File virglrenderer.changes of Package virglrenderer.22702

Overview Repositories Revisions Requests Users Attributes Meta

File virglrenderer.changes of Package virglrenderer.22702

-------------------------------------------------------------------
Wed Feb  2 09:33:17 UTC 2022 - Michael Vetter <mvetter@suse.com>

- security update
  * Fix OOB in read_transfer_data() (CVE-2022-0135 bsc#1195389)
    Add 0007-95e581fd-vrend-fix-oob-read_transfer_data.patch

-------------------------------------------------------------------
Mon Jan 17 07:47:33 UTC 2022 - pgajdos@suse.com

- security update
- added patches
  fix CVE-2022-0175 [bsc#1194601], VUL-0: CVE-2022-0175: virglrenderer: Missing initialization of res->ptr
  + virglrenderer-CVE-2022-0175.patch

-------------------------------------------------------------------
Fri Dec 20 08:47:35 UTC 2019 - lma@suse.com

- Add 4 security fixes
* Check resource creation more thoroughly (CVE-2019-18388 bsc#1159479)
  0002-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
  0003-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch

* check info formats in blits (CVE-2019-18390 bsc#1159478)
  0004-24f67de-vrend-check-info-formats-in-blits.patch

* check transfer bounds for negative values too (CVE-2019-18389 bsc#1159482)
  0005-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch

* check transfer iov holds enough data for the data upload (CVE-2019-18391 bsc#1159486)
  0006-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch

-------------------------------------------------------------------
Wed Nov  1 15:32:54 UTC 2017 - mpluskal@suse.com

- Clean up spec file with spec-cleaner
- Use source url
- Add gpg signature
- Make building more verbose
- Explicitly require python2

-------------------------------------------------------------------
Fri Mar 10 04:22:11 UTC 2017 - lma@suse.com

- Fix memory leak in vertex elements state create (CVE-2017-6386 bsc#1027376)
  0001-737c3350-renderer-fix-memory-leak-in-vertex-elements-state-cr.patch

-------------------------------------------------------------------
Thu Mar  2 09:24:22 UTC 2017 - jengelh@inai.de

- Fix RPM groups

-------------------------------------------------------------------
Fri Feb 24 09:03:26 UTC 2017 - lma@suse.com

- Update package to 0.6.0
  The following patches will be removed:
  0001-48f67f60-renderer-fix-NULL-pointer-deref-in-vrend_clear.patch
  0002-40b0e781-renderer-fix-a-leak-in-resource-attach.patch
  0003-6eb13f7a-vrend-fix-memory-leak-in-int-blit-context.patch
  0004-114688c5-renderer-fix-heap-overflow-in-vertex-elements-state-.patch
  0005-926b9b34-vrend-fix-a-stack-overflow-in-set-framebuffer-state.patch

All of the removed patches were already included in 0.6.0,
  So we dont need them any more.

-------------------------------------------------------------------
Fri Feb 17 11:20:43 UTC 2017 - lma@suse.com

- Address various security issues
* Fix null pointer dereference in vrend_clear (CVE-2017-5937 bsc#1024232)
  0001-48f67f60-renderer-fix-NULL-pointer-deref-in-vrend_clear.patch
* Fix host memory leak issue in virgl_resource_attach_backing (CVE-2016-10214 bsc#1024244)
  0002-40b0e781-renderer-fix-a-leak-in-resource-attach.patch
* Fix memory leak in int blit context (CVE-2017-5993 bsc#1025505)
  0003-6eb13f7a-vrend-fix-memory-leak-in-int-blit-context.patch
* Fix heap overflow in vertex elements state create (CVE-2017-5994 bsc#1025507)
  0004-114688c5-renderer-fix-heap-overflow-in-vertex-elements-state-.patch
* Fix a stack overflow in set framebuffer state (CVE-2017-5957 bsc#1024993)
  0005-926b9b34-vrend-fix-a-stack-overflow-in-set-framebuffer-state.patch

-------------------------------------------------------------------
Fri Jun  3 16:35:39 UTC 2016 - brogers@suse.com

- Further tweaks to package layout, including splitting out
  the test server into it's own package.

-------------------------------------------------------------------
Wed Jun  1 11:01:38 UTC 2016 - brogers@suse.com

- Refine BuildRequires tags

-------------------------------------------------------------------
Thu Apr 14 02:45:57 UTC 2016 - brogers@suse.com

- Fixed url in spec file

-------------------------------------------------------------------
Wed Apr 13 06:15:29 UTC 2016 - lma@suse.com

- Fixed epoxy dependency

-------------------------------------------------------------------
Tue Apr 12 07:44:05 UTC 2016 - lma@suse.com

- Initial package, based upon virglrenderer upstream sources
  (git tag: 0.5.0)

Places

File virglrenderer.changes of Package virglrenderer.22702

Places