SUSE-SU-2024:3526-1

UNKNOWN

Security update for Mesa

Published Oct 4, 2024

Modified 1 years ago

Fix available

Details

This update for Mesa fixes the following issues:

CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).

Affected Packages(43 packages)

Mesa

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5SUSE Linux Enterprise Workstation Extension 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-dri

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-dri-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-drivers

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5SUSE Linux Enterprise Workstation Extension 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libEGL1

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libEGL1-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

18.3.2-14.9.1

Mesa-libGL1

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5