Security update for Mesa SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3117-1 Final 1 1 2021-09-16T12:08:36Z current 2021-09-16T12:08:36Z 2021-09-16T12:08:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for Mesa This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-3117,SUSE-SLE-SDK-12-SP5-2021-3117,SUSE-SLE-SERVER-12-SP2-BCL-2021-3117 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213117-1/ Link for SUSE-SU-2021:3117-1 https://lists.suse.com/pipermail/sle-security-updates/2021-September/009451.html E-Mail link for SUSE-SU-2021:3117-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1156015 SUSE Bug 1156015 https://www.suse.com/security/cve/CVE-2019-5068/ SUSE CVE CVE-2019-5068 page SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Software Development Kit 12 SP5 Mesa-11.2.1-104.9.49 Mesa-32bit-11.2.1-104.9.49 Mesa-64bit-11.2.1-104.9.49 Mesa-devel-11.2.1-104.9.49 Mesa-dri-devel-11.2.1-104.9.49 Mesa-libEGL-devel-11.2.1-104.9.49 Mesa-libEGL-devel-32bit-11.2.1-104.9.49 Mesa-libEGL-devel-64bit-11.2.1-104.9.49 Mesa-libEGL1-11.2.1-104.9.49 Mesa-libEGL1-32bit-11.2.1-104.9.49 Mesa-libEGL1-64bit-11.2.1-104.9.49 Mesa-libGL-devel-11.2.1-104.9.49 Mesa-libGL-devel-32bit-11.2.1-104.9.49 Mesa-libGL-devel-64bit-11.2.1-104.9.49 Mesa-libGL1-11.2.1-104.9.49 Mesa-libGL1-32bit-11.2.1-104.9.49 Mesa-libGL1-64bit-11.2.1-104.9.49 Mesa-libGLESv1_CM-devel-11.2.1-104.9.49 Mesa-libGLESv1_CM-devel-32bit-11.2.1-104.9.49 Mesa-libGLESv1_CM-devel-64bit-11.2.1-104.9.49 Mesa-libGLESv1_CM1-11.2.1-104.9.49 Mesa-libGLESv1_CM1-32bit-11.2.1-104.9.49 Mesa-libGLESv1_CM1-64bit-11.2.1-104.9.49 Mesa-libGLESv2-2-11.2.1-104.9.49 Mesa-libGLESv2-2-32bit-11.2.1-104.9.49 Mesa-libGLESv2-2-64bit-11.2.1-104.9.49 Mesa-libGLESv2-devel-11.2.1-104.9.49 Mesa-libGLESv2-devel-32bit-11.2.1-104.9.49 Mesa-libGLESv2-devel-64bit-11.2.1-104.9.49 Mesa-libGLESv3-devel-11.2.1-104.9.49 Mesa-libd3d-11.2.1-104.9.49 Mesa-libd3d-32bit-11.2.1-104.9.49 Mesa-libd3d-devel-11.2.1-104.9.49 Mesa-libd3d-devel-32bit-11.2.1-104.9.49 Mesa-libglapi-devel-11.2.1-104.9.49 Mesa-libglapi-devel-32bit-11.2.1-104.9.49 Mesa-libglapi-devel-64bit-11.2.1-104.9.49 Mesa-libglapi0-11.2.1-104.9.49 Mesa-libglapi0-32bit-11.2.1-104.9.49 Mesa-libglapi0-64bit-11.2.1-104.9.49 Mesa-libva-11.2.1-104.9.49 libOSMesa-devel-11.2.1-104.9.49 libOSMesa-devel-32bit-11.2.1-104.9.49 libOSMesa-devel-64bit-11.2.1-104.9.49 libOSMesa9-11.2.1-104.9.49 libOSMesa9-32bit-11.2.1-104.9.49 libOSMesa9-64bit-11.2.1-104.9.49 libXvMC_nouveau-11.2.1-104.9.49 libXvMC_nouveau-32bit-11.2.1-104.9.49 libXvMC_nouveau-64bit-11.2.1-104.9.49 libXvMC_r600-11.2.1-104.9.49 libXvMC_r600-32bit-11.2.1-104.9.49 libXvMC_r600-64bit-11.2.1-104.9.49 libgbm-devel-11.2.1-104.9.49 libgbm-devel-32bit-11.2.1-104.9.49 libgbm-devel-64bit-11.2.1-104.9.49 libgbm1-11.2.1-104.9.49 libgbm1-32bit-11.2.1-104.9.49 libgbm1-64bit-11.2.1-104.9.49 libvdpau_nouveau-11.2.1-104.9.49 libvdpau_nouveau-32bit-11.2.1-104.9.49 libvdpau_nouveau-64bit-11.2.1-104.9.49 libvdpau_r300-11.2.1-104.9.49 libvdpau_r300-32bit-11.2.1-104.9.49 libvdpau_r300-64bit-11.2.1-104.9.49 libvdpau_r600-11.2.1-104.9.49 libvdpau_r600-32bit-11.2.1-104.9.49 libvdpau_r600-64bit-11.2.1-104.9.49 libvdpau_radeonsi-11.2.1-104.9.49 libvdpau_radeonsi-32bit-11.2.1-104.9.49 libxatracker-devel-1.0.0-104.9.49 libxatracker2-1.0.0-104.9.49 Mesa-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-32bit-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-libEGL1-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-libEGL1-32bit-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-libGL1-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-libGL1-32bit-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-libGLESv2-2-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-libglapi0-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL Mesa-libglapi0-32bit-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libgbm1-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libgbm1-32bit-11.2.1-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libxatracker2-1.0.0-104.9.49 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libxatracker-devel-1.0.0-104.9.49 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability. CVE-2019-5068 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-32bit-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-libEGL1-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-libEGL1-32bit-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-libGL1-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-libGL1-32bit-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-libGLESv2-2-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-libglapi0-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:Mesa-libglapi0-32bit-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:libgbm1-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:libgbm1-32bit-11.2.1-104.9.49 SUSE Linux Enterprise Server 12 SP2-BCL:libxatracker2-1.0.0-104.9.49 SUSE Linux Enterprise Software Development Kit 12 SP5:libxatracker-devel-1.0.0-104.9.49 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213117-1/ https://www.suse.com/security/cve/CVE-2019-5068.html CVE-2019-5068 https://bugzilla.suse.com/1156015 SUSE Bug 1156015