DirectFB: Multiple vulnerabilities

DirectFB: Multiple vulnerabilities Multiple vulnerabilities have been found in DirectFB, all of which could allow remote attackers to execute arbitrary code. directfb 2017-01-23 2017-01-23 510472 remote 1.7.5 1.7.5

DirectFB (Direct Frame Buffer) is a set of graphics APIs implemented on top of the Linux Frame Buffer (fbdev) abstraction layer.

Multiple vulnerabilities have been discovered in DirectFB. Please review the CVE identifiers referenced below for details.

Remote attackers could cause a Denial of Service condition or execute arbitrary code via the Voodoo interface.

There is no known workaround at this time.

All DirectFB users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-libs/DirectFB-1.7.5"

CVE-2014-2977 CVE-2014-2978 b-man b-man