media-libs/virglrenderer-1.3.0 — Security Advisories

portage-ng glsa

▸ GLSA 202210-05 virglrenderer: Multiple vulnerabilities this version unaffected high remote 2022-10-16

Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution.

Announced: 2022-10-16
Revised: 2022-10-16
Access: remote
Bugs: #866821
Advisory: https://security.gentoo.org/glsa/202210-05

Affected packages

Package	Arch	Vulnerable	Unaffected
media-libs/virglrenderer	*	< 0.10.1	>= 0.10.1

Background

A virtual 3D GPU library, that allows the guest operating system to use the host GPU to accelerate 3D rendering.

Description

Multiple vulnerabilities have been discovered in virglrenderer. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All virglrenderer users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/virglrenderer-0.10.1"

References

▸ GLSA 201707-06 virglrenderer: Multiple vulnerabilities this version unaffected normal local 2017-07-08

Multiple vulnerabilities have been found in virglrenderer, the worst of which could allow local guest OS users to cause a Denial of Service condition.

Announced: 2017-07-08
Revised: 2017-08-06 (revision 2)
Access: local
Bugs: #606996 #607022 #608734 #609400 #609402 #609492 #609494 #610678 #610680 #611378 #611380 #611382
Advisory: https://security.gentoo.org/glsa/201707-06