SUSE-SU-2024:3526-1

Details

Description of the patch:

This update for Mesa fixes the following issues:

CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).

Affected Packages(42 packages)

Mesa

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-dri

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-dri-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libEGL1

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libEGL1-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libGL1

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libGL1-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libGLESv2-2

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libglapi0

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

References

ADVISORY

https://bugzilla.suse.com/1222040

ADVISORY

https://bugzilla.suse.com/1222041

ADVISORY

https://bugzilla.suse.com/1222042

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2024-October/037148.html

ADVISORY

https://www.suse.com/security/cve/CVE-2023-45913/

ADVISORY

https://www.suse.com/security/cve/CVE-2023-45919/

ADVISORY

https://www.suse.com/security/cve/CVE-2023-45922/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2024/suse-su-20243526-1/