GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Wed Jul 12, 2017 8:26 am Post subject: [ GLSA 201707-06 ] virglrenderer |
|
|
Gentoo Linux Security Advisory
Title: virglrenderer: Multiple vulnerabilities (GLSA 201707-06)
Severity: normal
Exploitable: local
Date: 2017-07-08
Updated: 2017-08-06
Bug(s): #606996, #607022, #608734, #609400, #609402, #609492, #609494, #610678, #610680, #611378, #611380, #611382
ID: 201707-06
Synopsis
Multiple vulnerabilities have been found in virglrenderer, the
worst of which could allow local guest OS users to cause a Denial of
Service condition.
Background
A virtual 3D GPU library, that allows the guest operating system to use
the host GPU to accelerate 3D rendering.
Affected Packages
Package: media-libs/virglrenderer
Vulnerable: < 0.6.0
Unaffected: >= 0.6.0
Architectures: All supported architectures
Description
Multiple vulnerabilities have been discovered in virglrenderer. Please
review the CVE identifiers referenced below for details.
Impact
A local attacker could cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All virglrenderer users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/virglrenderer-0.6.0"
|
References
CVE-2016-10163
CVE-2016-10214
CVE-2017-5580
CVE-2017-5956
CVE-2017-5957
CVE-2017-5993
CVE-2017-5994
CVE-2017-6209
CVE-2017-6210
CVE-2017-6317
CVE-2017-6355
CVE-2017-6386
Last edited by GLSA on Fri Sep 29, 2017 4:16 am; edited 2 times in total |
|