Security update for Mesa SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0132-1 Final 1 1 2020-01-20T08:22:22Z current 2020-01-20T08:22:22Z 2020-01-20T08:22:22Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for Mesa This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SAP-Azure-LI-BYOS-Production-2020-132,Image SLES15-SAP-Azure-VLI-BYOS-Production-2020-132,SUSE-2020-132,SUSE-SLE-Module-Basesystem-15-2020-132,SUSE-SLE-Module-Development-Tools-OBS-15-2020-132,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-132,SUSE-SLE-Product-WE-15-2020-132 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200132-1/ Link for SUSE-SU-2020:0132-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006386.html E-Mail link for SUSE-SU-2020:0132-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1156015 SUSE Bug 1156015 https://www.suse.com/security/cve/CVE-2019-5068/ SUSE CVE CVE-2019-5068 page Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Workstation Extension 15 libwayland-egl1-18.0.2-27.6.1 Mesa-18.0.2-27.6.1 Mesa-32bit-18.0.2-27.6.1 Mesa-64bit-18.0.2-27.6.1 Mesa-devel-18.0.2-27.6.1 Mesa-dri-18.0.2-27.6.1 Mesa-dri-32bit-18.0.2-27.6.1 Mesa-dri-64bit-18.0.2-27.6.1 Mesa-dri-devel-18.0.2-27.6.1 Mesa-dri-nouveau-18.0.2-27.6.1 Mesa-dri-nouveau-32bit-18.0.2-27.6.1 Mesa-dri-nouveau-64bit-18.0.2-27.6.1 Mesa-dri-vc4-18.0.2-27.6.1 Mesa-dri-vc4-64bit-18.0.2-27.6.1 Mesa-gallium-18.0.2-27.6.1 Mesa-gallium-32bit-18.0.2-27.6.1 Mesa-gallium-64bit-18.0.2-27.6.1 Mesa-libEGL-devel-18.0.2-27.6.1 Mesa-libEGL1-18.0.2-27.6.1 Mesa-libEGL1-32bit-18.0.2-27.6.1 Mesa-libEGL1-64bit-18.0.2-27.6.1 Mesa-libGL-devel-18.0.2-27.6.1 Mesa-libGL1-18.0.2-27.6.1 Mesa-libGL1-32bit-18.0.2-27.6.1 Mesa-libGL1-64bit-18.0.2-27.6.1 Mesa-libGLESv1_CM-devel-18.0.2-27.6.1 Mesa-libGLESv1_CM1-18.0.2-27.6.1 Mesa-libGLESv2-2-18.0.2-27.6.1 Mesa-libGLESv2-devel-18.0.2-27.6.1 Mesa-libGLESv3-devel-18.0.2-27.6.1 Mesa-libOpenCL-18.0.2-27.6.1 Mesa-libVulkan-devel-18.0.2-27.6.1 Mesa-libd3d-18.0.2-27.6.1 Mesa-libd3d-32bit-18.0.2-27.6.1 Mesa-libd3d-64bit-18.0.2-27.6.1 Mesa-libd3d-devel-18.0.2-27.6.1 Mesa-libd3d-devel-32bit-18.0.2-27.6.1 Mesa-libd3d-devel-64bit-18.0.2-27.6.1 Mesa-libglapi-devel-18.0.2-27.6.1 Mesa-libglapi-devel-32bit-18.0.2-27.6.1 Mesa-libglapi-devel-64bit-18.0.2-27.6.1 Mesa-libglapi0-18.0.2-27.6.1 Mesa-libglapi0-32bit-18.0.2-27.6.1 Mesa-libglapi0-64bit-18.0.2-27.6.1 Mesa-libva-18.0.2-27.6.1 libOSMesa-devel-18.0.2-27.6.1 libOSMesa-devel-32bit-18.0.2-27.6.1 libOSMesa-devel-64bit-18.0.2-27.6.1 libOSMesa8-18.0.2-27.6.1 libOSMesa8-32bit-18.0.2-27.6.1 libOSMesa8-64bit-18.0.2-27.6.1 libXvMC_nouveau-18.0.2-27.6.1 libXvMC_nouveau-32bit-18.0.2-27.6.1 libXvMC_nouveau-64bit-18.0.2-27.6.1 libXvMC_r600-18.0.2-27.6.1 libXvMC_r600-32bit-18.0.2-27.6.1 libXvMC_r600-64bit-18.0.2-27.6.1 libgbm-devel-18.0.2-27.6.1 libgbm-devel-32bit-18.0.2-27.6.1 libgbm-devel-64bit-18.0.2-27.6.1 libgbm1-18.0.2-27.6.1 libgbm1-32bit-18.0.2-27.6.1 libgbm1-64bit-18.0.2-27.6.1 libvdpau_nouveau-18.0.2-27.6.1 libvdpau_nouveau-32bit-18.0.2-27.6.1 libvdpau_nouveau-64bit-18.0.2-27.6.1 libvdpau_r300-18.0.2-27.6.1 libvdpau_r300-32bit-18.0.2-27.6.1 libvdpau_r300-64bit-18.0.2-27.6.1 libvdpau_r600-18.0.2-27.6.1 libvdpau_r600-32bit-18.0.2-27.6.1 libvdpau_r600-64bit-18.0.2-27.6.1 libvdpau_radeonsi-18.0.2-27.6.1 libvdpau_radeonsi-32bit-18.0.2-27.6.1 libvulkan_intel-18.0.2-27.6.1 libvulkan_intel-32bit-18.0.2-27.6.1 libvulkan_radeon-18.0.2-27.6.1 libvulkan_radeon-32bit-18.0.2-27.6.1 libwayland-egl-devel-18.0.2-27.6.1 libwayland-egl-devel-32bit-18.0.2-27.6.1 libwayland-egl-devel-64bit-18.0.2-27.6.1 libwayland-egl1-32bit-18.0.2-27.6.1 libwayland-egl1-64bit-18.0.2-27.6.1 libxatracker-devel-1.0.0-27.6.1 libxatracker2-1.0.0-27.6.1 libwayland-egl1-18.0.2-27.6.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libwayland-egl1-18.0.2-27.6.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production Mesa-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-32bit-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-dri-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-dri-32bit-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-dri-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-gallium-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-gallium-32bit-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libEGL-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libEGL1-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libEGL1-32bit-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGL-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGL1-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGL1-32bit-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGLESv1_CM-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGLESv1_CM1-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGLESv2-2-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGLESv2-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libGLESv3-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libVulkan-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libd3d-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libd3d-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libglapi-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libglapi0-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libglapi0-32bit-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-libva-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libOSMesa-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libOSMesa8-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libgbm-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libgbm1-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libgbm1-32bit-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libvdpau_r300-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libvdpau_r600-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libvdpau_radeonsi-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libvulkan_intel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libvulkan_radeon-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libwayland-egl-devel-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libwayland-egl1-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libxatracker-devel-1.0.0-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libxatracker2-1.0.0-27.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 Mesa-dri-nouveau-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 libXvMC_nouveau-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 libvdpau_nouveau-18.0.2-27.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability. CVE-2019-5068 Image SLES15-SAP-Azure-LI-BYOS-Production:libwayland-egl1-18.0.2-27.6.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libwayland-egl1-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-32bit-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-dri-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-dri-32bit-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-dri-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-gallium-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-gallium-32bit-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libEGL-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libEGL1-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libEGL1-32bit-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGL-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGL1-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGL1-32bit-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGLESv1_CM-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGLESv1_CM1-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGLESv2-2-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGLESv2-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libGLESv3-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libVulkan-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libd3d-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libd3d-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libglapi-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libglapi0-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libglapi0-32bit-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:Mesa-libva-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libOSMesa-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libOSMesa8-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libgbm-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libgbm1-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libgbm1-32bit-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libvdpau_r300-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libvdpau_r600-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libvdpau_radeonsi-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libvulkan_intel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libvulkan_radeon-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libwayland-egl-devel-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libwayland-egl1-18.0.2-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libxatracker-devel-1.0.0-27.6.1 SUSE Linux Enterprise Module for Basesystem 15:libxatracker2-1.0.0-27.6.1 SUSE Linux Enterprise Workstation Extension 15:Mesa-dri-nouveau-18.0.2-27.6.1 SUSE Linux Enterprise Workstation Extension 15:libXvMC_nouveau-18.0.2-27.6.1 SUSE Linux Enterprise Workstation Extension 15:libvdpau_nouveau-18.0.2-27.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200132-1/ https://www.suse.com/security/cve/CVE-2019-5068.html CVE-2019-5068 https://bugzilla.suse.com/1156015 SUSE Bug 1156015