Your message dated Sun, 16 Mar 2014 18:47:09 +0000 with message-id <e1wpg5v-0007er...@franck.debian.org> and subject line Bug#735271: fixed in nvidia-graphics-drivers 304.117-1 has caused the Debian Bug report #735271, regarding nvidia-graphics-drivers: CVE-2013-5987 - Unprivileged GPU access vulnerability to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 735271: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=735271 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Severity: serious Tags: security Control: fixed -1 319.72-1,331.20-1 Quoting from http://nvidia.custhelp.com/app/answers/detail/a_id/3377 Vulnerability Description: An NVIDIA graphics driver bug allows unprivileged user-mode software to access the GPU inappropriately. An attacker who successfully exploited this vulnerability could take control of an affected system. Exploit Scope and Risk: To take advantage of this vulnerability, an attacker would need to run specially crafted software locally on the target computer. Expert knowledge of system and NVIDIA GPU programming would be required to create such an exploit. NVIDIA is not aware of the existence of any actual exploits that leverage this vulnerability. This issue could potentially affect all supported PC OS platforms and form factors. NVIDIA Tegra GPUs are not vulnerable. The following table shows the first NVIDIA UNIX GPU Drivers that contain the security fix. Driver Branch Version Release 331 331.20 Release 319 319.72 Release 304 304.116 nvidia-graphics-drivers-legacy-304xx is affected as well, but is already at the fixed version. It is unknown whether the older legacy branches are affected. Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers Source-Version: 304.117-1 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 735...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 15 Feb 2014 16:11:02 +0100 Source: nvidia-graphics-drivers Binary: nvidia-glx xserver-xorg-video-nvidia nvidia-glx-ia32 libgl1-nvidia-glx libxvmcnvidia1 libgl1-nvidia-glx-ia32 nvidia-alternative nvidia-kernel-dkms nvidia-kernel-source nvidia-vdpau-driver nvidia-vdpau-driver-ia32 nvidia-smi libcuda1 libcuda1-ia32 libnvidia-compiler libnvidia-compiler-ia32 libnvcuvid1 libnvidia-ml1 nvidia-opencl-common nvidia-opencl-icd nvidia-opencl-icd-ia32 nvidia-libopencl1 nvidia-libopencl1-ia32 libgl1-nvidia-alternatives libgl1-nvidia-alternatives-ia32 libglx-nvidia-alternatives nvidia-detect Architecture: source amd64 Version: 304.117-1 Distribution: wheezy Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libcuda1 - NVIDIA CUDA runtime library libcuda1-ia32 - please switch to multiarch libcuda1:i386 libgl1-nvidia-alternatives - transition libGL.so* diversions to glx-alternative-nvidia libgl1-nvidia-alternatives-ia32 - simplifies replacing MESA libGL with GPU vendor libraries (32-bit libgl1-nvidia-glx - NVIDIA binary OpenGL libraries${nvidia:LegacyDesc} libgl1-nvidia-glx-ia32 - please switch to multiarch libgl1-nvidia${nvidia:Legacy}-glx:i386 libglx-nvidia-alternatives - transition libgl.so diversions to glx-alternative-nvidia libnvcuvid1 - NVIDIA CUDA nvcuvid runtime library libnvidia-compiler - NVIDIA runtime compiler library libnvidia-compiler-ia32 - please switch to multiarch libnvidia-compiler:i386 libnvidia-ml1 - NVIDIA management library (NVML) runtime library libxvmcnvidia1 - NVIDIA binary XvMC library${nvidia:LegacyDesc} nvidia-alternative - allows the selection of NVIDIA as GLX provider nvidia-detect - NVIDIA GPU detection utility nvidia-glx - NVIDIA metapackage${nvidia:LegacyDesc} nvidia-glx-ia32 - NVIDIA 32-bit libraries${nvidia:LegacyDesc} (transitional package nvidia-kernel-dkms - NVIDIA binary kernel module DKMS source${nvidia:LegacyDesc} nvidia-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc} nvidia-libopencl1 - NVIDIA OpenCL library nvidia-libopencl1-ia32 - please switch to multiarch nvidia-libopencl1:i386 nvidia-opencl-common - NVIDIA OpenCL driver nvidia-opencl-icd - NVIDIA OpenCL ICD nvidia-opencl-icd-ia32 - please switch to multiarch nvidia-opencl-icd:i386 nvidia-smi - NVIDIA System Management Interface nvidia-vdpau-driver - NVIDIA vdpau driver nvidia-vdpau-driver-ia32 - please switch to multiarch nvidia-vdpau-driver:i386 xserver-xorg-video-nvidia - NVIDIA binary Xorg driver${nvidia:LegacyDesc} Closes: 710891 722469 735271 Changes: nvidia-graphics-drivers (304.117-1) wheezy; urgency=medium . * New upstream legacy 304xx branch release 304.117 (2013-12-11). - Added support for X.org xserver ABI 15 (xorg-server 1.15). * New upstream legacy 304xx branch release 304.116 (2013-11-06). - Fixed a security vulnerability in the microcode for microcontrollers that are part of NVIDIA GPUs. This vulnerability could be exploited to take control of a system, and it is described in greater detail at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-5987 (Closes: #735271) - Improved compatibility with recent Linux kernels. - Updated the NVIDIA OpenGL driver to write temporary files to $TMPDIR if it is set, instead of unconditionally writing to /tmp. - Updated a fallback of writing temporary files to $HOME/.nvidia to use $HOME/.nv instead, as the latter path is already used for other NVIDIA driver related files. * New upstream legacy 304xx branch release 304.108 (2013-08-08). * Add support for Linux 3.10. * Refresh patches. * conftest.h: - conftest.h: Add ARM support. - Implement check for drm/drmP.h (319.12). - Implement new conftest.sh functions drm_available (319.12), dom0_kernel_present (325.08), proc_create_data, pde_data, proc_remove (304.108, 325.15). - Implement conftest.sh sanity checks (only emit warning) nvidiafb_sanity_check (1.0-8174), xen_sanity_check (1.0-9746, 177.76), preempt_rt_sanity_check (325.08). - Implement new conftest.sh function get_num_physpages (173.14.38). - Implement checks for linux/printk.h, linux/ratelimit.h, linux/prio_tree.h (331.13). - Implement new conftest.sh functions vm_operations_struct (331.13), task_struct (331.17), address_space, address_space_init_once (331.20). * Add xorg-video-abi-15 as alternative dependency. * Merge some bugfixes from sid. * Use canonical Vcs-* URLs. * {libgl1-nvidia-glx,libcuda1}.postinst: Load debconf/confmodule, may be used by /usr/lib/nvidia/check* scripts. (Closes: #722469) * debian/module/debian/prep-modules: Sanitize the kernel version. Replace underscores (may occur in custom kernels) with dashes to be eligible for package names and versions. (Closes: #710891) * Update lintian overrides. Checksums-Sha1: 5462311a00d5aedb6b2b5d456610f072d954f6de 3978 nvidia-graphics-drivers_304.117-1.dsc 3d7564cb75e2fb94ff12940fcf61069f846d0580 105342161 nvidia-graphics-drivers_304.117.orig.tar.gz ceab091c16419d8f4c78a831472c8975696bfa96 113938 nvidia-graphics-drivers_304.117-1.debian.tar.gz df238d8fe26820f6d91e6bd51f73bca8c4c19946 353120 nvidia-glx_304.117-1_amd64.deb d5e6424ef117788ec1094a14057f7b5a35c51dab 2357994 xserver-xorg-video-nvidia_304.117-1_amd64.deb 9c49920884bbbd67118e9f75f35b317fc3594e9a 94920 nvidia-glx-ia32_304.117-1_amd64.deb 6724e79e74c0b24d61d6dc9c3dcb36508e73841a 6561860 libgl1-nvidia-glx_304.117-1_amd64.deb 887e0d5938b40069872848337f5931b27784979a 282718 libxvmcnvidia1_304.117-1_amd64.deb e5c4223ef2720b0717ddeb7b37d698e42802c076 95170 libgl1-nvidia-glx-ia32_304.117-1_amd64.deb 1a3531b33e27db7a85f5766ddaedfee20ff67c79 95718 nvidia-alternative_304.117-1_amd64.deb f59e592aa18fd0207f4396b56f52b8448345c54e 6912772 nvidia-kernel-dkms_304.117-1_amd64.deb 332d95482e4a314a0585fe1c467120028ffc5f41 9083284 nvidia-kernel-source_304.117-1_amd64.deb d51a54ca0a4d15ac9903f6d4895ec67d5dd41b09 838008 nvidia-vdpau-driver_304.117-1_amd64.deb 29e300c05ddcaf2bb2cc63dde4934c91db4ba4eb 94970 nvidia-vdpau-driver-ia32_304.117-1_amd64.deb e5b104d48cbb4dbee8b76d2984437bea0a0332a0 146176 nvidia-smi_304.117-1_amd64.deb b7711647990e2f10cb482f91b9c3ff1f06b1fe0a 3271574 libcuda1_304.117-1_amd64.deb 13002f84bf202ae8f0e97419999092cb733056c9 94934 libcuda1-ia32_304.117-1_amd64.deb 8e9770a538d603548818a1384ee84432822a7158 6971960 libnvidia-compiler_304.117-1_amd64.deb e35851b4d19b83b3ffda60f6919bf00be7ec9663 94502 libnvidia-compiler-ia32_304.117-1_amd64.deb d5e92e7564473293e7cf7a86a4df0dbcc54f56cc 624500 libnvcuvid1_304.117-1_amd64.deb c03dc9ae244e8ec28f339bc96c8c9d0ce747e2d5 216410 libnvidia-ml1_304.117-1_amd64.deb 303b432a299cb20ceed7fefb148d0f4696bb1398 94678 nvidia-opencl-common_304.117-1_amd64.deb c6908a5d6f64310b785b307973a1877982275997 2974118 nvidia-opencl-icd_304.117-1_amd64.deb d9b30c0931aca288803fa4a23d0b312284c4ab32 94876 nvidia-opencl-icd-ia32_304.117-1_amd64.deb 56c99cb4520eab7bd15f76465e2145ac947d0321 101338 nvidia-libopencl1_304.117-1_amd64.deb 12df3b66e0d305631327d980aaf024b401ea0f98 94478 nvidia-libopencl1-ia32_304.117-1_amd64.deb 417fdd1a83c77d479592ea4fefb1a55bb989b63f 94868 libgl1-nvidia-alternatives_304.117-1_amd64.deb d15ba28ab73f22d55b1769d72da612d223108ba0 96718 libgl1-nvidia-alternatives-ia32_304.117-1_amd64.deb 79357231e64cac709c51627b6053617447f2ae71 94812 libglx-nvidia-alternatives_304.117-1_amd64.deb b04f93f2d228c389b41b82e33313c3a7c1b08a08 97146 nvidia-detect_304.117-1_amd64.deb Checksums-Sha256: bfa507dd81443c17c3a9919e78dc65e9b3cfb9d91dd91315e1515dda9eb9d2c8 3978 nvidia-graphics-drivers_304.117-1.dsc ea08437fed8f60e4180f3b6b99dd7fd99bcfd0fe824144fc295a33d5e738ab02 105342161 nvidia-graphics-drivers_304.117.orig.tar.gz 0cc40ac8a7f00f5066cbd6fa92169616551ce3f07285c037300722a025b234b8 113938 nvidia-graphics-drivers_304.117-1.debian.tar.gz ea41577e3945daf22de5ae9391cf2d7d412dc26d1b338e4f289893c8012d431b 353120 nvidia-glx_304.117-1_amd64.deb 2dca942fc1cf7b3869a73872a70eca0565bc3abca1c9b113643014cff7412ee5 2357994 xserver-xorg-video-nvidia_304.117-1_amd64.deb 88b7c64b5e65478d3456bc784fb0b2485a81a1d9312b2a9580c54f9ded0b43fe 94920 nvidia-glx-ia32_304.117-1_amd64.deb ca2ad8fca051093d520032e0afadc79eb29ea951f4a6fc858c9266980e3ae7c8 6561860 libgl1-nvidia-glx_304.117-1_amd64.deb 8b4f66372c4befb43dc7971e86ea4e0c8c220cfccb00dd5ce68ee19931599446 282718 libxvmcnvidia1_304.117-1_amd64.deb ed979a5ba7e1436d1027202aa47e350bf9368cdae544df609e84d8489bb783b3 95170 libgl1-nvidia-glx-ia32_304.117-1_amd64.deb 58188ade158bbaf4141dfac21deea42bf38ae2495bc679f738e3d2d122084b02 95718 nvidia-alternative_304.117-1_amd64.deb 3c2942c1c4ca641fd36ae3bb8c1a9feeb498b1ce847ba51cd9b71016eeffa68f 6912772 nvidia-kernel-dkms_304.117-1_amd64.deb 3c46562228a4f12011f493135d15b17ba3ce60b4b68427f8c31f8aeeef5548bd 9083284 nvidia-kernel-source_304.117-1_amd64.deb 5af4b336ea1734ffd583b2ed4f79d69e56a09ea9cf56e9a87e9406427db47951 838008 nvidia-vdpau-driver_304.117-1_amd64.deb 89079a3770c6f69c1249246357849d3c32f2d1267d7e72806497bf3b77c20ddf 94970 nvidia-vdpau-driver-ia32_304.117-1_amd64.deb 5b0761cca06b8398e0b7ba116b8238036e0c3d825d85194bd9ce6f5898e62d0d 146176 nvidia-smi_304.117-1_amd64.deb 675e62363c3e2b40159959591aab8a5f220fca05ccd655904a6e053808f67956 3271574 libcuda1_304.117-1_amd64.deb b2c4c7e8ca6f755315ba84d6955fc3414fdad9e716e9a27060f15f43c18be18c 94934 libcuda1-ia32_304.117-1_amd64.deb 2ec5bbb868e5f37b3dbf9dc22d9e24e36158d5bc55ada6ed4b71dedac2c42757 6971960 libnvidia-compiler_304.117-1_amd64.deb 4e33b2d3bba74e2e538c9e78711c5eef67ef14d0aa7b6a775ecf9aeb04a9bdee 94502 libnvidia-compiler-ia32_304.117-1_amd64.deb d1e27a89f29b6658cdfc7bdb79f78ccbd69221b469662471f32ab577ef4eb583 624500 libnvcuvid1_304.117-1_amd64.deb 53244669fefd50e5df71f595a49f46dde9c2f6daad1d3ab5021254cf1a3fa52c 216410 libnvidia-ml1_304.117-1_amd64.deb d52a53e834e2929e0b15bff02696443f564c97cb299f1ba8f91b0e439e88ca31 94678 nvidia-opencl-common_304.117-1_amd64.deb ee238534b84b001b9856136ee07afb5b07dde1cc8d25c567ff5d523af0fc6c03 2974118 nvidia-opencl-icd_304.117-1_amd64.deb c31f300df9c974c964d8fc5731f010f4e60ae0399191613f91ca0de706ef77c6 94876 nvidia-opencl-icd-ia32_304.117-1_amd64.deb 8bf92461365d2170bc8c30c2f52eb464c8c7b80dcb07566796e5705288134dfe 101338 nvidia-libopencl1_304.117-1_amd64.deb 8aabad4838a3389cb36057021405301b883ba32a3091f6b468a589fa4e9cbc21 94478 nvidia-libopencl1-ia32_304.117-1_amd64.deb a908677156c859e344a26ed21460b64fe9ce83185e8f435a2c1e20d72ec66529 94868 libgl1-nvidia-alternatives_304.117-1_amd64.deb dbab06e02988ac8d294a594243d8a373eba3d10a847e3053cdd41a7058692792 96718 libgl1-nvidia-alternatives-ia32_304.117-1_amd64.deb b388cb6573caebb00a94759a9d312900f0b98036f279faaabb0bd858b433cd2c 94812 libglx-nvidia-alternatives_304.117-1_amd64.deb 8b185887e6cdac7fff976b808fd6717725e872a8b9e963936c6ee0ac7f9df06c 97146 nvidia-detect_304.117-1_amd64.deb Files: e6589d64b52307978bb7b6aced4eb39c 3978 non-free/libs optional nvidia-graphics-drivers_304.117-1.dsc 5cd7547d4fc9bd6372f7fd480922b222 105342161 non-free/libs optional nvidia-graphics-drivers_304.117.orig.tar.gz 16370680390076e1a01691230a59731f 113938 non-free/libs optional nvidia-graphics-drivers_304.117-1.debian.tar.gz 34dddc63f4155733c4c8fcd06e29e348 353120 non-free/x11 optional nvidia-glx_304.117-1_amd64.deb 9a7c09fb924997522a3f4d1a5628bf1c 2357994 non-free/x11 optional xserver-xorg-video-nvidia_304.117-1_amd64.deb 5743b8ebe5d2ef7ea3c34c7b058f27a8 94920 non-free/oldlibs extra nvidia-glx-ia32_304.117-1_amd64.deb 4c3ae46f317d8e244fdeda99fc931f16 6561860 non-free/libs optional libgl1-nvidia-glx_304.117-1_amd64.deb 27da48de581fd4fa60a93291a8209597 282718 non-free/libs optional libxvmcnvidia1_304.117-1_amd64.deb 219e4903f196281444c38a4e37509cb4 95170 non-free/oldlibs extra libgl1-nvidia-glx-ia32_304.117-1_amd64.deb 1817dc0e86f093b5ec96df7a7914ac8e 95718 non-free/libs optional nvidia-alternative_304.117-1_amd64.deb f7f5a6a242f94b2085f37a9875867019 6912772 non-free/kernel optional nvidia-kernel-dkms_304.117-1_amd64.deb cb7a4c40a550fd00499db9d7e8fd3a70 9083284 non-free/kernel optional nvidia-kernel-source_304.117-1_amd64.deb 5d33976d39ca0b995cefa3c59ca33e2a 838008 non-free/video optional nvidia-vdpau-driver_304.117-1_amd64.deb 80e73e889dcdde0a45d0745e0150fb1a 94970 non-free/oldlibs extra nvidia-vdpau-driver-ia32_304.117-1_amd64.deb d3c735d0418ee20a85a7d890c9f06d6a 146176 non-free/utils optional nvidia-smi_304.117-1_amd64.deb 4aa0baec75ff8d22ee58dc798dd4c788 3271574 non-free/libs optional libcuda1_304.117-1_amd64.deb 58df99cffc37587ae2f0de934d889636 94934 non-free/oldlibs extra libcuda1-ia32_304.117-1_amd64.deb e8e06fb0845eb2d4a653ff862b169852 6971960 non-free/libs optional libnvidia-compiler_304.117-1_amd64.deb 28b11d7a5ba2abd512ecc3b0bef10133 94502 non-free/oldlibs extra libnvidia-compiler-ia32_304.117-1_amd64.deb 8d1f65d49b02fc4f0fc9afae5d736433 624500 non-free/libs optional libnvcuvid1_304.117-1_amd64.deb 56c7c622ad838bf7bbd92b0b08212a2e 216410 non-free/libs optional libnvidia-ml1_304.117-1_amd64.deb 80e3794700ba7570f92acbf444e2c372 94678 non-free/libs optional nvidia-opencl-common_304.117-1_amd64.deb c09c26021e76b5bf37a989bb5f52729b 2974118 non-free/libs optional nvidia-opencl-icd_304.117-1_amd64.deb 6a6a4c6f1591dd5113b22b21fe690d89 94876 non-free/oldlibs extra nvidia-opencl-icd-ia32_304.117-1_amd64.deb a204e3100520633b19f8b0bab7f73bd2 101338 non-free/libs optional nvidia-libopencl1_304.117-1_amd64.deb 277af7235586f49624955ebffd61fe7b 94478 non-free/oldlibs extra nvidia-libopencl1-ia32_304.117-1_amd64.deb fc7e46d320ca474b871f85844f4d587f 94868 non-free/oldlibs optional libgl1-nvidia-alternatives_304.117-1_amd64.deb 520e20e882d259161272d29ace013273 96718 non-free/libs extra libgl1-nvidia-alternatives-ia32_304.117-1_amd64.deb 7aab7c2547e277f2b33a032419f0cff3 94812 non-free/oldlibs optional libglx-nvidia-alternatives_304.117-1_amd64.deb 3656d5b47cb31fb54590e75dc4903e44 97146 non-free/x11 optional nvidia-detect_304.117-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJS/4dJAAoJEF+zP5NZ6e0IwSMP/1sac6bN43hB98kEtzkTsv0v yBtYAuZ/c8esWP+njjLfijDh2FdvIGeGeFhNFh9pXWI+SEj9HjTJsN6XFdxBn+mR PXSyncBzzM4mV610DDJD7tzFJ08jH5bC8LBamwYsSGVocxBwgyVkVDKXLqIqObTV TTsAnNOpirCoZbyUlN6eEmuLOfADPhgrucSam+6NDTR5AqitIyDLN1Nfb4/i0sdr OE7rJOrgA+waJcvmzKnB660lDpoNqo2lZECHxH0O5TpLtrZ3sjoU8SFAeR2IEt5y Hnmqe2c50ccy+AW6/QSBS8YqM6t3xj5cpdLNoanRMZ85Ipy8JYgsC7tX2wIyNDtR oGHx5+lFKwp/IazpldqV4nH4xPfVVdfcfTMcnQ6bGlyh+F9EAQGFNpOJwkNH7cs5 5bBbIMB8CDeh2YIq+844IadNBSJwNa2dCICbDDwLTvrtZAhajcJpIZXeelzgF7wf wPj8UDb66I+f7mz7LXo9HLb0GPdcsTp5E6hRda+BHRX79/a/80VcKN7JLYVIW5c2 0WuBrElSyRv3hWlkMr1RDwwyFvf9U4g8zPDQzBl+sdjYE8T0BNTVoUoEEuAFBnwZ SPDdYQOZyr/1jw0HaAeaCnD5Vi6tw3vPrL+v125bdw/07/4mSTalhShJ091CP2Fg 2PpLVawww2RRDGLp5Uya =fudC -----END PGP SIGNATURE-----
--- End Message ---
