Your message dated Mon, 21 Dec 2015 22:19:33 +0000 with message-id <e1ab8nl-0008ak...@franck.debian.org> and subject line Bug#805918: fixed in nvidia-graphics-drivers-legacy-304xx 304.131-1 has caused the Debian Bug report #805918, regarding nvidia-graphics-drivers-legacy-304xx: CVE-2015-7869: Unsanitized User Mode Input to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 805918: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805918 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Version: 304.22-1 Severity: serious Tags: security http://nvidia.custhelp.com/app/answers/detail/a_id/3808 http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-7869.html [...] This report also details an advisory regarding integer overflow issues in the underlying kernel mode driver. [...] The integer overflow issues affect both Windows and Linux-based GPU drivers. These issues affect all GPU products and are not specific to any GPU class device. Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-legacy-304xx Source-Version: 304.131-1 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-legacy-304xx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 805...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-legacy-304xx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 15 Dec 2015 02:30:11 +0100 Source: nvidia-graphics-drivers-legacy-304xx Binary: nvidia-legacy-304xx-driver xserver-xorg-video-nvidia-legacy-304xx libgl1-nvidia-legacy-304xx-glx libgl1-nvidia-legacy-304xx-glx-i386 nvidia-legacy-304xx-alternative nvidia-legacy-304xx-kernel-dkms nvidia-legacy-304xx-kernel-source Architecture: source Version: 304.131-1 Distribution: jessie Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libgl1-nvidia-legacy-304xx-glx - NVIDIA binary OpenGL libraries${nvidia:LegacyDesc} libgl1-nvidia-legacy-304xx-glx-i386 - NVIDIA binary OpenGL 32-bit libraries${nvidia:LegacyDesc} nvidia-legacy-304xx-alternative - allows the selection of NVIDIA as GLX provider nvidia-legacy-304xx-driver - NVIDIA metapackage${nvidia:LegacyDesc} nvidia-legacy-304xx-kernel-dkms - NVIDIA binary kernel module DKMS source${nvidia:LegacyDesc} nvidia-legacy-304xx-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc} xserver-xorg-video-nvidia-legacy-304xx - NVIDIA binary Xorg driver${nvidia:LegacyDesc} Closes: 805918 Changes: nvidia-graphics-drivers-legacy-304xx (304.131-1) jessie; urgency=medium . * New upstream legacy 304xx branch release 304.131 (2015-11-16). * Fixed CVE-2015-7869: Unsanitized User Mode Input. (Closes: #805918) - Fixed a bug that could cause texture corruption in some OpenGL applications when video memory is exhausted by a combination of simultaneously running graphical and compute workloads. - Added support for X.Org xserver ABI 20 (xorg-server 1.18). * Improved compatibility with recent Linux kernels. * Synchronize packaging with nvidia-graphics-drivers 340.96-1: - d/control: Make dependencies on nvidia-legacy-304xx-alternative strictly versioned to prevent partial upgrades. * Synchronize packaging with nvidia-graphics-drivers 304.131-1: - Add xorg-video-abi-20 as alternative dependency. * conftest.h: - Implement new conftest.sh functions hlist_for_each_entry, of_parse_phandle, for_each_online_node, node_end_pfn (358.09). - Update conftest.sh function scatterlist for logic reversal in 304.131/340.96/352.63, support both ways. Checksums-Sha1: 2838f26051f0992723333f1da90153a149525d38 3096 nvidia-graphics-drivers-legacy-304xx_304.131-1.dsc 1bf88f203caea3b2d6e8151495dc4e129525cd5f 106911884 nvidia-graphics-drivers-legacy-304xx_304.131.orig.tar.gz 2e4622c70e6b9ef5be0e97c667325e8ae77355cf 84548 nvidia-graphics-drivers-legacy-304xx_304.131-1.debian.tar.xz Checksums-Sha256: f70bfdf2ebf4b0b7b435620a75b909603168a43cc281db20794a17f77622dddd 3096 nvidia-graphics-drivers-legacy-304xx_304.131-1.dsc 2c7364822546d02eae876d763a4816784aeb6b2d2469e4739f01ef327318e048 106911884 nvidia-graphics-drivers-legacy-304xx_304.131.orig.tar.gz 07913afb07a5bc80f8ef51f405fe593d7d2c1869d2a9fddbd895c51c74708a80 84548 nvidia-graphics-drivers-legacy-304xx_304.131-1.debian.tar.xz Files: e2fa0f3562886f06e3b44a6d294dd589 3096 non-free/libs optional nvidia-graphics-drivers-legacy-304xx_304.131-1.dsc 472342b8dfbfbd9625f3ceb9135fd99b 106911884 non-free/libs optional nvidia-graphics-drivers-legacy-304xx_304.131.orig.tar.gz 98f2e17a40cc5f8c230308bd9caba99b 84548 non-free/libs optional nvidia-graphics-drivers-legacy-304xx_304.131-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWb248AAoJEF+zP5NZ6e0IjJYP/AtkVglMKvMOwJ+uHpy3dmNy IhuYflQN0mv8WIyGDIwSUl1t+1b10hvjXQUz4sILlMlRWaMli7XZhHCut+vdyate Xcqu/mcIQ+sZWjuRByPmYoDzgwYO1ZK5q/y3LHjr/HeqMH0C3BYWLzrvwvsc9P+g 3DtRf1M7uS9wBqFlq0Hb53nXHaBvm4j3G3qraU01BwtigLA+uqSdl/htUif741uT A2o6v9vLo8I+9AzsUuCNyj/W/x0SNIrDtaDQEd9Vc3y0k1SH5zgtBAEl2p8lraG7 feu1PoXw5hoRwWDGRqDTbaaoZj5BSgCbcsATnmHtQR4K5qhTTmvL0Wc/Zv0gln3J rj6iC7OO38n3+zBl1pkAiha1c7VD5LewJWRQ63ZJRtBXWvhwCGQ+OtgoW/UWqePL cK4Ok5RyyMq4MuhvvlkgCpS0eBQfcb5W7X80/f0XgM8gkcVhNqp9jsCJAhEup+YD ZJ7TQIyLMWMXLcXGPTBN0V4mcYioNwYm226pwfi3JOaN7L/NZk2tUT4U+Lzh+ENI U5KL+L/xMZiC21b89oiWleWI8z56KkXNY2c/d8rhrUWVdUHOTuhsgdrPpwX5e4aY FqAT2kruFxNy+bGF/UYAgxC6nvrF8bU5FN9eZWsMhRwub8va4qNoEAHiOJL5O7cj ew2DaCigNgDo2mt+ya6Z =PT9Y -----END PGP SIGNATURE-----
--- End Message ---
