Activity log for bug #409456

Date Who What changed Old value New value Message
2009-08-05 17:15:53 Kees Cook bug added bug
2009-08-05 17:16:39 Kees Cook bug task added nvidia-graphics-drivers-96 (Ubuntu)
2009-08-05 17:17:55 Kees Cook bug task added nvidia-graphics-drivers-173 (Ubuntu)
2009-08-05 17:18:58 Kees Cook bug task added nvidia-graphics-drivers-180 (Ubuntu)
2009-08-05 17:20:48 Kees Cook description In Karmic (and earlier) the following binaries are compiled without stack flags, which results in an executable stack on i386, and should be fixed[1]: pool/restricted/n/nvidia-graphics-drivers-180/nvidia-180-libvdpau_185.18.14-0ubuntu3_i386.deb /usr/lib/libvdpau.so.185.18.14 /usr/lib/libvdpau_trace.so.185.18.14 /usr/lib/libvdpau_nvidia.so.185.18.14 pool/restricted/n/nvidia-graphics-drivers-71/nvidia-glx-71_71.86.08-0ubuntu1_i386.deb /usr/lib/libnvidia-tls.so.71.86.08 /usr/lib/libGLcore.so.71.86.08 /usr/lib/libGL.so.71.86.08 /usr/lib/nvidia/tls_test /usr/lib/nvidia/tls_test_dso.so /usr/lib/xorg/modules/extensions/libglx.so.71.86.08 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.71.86.08 /usr/lib/libXvMCNVIDIA.so.71.86.08 pool/restricted/n/nvidia-graphics-drivers-173/nvidia-glx-173_173.14.16-0ubuntu1_i386.deb /usr/lib/libXvMCNVIDIA.so.173.14.16 /usr/lib/libGLcore.so.173.14.16 /usr/lib/libcuda.so.173.14.16 /usr/lib/libGL.so.173.14.16 /usr/lib/nvidia/tls_test /usr/lib/nvidia/libnvidia-cfg.so.173.14.16 /usr/lib/nvidia/tls_test_dso.so /usr/lib/xorg/modules/extensions/libglx.so.173.14.16 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.173.14.16 /usr/lib/libnvidia-tls.so.173.14.16 pool/restricted/n/nvidia-graphics-drivers-96/nvidia-glx-96_96.43.10-0ubuntu1_i386.deb /usr/bin/nvidia-xconfig /usr/lib/libXvMCNVIDIA.so.96.43.10 /usr/lib/libGL.so.96.43.10 /usr/lib/nvidia/libnvidia-cfg.so.96.43.10 /usr/lib/nvidia/tls_test /usr/lib/nvidia/tls_test_dso.so /usr/lib/libGLcore.so.96.43.10 /usr/lib/xorg/modules/extensions/libglx.so.96.43.10 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.96.43.10 /usr/lib/libnvidia-tls.so.96.43.10 pool/restricted/n/nvidia-graphics-drivers-180/nvidia-glx-180_185.18.14-0ubuntu3_i386.deb /usr/bin/nvidia-xconfig /usr/lib/libcuda.so.185.18.14 /usr/lib/libGL.so.185.18.14 /usr/lib/libXvMCNVIDIA.so.185.18.14 /usr/lib/libGLcore.so.185.18.14 /usr/lib/nvidia/libnvidia-cfg.so.185.18.14 /usr/lib/nvidia/tls_test /usr/lib/nvidia/tls_test_dso.so /usr/lib/libnvidia-tls.so.185.18.14 /usr/lib/xorg/modules/extensions/libglx.so.185.18.14 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.185.18.14 These binaries should either be built correctly, or have their stack markings forced to be disabled, using "execstack -c $target" during the build process (though this would require a trivial MIR for the "prelink" source package to get "execstack" for the build). In Karmic (and earlier) the following binaries are compiled without stack flags, which results in an executable stack on i386, and should be fixed[1]: pool/restricted/n/nvidia-graphics-drivers-180/nvidia-180-libvdpau_185.18.14-0ubuntu3_i386.deb /usr/lib/libvdpau.so.185.18.14 /usr/lib/libvdpau_trace.so.185.18.14 /usr/lib/libvdpau_nvidia.so.185.18.14 pool/restricted/n/nvidia-graphics-drivers-71/nvidia-glx-71_71.86.08-0ubuntu1_i386.deb /usr/lib/libnvidia-tls.so.71.86.08 /usr/lib/libGLcore.so.71.86.08 /usr/lib/libGL.so.71.86.08 /usr/lib/nvidia/tls_test /usr/lib/nvidia/tls_test_dso.so /usr/lib/xorg/modules/extensions/libglx.so.71.86.08 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.71.86.08 /usr/lib/libXvMCNVIDIA.so.71.86.08 pool/restricted/n/nvidia-graphics-drivers-173/nvidia-glx-173_173.14.16-0ubuntu1_i386.deb /usr/lib/libXvMCNVIDIA.so.173.14.16 /usr/lib/libGLcore.so.173.14.16 /usr/lib/libcuda.so.173.14.16 /usr/lib/libGL.so.173.14.16 /usr/lib/nvidia/tls_test /usr/lib/nvidia/libnvidia-cfg.so.173.14.16 /usr/lib/nvidia/tls_test_dso.so /usr/lib/xorg/modules/extensions/libglx.so.173.14.16 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.173.14.16 /usr/lib/libnvidia-tls.so.173.14.16 pool/restricted/n/nvidia-graphics-drivers-96/nvidia-glx-96_96.43.10-0ubuntu1_i386.deb /usr/bin/nvidia-xconfig /usr/lib/libXvMCNVIDIA.so.96.43.10 /usr/lib/libGL.so.96.43.10 /usr/lib/nvidia/libnvidia-cfg.so.96.43.10 /usr/lib/nvidia/tls_test /usr/lib/nvidia/tls_test_dso.so /usr/lib/libGLcore.so.96.43.10 /usr/lib/xorg/modules/extensions/libglx.so.96.43.10 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.96.43.10 /usr/lib/libnvidia-tls.so.96.43.10 pool/restricted/n/nvidia-graphics-drivers-180/nvidia-glx-180_185.18.14-0ubuntu3_i386.deb /usr/bin/nvidia-xconfig /usr/lib/libcuda.so.185.18.14 /usr/lib/libGL.so.185.18.14 /usr/lib/libXvMCNVIDIA.so.185.18.14 /usr/lib/libGLcore.so.185.18.14 /usr/lib/nvidia/libnvidia-cfg.so.185.18.14 /usr/lib/nvidia/tls_test /usr/lib/nvidia/tls_test_dso.so /usr/lib/libnvidia-tls.so.185.18.14 /usr/lib/xorg/modules/extensions/libglx.so.185.18.14 /usr/lib/xorg/modules/drivers/nvidia_drv.so /usr/lib/tls/libnvidia-tls.so.185.18.14 These binaries should either be built correctly, or have their stack markings forced to be disabled, using "execstack -c $target" during the build process (though this would require a trivial MIR for the "prelink" source package to get "execstack" for the build). [1] https://wiki.ubuntu.com/SecurityTeam/Roadmap/ExecutableStacks
2009-08-13 23:07:55 Bryce Harrington tags karmic
2009-08-31 09:24:39 Tim Frost attachment added Referenced log file: /var/lib/dkms/nvidia/173.14.16/build/make.log http://launchpadlibrarian.net/31041659/make.log.dkms.log
2009-09-21 13:31:34 Alberto Milone nvidia-graphics-drivers-173 (Ubuntu): status New Triaged
2009-09-21 13:31:43 Alberto Milone nvidia-graphics-drivers-180 (Ubuntu): status New Triaged
2009-09-21 13:32:03 Alberto Milone nvidia-graphics-drivers-96 (Ubuntu): status New Triaged
2009-09-21 13:32:15 Alberto Milone nvidia-graphics-drivers-71 (Ubuntu): status New Invalid
2009-09-21 13:32:38 Alberto Milone nvidia-graphics-drivers-180 (Ubuntu): importance Undecided Medium
2009-09-21 13:32:43 Alberto Milone nvidia-graphics-drivers-173 (Ubuntu): importance Undecided Medium
2009-09-21 13:32:48 Alberto Milone nvidia-graphics-drivers-96 (Ubuntu): importance Undecided Medium
2009-09-25 15:48:55 Alberto Milone nvidia-graphics-drivers-173 (Ubuntu): assignee Alberto Milone (albertomilone)
2009-09-25 15:49:01 Alberto Milone nvidia-graphics-drivers-180 (Ubuntu): assignee Alberto Milone (albertomilone)
2009-09-25 15:49:08 Alberto Milone nvidia-graphics-drivers-96 (Ubuntu): assignee Alberto Milone (albertomilone)
2009-09-25 15:49:16 Alberto Milone nvidia-graphics-drivers-173 (Ubuntu): status Triaged In Progress
2009-09-25 15:49:19 Alberto Milone nvidia-graphics-drivers-180 (Ubuntu): status Triaged In Progress
2009-09-25 15:49:22 Alberto Milone nvidia-graphics-drivers-96 (Ubuntu): status Triaged In Progress
2009-10-08 14:15:08 Launchpad Janitor nvidia-graphics-drivers-96 (Ubuntu): status In Progress Fix Released
2009-10-08 14:15:15 Launchpad Janitor nvidia-graphics-drivers-173 (Ubuntu): status In Progress Fix Released
2009-10-08 15:12:38 Launchpad Janitor nvidia-graphics-drivers-180 (Ubuntu): status In Progress Fix Released
2009-10-09 21:15:25 Launchpad Janitor branch linked lp:ubuntu/nvidia-graphics-drivers-180
2009-10-09 22:01:14 Launchpad Janitor branch linked lp:ubuntu/nvidia-graphics-drivers-173
2009-10-09 22:57:39 Launchpad Janitor branch linked lp:ubuntu/nvidia-graphics-drivers-96