Security update for Mesa SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2020:0084-1 Final 1 1 2020-01-21T11:13:31Z current 2020-01-21T11:13:31Z 2020-01-21T11:13:31Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for Mesa This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015). This update was imported from the SUSE:SLE-15-SP1:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2020-84 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3MPZBG4ALURSP3WFREL2VJEYLDL6LGCJ/ E-Mail link for openSUSE-SU-2020:0084-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1156015 SUSE Bug 1156015 https://www.suse.com/security/cve/CVE-2019-5068/ SUSE CVE CVE-2019-5068 page openSUSE Leap 15.1 Mesa-18.3.2-lp151.23.9.1 Mesa-32bit-18.3.2-lp151.23.9.1 Mesa-KHR-devel-18.3.2-lp151.23.9.1 Mesa-devel-18.3.2-lp151.23.9.1 Mesa-dri-18.3.2-lp151.23.9.1 Mesa-dri-32bit-18.3.2-lp151.23.9.1 Mesa-dri-devel-18.3.2-lp151.23.9.1 Mesa-dri-nouveau-18.3.2-lp151.23.9.1 Mesa-dri-nouveau-32bit-18.3.2-lp151.23.9.1 Mesa-gallium-18.3.2-lp151.23.9.1 Mesa-gallium-32bit-18.3.2-lp151.23.9.1 Mesa-libEGL-devel-18.3.2-lp151.23.9.1 Mesa-libEGL1-18.3.2-lp151.23.9.1 Mesa-libEGL1-32bit-18.3.2-lp151.23.9.1 Mesa-libGL-devel-18.3.2-lp151.23.9.1 Mesa-libGL1-18.3.2-lp151.23.9.1 Mesa-libGL1-32bit-18.3.2-lp151.23.9.1 Mesa-libGLESv1_CM-devel-18.3.2-lp151.23.9.1 Mesa-libGLESv1_CM1-18.3.2-lp151.23.9.1 Mesa-libGLESv2-2-18.3.2-lp151.23.9.1 Mesa-libGLESv2-devel-18.3.2-lp151.23.9.1 Mesa-libGLESv3-devel-18.3.2-lp151.23.9.1 Mesa-libOpenCL-18.3.2-lp151.23.9.1 Mesa-libVulkan-devel-18.3.2-lp151.23.9.1 Mesa-libd3d-18.3.2-lp151.23.9.1 Mesa-libd3d-32bit-18.3.2-lp151.23.9.1 Mesa-libd3d-devel-18.3.2-lp151.23.9.1 Mesa-libd3d-devel-32bit-18.3.2-lp151.23.9.1 Mesa-libglapi-devel-18.3.2-lp151.23.9.1 Mesa-libglapi-devel-32bit-18.3.2-lp151.23.9.1 Mesa-libglapi0-18.3.2-lp151.23.9.1 Mesa-libglapi0-32bit-18.3.2-lp151.23.9.1 Mesa-libva-18.3.2-lp151.23.9.1 libOSMesa-devel-18.3.2-lp151.23.9.1 libOSMesa-devel-32bit-18.3.2-lp151.23.9.1 libOSMesa8-18.3.2-lp151.23.9.1 libOSMesa8-32bit-18.3.2-lp151.23.9.1 libXvMC_nouveau-18.3.2-lp151.23.9.1 libXvMC_nouveau-32bit-18.3.2-lp151.23.9.1 libXvMC_r600-18.3.2-lp151.23.9.1 libXvMC_r600-32bit-18.3.2-lp151.23.9.1 libgbm-devel-18.3.2-lp151.23.9.1 libgbm-devel-32bit-18.3.2-lp151.23.9.1 libgbm1-18.3.2-lp151.23.9.1 libgbm1-32bit-18.3.2-lp151.23.9.1 libvdpau_nouveau-18.3.2-lp151.23.9.1 libvdpau_nouveau-32bit-18.3.2-lp151.23.9.1 libvdpau_r300-18.3.2-lp151.23.9.1 libvdpau_r300-32bit-18.3.2-lp151.23.9.1 libvdpau_r600-18.3.2-lp151.23.9.1 libvdpau_r600-32bit-18.3.2-lp151.23.9.1 libvdpau_radeonsi-18.3.2-lp151.23.9.1 libvdpau_radeonsi-32bit-18.3.2-lp151.23.9.1 libvulkan_intel-18.3.2-lp151.23.9.1 libvulkan_intel-32bit-18.3.2-lp151.23.9.1 libvulkan_radeon-18.3.2-lp151.23.9.1 libvulkan_radeon-32bit-18.3.2-lp151.23.9.1 libxatracker-devel-1.0.0-lp151.23.9.1 libxatracker2-1.0.0-lp151.23.9.1 Mesa-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-KHR-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-dri-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-dri-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-dri-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-dri-nouveau-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-dri-nouveau-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-gallium-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-gallium-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libEGL-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libEGL1-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libEGL1-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGL-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGL1-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGL1-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGLESv1_CM-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGLESv1_CM1-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGLESv2-2-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGLESv2-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libGLESv3-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libOpenCL-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libVulkan-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libd3d-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libd3d-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libd3d-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libd3d-devel-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libglapi-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libglapi-devel-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libglapi0-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libglapi0-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 Mesa-libva-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libOSMesa-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libOSMesa-devel-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libOSMesa8-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libOSMesa8-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libXvMC_nouveau-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libXvMC_nouveau-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libXvMC_r600-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libXvMC_r600-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libgbm-devel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libgbm-devel-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libgbm1-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libgbm1-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_nouveau-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_nouveau-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_r300-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_r300-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_r600-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_r600-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_radeonsi-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvdpau_radeonsi-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvulkan_intel-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvulkan_intel-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvulkan_radeon-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libvulkan_radeon-32bit-18.3.2-lp151.23.9.1 as a component of openSUSE Leap 15.1 libxatracker-devel-1.0.0-lp151.23.9.1 as a component of openSUSE Leap 15.1 libxatracker2-1.0.0-lp151.23.9.1 as a component of openSUSE Leap 15.1 An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability. CVE-2019-5068 openSUSE Leap 15.1:Mesa-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-KHR-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-dri-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-dri-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-dri-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-dri-nouveau-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-dri-nouveau-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-gallium-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-gallium-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libEGL-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libEGL1-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libEGL1-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGL-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGL1-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGL1-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGLESv1_CM-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGLESv1_CM1-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGLESv2-2-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGLESv2-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libGLESv3-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libOpenCL-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libVulkan-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libd3d-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libd3d-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libd3d-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libd3d-devel-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libglapi-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libglapi-devel-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libglapi0-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libglapi0-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:Mesa-libva-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libOSMesa-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libOSMesa-devel-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libOSMesa8-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libOSMesa8-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libXvMC_nouveau-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libXvMC_nouveau-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libXvMC_r600-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libXvMC_r600-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libgbm-devel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libgbm-devel-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libgbm1-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libgbm1-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_nouveau-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_nouveau-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_r300-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_r300-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_r600-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_r600-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_radeonsi-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvdpau_radeonsi-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvulkan_intel-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvulkan_intel-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvulkan_radeon-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libvulkan_radeon-32bit-18.3.2-lp151.23.9.1 openSUSE Leap 15.1:libxatracker-devel-1.0.0-lp151.23.9.1 openSUSE Leap 15.1:libxatracker2-1.0.0-lp151.23.9.1 moderate 3.6 AV:L/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3MPZBG4ALURSP3WFREL2VJEYLDL6LGCJ/ https://www.suse.com/security/cve/CVE-2019-5068.html CVE-2019-5068 https://bugzilla.suse.com/1156015 SUSE Bug 1156015