Bug#863515: CVE-2017-0350 CVE-2017-0351 CVE-2017-0352

[Luca Boccassi]

On Sat, 2017-05-27 at 23:18 +0200, Moritz Muehlenhoff wrote:
> Source: nvidia-graphics-drivers
> Severity: grave
> Tags: security
> 
> Please see http://nvidia.custhelp.com/app/answers/detail/a_id/4462
> 
> Cheers,
>         Moritz

Thanks for the heads-up.

375.66 has the fix and it's ready to go, was waiting for the testing
freeze to be lifted but instead now I'll mention the CVEs in the
changelog and upload to sid, and ask for an exception for the
migration.

Upstream mentions fixes only for 375 and 381, so I assume 304 and 340
are unaffected, therefore I believe no action is required for oldstable
and stable (jessie-backports will need an upload after 375.66 is in
testing, but was going to do it anyway).

Kind regards,
Luca Boccassi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-nvidia-devel/attachments/20170528/dc89b2e0/attachment.sig>