gpp_maybe Security update for directfb

SUSE-SLE-DESKTOP-12-2015-185

DirectFB was updated to fix two security issues. The following vulnerabilities were fixed: * CVE-2014-2977: Multiple integer signedness errors could allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow. * CVE-2014-2978: Remote attackers could cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write.

• Release Date
  Apr 23 2015
• References
  Bugzilla: 878345, 878349
  CVEs: CVE-2014-2978, CVE-2014-2977
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  DirectFB
  Graphics Library for Framebuffer Devices

  1.7.1-4.1 lock rpm lock src

  lib++dfb-1_7-1
  Graphics Library for Framebuffer Devices

  1.7.1-4.1 lock rpm

  libdirectfb-1_7-1
  Graphics Library for Framebuffer Devices

  1.7.1-4.1 lock rpm

  libdirectfb-1_7-1-32bit
  Graphics Library for Framebuffer Devices

  1.7.1-4.1 lock rpm