail/CVE-2022-0175 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202210-05 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2395-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fix OOB in read_transfer_data. (bsc#1195389) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2395=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2395=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirglrenderer1-0.9.1-150400.3.3.1 libvirglrenderer1-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debugsource-0.9.1-150400.3.3.1 virglrenderer-devel-0.9.1-150400.3.3.1 virglrenderer-test-server-0.9.1-150400.3.3.1 virglrenderer-test-server-debuginfo-0.9.1-150400.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libvirglrenderer1-0.9.1-150400.3.3.1 libvirglrenderer1-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debuginfo-0.9.1-150400.3.3.1 virglrenderer-debugsource-0.9.1-150400.3.3.1 virglrenderer-devel-0.9.1-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . SUSE has released a crucial security update for virglrenderer vulnerabilities, recommended for all affected products to mitigate risks from potential exploits and ensure system security. virglrenderer update, SUSE security, out-of-bounds fix, security patch. . Severity: Important. LinuxSecurity.com Team
Several security issues were fixed in virglrenderer.. =========================================================================Ubuntu Security Notice USN-5309-1 February 28, 2022 virglrenderer vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 20.04 LTS Summary: Several security issues were fixed in virglrenderer. Software Description: - virglrenderer: virtual GPU for KVM virtualization Details: It was discovered that virglrenderer incorrectly handled memory. An attacker inside a guest could use this issue to cause virglrenderer to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-0135) It was discovered that virglrenderer incorrectly initialized memory. An attacker inside a guest could possibly use this issue to obtain sensitive host information. (CVE-2022-0175) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.10: libvirglrenderer1 0.8.2-5ubuntu0.21.10.1 Ubuntu 20.04 LTS: libvirglrenderer1 0.8.2-1ubuntu1.1 After a standard system update you need to restart all virtual machines to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5309-1 CVE-2022-0135, CVE-2022-0175 Package Information: https://launchpad.net/ubuntu/+source/virglrenderer/0.8.2-5ubuntu0.21.10.1 https://launchpad.net/ubuntu/+source/virglrenderer/0.8.2-1ubuntu1.1 . Patches have been implemented to mitigate various virglrenderer security flaws in Ubuntu 21.10 and 20.04 LTS, focusing on resolving memory management concerns.. Virglrenderer Security Flaws, Ubuntu 21.10 Updates, Memory Crash Issues. . Severity: Critical. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0478-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: HPE Helion Openstack 8 SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-478=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2022-478=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-478=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2022-478=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-478=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-478=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2022-478=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-478=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-478=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2022-478=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-478=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-478=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2022-478=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE OpenStack Cloud 9 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE OpenStack Cloud 8 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): virglrenderer-debugsource-0.5.0-12.9.1 virglrenderer-devel-0.5.0-12.9.1 - SUSE Linux Enterprise Server for SAP12-SP4 (ppc64le x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 - HPE Helion Openstack 8 (x86_64): libvirglrenderer0-0.5.0-12.9.1 libvirglrenderer0-debuginfo-0.5.0-12.9.1 virglrenderer-debugsource-0.5.0-12.9.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . SUSE has released a Security Update targeting CVE-2022-0135 pertaining to virglrenderer, providing guidance for impacted distributions.. virglrenderer update, SUSE vulnerability, SAP security update, OpenStack patches. . Severity: Important. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0479-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-479=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-479=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-479=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-479=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-479=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-479=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-479=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-479=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-479=1 - SUSELinux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-479=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-479=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-479=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-479=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-479=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-479=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-479=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-479=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-479=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Manager Proxy 4.1 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 - SUSE CaaS Platform 4.0 (x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . SUSE Security Patch resolves CVE-2022-0136 impacting virglrenderer, reinforcing system safety with essential corrections.. SUSE Update, Virglrenderer Security, Linux Patch Management, Critical Fix. . Severity: Important. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0479-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-479=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-479=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 virglrenderer-test-server-0.6.0-4.9.1 virglrenderer-test-server-debuginfo-0.6.0-4.9.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389 . Crucial openSUSE upgrade for mesa, tackling significant vulnerabilities and enhancing overall system protection.. openSUSE Security Update, virglrenderer Fixes, ImportantSecurity Patches, Security Update Process. . Severity: Important. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0111-1 Rating: important References: #1194601 Cross-References: CVE-2022-0175 CVSS scores: CVE-2022-0175 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0175: Fixed missing initialization of res-> ptr (bsc#1194601). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-111=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.6.1 libvirglrenderer0-debuginfo-0.6.0-4.6.1 virglrenderer-debuginfo-0.6.0-4.6.1 virglrenderer-debugsource-0.6.0-4.6.1 virglrenderer-devel-0.6.0-4.6.1 virglrenderer-test-server-0.6.0-4.6.1 virglrenderer-test-server-debuginfo-0.6.0-4.6.1 References: https://www.suse.com/security/cve/CVE-2022-0175.html https://bugzilla.suse.com/1194601 . The latest openSUSE Security Update for virglrenderer resolves the critical vulnerability CVE-2022-0175. It is essential to implement the required patch promptly.. virglrenderer update, openSUSE security, CVE-2022-0175 fix, software security patch. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.