Your message dated Fri, 30 Oct 2015 16:17:44 +0000 with message-id <e1zscn6-00078o...@franck.debian.org> and subject line Bug#800566: fixed in nvidia-graphics-drivers 304.128-1 has caused the Debian Bug report #800566, regarding nvidia-graphics-drivers: CVE-2015-5950 Memory corruption due to an unsanitized pointer in the NVIDIA display driver to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 800566: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=800566 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Version: 304.22-1 Severity: serious Tags: security https://nvidia.custhelp.com/app/answers/detail/a_id/3763 A vulnerability has been found in the NVIDIA driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges. A local user can issue a specially crafted IOCTL to write a 32-bit integer value stored in the kernel driver to a user-specified memory location, potentially in the kernel address space. The user has a limited ability to influence the value of the integer that is written. Exploit Scope and Risk: This issue is present on Windows and Linux operating systems and affects all currently supported NVIDIA driver releases and all GPUs. This issue does not affect Android-based NVIDIA Tegra products. Branch 1st version including the fix R304 304.128 R340 340.93 R352 352.41 Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers Source-Version: 304.128-1 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 800...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 15 Oct 2015 12:39:53 +0200 Source: nvidia-graphics-drivers Binary: nvidia-glx xserver-xorg-video-nvidia nvidia-glx-ia32 libgl1-nvidia-glx libxvmcnvidia1 libgl1-nvidia-glx-ia32 nvidia-alternative nvidia-kernel-dkms nvidia-kernel-source nvidia-vdpau-driver nvidia-vdpau-driver-ia32 nvidia-smi libcuda1 libcuda1-ia32 libnvidia-compiler libnvidia-compiler-ia32 libnvcuvid1 libnvidia-ml1 nvidia-opencl-common nvidia-opencl-icd nvidia-opencl-icd-ia32 nvidia-libopencl1 nvidia-libopencl1-ia32 libgl1-nvidia-alternatives libgl1-nvidia-alternatives-ia32 libglx-nvidia-alternatives nvidia-detect Architecture: source amd64 Version: 304.128-1 Distribution: wheezy Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libcuda1 - NVIDIA CUDA runtime library libcuda1-ia32 - please switch to multiarch libcuda1:i386 libgl1-nvidia-alternatives - transition libGL.so* diversions to glx-alternative-nvidia libgl1-nvidia-alternatives-ia32 - simplifies replacing MESA libGL with GPU vendor libraries (32-bit libgl1-nvidia-glx - NVIDIA binary OpenGL libraries${nvidia:LegacyDesc} libgl1-nvidia-glx-ia32 - please switch to multiarch libgl1-nvidia${nvidia:Legacy}-glx:i386 libglx-nvidia-alternatives - transition libgl.so diversions to glx-alternative-nvidia libnvcuvid1 - NVIDIA CUDA nvcuvid runtime library libnvidia-compiler - NVIDIA runtime compiler library libnvidia-compiler-ia32 - please switch to multiarch libnvidia-compiler:i386 libnvidia-ml1 - NVIDIA management library (NVML) runtime library libxvmcnvidia1 - NVIDIA binary XvMC library${nvidia:LegacyDesc} nvidia-alternative - allows the selection of NVIDIA as GLX provider nvidia-detect - NVIDIA GPU detection utility nvidia-glx - NVIDIA metapackage${nvidia:LegacyDesc} nvidia-glx-ia32 - NVIDIA 32-bit libraries${nvidia:LegacyDesc} (transitional package nvidia-kernel-dkms - NVIDIA binary kernel module DKMS source${nvidia:LegacyDesc} nvidia-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc} nvidia-libopencl1 - NVIDIA OpenCL library nvidia-libopencl1-ia32 - please switch to multiarch nvidia-libopencl1:i386 nvidia-opencl-common - NVIDIA OpenCL driver nvidia-opencl-icd - NVIDIA OpenCL ICD nvidia-opencl-icd-ia32 - please switch to multiarch nvidia-opencl-icd:i386 nvidia-smi - NVIDIA System Management Interface nvidia-vdpau-driver - NVIDIA vdpau driver nvidia-vdpau-driver-ia32 - please switch to multiarch nvidia-vdpau-driver:i386 xserver-xorg-video-nvidia - NVIDIA binary Xorg driver${nvidia:LegacyDesc} Closes: 800566 Changes: nvidia-graphics-drivers (304.128-1) wheezy; urgency=medium . * New upstream legacy 304xx branch release 304.128 (2015-08-31). * Fixed CVE-2015-5950: Memory corruption due to an unsanitized pointer. (Closes: #800566) * Improved compatibility with recent Linux kernels. * libgl1-nvidia-glx: Add Provides+Conflicts: libgl1-nvidia-glx-${nvidia:Version} to forbid co-installation of libgl1-nvidia-legacy-304xx-glx from the same upstream version due to file conflicts on versioned files that are not handled via alternatives. * conftest.h: - Implement new conftest.sh functions file_inode, drm_pci_set_busid (340.76). - Implement check for linux/log2.h (346.16). - Implement check for xen/ioemu.h (346.59). - Implement new conftest.sh functions write_cr4, xen_ioemu_inject_msi (346.59), list_cut_position (349.12). - Implement new conftest.sh functions backing_dev_info (346.82), phys_to_dma, dma_ops, get_dma_ops, noncoherent_swiotlb_dma_ops (352.09). - Implement new conftest.sh function dma_map_ops (352.30). - Reorder conftest.h to match conftest.sh. - Implement new conftest.sh function nvidia_grid_build (352.41). * bug-script: Synchronize with unstable (340.93-4). * Update lintian overrides. Checksums-Sha1: e62f0d9a697aa394b8a09464753c535e02a90d54 3961 nvidia-graphics-drivers_304.128-1.dsc dfdb745a26e275d1b9b77293641516e9791b3e46 106361560 nvidia-graphics-drivers_304.128.orig.tar.gz 44d8ad2d4e9e4abe04c434773d8d713025b56915 116988 nvidia-graphics-drivers_304.128-1.debian.tar.gz de3f40e74c10210f4c8e458d6e4cbf3b47e22e8c 357522 nvidia-glx_304.128-1_amd64.deb 83602915a8e1dc6fb6e53a8abc0ca263fd3a40db 2428246 xserver-xorg-video-nvidia_304.128-1_amd64.deb 8ab175bf0376b76ee9d6aa6d028b9f9f63ff0f8b 97968 nvidia-glx-ia32_304.128-1_amd64.deb f6f7757547e97a0b6e7556e9ebd2a91b1a8bee53 6600444 libgl1-nvidia-glx_304.128-1_amd64.deb d6c55cef73f71a956fcfcce42fa377b57bbf9cf4 286380 libxvmcnvidia1_304.128-1_amd64.deb cc9e53e047905b779c5dccd275ad4d33459501dc 98244 libgl1-nvidia-glx-ia32_304.128-1_amd64.deb 8ee7cd8e9b08e170ca6c114a7324326577940ab2 98796 nvidia-alternative_304.128-1_amd64.deb 2b490fbfc6534663a1fc5b23c07bf5047b29eff9 6962084 nvidia-kernel-dkms_304.128-1_amd64.deb a0318cbd0fa90253af78150de729a74ea0cd61a1 9194240 nvidia-kernel-source_304.128-1_amd64.deb 62afe228ec6ebf2c79a32a155f6b5f3e03ef9dc2 841852 nvidia-vdpau-driver_304.128-1_amd64.deb e347e8ea7980d75f151656d4961a7b56124fc7cf 98054 nvidia-vdpau-driver-ia32_304.128-1_amd64.deb 68f6b41d71a3fc0cd38a1f838d27892e2c6dd2e5 149236 nvidia-smi_304.128-1_amd64.deb 3f3fc9e8af70ba4c59a19aebefae52b0b90865a9 3279256 libcuda1_304.128-1_amd64.deb dd9f991ae751869c3f6c645f1d97300e905756a6 98014 libcuda1-ia32_304.128-1_amd64.deb 333b5b6a2088b5667988a13490dc01043afa03b9 6972806 libnvidia-compiler_304.128-1_amd64.deb 2ae3d4be3228df0de2cae50dcfd2ac38c990a574 97548 libnvidia-compiler-ia32_304.128-1_amd64.deb 30add76ac1f7cf95760acac08cab87cb7c94459b 627430 libnvcuvid1_304.128-1_amd64.deb edf426bfb750528e97af333637d7bcad3b45ffc0 219450 libnvidia-ml1_304.128-1_amd64.deb 5d256df3a7d04fbdd6dc549e6c371766c4aabe13 97742 nvidia-opencl-common_304.128-1_amd64.deb 94e1d58cf92709c925464f111a5d9c2a5606acd9 2978600 nvidia-opencl-icd_304.128-1_amd64.deb de60620c912a0f92602ea442d995325daa570847 97958 nvidia-opencl-icd-ia32_304.128-1_amd64.deb 2ebdd5655a2def620c189c7e804f815f66182f31 104406 nvidia-libopencl1_304.128-1_amd64.deb 7c3e35e72a07fc6a12272b01ad300873c6469c05 97528 nvidia-libopencl1-ia32_304.128-1_amd64.deb 6a6760ac11a01579c94b662effd4d1df15fda460 97942 libgl1-nvidia-alternatives_304.128-1_amd64.deb 334f1a816b5524048340363102d16b03514a9fb2 99802 libgl1-nvidia-alternatives-ia32_304.128-1_amd64.deb 306a06c905ed463a4dca5955577c7b4caacfe7d3 97882 libglx-nvidia-alternatives_304.128-1_amd64.deb 9ac9e530c10cd0cfdc22e1febf8ea54b38293b2f 100202 nvidia-detect_304.128-1_amd64.deb Checksums-Sha256: fd2d66682c0daa20aa93ab2fa8557bc81af077520f1d2a6cff8cae92924dccde 3961 nvidia-graphics-drivers_304.128-1.dsc 0434c4ad289e6e66055c0d3e447a4c31643d872e060306e7dfa38a2262c02b8b 106361560 nvidia-graphics-drivers_304.128.orig.tar.gz 67e327fdfac0d89197841817c4fa6a7427e7734f937f664ba23a3b1786711803 116988 nvidia-graphics-drivers_304.128-1.debian.tar.gz 5f0dd75dce17ce0fabeb1ff14de72c95898dd68dbe50603be0b3c479a3c0b447 357522 nvidia-glx_304.128-1_amd64.deb eb4d4fac644c70dfc8217f0ab408f91ab15f23864ce137e4c575a33894d1dc90 2428246 xserver-xorg-video-nvidia_304.128-1_amd64.deb 0a0c203c7f1da5777c9bc1b8ef23769d22256ae9464753ddc4ed3e06a52df351 97968 nvidia-glx-ia32_304.128-1_amd64.deb fdf9fab44490ba090cb5bf931d9c6b4a49b559950e9719ec997357d964fb6ec2 6600444 libgl1-nvidia-glx_304.128-1_amd64.deb 497725b61b0c8fc5e5a7b4f37c79bfa77600361792a76cda37c9988a529e9357 286380 libxvmcnvidia1_304.128-1_amd64.deb df9dd40b72067c3cb1f5f49f3c031e19c42ce7216516a8fea47bace4d069272f 98244 libgl1-nvidia-glx-ia32_304.128-1_amd64.deb ed4ad964b22cf5f75b62a0110e283e575912f1bdd13fedc1903c0535e8a3057b 98796 nvidia-alternative_304.128-1_amd64.deb f690c3c28eefb646ec76ae20d524ef2940b57d492be6e16163c8f6f6fae7dd27 6962084 nvidia-kernel-dkms_304.128-1_amd64.deb 90b66cca90121b3f3414cc2deeb1398c7d62dcaa3926f1f41ba5bd07c99d4551 9194240 nvidia-kernel-source_304.128-1_amd64.deb 7da71ca9d2cf34435858b1041855621abdfd9ebe281f0a8b0366f8bfe65cbce4 841852 nvidia-vdpau-driver_304.128-1_amd64.deb ea46a597847047e42aa7ecb270876c775afe42a811ee1c9ec50d4fe8cc8b35d0 98054 nvidia-vdpau-driver-ia32_304.128-1_amd64.deb bb1b3f12415e691297d7532d577557e7513daeaf0469f429fd485f5163e9cc50 149236 nvidia-smi_304.128-1_amd64.deb 651d2c7b34685f80005be3607b4571279bf6780912ec072567111e840558662d 3279256 libcuda1_304.128-1_amd64.deb 00ca390175ca4b13d12e8d92121883a77ece92fceb4ef0062c0bb35d15203940 98014 libcuda1-ia32_304.128-1_amd64.deb b04c344839b3d6c5db26deb927f699aa603f3e59a613a3271b940573ba896432 6972806 libnvidia-compiler_304.128-1_amd64.deb 6999fc0f8ba2945c8890125b54fe6735f158c1883eb37254970b8c3c1857361b 97548 libnvidia-compiler-ia32_304.128-1_amd64.deb d0f1b9506d1011c4c7a3e12277b1ff1ff8bd53419334f158c62de33ac52b63bf 627430 libnvcuvid1_304.128-1_amd64.deb 49760bcbb0ddbf97c31a7918f984b511fe1bb8fd0e6068a228b06865d78e4edf 219450 libnvidia-ml1_304.128-1_amd64.deb 99ccfbf6b8bb25c52c16b14756b713fae670e2df8d5c05cd24bdeef13c3986e6 97742 nvidia-opencl-common_304.128-1_amd64.deb 44b34f5f1ec703ba6b8b9afa924a4ab266d6caf0609945505820d505fc2ef541 2978600 nvidia-opencl-icd_304.128-1_amd64.deb ba2e4ed5ef0b05d22479fcd93990b7d0418ffe774d06c6db01d4142a2a85fd48 97958 nvidia-opencl-icd-ia32_304.128-1_amd64.deb 52c605bade04fab41e0c72c5eb30f893cb141dbf48096397589bf2e4fa31cb46 104406 nvidia-libopencl1_304.128-1_amd64.deb 44de83057532e21e26ecadddc9aa04f187349f8497514f999b355f20b04d6c99 97528 nvidia-libopencl1-ia32_304.128-1_amd64.deb 05099f8da5d69d37f6c350d9a349a07483eb6aee971f851214f7e64024442dab 97942 libgl1-nvidia-alternatives_304.128-1_amd64.deb bed83677960c36e5b3f67ecfc0abe363c675df2e64ab34fde9e18526c820d616 99802 libgl1-nvidia-alternatives-ia32_304.128-1_amd64.deb 4062fa6ccbd50b97991b9f3e614e7d43b76c8b0157d6b304106a5bdb13125787 97882 libglx-nvidia-alternatives_304.128-1_amd64.deb b4933db6b0f18ef7d39afc74abd01081e538f149ad8ef4855a324038ef70b010 100202 nvidia-detect_304.128-1_amd64.deb Files: 5182850d1d43f4b9085e6cb6b3434944 3961 non-free/libs optional nvidia-graphics-drivers_304.128-1.dsc eb948ee35cce1d4586e6d5094e4c83d9 106361560 non-free/libs optional nvidia-graphics-drivers_304.128.orig.tar.gz 06541aa5c8c537af0718b84e72c45e3d 116988 non-free/libs optional nvidia-graphics-drivers_304.128-1.debian.tar.gz 1ab225511cf34b65ed9b6ec5afde411f 357522 non-free/x11 optional nvidia-glx_304.128-1_amd64.deb 9eeb0556e93b0b1597e80e7d537a90d6 2428246 non-free/x11 optional xserver-xorg-video-nvidia_304.128-1_amd64.deb 95a60b212723ee88b6686281190c74b2 97968 non-free/oldlibs extra nvidia-glx-ia32_304.128-1_amd64.deb 784697e24281c1c1050fa6b2a7931a99 6600444 non-free/libs optional libgl1-nvidia-glx_304.128-1_amd64.deb 703237b4b9ca00e7fb3d458e4355c8d6 286380 non-free/libs optional libxvmcnvidia1_304.128-1_amd64.deb c0b073475d518fce8d1b7d89def10bcf 98244 non-free/oldlibs extra libgl1-nvidia-glx-ia32_304.128-1_amd64.deb 8a6015e33df748629e33525d61d56ae1 98796 non-free/libs optional nvidia-alternative_304.128-1_amd64.deb 2bedf3b63c10a70d1007efe0de03c935 6962084 non-free/kernel optional nvidia-kernel-dkms_304.128-1_amd64.deb 7bd8975fe9d9335c09ddf6beb91314ce 9194240 non-free/kernel optional nvidia-kernel-source_304.128-1_amd64.deb ca5f95f3b1527aa5f07438f133feaeca 841852 non-free/video optional nvidia-vdpau-driver_304.128-1_amd64.deb 74a15f46b091a0c4243f804b7b5ec947 98054 non-free/oldlibs extra nvidia-vdpau-driver-ia32_304.128-1_amd64.deb 9da737e468782d82f7c9c224805da5dd 149236 non-free/utils optional nvidia-smi_304.128-1_amd64.deb ed6aa39f30e87cbc4b9a86656c7319b3 3279256 non-free/libs optional libcuda1_304.128-1_amd64.deb 3bdaf69dd88fa7bc75915fbc299339cd 98014 non-free/oldlibs extra libcuda1-ia32_304.128-1_amd64.deb 7875bd523ce6b4205aba3786ebba74d1 6972806 non-free/libs optional libnvidia-compiler_304.128-1_amd64.deb c8562919ddca7aea06e72d033a3e9534 97548 non-free/oldlibs extra libnvidia-compiler-ia32_304.128-1_amd64.deb 5276fd7128d08bc4cc5da8f7f9ef3a82 627430 non-free/libs optional libnvcuvid1_304.128-1_amd64.deb 580bdc606753770e05d27e9df4fe65c1 219450 non-free/libs optional libnvidia-ml1_304.128-1_amd64.deb 7f75fe64ed58bc4cef86e3500f05e619 97742 non-free/libs optional nvidia-opencl-common_304.128-1_amd64.deb bdcde532421db4ff8293633ac2e8bd77 2978600 non-free/libs optional nvidia-opencl-icd_304.128-1_amd64.deb b2cbc59bad94e9a5b481b1e748977da4 97958 non-free/oldlibs extra nvidia-opencl-icd-ia32_304.128-1_amd64.deb 5a76dc943ad297533f9b2f4e91df504a 104406 non-free/libs optional nvidia-libopencl1_304.128-1_amd64.deb c2383efd3d44a7a8c31c3573956e09e0 97528 non-free/oldlibs extra nvidia-libopencl1-ia32_304.128-1_amd64.deb 9c0ec34a9963d7e0301885cade5858de 97942 non-free/oldlibs optional libgl1-nvidia-alternatives_304.128-1_amd64.deb fd159d6cf3f9cc4a240a55c389a10053 99802 non-free/libs extra libgl1-nvidia-alternatives-ia32_304.128-1_amd64.deb ffaefdf0e451ecc8da30ba00c85e6904 97882 non-free/oldlibs optional libglx-nvidia-alternatives_304.128-1_amd64.deb 993ab85cb5099d6f60ac140b3f201de7 100202 non-free/x11 optional nvidia-detect_304.128-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWH4dCAAoJEF+zP5NZ6e0IBp0P/3jgHXcfgEhGqD9LUNsIK6fs JrALw4UlZ3teUYemJfgvgEPldRZIOJl0thsH1AcdC1tYBOtOrzO1bkA7Bdfj0q0l 7eXJO/NEDZE36eL/lPTRU3QlMi6hSkCDseTUQHiXiH57mndF6E8cz/Xw8HKgk5OB xm0w0iXDtgztFskxdi1PufmMrqtWqTuGwiZTe51mcBhRcknc7hLnuG1bXU4HSHm+ KE0pkeJdoYTm5xcR0882SDSwom3khNwiYX1cek63GUHw+tVnAxQgY86Qr6Zinhqi ABnxFp+lbuYSh9rIyf5fLo+RWYpRCrPbTg+NkR0w1RNoksnc4RQnAaZlk+zDulhP PnpHhPP5OUZyUlJ+jJh3HB/epQ1NNGPc0PELSJOUBYuRQ3mM6PJGnpO7fnzy6QxZ kIKYhXWfiXOrlgbZmQ6ysVeNXd327BqH2opmJqMgfIFDPb/c7mSoktulCOd4BURR gwRbpgVsPNvzBeQPaFVYJKbPa891tGADjbVCrQxr2lQow1kzLpXKCHO4PCVeFz+X zfE5SHBlX5dRkfU9yFDMVtb9BPqoTyZvGKintbowzENFoNp79OArOHSggB2VFn01 +DwE/W9bwr9TX5hRa35bhEJRKBO+KDwUoLIp9OwgLrJAt5JCc+7K8KGndHfeSWB1 uLE8vhjAwuXrDnoPRVGa =xJhS -----END PGP SIGNATURE-----
--- End Message ---
