File virglrenderer.changes of Package virglrenderer

Overview Repositories Revisions Requests Users Attributes Meta

File virglrenderer.changes of Package virglrenderer (Revision a5f230b51240bb827379d329cc7dd1f6)

Currently displaying revision a5f230b51240bb827379d329cc7dd1f6 , Show latest

-------------------------------------------------------------------
Fri Jan 21 10:45:13 UTC 2022 - Dario Faggioli <dfaggioli@suse.com>

- Pick up the full upstream patch for bsc#1194601, so we know from where it comes
  * No functional change intended

-------------------------------------------------------------------
Mon Jan 17 07:47:07 UTC 2022 - pgajdos@suse.com

- security update
- added patches
  fix CVE-2022-0175 [bsc#1194601], VUL-0: CVE-2022-0175: virglrenderer: Missing initialization of res->ptr
  + virglrenderer-CVE-2022-0175.patch

-------------------------------------------------------------------
Thu Apr 29 07:31:09 UTC 2021 - Martin Pluskal <mpluskal@suse.com>

- Update to version 0.9.1:
  * Various small bugfixes

-------------------------------------------------------------------
Sun Apr  4 13:50:58 UTC 2021 - Bruce Rogers <brogers@suse.com>

- Update package to 0.9.0
  Highlights include:
  + multi-client support
  + supports newer glsl version
  + add ETC2 compressed formats
  + performance improvements
  + misc. bug fixes

-------------------------------------------------------------------
Wed Feb 12 14:47:31 UTC 2020 - Bruce Rogers <brogers@suse.com>

- Update package to 0.8.2
  Release is all bug fixes it seems. It includes these patches in
  the release tarball:
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
  vrend-Use-the-original-context-to-delete-objects.patch
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch

-------------------------------------------------------------------
Tue Feb  4 15:46:04 UTC 2020 - Bruce Rogers <brogers@suse.com>

- Avoid potential DoS in texture allocation (CVE-2020-8003
  boo#1162521)
  vrend-Don-t-free-resource-struct-in-_resource_alloca.patch
- Avoid potential DoS if grid launched without prior Compute Shader
  (CVE-2020-8002 boo#1162519)
  vrend-Don-t-try-launching-a-grid-if-no-CS-is-availab.patch
- Avoid deleting wrong object, in use by others
  vrend-Use-the-original-context-to-delete-objects.patch
- Avoid potential use after free when deleting context
  vrend-Don-t-switch-to-ctx0-when-deleting-ctx0.patch

-------------------------------------------------------------------
Mon Jan  6 16:57:48 UTC 2020 - Bruce Rogers <brogers@suse.com>

- Update package to 0.8.1
  Requires very recent libepoxy, which is currently only available
  in Factory. Accordingly also switch to meson build, which also
  excludes older releases.
  Other highlights include:
  + support emulating planar image sampling
  + Add all formats to VIRGL_FORMAT that are referenced in Gallium
  + deprecation of the autotools build system
  + miscellaneous bug and performance fixes
  + drop the following patches, which are included in this release:
    0001-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
    0002-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch
    0003-24f67de-vrend-check-info-formats-in-blits.patch
    0004-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch
    0005-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch
    0006-164d758-vrend-Add-an-assert-for-allocating-the-intermediate-.patch

-------------------------------------------------------------------
Mon Dec 23 05:33:34 UTC 2019 - lma@suse.com

- Add 5 security fixes
* Check resource creation more thoroughly (CVE-2019-18388 bsc#1159479)
  0001-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
  0002-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch

* check info formats in blits (CVE-2019-18390 bsc#1159478)
  0003-24f67de-vrend-check-info-formats-in-blits.patch

* check transfer bounds for negative values too (CVE-2019-18389 bsc#1159482)
  0004-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch

* check transfer iov holds enough data for the data upload (CVE-2019-18391 bsc#1159486)
  0005-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch

* Add an assert for allocating the intermediate texture (CVE-2019-18392 bsc#1159454)
  0006-164d758-vrend-Add-an-assert-for-allocating-the-intermediate-.patch

-------------------------------------------------------------------
Tue Nov 26 21:42:29 UTC 2019 - Bruce Rogers <brogers@suse.com>

- Update package to 0.8.0
  Note: not switching to meson build system yet since it would
  exclude distos with older meson (seems meson v0.49+ is required)
  Highlights include:
  + guest support for GL 4.3 on hosts with GLES 3.2 + certain 
    extensions,
  + major performance improvements, and 
  + lots of bug fixes.
- The shared object (SO) version changes from 0 to 1 with this
  package update

-------------------------------------------------------------------
Wed Sep 19 11:52:37 UTC 2018 - minava@t-online.de

- Update package to 0.7.0
- Brings the renderer up to GL4.3/GLES3.1 capability and most of GLES3.2
- Make EGL optional at configure time
- The following patches will be removed: 
  0001-737c3350-renderer-fix-memory-leak-in-vertex-elements-state-cr.patch
  0002-1fdafd62-vrend-Increase-VREND_MAX_CTX-to-64.patch
  They are included in 0.7.0

-------------------------------------------------------------------
Thu Jul 26 16:13:35 CEST 2018 - vliaskovitis@suse.com

- vrend: Increase VREND_MAX_CTX to 64. (bsc#1102749)
  0002-1fdafd62-vrend-Increase-VREND_MAX_CTX-to-64.patch

-------------------------------------------------------------------
Wed Nov  1 15:32:54 UTC 2017 - mpluskal@suse.com

- Clean up spec file with spec-cleaner
- Use source url
- Add gpg signature
- Make building more verbose
- Explicitly require python2

-------------------------------------------------------------------
Fri Mar 10 04:22:11 UTC 2017 - lma@suse.com

- Fix memory leak in vertex elements state create (CVE-2017-6386 bsc#1027376)
  0001-737c3350-renderer-fix-memory-leak-in-vertex-elements-state-cr.patch

-------------------------------------------------------------------
Thu Mar  2 09:24:22 UTC 2017 - jengelh@inai.de

- Fix RPM groups

-------------------------------------------------------------------
Fri Feb 24 09:03:26 UTC 2017 - lma@suse.com

- Update package to 0.6.0
  The following patches will be removed:
  0001-48f67f60-renderer-fix-NULL-pointer-deref-in-vrend_clear.patch
  0002-40b0e781-renderer-fix-a-leak-in-resource-attach.patch
  0003-6eb13f7a-vrend-fix-memory-leak-in-int-blit-context.patch
  0004-114688c5-renderer-fix-heap-overflow-in-vertex-elements-state-.patch
  0005-926b9b34-vrend-fix-a-stack-overflow-in-set-framebuffer-state.patch

All of the removed patches were already included in 0.6.0,
  So we dont need them any more.

-------------------------------------------------------------------
Fri Feb 17 11:20:43 UTC 2017 - lma@suse.com

- Address various security issues
* Fix null pointer dereference in vrend_clear (CVE-2017-5937 bsc#1024232)
  0001-48f67f60-renderer-fix-NULL-pointer-deref-in-vrend_clear.patch
* Fix host memory leak issue in virgl_resource_attach_backing (CVE-2016-10214 bsc#1024244)
  0002-40b0e781-renderer-fix-a-leak-in-resource-attach.patch
* Fix memory leak in int blit context (CVE-2017-5993 bsc#1025505)
  0003-6eb13f7a-vrend-fix-memory-leak-in-int-blit-context.patch
* Fix heap overflow in vertex elements state create (CVE-2017-5994 bsc#1025507)
  0004-114688c5-renderer-fix-heap-overflow-in-vertex-elements-state-.patch
* Fix a stack overflow in set framebuffer state (CVE-2017-5957 bsc#1024993)
  0005-926b9b34-vrend-fix-a-stack-overflow-in-set-framebuffer-state.patch

-------------------------------------------------------------------
Fri Jun  3 16:35:39 UTC 2016 - brogers@suse.com

- Further tweaks to package layout, including splitting out
  the test server into it's own package.

-------------------------------------------------------------------
Wed Jun  1 11:01:38 UTC 2016 - brogers@suse.com

- Refine BuildRequires tags

-------------------------------------------------------------------
Thu Apr 14 02:45:57 UTC 2016 - brogers@suse.com

- Fixed url in spec file

-------------------------------------------------------------------
Wed Apr 13 06:15:29 UTC 2016 - lma@suse.com

- Fixed epoxy dependency

-------------------------------------------------------------------
Tue Apr 12 07:44:05 UTC 2016 - lma@suse.com

- Initial package, based upon virglrenderer upstream sources
  (git tag: 0.5.0)

Places

File virglrenderer.changes of Package virglrenderer (Revision a5f230b51240bb827379d329cc7dd1f6)

Places