[MASTER] package fglrx 2:8.723.1-0ubuntu4 failed to install/upgrade: Kernel fix for CVE-2010-3081 breaks fglrx
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
fglrx-installer (Ubuntu) |
Fix Released
|
High
|
Alberto Milone | ||
Hardy |
Invalid
|
High
|
Unassigned | ||
Jaunty |
Fix Released
|
High
|
Alberto Milone | ||
Karmic |
Fix Released
|
High
|
Alberto Milone | ||
Lucid |
Fix Released
|
High
|
Alberto Milone | ||
linux-restricted-modules-2.6.24 (Ubuntu) |
Invalid
|
High
|
Unassigned | ||
Hardy |
Fix Released
|
High
|
Stefan Bader | ||
Jaunty |
Invalid
|
Undecided
|
Unassigned | ||
Karmic |
Invalid
|
Undecided
|
Unassigned | ||
Lucid |
Invalid
|
Undecided
|
Unassigned | ||
linux-restricted-modules-envy-2.6.24 (Ubuntu) |
Invalid
|
High
|
Alberto Milone | ||
Hardy |
Fix Released
|
High
|
Alberto Milone | ||
Jaunty |
Invalid
|
Undecided
|
Unassigned | ||
Karmic |
Invalid
|
Undecided
|
Unassigned | ||
Lucid |
Invalid
|
Undecided
|
Unassigned |
Bug Description
SRU Justification:
Impact: Due to kernel changes for CVE-2010-3081 a function that was an inline before has changed to a GPL only function. The fglrx driver cannot link against this and fails to compile. In fglrx only the old inlines (which have been renamed) may be used but those would lack the additional checks.
Fix: Add code to detect whether the fglrx driver is compiled against a kernel which has this change and use the old inlines in this case. Add the additional checks from the CVE to the driver wrapper, so the hardening is done in any case.
Testcase: Compile of 64bit fglrx driver fails with an error without this change.
---
will not compile for this version of the linux kernal
ProblemType: Package
DistroRelease: Ubuntu 10.04
Package: fglrx 2:8.723.1-0ubuntu4
ProcVersionSign
Uname: Linux 2.6.32-24-generic x86_64
NonfreeKernelMo
Architecture: amd64
Date: Sat Sep 18 23:31:16 2010
DkmsStatus:
fglrx, 8.723.1: added
bcmwl, 5.60.48.36+bdcom, 2.6.32-24-generic, x86_64: installed
vboxnetflt, 3.2.8, 2.6.32-24-generic, x86_64: installed
vboxnetadp, 3.2.8, 2.6.32-24-generic, x86_64: installed
vboxdrv, 3.2.8, 2.6.32-24-generic, x86_64: installed
ErrorMessage: fglrx kernel module failed to build
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
MachineType: Dell Inc. Studio 1558
PackageVersion: 2:8.723.1-0ubuntu4
ProcCmdLine: BOOT_IMAGE=
SourcePackage: fglrx-installer
Title: package fglrx 2:8.723.1-0ubuntu4 failed to install/upgrade: fglrx kernel module failed to build
dmi.bios.date: 01/08/2010
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A03
dmi.board.name: 0NJWJR
dmi.board.vendor: Dell Inc.
dmi.board.version: A03
dmi.chassis.type: 8
dmi.chassis.vendor: Dell Inc.
dmi.chassis.
dmi.modalias: dmi:bvnDellInc.
dmi.product.name: Studio 1558
dmi.product.
dmi.sys.vendor: Dell Inc.
system:
distro: Ubuntu
codename: lucid
architecture: x86_64
kernel: 2.6.32-24-generic
CVE References
Changed in fglrx-installer (Ubuntu): | |
assignee: | nobody → Evan Broder (broder) |
status: | New → In Progress |
Changed in fglrx-installer (Ubuntu): | |
importance: | Undecided → High |
tags: | added: patch |
Changed in fglrx-installer (Ubuntu Lucid): | |
importance: | Undecided → High |
status: | New → Triaged |
tags: | added: regression-update |
summary: |
- package fglrx 2:8.723.1-0ubuntu4 failed to install/upgrade: fglrx kernel - module failed to build + [MASTER] package fglrx 2:8.723.1-0ubuntu4 failed to install/upgrade: + Kernel fix for CVE-2010-3081 breaks fglrx |
Changed in fglrx-installer (Ubuntu Lucid): | |
assignee: | nobody → Alberto Milone (albertomilone) |
Changed in fglrx-installer (Ubuntu): | |
assignee: | nobody → Alberto Milone (albertomilone) |
Changed in fglrx-installer (Ubuntu Lucid): | |
status: | Triaged → In Progress |
Changed in fglrx-installer (Ubuntu Lucid): | |
status: | Fix Released → In Progress |
Changed in fglrx-installer (Ubuntu): | |
status: | Fix Released → Triaged |
tags: | added: hardy jaunty karmic |
Changed in fglrx-installer (Ubuntu Karmic): | |
assignee: | nobody → Alberto Milone (albertomilone) |
Changed in fglrx-installer (Ubuntu Jaunty): | |
importance: | Undecided → High |
Changed in fglrx-installer (Ubuntu Karmic): | |
importance: | Undecided → High |
Changed in fglrx-installer (Ubuntu Jaunty): | |
status: | New → In Progress |
assignee: | nobody → Alberto Milone (albertomilone) |
Changed in fglrx-installer (Ubuntu Karmic): | |
status: | New → In Progress |
Changed in fglrx-installer (Ubuntu Hardy): | |
status: | New → Triaged |
importance: | Undecided → High |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu Jaunty): | |
status: | New → Invalid |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu Karmic): | |
status: | New → Invalid |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu Lucid): | |
status: | New → Invalid |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu Hardy): | |
assignee: | nobody → Alberto Milone (albertomilone) |
importance: | Undecided → High |
status: | New → Triaged |
Changed in linux-restricted-modules-2.6.24 (Ubuntu Hardy): | |
importance: | Undecided → High |
status: | New → Triaged |
Changed in linux-restricted-modules-2.6.24 (Ubuntu Jaunty): | |
status: | New → Invalid |
Changed in linux-restricted-modules-2.6.24 (Ubuntu Karmic): | |
status: | New → Invalid |
Changed in linux-restricted-modules-2.6.24 (Ubuntu Lucid): | |
status: | New → Invalid |
Changed in linux-restricted-modules-2.6.24 (Ubuntu): | |
importance: | Undecided → High |
status: | New → Triaged |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu): | |
assignee: | nobody → Alberto Milone (albertomilone) |
importance: | Undecided → High |
status: | New → Triaged |
Changed in fglrx-installer (Ubuntu Hardy): | |
status: | Triaged → Invalid |
Changed in linux-restricted-modules-2.6.24 (Ubuntu Hardy): | |
assignee: | nobody → Stefan Bader (stefan-bader-canonical) |
status: | Triaged → In Progress |
Changed in linux-restricted-modules-2.6.24 (Ubuntu Hardy): | |
status: | In Progress → Fix Committed |
tags: | added: verification-needed |
Changed in linux-restricted-modules-2.6.24 (Ubuntu): | |
status: | Triaged → Invalid |
description: | updated |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu Hardy): | |
status: | Triaged → Fix Committed |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu): | |
status: | Triaged → Fix Committed |
Changed in fglrx-installer (Ubuntu Jaunty): | |
status: | In Progress → Fix Committed |
Changed in fglrx-installer (Ubuntu Karmic): | |
status: | In Progress → Fix Committed |
Changed in fglrx-installer (Ubuntu Lucid): | |
status: | In Progress → Fix Committed |
Changed in linux-restricted-modules-envy-2.6.24 (Ubuntu): | |
status: | Fix Committed → Invalid |
Changed in fglrx-installer (Ubuntu Lucid): | |
assignee: | Alberto Milone (albertomilone) → canon (canonnem) |
Changed in fglrx-installer (Ubuntu Lucid): | |
assignee: | canon (canonnem) → Alberto Milone (albertomilone) |
Changed in fglrx-installer (Ubuntu Lucid): | |
status: | Fix Committed → Fix Released |
Changed in fglrx-installer (Ubuntu): | |
status: | Triaged → Fix Released |
Upgrading to kernel
........ 2.6.32- 24-generic_ 2.6.32- 24.43_amd64
definitely breaks
........ fglrx_2: 8.723.1- 0ubuntu4_ amd64
from the Canonical official Lucid repository and these versions from the Ubuntu X-Swat PPA:
........ fglrx_2: 8.753-0ubuntu0s arvatt~ lucid_amd64 8.762-0ubuntu0s arvatt~ lucid_amd64 8.771-0ubuntu0s arvatt~ lucid_amd64
........ fglrx_2:
........ fglrx_2:
All of the above versions of the ATi restricted/ proprietary drivers worked under kernel
........ 2.6.32- 24-generic_ 2.6.32- 24.42_amd64
and earlier.
DKMS make logs to follow.