[ubuntu/precise-security] nvidia-graphics-drivers 304.88-0ubuntu0.0.2 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Wed Apr 10 12:34:17 UTC 2013

nvidia-graphics-drivers (304.88-0ubuntu0.0.2) precise-security; urgency=low

  * SECURITY UPDATE: ARGB Cursor Buffer Overflow in "NoScanout" Mode
    - CVE-2013-0131

  * New upstream release
    - Fixed CVE-2013-0131:
      NVIDIA UNIX GPU Driver ARGB Cursor Buffer Overflow in
      "NoScanout" Mode. This buffer overflow, which occurred
      when an X client installed a large ARGB cursor on an
      X server running in NoScanout mode, could cause a denial
      of service (e.g., an X server segmentation fault), or
      could be exploited to achieve arbitrary code execution.

  [ Alberto Milone ]
  * debian/control{.in}:
    - Drop dependencies on the linux headers.
  * debian/dkms.conf{.in}:
    - Drop all the patches.
  * debian/rules:
    - Make it possible to set the xserver ABIs in debian/substvars
  * debian/substvars:
    - Add support for xorg-video-abi-14.
    - Drop versioned dependency on xserver-xorg-core.
    - Add an alternative dependency on xserver-xorg-core-lts-quantal.

  [ Marc Deslauriers ]
  * debian/nvidia-current.install*: make sure we override the dkms.conf
    file from upstream.

nvidia-graphics-drivers (295.40-0ubuntu1.3) precise-proposed; urgency=low

  * Backport the following change from 304.51.really.304.43-0ubuntu1
    so that packages that Build-Depend on nvidia-current can be built
    (LP: #950963).
    - debian/nvidia-current.dirs.in:
      - Add /usr/share/applications.

nvidia-graphics-drivers (295.40-0ubuntu1.2) precise-proposed; urgency=low

  * Add support for kernel 3.4 (LP: #1011828). This will
    make sure that the driver can build against Quantal's
  * debian/control{.in}:
    - Add optional dependency on linux-headers-generic-lts-quantal.

Date: 2013-04-08 17:55:14.669856+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
-------------- next part --------------
Sorry, changesfile not available.

More information about the Precise-changes mailing list