{"affected":[{"ecosystem_specific":{"binaries":[{"drm-kmp-default":"4.9.33_k4.4.114_94.11-4.11.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","name":"drm","purl":"pkg:rpm/suse/drm&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.9.33-4.11.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"drm-kmp-default":"4.9.33_k4.4.114_94.11-4.11.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","name":"drm","purl":"pkg:rpm/suse/drm&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.9.33-4.11.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for drm provides the following fixes:\n\nThis security issue was fixed:\n\n- CVE-2017-10810: Memory leak in the virtio_gpu_object_create function in\n  drivers/gpu/drm/virtio/virtgpu_object.c allowed attackers to cause a denial of\n  service (memory consumption) by triggering object-initialization failures\n  (bnc#1047277)\n\nThese non-security issues were fixed:\n\n- Backport upstream 4.9.x stable fixes up to 4.9.81 (bsc#1041744).\n- Fixed crash at suspend/resume on old Intel chipsets (bsc#1047729, bsc#1050256)\n- Fixed large topology support for vmwgfx (bsc#1048155)\n- Workaround for BXT aperture vs GTT chip bug (bsc#1046821)\n- Limit the supplements for the default hardware support to only\n  Intel Skylake / Kabylake and AMDGPU (bsc#1077885)\n  4.9.x i915 seems more buggy than expected for old chipsets.\n- Conditionally build aarch64 as well (bsc#1066175)\n- Build host1x module (taken from the kernel-source) as well for\n  avoiding the unneeded dependency on kernel-default-extra on\n  ARM64 (bsc#1066175)\n- Enable AMDGPU CIK and SI (bsc#1066175):\n- Add missing hisilicon hibmc driver (bsc#1066175):\n- Add si_support and cik_support options to radeon and amdgpu\n  (bsc#1066175):\n- Update Module.supported and apply it properly;\n  following SLE12-SP3 kernel status\n- Backport the upstream DP-MST fixes, addressing a hang at S3\n  resume (bsc#1055493):\n","id":"SUSE-SU-2018:0509-1","modified":"2018-02-21T13:43:43Z","published":"2018-02-21T13:43:43Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180509-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1041744"},{"type":"REPORT","url":"https://bugzilla.suse.com/1046821"},{"type":"REPORT","url":"https://bugzilla.suse.com/1047277"},{"type":"REPORT","url":"https://bugzilla.suse.com/1047729"},{"type":"REPORT","url":"https://bugzilla.suse.com/1048155"},{"type":"REPORT","url":"https://bugzilla.suse.com/1050256"},{"type":"REPORT","url":"https://bugzilla.suse.com/1055493"},{"type":"REPORT","url":"https://bugzilla.suse.com/1066175"},{"type":"REPORT","url":"https://bugzilla.suse.com/1077885"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-10810"}],"related":["CVE-2017-10810"],"summary":"Security update for drm","upstream":["CVE-2017-10810"]}