SUSE-SU-2025:1452-1
Vulnerability from csaf_suse - Published: 2025-05-05 07:43 - Updated: 2025-05-05 07:43Summary
Security update for libva
Severity
Moderate
Notes
Title of the patch: Security update for libva
Description of the patch: This update for libva fixes the following issues:
Update to libva version 2.20.0, which includes security fix for:
- CVE-2023-39929: Uncontrolled search path may allow an authenticated
user to escalate privilege via local access (bsc#1224413, jsc#PED-11066)
This includes latest version of one of the components needed for
Video (processing) hardware support on Intel GPUs (bsc#1217770)
Update to version 2.20.0:
* av1: Revise offsets comments for av1 encode
* drm:
- Limit the array size to avoid out of range
- Remove no longer used helpers
* jpeg: add support for crop and partial decode
* trace:
- Add trace for vaExportSurfaceHandle
- Unlock mutex before return
- Fix minor issue about printf data type and value range
* va/backend:
- Annotate vafool as deprecated
- Document the vaGetDriver* APIs
* va/x11/va_fglrx: Remove some dead code
* va/x11/va_nvctrl: Remove some dead code
* va:
- Add new VADecodeErrorType to indicate the reset happended in
the driver
- Add vendor string on va_TraceInitialize
- Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)
- Drop no longer applicable vaGetDriverNames check
- Fix:don't leak driver names, when override is set
- Fix:set driver number to be zero if vaGetDriverNames failed
- Optimize code of getting driver name for all protocols/os
(wayland,x11,drm,win32,android)
- Remove legacy code paths
- Remove unreachable 'DRIVER BUG'
* win32:
- Only print win32 driver messages in DEBUG builds
- Remove duplicate adapter_luid entry
* x11/dri2: limit the array handling to avoid out of range access
* x11:
- Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var
- Implement vaGetDriverNames
- Remove legacy code paths
Update to 2.19.0:
* add: Add mono_chrome to VAEncSequenceParameterBufferAV1
* add: Enable support for license acquisition of multiple protected
playbacks
* fix: use secure_getenv instead of getenv
* trace: Improve and add VA trace log for AV1 encode
* trace: Unify va log message, replace va_TracePrint with va_TraceMsg.
Update to version 2.18.0:
* doc: Add build and install libva informatio in home page.
* fix:
- Add libva.def into distribution package
- NULL check before calling strncmp.
- Remove reference to non-existent symbol
* meson: docs:
- Add encoder interface for av1
- Use libva_version over project_version()
* va:
- Add VAProfileH264High10
- Always build with va-messaging API
- Fix the codying style of CHECK_DISPLAY
- Remove Android pre Jelly Bean workarounds
- Remove dummy isValid() hook
- Remove unused drm_sarea.h include & ANDROID references in
va_dricommon.h
- va/sysdeps.h: remove Android section
* x11:
- Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var
- Use LIBVA_DRI3_DISABLE in GetNumCandidates
update to 2.17.0:
* win: Simplify signature for driver name loading
* win: Rewrite driver registry query and fix some
bugs/leaks/inefficiencies
* win: Add missing null check after calloc
* va: Update security disclaimer
* dep:remove the file .cvsignore
* pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx
* meson: add 'with-legacy' for emgd, nvctrl and fglrx
* x11: move all FGLRX code to va_fglrx.c
* x11: move all NVCTRL code to va_nvctrl.c
* meson: stop using deprecated meson.source_root()
* meson: stop using configure_file copy=true
* va: correctly include the win32 (local) headers
* win: clean-up the coding style
* va: dos2unix all the files
* drm: remove unnecessary dri2 version/extension query
* trace: annotate internal functions with DLL_HIDDEN
* build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_
support level attribute instead
* meson: Check support for -Wl,-version-script and build link_args
accordingly
* meson: Set va_win32 soversion to '' and remove the install_data rename
* fix: resouce check null
* va_trace: Add Win32 memory types in va_TraceSurfaceAttributes
* va_trace: va_TraceSurfaceAttributes should check the
VASurfaceAttribMemoryType
* va: Adds Win32 Node and Windows build support
* va: Adds compat_win32 abstraction for Windows build and prepares va
common code for windows build
* pkgconfig: Add Win32 package for when WITH_WIN32 is enabled
* meson: Add with_win32 option, makes libdrm non-mandatory on Win
* x11: add basic DRI3 support
* drm: remove VA_DRM_IsRenderNodeFd() helper
* drm: add radeon drm + radeonsi mesa combo
- needed for jira#PED-1174 (Video decoding/encoding support
(VA-API, ...) for Intel GPUs is outside of Mesa)
Update to 2.16.0:
* add: Add HierarchicalFlag & hierarchical_level_plus1 for AV1e.
* dep: Update README.md to remove badge links
* dep: Removed waffle-io badge from README to fix broken link
* dep: Drop mailing list, IRC and Slack
* autotools: use wayland-scanner private-code
* autotools: use the wayland-scanner.pc to locate the prog
* meson: use wayland-scanner private-code
* meson: request native wayland-scanner
* meson: use the wayland-scanner.pc to locate the prog
* meson: set HAVE_VA_X11 when applicable
* style:Correct slight coding style in several new commits
* trace: add Linux ftrace mode for va trace
* trace: Add missing pthread_mutex_destroy
* drm: remove no-longer needed X == X mappings
* drm: fallback to drm driver name == va driver name
* drm: simplify the mapping table
* x11: simplify the mapping table
Update to version 2.15.0 was part of Intel oneVPL GPU Runtime 2022Q2 Release 22.4.4
Update to 2.15.0:
* Add: new display HW attribute to report PCI ID
* Add: sample depth related parameters for AV1e
* Add: refresh_frame_flags for AV1e
* Add: missing fields in va_TraceVAEncSequenceParameterBufferHEVC.
* Add: nvidia-drm to the drm driver map
* Add: type and buffer for delta qp per block
* Deprecation: remove the va_fool support
* Fix:Correct the version of meson build on master branch
* Fix:X11 DRI2: check if device is a render node
* Build:Use also strong stack protection if supported
* Trace:print the string for profile/entrypoint/configattrib
Update to 2.14.0:
* add: Add av1 encode interfaces
* add: VA/X11 VAAPI driver mapping for crocus DRI driver
* doc: Add description of the fd management for surface importing
* ci: fix freebsd build
* meson: Copy public headers to build directory to support subproject
- CVE-2023-39929: Fixed an issue where an uncontrolled search path may allow authenticated users to escalate privilege via local access. (bsc#1224413)
Patchnames: SUSE-2025-1452,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1452,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1452,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1452,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1452
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.7 (Medium)
Affected products
Recommended
50 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libva",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libva fixes the following issues:\n\nUpdate to libva version 2.20.0, which includes security fix for:\n\n- CVE-2023-39929: Uncontrolled search path may allow an authenticated\n user to escalate privilege via local access (bsc#1224413, jsc#PED-11066)\n\nThis includes latest version of one of the components needed for\nVideo (processing) hardware support on Intel GPUs (bsc#1217770)\n\nUpdate to version 2.20.0:\n\n * av1: Revise offsets comments for av1 encode\n * drm:\n - Limit the array size to avoid out of range\n - Remove no longer used helpers\n * jpeg: add support for crop and partial decode\n * trace:\n - Add trace for vaExportSurfaceHandle\n - Unlock mutex before return\n - Fix minor issue about printf data type and value range\n * va/backend:\n - Annotate vafool as deprecated\n - Document the vaGetDriver* APIs\n * va/x11/va_fglrx: Remove some dead code\n * va/x11/va_nvctrl: Remove some dead code\n * va:\n - Add new VADecodeErrorType to indicate the reset happended in\n the driver\n - Add vendor string on va_TraceInitialize\n - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)\n - Drop no longer applicable vaGetDriverNames check\n - Fix:don\u0027t leak driver names, when override is set\n - Fix:set driver number to be zero if vaGetDriverNames failed\n - Optimize code of getting driver name for all protocols/os\n (wayland,x11,drm,win32,android)\n - Remove legacy code paths\n - Remove unreachable \u0027DRIVER BUG\u0027\n * win32:\n - Only print win32 driver messages in DEBUG builds\n - Remove duplicate adapter_luid entry\n * x11/dri2: limit the array handling to avoid out of range access\n * x11:\n - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var\n - Implement vaGetDriverNames\n - Remove legacy code paths\n\nUpdate to 2.19.0:\n\n * add: Add mono_chrome to VAEncSequenceParameterBufferAV1\n * add: Enable support for license acquisition of multiple protected\n playbacks\n * fix: use secure_getenv instead of getenv\n * trace: Improve and add VA trace log for AV1 encode\n * trace: Unify va log message, replace va_TracePrint with va_TraceMsg.\n\nUpdate to version 2.18.0:\n\n * doc: Add build and install libva informatio in home page.\n * fix:\n - Add libva.def into distribution package\n - NULL check before calling strncmp.\n - Remove reference to non-existent symbol\n * meson: docs:\n - Add encoder interface for av1\n - Use libva_version over project_version()\n * va:\n - Add VAProfileH264High10\n - Always build with va-messaging API\n - Fix the codying style of CHECK_DISPLAY\n - Remove Android pre Jelly Bean workarounds\n - Remove dummy isValid() hook\n - Remove unused drm_sarea.h include \u0026 ANDROID references in\n va_dricommon.h\n - va/sysdeps.h: remove Android section\n * x11:\n - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var\n - Use LIBVA_DRI3_DISABLE in GetNumCandidates\n\nupdate to 2.17.0:\n\n * win: Simplify signature for driver name loading\n * win: Rewrite driver registry query and fix some\n bugs/leaks/inefficiencies\n * win: Add missing null check after calloc\n * va: Update security disclaimer\n * dep:remove the file .cvsignore\n * pkgconfig: add \u0027with-legacy\u0027 for emgd, nvctrl and fglrx\n * meson: add \u0027with-legacy\u0027 for emgd, nvctrl and fglrx\n * x11: move all FGLRX code to va_fglrx.c\n * x11: move all NVCTRL code to va_nvctrl.c\n * meson: stop using deprecated meson.source_root()\n * meson: stop using configure_file copy=true\n * va: correctly include the win32 (local) headers\n * win: clean-up the coding style\n * va: dos2unix all the files\n * drm: remove unnecessary dri2 version/extension query\n * trace: annotate internal functions with DLL_HIDDEN\n * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_\n support level attribute instead\n * meson: Check support for -Wl,-version-script and build link_args\n accordingly\n * meson: Set va_win32 soversion to \u0027\u0027 and remove the install_data rename\n * fix: resouce check null\n * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes\n * va_trace: va_TraceSurfaceAttributes should check the\n VASurfaceAttribMemoryType\n * va: Adds Win32 Node and Windows build support\n * va: Adds compat_win32 abstraction for Windows build and prepares va\n common code for windows build\n * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled\n * meson: Add with_win32 option, makes libdrm non-mandatory on Win\n * x11: add basic DRI3 support\n * drm: remove VA_DRM_IsRenderNodeFd() helper\n * drm: add radeon drm + radeonsi mesa combo\n\n- needed for jira#PED-1174 (Video decoding/encoding support \n (VA-API, ...) for Intel GPUs is outside of Mesa)\n\nUpdate to 2.16.0:\n\n * add: Add HierarchicalFlag \u0026 hierarchical_level_plus1 for AV1e.\n * dep: Update README.md to remove badge links\n * dep: Removed waffle-io badge from README to fix broken link\n * dep: Drop mailing list, IRC and Slack\n * autotools: use wayland-scanner private-code\n * autotools: use the wayland-scanner.pc to locate the prog\n * meson: use wayland-scanner private-code\n * meson: request native wayland-scanner\n * meson: use the wayland-scanner.pc to locate the prog\n * meson: set HAVE_VA_X11 when applicable\n * style:Correct slight coding style in several new commits\n * trace: add Linux ftrace mode for va trace\n * trace: Add missing pthread_mutex_destroy\n * drm: remove no-longer needed X == X mappings\n * drm: fallback to drm driver name == va driver name\n * drm: simplify the mapping table\n * x11: simplify the mapping table\n\nUpdate to version 2.15.0 was part of Intel oneVPL GPU Runtime 2022Q2 Release 22.4.4\n\nUpdate to 2.15.0:\n\n * Add: new display HW attribute to report PCI ID\n * Add: sample depth related parameters for AV1e\n * Add: refresh_frame_flags for AV1e\n * Add: missing fields in va_TraceVAEncSequenceParameterBufferHEVC.\n * Add: nvidia-drm to the drm driver map\n * Add: type and buffer for delta qp per block\n * Deprecation: remove the va_fool support\n * Fix:Correct the version of meson build on master branch\n * Fix:X11 DRI2: check if device is a render node\n * Build:Use also strong stack protection if supported\n * Trace:print the string for profile/entrypoint/configattrib\n\nUpdate to 2.14.0:\n\n * add: Add av1 encode interfaces\n * add: VA/X11 VAAPI driver mapping for crocus DRI driver\n * doc: Add description of the fd management for surface importing\n * ci: fix freebsd build\n * meson: Copy public headers to build directory to support subproject\n\n- CVE-2023-39929: Fixed an issue where an uncontrolled search path may allow authenticated users to escalate privilege via local access. (bsc#1224413) \n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1452,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1452,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1452,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1452,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1452",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_1452-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:1452-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20251452-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:1452-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-May/039141.html"
},
{
"category": "self",
"summary": "SUSE Bug 1202828",
"url": "https://bugzilla.suse.com/1202828"
},
{
"category": "self",
"summary": "SUSE Bug 1217770",
"url": "https://bugzilla.suse.com/1217770"
},
{
"category": "self",
"summary": "SUSE Bug 1224413",
"url": "https://bugzilla.suse.com/1224413"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-39929 page",
"url": "https://www.suse.com/security/cve/CVE-2023-39929/"
}
],
"title": "Security update for libva",
"tracking": {
"current_release_date": "2025-05-05T07:43:59Z",
"generator": {
"date": "2025-05-05T07:43:59Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:1452-1",
"initial_release_date": "2025-05-05T07:43:59Z",
"revision_history": [
{
"date": "2025-05-05T07:43:59Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libva-devel-2.20.0-150400.3.5.1.aarch64",
"product": {
"name": "libva-devel-2.20.0-150400.3.5.1.aarch64",
"product_id": "libva-devel-2.20.0-150400.3.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libva-drm2-2.20.0-150400.3.5.1.aarch64",
"product": {
"name": "libva-drm2-2.20.0-150400.3.5.1.aarch64",
"product_id": "libva-drm2-2.20.0-150400.3.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libva-gl-devel-2.20.0-150400.3.5.1.aarch64",
"product": {
"name": "libva-gl-devel-2.20.0-150400.3.5.1.aarch64",
"product_id": "libva-gl-devel-2.20.0-150400.3.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libva-glx2-2.20.0-150400.3.5.1.aarch64",
"product": {
"name": "libva-glx2-2.20.0-150400.3.5.1.aarch64",
"product_id": "libva-glx2-2.20.0-150400.3.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"product": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"product_id": "libva-wayland2-2.20.0-150400.3.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"product": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"product_id": "libva-x11-2-2.20.0-150400.3.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libva2-2.20.0-150400.3.5.1.aarch64",
"product": {
"name": "libva2-2.20.0-150400.3.5.1.aarch64",
"product_id": "libva2-2.20.0-150400.3.5.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libva-devel-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product": {
"name": "libva-devel-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product_id": "libva-devel-64bit-2.20.0-150400.3.5.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libva-drm2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product": {
"name": "libva-drm2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product_id": "libva-drm2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libva-gl-devel-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product": {
"name": "libva-gl-devel-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product_id": "libva-gl-devel-64bit-2.20.0-150400.3.5.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libva-glx2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product": {
"name": "libva-glx2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product_id": "libva-glx2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libva-wayland2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product": {
"name": "libva-wayland2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product_id": "libva-wayland2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libva-x11-2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product": {
"name": "libva-x11-2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product_id": "libva-x11-2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libva2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product": {
"name": "libva2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32",
"product_id": "libva2-64bit-2.20.0-150400.3.5.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libva-devel-2.20.0-150400.3.5.1.i586",
"product": {
"name": "libva-devel-2.20.0-150400.3.5.1.i586",
"product_id": "libva-devel-2.20.0-150400.3.5.1.i586"
}
},
{
"category": "product_version",
"name": "libva-drm2-2.20.0-150400.3.5.1.i586",
"product": {
"name": "libva-drm2-2.20.0-150400.3.5.1.i586",
"product_id": "libva-drm2-2.20.0-150400.3.5.1.i586"
}
},
{
"category": "product_version",
"name": "libva-gl-devel-2.20.0-150400.3.5.1.i586",
"product": {
"name": "libva-gl-devel-2.20.0-150400.3.5.1.i586",
"product_id": "libva-gl-devel-2.20.0-150400.3.5.1.i586"
}
},
{
"category": "product_version",
"name": "libva-glx2-2.20.0-150400.3.5.1.i586",
"product": {
"name": "libva-glx2-2.20.0-150400.3.5.1.i586",
"product_id": "libva-glx2-2.20.0-150400.3.5.1.i586"
}
},
{
"category": "product_version",
"name": "libva-wayland2-2.20.0-150400.3.5.1.i586",
"product": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.i586",
"product_id": "libva-wayland2-2.20.0-150400.3.5.1.i586"
}
},
{
"category": "product_version",
"name": "libva-x11-2-2.20.0-150400.3.5.1.i586",
"product": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.i586",
"product_id": "libva-x11-2-2.20.0-150400.3.5.1.i586"
}
},
{
"category": "product_version",
"name": "libva2-2.20.0-150400.3.5.1.i586",
"product": {
"name": "libva2-2.20.0-150400.3.5.1.i586",
"product_id": "libva2-2.20.0-150400.3.5.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libva-devel-2.20.0-150400.3.5.1.ppc64le",
"product": {
"name": "libva-devel-2.20.0-150400.3.5.1.ppc64le",
"product_id": "libva-devel-2.20.0-150400.3.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"product": {
"name": "libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"product_id": "libva-drm2-2.20.0-150400.3.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libva-gl-devel-2.20.0-150400.3.5.1.ppc64le",
"product": {
"name": "libva-gl-devel-2.20.0-150400.3.5.1.ppc64le",
"product_id": "libva-gl-devel-2.20.0-150400.3.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libva-glx2-2.20.0-150400.3.5.1.ppc64le",
"product": {
"name": "libva-glx2-2.20.0-150400.3.5.1.ppc64le",
"product_id": "libva-glx2-2.20.0-150400.3.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"product": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"product_id": "libva-wayland2-2.20.0-150400.3.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"product": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"product_id": "libva-x11-2-2.20.0-150400.3.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libva2-2.20.0-150400.3.5.1.ppc64le",
"product": {
"name": "libva2-2.20.0-150400.3.5.1.ppc64le",
"product_id": "libva2-2.20.0-150400.3.5.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libva-devel-2.20.0-150400.3.5.1.s390x",
"product": {
"name": "libva-devel-2.20.0-150400.3.5.1.s390x",
"product_id": "libva-devel-2.20.0-150400.3.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libva-drm2-2.20.0-150400.3.5.1.s390x",
"product": {
"name": "libva-drm2-2.20.0-150400.3.5.1.s390x",
"product_id": "libva-drm2-2.20.0-150400.3.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libva-gl-devel-2.20.0-150400.3.5.1.s390x",
"product": {
"name": "libva-gl-devel-2.20.0-150400.3.5.1.s390x",
"product_id": "libva-gl-devel-2.20.0-150400.3.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libva-glx2-2.20.0-150400.3.5.1.s390x",
"product": {
"name": "libva-glx2-2.20.0-150400.3.5.1.s390x",
"product_id": "libva-glx2-2.20.0-150400.3.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libva-wayland2-2.20.0-150400.3.5.1.s390x",
"product": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.s390x",
"product_id": "libva-wayland2-2.20.0-150400.3.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libva-x11-2-2.20.0-150400.3.5.1.s390x",
"product": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.s390x",
"product_id": "libva-x11-2-2.20.0-150400.3.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libva2-2.20.0-150400.3.5.1.s390x",
"product": {
"name": "libva2-2.20.0-150400.3.5.1.s390x",
"product_id": "libva2-2.20.0-150400.3.5.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libva-devel-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-devel-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-devel-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-devel-32bit-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-devel-32bit-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-devel-32bit-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-drm2-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-drm2-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-drm2-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-drm2-32bit-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-drm2-32bit-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-drm2-32bit-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-gl-devel-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-gl-devel-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-gl-devel-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-gl-devel-32bit-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-gl-devel-32bit-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-gl-devel-32bit-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-glx2-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-glx2-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-glx2-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-glx2-32bit-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-glx2-32bit-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-glx2-32bit-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-wayland2-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-wayland2-32bit-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-wayland2-32bit-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-wayland2-32bit-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-x11-2-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva-x11-2-32bit-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva-x11-2-32bit-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva-x11-2-32bit-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva2-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva2-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva2-2.20.0-150400.3.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libva2-32bit-2.20.0-150400.3.5.1.x86_64",
"product": {
"name": "libva2-32bit-2.20.0-150400.3.5.1.x86_64",
"product_id": "libva2-32bit-2.20.0-150400.3.5.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.s390x"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.s390x"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.s390x"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.s390x"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.s390x"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-devel-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-devel-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-drm2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-drm2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-wayland2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva-x11-2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.ppc64le"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libva2-2.20.0-150400.3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.x86_64"
},
"product_reference": "libva2-2.20.0-150400.3.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-39929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-39929"
}
],
"notes": [
{
"category": "general",
"text": "Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-39929",
"url": "https://www.suse.com/security/cve/CVE-2023-39929"
},
{
"category": "external",
"summary": "SUSE Bug 1224413 for CVE-2023-39929",
"url": "https://bugzilla.suse.com/1224413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libva2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-devel-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-drm2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-wayland2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva-x11-2-2.20.0-150400.3.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libva2-2.20.0-150400.3.5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-05-05T07:43:59Z",
"details": "moderate"
}
],
"title": "CVE-2023-39929"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…