Your message dated Mon, 14 Dec 2015 11:35:08 +0000 with message-id <e1a8rpi-0005jr...@franck.debian.org> and subject line Bug#805919: fixed in nvidia-graphics-drivers-legacy-340xx 340.96-1 has caused the Debian Bug report #805919, regarding nvidia-graphics-drivers-legacy-340xx: CVE-2015-7869: Unsanitized User Mode Input to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 805919: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805919 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Version: 304.22-1 Severity: serious Tags: security http://nvidia.custhelp.com/app/answers/detail/a_id/3808 http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-7869.html [...] This report also details an advisory regarding integer overflow issues in the underlying kernel mode driver. [...] The integer overflow issues affect both Windows and Linux-based GPU drivers. These issues affect all GPU products and are not specific to any GPU class device. Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-legacy-340xx Source-Version: 340.96-1 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-legacy-340xx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 805...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-legacy-340xx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 14 Dec 2015 12:25:37 +0100 Source: nvidia-graphics-drivers-legacy-340xx Binary: nvidia-legacy-340xx-driver nvidia-legacy-340xx-driver-bin xserver-xorg-video-nvidia-legacy-340xx libgl1-nvidia-legacy-340xx-glx libgl1-nvidia-legacy-340xx-glx-i386 libegl1-nvidia-legacy-340xx libgles1-nvidia-legacy-340xx libgles2-nvidia-legacy-340xx libnvidia-legacy-340xx-eglcore nvidia-legacy-340xx-alternative nvidia-legacy-340xx-kernel-support nvidia-legacy-340xx-kernel-dkms nvidia-legacy-340xx-kernel-source nvidia-legacy-340xx-vdpau-driver nvidia-legacy-340xx-smi libnvidia-legacy-340xx-cuda1 libnvidia-legacy-340xx-cuda1-i386 libnvidia-legacy-340xx-compiler libnvidia-legacy-340xx-nvcuvid1 libnvidia-legacy-340xx-encode1 libnvidia-legacy-340xx-ifr1 libnvidia-legacy-340xx-fbc1 libnvidia-legacy-340xx-ml1 nvidia-legacy-340xx-opencl-icd Architecture: source Version: 340.96-1 Distribution: unstable Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libegl1-nvidia-legacy-340xx - NVIDIA binary EGL libraries${nvidia:LegacyDesc} libgl1-nvidia-legacy-340xx-glx - NVIDIA binary OpenGL libraries${nvidia:LegacyDesc} libgl1-nvidia-legacy-340xx-glx-i386 - NVIDIA binary OpenGL 32-bit libraries${nvidia:LegacyDesc} libgles1-nvidia-legacy-340xx - NVIDIA binary OpenGL|ES 1.x libraries${nvidia:LegacyDesc} libgles2-nvidia-legacy-340xx - NVIDIA binary OpenGL|ES 2.x libraries${nvidia:LegacyDesc} libnvidia-legacy-340xx-compiler - NVIDIA runtime compiler library libnvidia-legacy-340xx-cuda1 - NVIDIA CUDA Driver Library libnvidia-legacy-340xx-cuda1-i386 - NVIDIA CUDA 32-bit runtime library${nvidia:LegacyDesc} libnvidia-legacy-340xx-eglcore - NVIDIA binary EGL core libraries${nvidia:LegacyDesc} libnvidia-legacy-340xx-encode1 - NVENC Video Encoding runtime library libnvidia-legacy-340xx-fbc1 - NVIDIA OpenGL-based Framebuffer Capture runtime library libnvidia-legacy-340xx-ifr1 - NVIDIA OpenGL-based Inband Frame Readback runtime library libnvidia-legacy-340xx-ml1 - NVIDIA Management Library (NVML) runtime library libnvidia-legacy-340xx-nvcuvid1 - NVIDIA CUDA Video Decoder runtime library nvidia-legacy-340xx-alternative - allows the selection of NVIDIA as GLX provider nvidia-legacy-340xx-driver - NVIDIA metapackage${nvidia:LegacyDesc} nvidia-legacy-340xx-driver-bin - NVIDIA driver support binaries${nvidia:LegacyDesc} nvidia-legacy-340xx-kernel-dkms - NVIDIA binary kernel module DKMS source${nvidia:LegacyDesc} nvidia-legacy-340xx-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc} nvidia-legacy-340xx-kernel-support - NVIDIA binary kernel module support files${nvidia:LegacyDesc} nvidia-legacy-340xx-opencl-icd - NVIDIA OpenCL installable client driver (ICD) nvidia-legacy-340xx-smi - NVIDIA System Management Interface nvidia-legacy-340xx-vdpau-driver - Video Decode and Presentation API for Unix - NVIDIA driver xserver-xorg-video-nvidia-legacy-340xx - NVIDIA binary Xorg driver${nvidia:LegacyDesc} Closes: 805919 Changes: nvidia-graphics-drivers-legacy-340xx (340.96-1) unstable; urgency=medium . * New upstream legacy 340xx branch release 340.96 (2015-11-16). * Fixed CVE-2015-7869: Unsanitized User Mode Input. (Closes: #805919) * Improved compatibility with recent Linux kernels. * Synchronize packaging with nvidia-graphics-drivers 340.96-3: - Add slave alternative for libnvcuvid.so. - Use a more generic approach for unloading the modules. * Synchronize packaging with nvidia-graphics-drivers 340.96-2: - seq-printf.patch: Remove, fixed upstream. * Synchronize packaging with nvidia-graphics-drivers 340.96-1: - d/control: Make dependencies on nvidia-legacy-340xx-alternative strictly versioned to prevent partial upgrades. - d/module/debian/control.template: Add armhf to the Architecture list, otherwise module-assistant can't build any module packages from nvidia-legacy-340xx-kernel-source on armhf. * Synchronize packaging with nvidia-graphics-drivers 304.131-1: - Add xorg-video-abi-20 as alternative dependency. * conftest.h: - Update conftest.sh function scatterlist for logic reversal in 304.131/340.96/352.63, support both ways. Checksums-Sha1: bcd256a6d50ba8ab8890dbc9c19b36694536844c 4979 nvidia-graphics-drivers-legacy-340xx_340.96-1.dsc 0b15cae059355872fa7758edfd8daa7b4c7a0e92 131904249 nvidia-graphics-drivers-legacy-340xx_340.96.orig.tar.gz f23f20f05350197861c45c0fb02a3ef8d13d3f3f 63956 nvidia-graphics-drivers-legacy-340xx_340.96-1.debian.tar.xz Checksums-Sha256: dee2f97160e20eaf93b6098d5ea2b1f6ae27bd026b3df18fd525f72a5a4baf54 4979 nvidia-graphics-drivers-legacy-340xx_340.96-1.dsc 9e88de85b4b5a5572de65c37bff879c83964fde362426471ce829b6074c18056 131904249 nvidia-graphics-drivers-legacy-340xx_340.96.orig.tar.gz 22fb70313ade496a104c510d889115c57c783c78f946d69513675ab2da8168eb 63956 nvidia-graphics-drivers-legacy-340xx_340.96-1.debian.tar.xz Files: f9c1f920bfcad31fc305b44df42f33cc 4979 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.96-1.dsc 402812d570cdd3c8ba5fda8876d34aef 131904249 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.96.orig.tar.gz aa2850fd77c0ff51e631d2ab9ededc7a 63956 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.96-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWbqgMAAoJEF+zP5NZ6e0IP64P/0rmV1J29mqQB3/LBj8GM28E L1eZ8G1izThu54YVFDCwwhJMMO68LKqD8zEpHRRQP/ZtQa5KBJXZJocPBThg45M3 69DTxh/jMHkdyAp+P48RC5xVDw96vSV5ywDQZdnn3pCZmpyo7A8C6ZnrlLs+ZCOj qbzpEQbUXhXLV6xD574gS1diLtlbGBfnsdxr3WxecFqTdGJan3+p01tgTTG4fxQ6 FzNoOndHgpR3wIb/MvMqomiT6xlf5qW5VLu7dNY2UZlcaEGHzs/xT7tx/FgXkQ5P T6yTgPVDAUiMmlFkoUQAN3facHmBHF3SA9Sz71wCKs6RCjRell2B722GVrV3MDzP dVEe7siZGoe7ytfwQTFuMVLM44UgjiV5Y2EKy/jyhe8xcVQcQ8ukfO2xXbUD1vo5 WLIrDGHLAehlnIinVdywQD9hJU1hP0LmJufuFH8YQsLTGlILAF5JRABmpy14KhJd QzJZSTFErvJ+ii70SShVkDA0WdJ6MRu8bI9AdCbAw5DJ/RIMtKzRJSA1XiUG3pfR ikvZDY7uI/vdHQxHmCZyUrGJ6i/FGlZATEFzrn0kqAYRDl/iPCpWu9xTCUfAHc6B pcKrTgoiQFzY5LAjOJgmtrQLe5/3FacECrmdmnTdIJua8MJOzNrwGtqXVYRAGnU4 UJgd9iWF0riy6cdu5rHM =t19p -----END PGP SIGNATURE-----
--- End Message ---
