SUSE-SU-2024:3544-1

Опубликовано: 08 окт. 2024

Источник: suse-cvrf

Описание

Security update for Mesa

This update for Mesa fixes the following issues:

CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).

Список пакетов

Image SLES15-SP4-SAP

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-BYOS

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-BYOS-Azure

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-BYOS-EC2

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-BYOS-GCE

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-EC2

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-GCE

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Hardened

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Hardened-Azure

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Hardened-BYOS

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Hardened-GCE

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAPCAL

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAPCAL-Azure

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAPCAL-EC2

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAPCAL-GCE

Mesa-21.2.4-150400.68.15.1

Mesa-KHR-devel-21.2.4-150400.68.15.1

Mesa-dri-21.2.4-150400.68.15.1

Mesa-gallium-21.2.4-150400.68.15.1

Mesa-libEGL-devel-21.2.4-150400.68.15.1

Mesa-libEGL1-21.2.4-150400.68.15.1

Mesa-libGL-devel-21.2.4-150400.68.15.1

Mesa-libGL1-21.2.4-150400.68.15.1

Mesa-libglapi0-21.2.4-150400.68.15.1

libgbm1-21.2.4-150400.68.15.1

SUSE Linux Enterprise Micro 5.3

libgbm1-21.2.4-150400.68.15.1

SUSE Linux Enterprise Micro 5.4

libgbm1-21.2.4-150400.68.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

Mesa-libVulkan-devel-21.2.4-150400.68.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

Mesa-libVulkan-devel-21.2.4-150400.68.15.1

SUSE Linux Enterprise Workstation Extension 15 SP5

libXvMC_nouveau-21.2.4-150400.68.15.1

SUSE Linux Enterprise Workstation Extension 15 SP6

libXvMC_nouveau-21.2.4-150400.68.15.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20243544-1/
Link for SUSE-SU-2024:3544-1
https://lists.suse.com/pipermail/sle-updates/2024-October/037170.html
E-Mail link for SUSE-SU-2024:3544-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1222040
SUSE Bug 1222040
https://bugzilla.suse.com/1222041
SUSE Bug 1222041
https://bugzilla.suse.com/1222042
SUSE Bug 1222042
https://www.suse.com/security/cve/CVE-2023-45913/
SUSE CVE CVE-2023-45913 page
https://www.suse.com/security/cve/CVE-2023-45919/
SUSE CVE CVE-2023-45919 page
https://www.suse.com/security/cve/CVE-2023-45922/
SUSE CVE CVE-2023-45922 page

Описание

** DISPUTED ** Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.

Затронутые продукты

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS:libgbm1-21.2.4-150400.68.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-45913.html
CVE-2023-45913
https://bugzilla.suse.com/1222040
SUSE Bug 1222040

Описание

** DISPUTED ** Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Затронутые продукты

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS:libgbm1-21.2.4-150400.68.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-45919.html
CVE-2023-45919
https://bugzilla.suse.com/1222041
SUSE Bug 1222041

Описание

** DISPUTED ** glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Затронутые продукты

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libgbm1-21.2.4-150400.68.15.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS:libgbm1-21.2.4-150400.68.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-45922.html
CVE-2023-45922
https://bugzilla.suse.com/1222042
SUSE Bug 1222042

SUSE-SU-2024:3544-1

Описание

Список пакетов

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Workstation Extension 15 SP5

SUSE Linux Enterprise Workstation Extension 15 SP6

Ссылки

Уязвимость: CVE-2023-45913

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-45919

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-45922

Описание

Затронутые продукты

Ссылки