==========================================================================
Ubuntu Security Notice USN-3305-1
May 31, 2017

nvidia-graphics-drivers-375 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.04
– Ubuntu 16.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

NVIDIA graphics drivers could be made to crash or run programs as an
administrator.

Software Description:
– nvidia-graphics-drivers-375: NVIDIA binary X.Org driver

Details:

It was discovered that the NVIDIA graphics drivers contained flaws in the
kernel mode layer. A local attacker could use these issues to cause a denial of
service or potentially escalate their privileges on the system.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
nvidia-367 375.66-0ubuntu0.17.04.1
nvidia-375 375.66-0ubuntu0.17.04.1

Ubuntu 16.10:
nvidia-367 375.66-0ubuntu0.16.10.1
nvidia-375 375.66-0ubuntu0.16.10.1

Ubuntu 16.04 LTS:
nvidia-367 375.66-0ubuntu0.16.04.1
nvidia-375 375.66-0ubuntu0.16.04.1

Ubuntu 14.04 LTS:
nvidia-367 375.66-0ubuntu0.14.04.1
nvidia-375 375.66-0ubuntu0.14.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://www.ubuntu.com/usn/usn-3305-1
CVE-2017-0350, CVE-2017-0351, CVE-2017-0352

Package Information:
https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-375/375.66-0ubuntu0.17.04.1
https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-375/375.66-0ubuntu0.16.10.1
https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-375/375.66-0ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-375/375.66-0ubuntu0.14.04.1

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
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=jyHX
—–END PGP SIGNATURE—–
—