Nvidia discloses security flaws in its GPU drivers for Windows and Linux

[WYP]

Nvidia's Geforce 461.09 driver contains fixes, but they are not in the driver's release notes...



Read more about Nvidia's Geforce 461.09 drivers containing vulnerability fixes.

 

[looz]

There are legitimate reasons for not disclosing such issues right away, which kinda hints that the vulnerabilities are rather serious.

 

[WYP]

There are legitimate reasons for not disclosing such issues right away, which kinda hints that the vulnerabilities are rather serious.

If the disclosure is released on the same day as the driver, the driver's release notes should mention it.

Based on the contents of this driver, it was only released to address these issues. The other fixes in this driver are typically released in the form of a Hotfix.

When security is on the line and the information is out there, there is little reason for Nvidia to not encourage more people to update their drivers. The only reason no to in this case is to avoid scrutiny and for fewer people to see the disclosure.

 

[looz]

Ah I'm an idiot and didn't spot that they did list the CVEs on another page - yeah a strange move.