[Full-disclosure] nvidia linux binary driver priv escalation exploit

[Wesley Shields]

On Wed, Aug 08, 2012 at 10:34:06AM +0000, Alexey Dokuchaev wrote:
> On Mon, Aug 06, 2012 at 01:49:50PM +0200, Rainer Hurling wrote:
> > Am 06.08.2012 10:03 (UTC+1) schrieb Doug Barton:
> > >On 08/01/2012 05:09, Oliver Pinter wrote:
> > >>I found this today on FD:
> > >>
> > >>http://seclists.org/fulldisclosure/2012/Aug/4
> > >
> > >Apparently this affects us as well. Any news?
> > 
> > Thanks for the info. I had been not aware of it before.
> > 
> > NVidia has released a driver version 304.32 for FreeBSD i386 and amd64, 
> > which should remedy these security issues.
> 
> Luckily, they've released version 295.71 which is on Long Lived Branch.  I
> will update the port shortly.

Thank you!

> VuXML entry will have to follow separately, as it is unclear whether new CVE
> number will be assigned or not.

You can do the VuXML without a CVE for now and update it when/if one is
assigned.

-- WXS