[CentOS] is everyone aware of this?

Thu Oct 19 20:04:19 UTC 2006
Bisbal, Prentice <PBisbal at LexPharma.com>


-----Original Message-----
From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On
Behalf Of Yiorgos Stamoulis
Sent: Thursday, October 19, 2006 3:33 PM
To: CentOS mailing list
Subject: [CentOS] is everyone aware of this?

BRUCE STANLEY wrote:
> I am having some issues (e.g. System lock ups) with my ATI 9250 Video 
> card.
>
> I am thinging about replacing it with either a Nvidia
>
> FX5200, FX5500, or a FX5600 card.
>
> Is anyone using one of these cards on Centos 4.1 with the stock (XORG)

> nv driver?
I have been using the nvidia driver although I do not need the 3D
acceleration, just because it was available.
However, a few of days ago I came across this:

http://kerneltrap.org/node/7228
http://download2.rapid7.com/r7-0025/

what does this list think about this matter?

I have now reverted to the standard xorg nv driver

---------------------------------------

You have to weigh the risk of th exploit with the benefits of using the
software. What are the odds that someone is really going to target your
computer out of the millions connected to the Internet? What value does
using this driver provide? Is that value worth the risk? 

For me, without using this driver, I can't provide the
hardware-accelerated 3D stereo my users need to do their work. Since my
systems are behind a firewall with NAT, I think the risk of falling
victim to this exploit is pretty low (yes, I know firewalls are hardly a
panacea). In my case, the benefits clearly outweigh the risks. 

As to why NVidia hasn't fixed this problem, that's a discussion for
another mailing list. 

Prentice





The contents of this communication, including any attachments, may be confidential, privileged or otherwise protected from disclosure.  They are intended solely for the use of the individual or entity to whom they are addressed.  If you are not the intended recipient, please do not read, copy, use or disclose the contents of this communication.  Please notify the sender immediately and delete the communication in its entirety.