Security update for Mesa

This update for Mesa fixes the following issues: CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribute...

SUSE-SU-2024:3526-1 Security update for Mesa

This update for Mesa fixes the following issues: - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. - CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribut...

CVE-2024-46837

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

UBUNTU-CVE-2024-46837

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

CVE-2024-46837 drm/panthor: Restrict high priorities on group_create

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

CVE-2024-46837 drm/panthor: Restrict high priorities on group_create

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

CVE-2024-46837 drm/panthor: Restrict high priorities on group_create

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

RHSA-2021:1804 Red Hat Security Advisory: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update

Bulletin has no description...

RHBA-2014:1376 Red Hat Bug Fix Advisory: xcb-util, xorg-x11-drivers, and mesa bug fix and enhancement update

Bulletin has no description...

RHSA-2013:0898 Red Hat Security Advisory: mesa security update

Bulletin has no description...

RHSA-2013:0897 Red Hat Security Advisory: mesa security update

Bulletin has no description...

Fedora 40 : ffmpeg (2024-810afc5c2e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-810afc5c2e advisory. Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA- API Tenable has extracted the preceding description...

OPENSUSE-SU-2024:10599-1 Mesa-21.2.2-287.1 on GA media

These are all security issues fixed in the Mesa-21.2.2-287.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : mesa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mesa: security bypass in 3D library graphics CVE-2019-5068 Note that Nessus has not tested for this issue but has...

RHEL 7 : mesa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mesa: security bypass in 3D library graphics CVE-2019-5068 Note that Nessus has not tested for this issue but has...

RHEL 6 : mesa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mesa: security bypass in 3D library graphics CVE-2019-5068 Note that Nessus has not tested for this issue but has...

RHEL 5 : mesa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mesa: security bypass in 3D library graphics CVE-2019-5068 Note that Nessus has not tested for this issue but has...

mesa bug fix and enhancement update

An update is available for mesa. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4...

SUSE CVE-2023-45919

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

SUSE CVE-2023-45913

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId. This vulnerability is triggered when the X11 server sends an DRI2BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is ...