Your message dated Sat, 16 Jan 2016 11:32:08 +0000
with message-id <[email protected]>
and subject line Bug#803517: fixed in fglrx-driver 1:15.9-4~deb8u1
has caused the Debian Bug report #803517,
regarding fglrx-driver: CVE-2015-7723, CVE-2015-7724: Privilege Escalation Via
Symlink Attacks On POSIX Shared Memory With Insecure Permissions
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
803517: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803517
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: fglrx-driver
Severity: serious
Tags: security
Control: fixed -1 1:15.9-1
CVE-2015-7723, CVE-2015-7724:
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-7723/
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-7724/
squeeze, wheezy, jessie affected
stretch/sid already has a fixed version
no squeeze security update (non-free)
probably no dsa for wheezy/jessie as well
regular pu would be possible, but requires a new upstream version
Andreas
--- End Message ---
--- Begin Message ---
Source: fglrx-driver
Source-Version: 1:15.9-4~deb8u1
We believe that the bug you reported is fixed in the latest version of
fglrx-driver, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Beckmann <[email protected]> (supplier of updated fglrx-driver package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 16 Jan 2016 00:56:43 +0100
Source: fglrx-driver
Binary: fglrx-driver libfglrx libfglrx-amdxvba1 libxvbaw-dev libgl1-fglrx-glx
libgl1-fglrx-glx-i386 fglrx-modules-dkms fglrx-source fglrx-control
fglrx-atieventsd amd-opencl-icd amd-libopencl1 amd-opencl-dev amd-clinfo
Architecture: source
Version: 1:15.9-4~deb8u1
Distribution: jessie
Urgency: high
Maintainer: Fglrx packaging team <[email protected]>
Changed-By: Andreas Beckmann <[email protected]>
Description:
amd-clinfo - AMD OpenCL info utility
amd-libopencl1 - AMD OpenCL ICD Loader library
amd-opencl-dev - AMD OpenCL development files
amd-opencl-icd - non-free AMD OpenCL ICD Loaders${fglrx:VariantDescSuffix}
fglrx-atieventsd - events daemon for the non-free ATI/AMD RadeonHD display
driver${f
fglrx-control - control panel for the non-free ATI/AMD RadeonHD display
driver${f
fglrx-driver - non-free ATI/AMD RadeonHD display
driver${fglrx:VariantDescSuffix
fglrx-modules-dkms - dkms module source for the non-free ATI/AMD RadeonHD
display driv
fglrx-source - kernel module source for the non-free ATI/AMD RadeonHD display
dr
libfglrx - non-free ATI/AMD RadeonHD display driver (runtime libraries)${fgl
libfglrx-amdxvba1 - AMD XvBA (X-Video Bitstream Acceleration) backend for VA
API${fgl
libgl1-fglrx-glx - proprietary libGL for the non-free ATI/AMD RadeonHD display
drive
libgl1-fglrx-glx-i386 - ATI/AMD binary OpenGL 32-bit
libraries${fglrx:VariantDescSuffix}
libxvbaw-dev - AMD XvBA (X-Video Bitstream Acceleration) development
files${fglr
Closes: 764523 767493 768397 776756 784903 785150 790794 791905 793488 795222
795230 799439 803494 803517
Changes:
fglrx-driver (1:15.9-4~deb8u1) jessie; urgency=medium
.
* Rebuild for jessie.
* Reinstate the libxvbaw-dev package.
* Remove Conflicts/Replaces: xvba-va-driver.
* Revert patches 12-4.3.0-build and 13-4.4.0-build, the patched kernel
module does not work on Linux 4.3. (See #809638 for details.)
.
fglrx-driver (1:15.9-4) unstable; urgency=medium
.
* Fix spelling error in long description.
* Add patch 06-spelling-error-manpage to fix a spelling error in atieventsd
manpage.
* Add patch 13-4.4.0-build from Ubuntu to fix a FTBFS with Linux 4.4.
.
fglrx-driver (1:15.9-3) unstable; urgency=high
.
[ Andreas Beckmann ]
* d/rules: Move tar option --no-recursion before the list of files.
* fglrx-atieventsd.init: Fix 'stop' and implement 'status', thanks to
D. Leggett. (Closes: #803494)
* Reinstate breaks between fglrx-driver and libgl1-fglrx-glx.
* Update lintian overrides.
.
[ Patrick Matthäi ]
* Add Ubuntu patch 12-4.3.0-build.
Closes: #807965
.
fglrx-driver (1:15.9-2) unstable; urgency=medium
.
* amd-opencl-icd: Ship libamdocl12cl{32,64}.so. (Closes: #793488)
.
fglrx-driver (1:15.9-1) unstable; urgency=medium
.
[ Andreas Beckmann ]
* New upstream release 15.9 (2015-09-15) (15.201.1151). (Closes: #799439)
* Fixes CVE-2015-7724. (Closes: #803517)
* Use signature from 15.7.
* Update watch file.
* Update lintian overrides.
.
[ Patrick Matthäi ]
* Refresh patch 04-3.17rc6-no_hotplug.
* Rewrite patch 05-4.0.0-build.
* Drop merged patch 06-4.0.0-build-2.
* Rewrite patch 07-4.1.0-build.
* Rewrite patch 08-4.2.0-build.
* Rewrite patch 09-4.2.0-build.fpregs_active.
* Rewrite patch 10-4.2.0-build.copy_xregs_to_kernel.
* Rewrite patch 11-4.1.0-gpl-only.
.
fglrx-driver (1:15.7-3) unstable; urgency=high
.
* Add patch 11-4.1.0-gpl-only to finaly allow fglrx to build with Linux 4.1.
.
fglrx-driver (1:15.7-2) unstable; urgency=high
.
[ Andreas Beckmann ]
* Drop libxvbaw-dev package.
* fglrx-driver, fglrx-kernel-*: Report in the package description the latest
tested Linux version that can build the kernel module.
.
[ Patrick Matthäi ]
* Add Ubuntu patch 06-4.0.0-build-2.
* Add Ubuntu patch 07-4.1.0-build to fix a FTBFS with Linux 4.1.
Closes: #795222, #795230
* Add Ubuntu patches 08-4.2.0-build, 09-4.2.0-build.fpregs_active and
10-4.2.0-build.copy_xregs_to_kernel so fglrx may work with Linux 4.2.
.
fglrx-driver (1:15.7-1) unstable; urgency=medium
.
[ Andreas Beckmann ]
* libfglrx-amdxvba1: Can be used as a va-driver backend.
- Provides: va-driver since libXvBAW.so.1 now contains the required
entrypoints.
- Conflicts/Provides/Replaces: xvba-va-driver since that wrapper is no
longer needed.
- Ship dri/{xvba,fglrx}_drv_video.so symlinks.
* Update list of supported models.
* Create /usr/src/fglrx.tar.bz2 reproducibly.
.
[ Patrick Matthäi ]
* New upstream release 15.7 (2015-07-0?) (15.20.1046).
Closes: #791905
- Refresh hunky patch 04-3.17rc6-no_hotplug.
- Rewrite patch 05-4.0.0-build.
- Xorg 1.17 is supported now.
Closes: #784903
* Fixes CVE-2015-7723.
* Use signature from upstream package.
* Remove breaks between fglrx-driver and libgl1-fglrx-glx, since it confuses
dpkg.
.
fglrx-driver (1:15.5-1) unstable; urgency=low
.
* New upstream release 15.5 (2015-06-02) (15.101.1001).
Closes: #790794
- Adjust some lintian overrides.
* Updated dutch translation from Frans Spiesschaert.
Closes: #776756
* Adjust patch 05-4.0.0-build so it works again.
.
fglrx-driver (1:14.12-2) unstable; urgency=low
.
[ Andreas Beckmann ]
* fglrx_3.17rc6-no_hotplug.patch: New patch, add support for Linux >= 3.17.
Found in the kanotix package. (Closes: #768397)
.
[ Michael Gilbert ]
* Remove myself from the uploaders list.
.
[ Patrick Matthäi ]
* Uploading to unstable.
* Rename patches (correct order).
* Add patch 05-4.0.0-build from Michael Rasmussen to fix a FTBFS with Linux
4.0.0. Thanks!
Closes: #785150
* Remove unused lintian override.
.
fglrx-driver (1:14.12-1) experimental; urgency=medium
.
* New upstream release 14.12 (2014-12-09) (14.501.1003). (Closes: #764523)
* Update watch file, thanks to Bart Martens.
* amd-opencl-dev: Bump the Breaks/Replaces on nvidia-libopencl1 to cover new
upstream releases of nvidia-graphics-drivers-legacy-304xx in wheezy.
* New Dutch (nl) debconf translation thanks to Frans Spiesschaert.
(Closes: #767493)
* Upload to experimental.
Checksums-Sha1:
f030ae1b61e108f7d4449f3c3dc09ea5732e15bb 3196 fglrx-driver_15.9-4~deb8u1.dsc
33f5f764b8920538c3a2df9a809cb012ecc25fde 113720
fglrx-driver_15.9-4~deb8u1.debian.tar.xz
Checksums-Sha256:
f15e83e991c60c17f8fd718c5565dc8681e39651456ba0784257c5527b949080 3196
fglrx-driver_15.9-4~deb8u1.dsc
fe59f81c37fd9c5cbd5442fe66589f49dc9668a2645de82c59ecf60132a80aae 113720
fglrx-driver_15.9-4~deb8u1.debian.tar.xz
Files:
dad9997c83eacb8a3f2f6e3f622edf7b 3196 non-free/x11 extra
fglrx-driver_15.9-4~deb8u1.dsc
88f6ae29cec6eb77d1f853039eecaf84 113720 non-free/x11 extra
fglrx-driver_15.9-4~deb8u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=9cJI
-----END PGP SIGNATURE-----
--- End Message ---
