Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2022:0479-1

Опубликовано: 17 фев. 2022
Источник: suse-cvrf

Описание

Security update for virglrenderer

This update for virglrenderer fixes the following issues:

  • CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389).

Список пакетов

openSUSE Leap 15.3
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
virglrenderer-test-server-0.6.0-4.9.1

Ссылки

Описание

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.

Затронутые продукты
openSUSE Leap 15.3:libvirglrenderer0-0.6.0-4.9.1
openSUSE Leap 15.3:virglrenderer-devel-0.6.0-4.9.1
openSUSE Leap 15.3:virglrenderer-test-server-0.6.0-4.9.1
Ссылки