Bug#735549: pu: package nvidia-graphics-drivers/304.117-1
On 2014-02-01 21:50, Adam D. Barratt wrote:
> On Thu, 2014-01-16 at 12:44 +0100, Andreas Beckmann wrote:
>> I'd like to update nvidia-graphics-drivers [non-free] in wheezy to fix
>> CVE-2013-5987 - Unprivileged GPU access vulnerability (#735271)
>> This requires switching to a new upstream release from the 304.xx legacy
>> branch (wheezy currently has 304.88).
>> The same upstream release is available in sid as
>> nvidia-graphics-drivers-legacy-304xx, while sid already has a 319.xx
>> release for nvidia-graphics-drivers.
>>
>> At the same time I merged some important bugfixes from sid.
>
> Please go ahead (bearing in mind the impending window close for 7.4).
This will have to be postponed to the 7.5 point release. The machine I
use for nvidia+fglrxy builds is offline over this weekend and maybe the
beginning of next week, and I don't want to recreate the setup needed to
build nvidia packages for stable in a hurry elsewhere.
I'll delay the upload until 7.4 is out to not disturb finishing the
point release.
(In case someone needs a fixed driver, wheezy-backports has up-to-date
nvidia-graphics-drivers and nvidia-graphics-drivers-legacy-304xx.)
Andreas
Reply to: