File virglrenderer.changes of Package virglrenderer.22703

Overview Repositories Revisions Requests Users Attributes Meta

File virglrenderer.changes of Package virglrenderer.22703

-------------------------------------------------------------------
Wed Feb  2 09:33:17 UTC 2022 - Michael Vetter <mvetter@suse.com>

- security update
  * Fix OOB in read_transfer_data() (CVE-2022-0135 bsc#1195389)
    Add 0019-95e581fd-vrend-fix-oob-read_transfer_data.patch

-------------------------------------------------------------------
Mon Jan 17 07:47:44 UTC 2022 - pgajdos@suse.com

- security update
- added patches
  fix CVE-2022-0175 [bsc#1194601], VUL-0: CVE-2022-0175: virglrenderer: Missing initialization of res->ptr
  + virglrenderer-CVE-2022-0175.patch

-------------------------------------------------------------------
Fri Dec 20 08:20:43 UTC 2019 - lma@suse.com

- Add 4 security fixes
* Check resource creation more thoroughly (CVE-2019-18388 bsc#1159479)
  0014-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
  0015-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch

* check info formats in blits (CVE-2019-18390 bsc#1159478)
  0016-24f67de-vrend-check-info-formats-in-blits.patch

* check transfer bounds for negative values too (CVE-2019-18389 bsc#1159482)
  0017-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch

* check transfer iov holds enough data for the data upload (CVE-2019-18391 bsc#1159486)
  0018-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch

-------------------------------------------------------------------
Tue Mar 14 09:20:25 UTC 2017 - abergmann@suse.com

- Add 1 security fix
* Fix memory leak in add shader program (CVE-2017-6317 bsc#1026922)
  0013-a2f12a1b-fix-memory-leak-in-add-shader-program.patch

-------------------------------------------------------------------
Fri Mar 10 03:21:30 UTC 2017 - lma@suse.com

- Add 2 security fixes
* Fix integer overflow in create shader (CVE-2017-6355 bsc#1027108)
  0011-93761787-renderer-fix-integer-overflow-in-create-shader.patch

* Fix memory leak in vertex elements state create (CVE-2017-6386 bsc#1027376)
  0012-737c3350-renderer-fix-memory-leak-in-vertex-elements-state-cr.patch

-------------------------------------------------------------------
Tue Feb 28 06:15:30 UTC 2017 - lma@suse.com

- Add couple of security fixes
* Additional memory leak fix by Matthias Gerstner (CVE-2017-5956 bsc#1024992)
  2001-avoid-memory-leak-for-a5ac4994.patch

* Fix overflow in parse property of gallium/tgsi (CVE-2017-6209 bsc#1026723)
  0009-e534b51c-gallium-tgsi-fix-overflow-in-parse-property.patch

* Never destroy context 0 in vrend_renderer_context_destroy (CVE-2017-6210 bsc#1026725)
  0010-0a5dff15-vrend-never-destroy-context-0-in-vrend_renderer_cont.patch

-------------------------------------------------------------------
Fri Feb 24 07:37:33 UTC 2017 - lma@suse.com

- Add 3 security fixes
* Fix a leak in context create internal (CVE-2016-10163 bsc#1021616)
  0006-747a293-vrend-fix-a-leak-in-context-create-internal.patch
* Add sanity check for vertext buffer index (CVE-2017-5956 bsc#1024992)
  0007-a5ac4994-vrend-add-sanity-check-for-vertext-buffer-index.patch
* Fix oob access in parse instruction (CVE-2017-5580 bsc#1021627)
  0008-28894a30-gallium-tgsi-fix-oob-access-in-parse-instruction.patch

-------------------------------------------------------------------
Fri Feb 17 09:17:14 UTC 2017 - lma@suse.com

- Address various security issues
* Fix null pointer dereference in vrend_clear (CVE-2017-5937 bsc#1024232)
  0001-48f67f60-renderer-fix-NULL-pointer-deref-in-vrend_clear.patch
* Fix host memory leak issue in virgl_resource_attach_backing (CVE-2016-10214 bsc#1024244)
  0002-40b0e781-renderer-fix-a-leak-in-resource-attach.patch
* Fix memory leak in int blit context (CVE-2017-5993 bsc#1025505)
  0003-6eb13f7a-vrend-fix-memory-leak-in-int-blit-context.patch
* Fix heap overflow in vertex elements state create (CVE-2017-5994 bsc#1025507)
  0004-114688c5-renderer-fix-heap-overflow-in-vertex-elements-state-.patch
* Fix a stack overflow in set framebuffer state (CVE-2017-5957 bsc#1024993)
  0005-926b9b34-vrend-fix-a-stack-overflow-in-set-framebuffer-state.patch

-------------------------------------------------------------------
Fri Jun  3 16:35:39 UTC 2016 - brogers@suse.com

- Further tweaks to package layout, including splitting out
  the test server into it's own package.

-------------------------------------------------------------------
Wed Jun  1 11:01:38 UTC 2016 - brogers@suse.com

- Refine BuildRequires tags

-------------------------------------------------------------------
Thu Apr 14 02:45:57 UTC 2016 - brogers@suse.com

- Fixed url in spec file

-------------------------------------------------------------------
Wed Apr 13 06:15:29 UTC 2016 - lma@suse.com

- Fixed epoxy dependency

-------------------------------------------------------------------
Tue Apr 12 07:44:05 UTC 2016 - lma@suse.com

- Initial package, based upon virglrenderer upstream sources
  (git tag: 0.5.0)

Places

File virglrenderer.changes of Package virglrenderer.22703

Places