Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-04-05 Thread Andreas Beckmann
On 2018-04-05 01:57, Luca Boccassi wrote: > Gah, of course I had libglvnd from bpo. I always, always forget to > remove it when moving back and forth... > > Sorry for the noise, works fine after removing those. But why doesn't it work with src:libglvnd from backports - it works fine on sid

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-04-04 Thread Luca Boccassi
On Wed, 2018-04-04 at 00:25 +0200, Andreas Beckmann wrote: > On 2018-03-30 16:20, Luca Boccassi wrote: > > It's due to the updated glx-alternative-foo sets the libGL.so.1 > > symlink > > to Mesa, even when update-glx --glx nvidia is used: > > > > lrwxrwxrwx 1 root root 48 Mar 30 15:02

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-04-03 Thread Andreas Beckmann
On 2018-04-03 22:17, Luca Boccassi wrote: > Shouldn't this be reverted too: > > https://salsa.debian.org/nvidia-team/glx-alternatives/commit/30014d629d71ae2400a0aae8533089daec23d8c9 No, this should do the right thing on stretch, too. The old code in stretch is broken in some corner cases.

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-04-03 Thread Andreas Beckmann
On 2018-03-30 16:20, Luca Boccassi wrote: > It's due to the updated glx-alternative-foo sets the libGL.so.1 symlink > to Mesa, even when update-glx --glx nvidia is used: > > lrwxrwxrwx 1 root root 48 Mar 30 15:02 > /etc/alternatives/glx--libGL.so.1-i386-linux-gnu -> >

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-04-03 Thread Luca Boccassi
On Tue, 2018-04-03 at 21:33 +0200, Andreas Beckmann wrote: > On 2018-03-30 16:20, Luca Boccassi wrote: > > Andreas, what should we do here for Stretch? If we update stretch > > to > > 384.130 we'll need the new glx-alternative too as they updated the > > SONAMEs (a bit strange for an LTS branch),

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-04-03 Thread Andreas Beckmann
On 2018-03-30 16:20, Luca Boccassi wrote: > Andreas, what should we do here for Stretch? If we update stretch to > 384.130 we'll need the new glx-alternative too as they updated the > SONAMEs (a bit strange for an LTS branch), but as-is it will be borken, > unless I'm missing something. I

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-03-30 Thread Luca Boccassi
On Fri, 2018-03-30 at 15:12 +0100, Luca Boccassi wrote: > On Fri, 2018-03-30 at 13:10 +0100, Luca Boccassi wrote: > > On Thu, 2018-03-29 at 12:54 +0100, Luca Boccassi wrote: > > > Control: found -1 384.111-4 > > > Control: found -1 390.42-1Control: notfound -1 384.111 > > > > > > On Thu,

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-03-30 Thread Luca Boccassi
On Fri, 2018-03-30 at 13:10 +0100, Luca Boccassi wrote: > On Thu, 2018-03-29 at 12:54 +0100, Luca Boccassi wrote: > > Control: found -1 384.111-4 > > Control: found -1 390.42-1Control: notfound -1 384.111 > > > > On Thu, 2018-03-29 at 11:11 +0100, Luca Boccassi wrote: > > > Source:

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-03-30 Thread Luca Boccassi
On Thu, 2018-03-29 at 12:54 +0100, Luca Boccassi wrote: > Control: found -1 384.111-4 > Control: found -1 390.42-1Control: notfound -1 384.111 > > On Thu, 2018-03-29 at 11:11 +0100, Luca Boccassi wrote: > > Source: nvidia-graphics-drivers > > Version: 384.111 > > Severity: serious > > Tags:

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-03-29 Thread Ivan Kozik
The 384-stretch@7949 commit with nvidia-graphics-drivers (384.130-0svn1) is also working for me on stretch after fixing the libGL.so.1 symlink in debian/libgl1-glvnd-nvidia-glx.links.in to point to libGL.so.1.7.0; not sure if you caught that already. Best, Ivan

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-03-29 Thread Luca Boccassi
Control: found -1 384.111-4 Control: found -1 390.42-1Control: notfound -1 384.111 On Thu, 2018-03-29 at 11:11 +0100, Luca Boccassi wrote: > Source: nvidia-graphics-drivers > Version: 384.111 > Severity: serious > Tags: security upstream > >

Processed (with 1 error): Re: Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-03-29 Thread Debian Bug Tracking System
Processing control commands: > found -1 384.111-4 Bug #894338 [src:nvidia-graphics-drivers] nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader Marked as found in versions nvidia-graphics-drivers/384.111-4. > found -1

Bug#894338: nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader

2018-03-29 Thread Luca Boccassi
Source: nvidia-graphics-drivers Version: 384.111 Severity: serious Tags: security upstream http://nvidia.custhelp.com/app/answers/detail/a_id/4649 CVE-2018-6249 NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of