SPECS (AC-branch): X11-driver-nvidia.spec - banner with solution a...

[mguevara]

Author: mguevara                     Date: Wed Oct 18 13:42:13 2006 GMT
Module: SPECS                         Tag: AC-branch
---- Log message:
- banner with solution added (security)

---- Files affected:
SPECS:
   X11-driver-nvidia.spec (1.78.2.3 -> 1.78.2.4) 

---- Diffs:

================================================================
Index: SPECS/X11-driver-nvidia.spec
diff -u SPECS/X11-driver-nvidia.spec:1.78.2.3 SPECS/X11-driver-nvidia.spec:1.78.2.4
--- SPECS/X11-driver-nvidia.spec:1.78.2.3	Tue Oct 17 22:11:18 2006
+++ SPECS/X11-driver-nvidia.spec	Wed Oct 18 15:42:07 2006
@@ -95,6 +95,8 @@
 SECURITY: This version (8774) is supposed to be localy and remotely 
 exploitable - look at the security advisory 
 http://download2.rapid7.com/r7-0025/
+SOLUTION: Upgrade to 1.0-9626 or disable accelerated rendering 
+("RenderAccel" option).
 
 %description -l pl
 Usprawnione sterowniki dla kart graficznych nVidia do serwera
@@ -109,6 +111,8 @@
 BEZPIECZEŃSTWO: Ta wersja sterownika (8774) jest podatna na zdalne 
 jak i lokalne ataki pozwalające na wykonanie kodu z uprawnieniami 
 roota - szczegóły na stronie http://download2.rapid7.com/r7-0025/ 
+ROZWIĄZANIE: Aktualizacja do 1.0-9626 lub deaktywacja akcelerowanego
+wyświetlania (opcja "RenderAccel").
 
 %package devel
 Summary:	OpenGL for X11R6 development (only gl?.h)
@@ -301,6 +305,19 @@
  *                                                     *
  *******************************************************
 
+ *******************************************************
+ *                                                     *
+ * SECURITY:                                           *
+ * This version (1.0-8774) is supposed to be localy    *
+ * and remotely exploitable - look at the security     *
+ * advisory http://download2.rapid7.com/r7-0025/       *
+ *                                                     *
+ * SOLUTION:                                           *
+ * Move to nv driver, upgrade to 1.0-9626 or disable   *
+ * accelerated rendering ("RenderAccel" option).       *
+ *                                                     *
+ *******************************************************
+
 EOF
 
 %postun	-p /sbin/ldconfig
@@ -379,6 +396,9 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.78.2.4  2006/10/18 13:42:07  mguevara
+- banner with solution added (security)
+
 Revision 1.78.2.3  2006/10/17 20:11:18  mguevara
 - rel++, typo
 
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/SPECS/X11-driver-nvidia.spec?r1=1.78.2.3&r2=1.78.2.4&f=u