vulkan bug fix and enhancement update

The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fixes and Enhancements: Rebase vulkan-loader in 8.6 BZ2016391 Rebase vulkan-headers in 8.6 BZ2016392 Rebase spirv-headers in 8.6 BZ201639...

spirv-tools:spvtools_as_fuzzer: Heap-buffer-overflow in spvTextEncodeOperand

Detailed Report: https://oss-fuzz.com/testcase?key=6399714312978432 Project: spirv-tools Fuzzing Engine: afl Fuzz Target: spvtoolsasfuzzer Job Type: aflasanspirv-tools Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60300010f584 Crash State: spvTextEncodeOperand...

CVE-2021-45689

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...

spirv-tools:spvtools_as_fuzzer: Use-of-uninitialized-value in std::__1::basic_istream<char, std::__1::char_traits<char> >& spvtools::utils::op

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=6330198396633088 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsasfuzzer Job Type: libfuzzermsanspirv-tools Platform Id: linux Crash Type: Use-of-uninitialized-value...

spirv-tools:spvtools_as_fuzzer: Heap-buffer-overflow in spvTextEncodeOperand

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=5200038108725248 Project: spirv-tools Fuzzing Engine: afl Fuzz Target: spvtoolsasfuzzer Job Type: aflasanspirv-tools Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address...

spirv-tools:spvtools_opt_legalization_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<spvtools::opt::FoldVectorShuffleWithConstants

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=4856562481496064 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsoptlegalizationfuzzer Job Type: libfuzzerasani386spirv-tools Platform Id: linux Crash Type:...

spirv-tools:spvtools_opt_size_fuzzer: Crash in std::__1::__function::__func<spvtools::opt::FoldVectorShuffleWithConstants

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=5753797524193280 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsoptsizefuzzer Job Type: libfuzzerasanspirv-tools Platform Id: linux Crash Type: UNKNOWN READ Crash...

RUSTSEC-2021-0096 spirv_headers is unmaintained, use spirv instead

Because of versioning issues; the spirvheaders crate is unmaintained. Use spirv for parsing spirv files...

spirv_headers is unmaintained, use spirv instead

Because of versioning issues; the spirvheaders crate is unmaintained. Use spirv for parsing spirv files...

PT-2021-28382

Name of the Vulnerable Software and Affected Versions: spirv headers crate affected versions not specified Description: The issue is related to versioning problems with the spirv headers crate, which is currently unmaintained. This affects the parsing of spirv files. Recommendations: At the momen...

ALEA-2021:3072 vulkan bug fix and enhancement update

The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fixes and Enhancements: Rebase vulkan-loader in 8.5 BZ1952989 Rebase vulkan-headers in 8.5 BZ1952990 Rebase spirv-headers in 8.5 BZ195299...

vulkan bug fix and enhancement update

An update is available for spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Th...

vulkan bug fix and enhancement update

An update is available for spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Fo...

PT-2021-24263

Name of the Vulnerable Software and Affected Versions: gfx-auxil crate through 2021-01-07 Description: The issue allows arbitrary Read implementations to read from an uninitialized buffer, potentially exposing memory and returning incorrect byte counts. This can lead to undefined behavior due to...