CVE-2017-6266 CVE-2017-6267 CVE-2017-6272

[Alberto Milone]

CVE-2017-6266 CVE-2017-6267 CVE-2017-6272:
https://nvidia.custhelp.com/app/answers/detail/a_id/4544

The packages are available for testing in the following PPA:
https://launchpad.net/~albertomilone/+archive/ubuntu/nvidia-security-1

[Tyler Hicks (tyhicks)]

@albertomilone is there a reason to keep this bug private? AFAICT, the security issues are all public.

[Tyler Hicks (tyhicks)]

I've unsubscribed ubuntu-security-sponsors for now while we sort out why the bug is private.

[Alberto Milone (albertomilone)]

@Tyler not really. It's all public.

On 5 October 2017 at 23:18, Tyler Hicks <email address hidden> wrote:

> @albertomilone is there a reason to keep this bug private? AFAICT, the
> security issues are all public.
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1721219
>
> Title:
> CVE-2017-6266 CVE-2017-6267 CVE-2017-6272
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/nvidia-
> graphics-drivers-375/+bug/1721219/+subscriptions
>

--
Alberto Milone

[Marc Deslauriers (mdeslaur)]

This has been published. Thanks!

https://usn.ubuntu.com/usn/usn-3461-1/

[Daniel Ribeiro Maciel (daniel-maciel)]

This security update has broken Vulkan (try running vulkaninfo)

[Seth Arnold (seth-arnold)]

Alberto, do you have any ideas? Is this liable to be something in the packaging or something in the binary blob? Is there a favoured way to report bugs back to Nvidia?

Thanks

[Daniel Ribeiro Maciel (daniel-maciel)]

I think it is something in the packaging. 384.90 was working fine until last update, and now it is no longer working.
If I downgrade the package from 384.90-0ubuntu0.16.04.1 to 384.90-0ubuntu0~gpu16.04.1 it works fine.

[Daniel Ribeiro Maciel (daniel-maciel)]

(I arrived here through: https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-384/384.90-0ubuntu0.16.04.1)

[Marc Deslauriers (mdeslaur)]

Where did you get 384.90-0ubuntu0~gpu16.04.1 from?
Does 375.66-0ubuntu0.16.04.1 work?

[Alberto Milone (albertomilone)]

I have worked on a fix in LP: #1726809