SUSE-SU-2017:0798-1
Dashboard / Vulnerabilities / SUSE-SU-2017:0798-1
SUSE-SU-2017:0798-1
Summary: Security update for virglrenderer
Details: This update for virglrenderer fixes the following issues: Security issues fixed: - CVE-2017-6386: memory leakage while in vrend_create_vertex_elements_state (bsc#1027376) - CVE-2017-6355: integer overflow while creating shader object (bsc#1027108) - CVE-2017-6317: fix memory leak in add shader program (bsc#1026922) - CVE-2017-6210: null pointer dereference in vrend_decode_reset (bsc#1026725) - CVE-2017-6209: stack buffer oveflow in parse_identifier (bsc#1026723) - CVE-2017-5994: out-of-bounds access in vrend_create_vertex_elements_state (bsc#1025507) - CVE-2017-5993: host memory leakage when initialising blitter context (bsc#1025505) - CVE-2017-5957: stack overflow in vrend_decode_set_framebuffer_state (bsc#1024993) - CVE-2017-5956: OOB access while in vrend_draw_vbo (bsc#1024992) - CVE-2017-5937: null pointer dereference in vrend_clear (bsc#1024232) - CVE-2017-5580: OOB access while parsing texture instruction (bsc#1021627) - CVE-2016-10214: host memory leak issue in virgl_resource_attach_backing (bsc#1024244) - CVE-2016-10163: host memory leakage when creating decode context (bsc#1021616)
References: https://www.suse.com/support/update/announcement/2017/suse-su-20170798-1/, https://bugzilla.suse.com/1021616, https://bugzilla.suse.com/1021627, https://bugzilla.suse.com/1024232, https://bugzilla.suse.com/1024244, https://bugzilla.suse.com/1024992, https://bugzilla.suse.com/1024993, https://bugzilla.suse.com/1025505, https://bugzilla.suse.com/1025507, https://bugzilla.suse.com/1026723, https://bugzilla.suse.com/1026725, https://bugzilla.suse.com/1026922, https://bugzilla.suse.com/1027108, https://bugzilla.suse.com/1027376, https://www.suse.com/security/cve/CVE-2016-10163, https://www.suse.com/security/cve/CVE-2016-10214, https://www.suse.com/security/cve/CVE-2017-5580, https://www.suse.com/security/cve/CVE-2017-5937, https://www.suse.com/security/cve/CVE-2017-5956, https://www.suse.com/security/cve/CVE-2017-5957, https://www.suse.com/security/cve/CVE-2017-5993, https://www.suse.com/security/cve/CVE-2017-5994, https://www.suse.com/security/cve/CVE-2017-6209, https://www.suse.com/security/cve/CVE-2017-6210, https://www.suse.com/security/cve/CVE-2017-6317, https://www.suse.com/security/cve/CVE-2017-6355, https://www.suse.com/security/cve/CVE-2017-6386
Affected packages
Package
Name: virglrenderer
Purl: pkg:rpm/suse/virglrenderer&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2
Affected ranges
Type: ECOSYSTEM
Events:
