Your message dated Mon, 14 Dec 2015 13:34:25 +0000 with message-id <e1a8tgj-0004cq...@franck.debian.org> and subject line Bug#805918: fixed in nvidia-graphics-drivers-legacy-304xx 304.131-2 has caused the Debian Bug report #805918, regarding nvidia-graphics-drivers-legacy-304xx: CVE-2015-7869: Unsanitized User Mode Input to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 805918: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805918 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Version: 304.22-1 Severity: serious Tags: security http://nvidia.custhelp.com/app/answers/detail/a_id/3808 http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-7869.html [...] This report also details an advisory regarding integer overflow issues in the underlying kernel mode driver. [...] The integer overflow issues affect both Windows and Linux-based GPU drivers. These issues affect all GPU products and are not specific to any GPU class device. Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-legacy-304xx Source-Version: 304.131-2 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-legacy-304xx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 805...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-legacy-304xx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 14 Dec 2015 14:11:22 +0100 Source: nvidia-graphics-drivers-legacy-304xx Binary: nvidia-legacy-304xx-driver xserver-xorg-video-nvidia-legacy-304xx libgl1-nvidia-legacy-304xx-glx libgl1-nvidia-legacy-304xx-glx-i386 nvidia-legacy-304xx-alternative nvidia-legacy-304xx-kernel-support nvidia-legacy-304xx-kernel-dkms nvidia-legacy-304xx-kernel-source Architecture: source Version: 304.131-2 Distribution: unstable Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libgl1-nvidia-legacy-304xx-glx - NVIDIA binary OpenGL libraries${nvidia:LegacyDesc} libgl1-nvidia-legacy-304xx-glx-i386 - NVIDIA binary OpenGL 32-bit libraries${nvidia:LegacyDesc} nvidia-legacy-304xx-alternative - allows the selection of NVIDIA as GLX provider nvidia-legacy-304xx-driver - NVIDIA metapackage${nvidia:LegacyDesc} nvidia-legacy-304xx-kernel-dkms - NVIDIA binary kernel module DKMS source${nvidia:LegacyDesc} nvidia-legacy-304xx-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc} nvidia-legacy-304xx-kernel-support - NVIDIA binary kernel module support files${nvidia:LegacyDesc} xserver-xorg-video-nvidia-legacy-304xx - NVIDIA binary Xorg driver${nvidia:LegacyDesc} Closes: 805918 Changes: nvidia-graphics-drivers-legacy-304xx (304.131-2) unstable; urgency=medium . * Merge changes from 304.131-1 (UNRELEASED). * Synchronize packaging with nvidia-graphics-drivers-legacy-340xx 340.96-1: * Synchronize packaging with nvidia-graphics-drivers 340.96-3: - Use a more generic approach for unloading the modules. * Synchronize packaging with nvidia-graphics-drivers 340.96-2: - seq-printf.patch: Remove, fixed upstream. * Upload to unstable. . nvidia-graphics-drivers-legacy-304xx (304.131-1) UNRELEASED; urgency=medium . * New upstream legacy 304xx branch release 304.131 (2015-11-16). * Fixed CVE-2015-7869: Unsanitized User Mode Input. (Closes: #805918) - Fixed a bug that could cause texture corruption in some OpenGL applications when video memory is exhausted by a combination of simultaneously running graphical and compute workloads. - Added support for X.Org xserver ABI 20 (xorg-server 1.18). * Improved compatibility with recent Linux kernels. * Synchronize packaging with nvidia-graphics-drivers 340.96-1: - d/control: Make dependencies on nvidia-legacy-304xx-alternative strictly versioned to prevent partial upgrades. * Synchronize packaging with nvidia-graphics-drivers 304.131-1: - Add xorg-video-abi-20 as alternative dependency. * conftest.h: - Implement new conftest.sh functions hlist_for_each_entry, of_parse_phandle, for_each_online_node, node_end_pfn (358.09). - Update conftest.sh function scatterlist for logic reversal in 304.131/340.96/352.63, support both ways. Checksums-Sha1: b85e74e49b6ccf450831b168cda6527a6ce159dc 3213 nvidia-graphics-drivers-legacy-304xx_304.131-2.dsc 1bf88f203caea3b2d6e8151495dc4e129525cd5f 106911884 nvidia-graphics-drivers-legacy-304xx_304.131.orig.tar.gz ed978d31fc74919b31fa588e223a90c4b080fa9f 54888 nvidia-graphics-drivers-legacy-304xx_304.131-2.debian.tar.xz Checksums-Sha256: 73c1f4dda1f0c99d5223c0b5cec1a272a2ecba0290c0f2457c7e9bb23611e70d 3213 nvidia-graphics-drivers-legacy-304xx_304.131-2.dsc 2c7364822546d02eae876d763a4816784aeb6b2d2469e4739f01ef327318e048 106911884 nvidia-graphics-drivers-legacy-304xx_304.131.orig.tar.gz 0a91615ea260a21b0c059898a1b157601b6b987794fe83964f077657d061bb53 54888 nvidia-graphics-drivers-legacy-304xx_304.131-2.debian.tar.xz Files: 6f35d65d6c50b3167bd242240d054abc 3213 non-free/libs optional nvidia-graphics-drivers-legacy-304xx_304.131-2.dsc 472342b8dfbfbd9625f3ceb9135fd99b 106911884 non-free/libs optional nvidia-graphics-drivers-legacy-304xx_304.131.orig.tar.gz 73a6aea1b409910af27c1085c2d814ff 54888 non-free/libs optional nvidia-graphics-drivers-legacy-304xx_304.131-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWbsG8AAoJEF+zP5NZ6e0IUaIP/3r0eqJwI3da16bS/K/NkMp2 8uwVTHTchPi9/Lk5sfc7V2hij9h3s6KZ5sf938X6ZmG40uB42rFu2dTW5UZFM9JJ KspeN/9/zmn+E7vhQY6ZeccDqnh/opDb+5iOdaYnJdh38xeFEOG/gOnTlkz7ISoQ szAC8DYBPb7sCmoqKctoQXA3E1Ac3ONLxffPQtpwqC6G3DaR1F394jwvJrwAL937 v++IA9Imf15Jfj3uG2OF2eX7l9DTfk90id8XVD8xPI+q10A6BCpfq8EMDe3e8q1k /ihoslceU+bdZb8jGF2aeaf/lfhKxGjKiXSKxJCm221Lzz85Sy/Y3zZHEoDqaMdw 52HBPmZ188oJT7BcJBP65jfEa5zyi/V1FzdBT/HZ1Uw4daHFZPUkKCAGd6eKaBxt j7zAKkAl64FvAu/cU9QFP2YUIaC6WwYl3Zv4Oo4TzdIR/Q0hVMYLzCMlkiiUxI+H lEPRm0wfSnHikbNAxQ0EUygzOXKwIS6wUmPX/XhukjvakCkKnUKjiZaTPRxYi8wt CGa53o0xIrAwi8sBI9tLsQqCbChNWg5U/4s6xq3GiZQR+v3QOybbj1BZvvYAwGLk TPhwyN8ROOm2d1+iPzs4j3Bn32cUxZEcst2nImoYZAqSL4H7VVogPWBbgxV/6ghJ d6UzhB1q1WgygeAHkctv =eFGB -----END PGP SIGNATURE-----
--- End Message ---
