Bug#863515: CVE-2017-0350 CVE-2017-0351 CVE-2017-0352

[Moritz Mühlenhoff]

On Sun, May 28, 2017 at 12:00:20PM +0100, Luca Boccassi wrote:
> On Sat, 2017-05-27 at 23:18 +0200, Moritz Muehlenhoff wrote:
> > Source: nvidia-graphics-drivers
> > Severity: grave
> > Tags: security
> > 
> > Please see http://nvidia.custhelp.com/app/answers/detail/a_id/4462
> > 
> > Cheers,
> >         Moritz
> 
> Thanks for the heads-up.
> 
> 375.66 has the fix and it's ready to go, was waiting for the testing
> freeze to be lifted but instead now I'll mention the CVEs in the
> changelog and upload to sid, and ask for an exception for the
> migration.
> 
> Upstream mentions fixes only for 375 and 381, so I assume 304 and 340
> are unaffected, therefore I believe no action is required for oldstable
> and stable (jessie-backports will need an upload after 375.66 is in
> testing, but was going to do it anyway).

Ok, I've updated the Debian security tracker.

Cheers,
        Moritz