Your message dated Fri, 03 Sep 2021 19:02:20 +0000 with message-id <e1mmesc-000bkv...@fasolo.debian.org> and subject line Bug#991353: fixed in nvidia-graphics-drivers-legacy-390xx 390.144-1~deb10u1 has caused the Debian Bug report #991353, regarding nvidia-graphics-drivers-legacy-390xx: CVE-2021-1093, CVE-2021-1094, CVE-2021-1095 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 991353: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991353 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Severity: serious Tags: security upstream Control: clone -1 -2 -3 -4 -5 -6 -7 Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6 Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2021-1093, CVE-2021-1094, CVE-2021-1095 Control: tag -2 + wontfix Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4 Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2021-1093, CVE-2021-1094, CVE-2021-1095 Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1 Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2021-1093, CVE-2021-1094, CVE-2021-1095 Control: reassign -5 src:nvidia-graphics-drivers-tesla-440 440.64.00-1 Control: retitle -5 nvidia-graphics-drivers-tesla-440: CVE-2021-1093, CVE-2021-1094, CVE-2021-1095 Control: tag -5 + wontfix Control: reassign -6 src:nvidia-graphics-drivers-tesla-450 450.51.05-1 Control: retitle -6 nvidia-graphics-drivers-tesla-450: CVE-2021-1093, CVE-2021-1094, CVE-2021-1095 Control: reassign -7 src:nvidia-graphics-drivers-tesla-460 460.32.03-1 Control: retitle -7 nvidia-graphics-drivers-tesla-460: CVE-2021-1093, CVE-2021-1094, CVE-2021-1095 Control: found -1 340.24-1 Control: found -1 343.22-1 Control: found -1 396.18-1 Control: found -1 430.14-1 Control: found -1 450.51-1 Control: found -1 455.23.04-1 Control: found -1 465.24.02-1 https://nvidia.custhelp.com/app/answers/detail/a_id/5211 CVE‑2021‑1093 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash. CVE‑2021‑1094 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure. CVE‑2021‑1095 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service. Driver Branch CVE IDs Addressed R470, R460, R450, R418, R390 CVE‑2021‑1093, CVE‑2021‑1094, CVE‑2021‑1095 Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-legacy-390xx Source-Version: 390.144-1~deb10u1 Done: Andreas Beckmann <a...@debian.org> We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-legacy-390xx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 991...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-legacy-390xx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 26 Jul 2021 10:50:49 +0200 Source: nvidia-graphics-drivers-legacy-390xx Architecture: source Version: 390.144-1~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Closes: 989885 991353 Changes: nvidia-graphics-drivers-legacy-390xx (390.144-1~deb10u1) buster; urgency=medium . * Rebuild for buster. . nvidia-graphics-drivers-legacy-390xx (390.144-1) unstable; urgency=medium . * New upstream legacy branch release 390.144 (2021-07-20). * Fixed CVE-2021-1093, CVE-2021-1094, CVE-2021-1095. (Closes: #991353) https://nvidia.custhelp.com/app/answers/detail/a_id/5211 - Worked around a bug in Meson builds of libglvnd 1.3.0 that caused the nvidia_icd.json file to be installed in the wrong location. . [ Andreas Beckmann ] * Refresh patches. * nvidia-legacy-390xx-driver-libs: Add Recommends: libnvidia-legacy-390xx-encode1 (460.91.03-1). (Closes: #989885) * debian/gen-control.pl: Support substitutions in the Vcs-Git field (460.91.03-1). * Compute and substitute the Git branch instead of hardcoding it (460.91.03-1). Checksums-Sha1: 0db739d60e8e19c7d2075170e7dc21db5d3c736b 7630 nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1.dsc 6fe4e1bfd7a399e4c8111c2087e9019900791bba 175860 nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1.debian.tar.xz b81f77d55a89c5abe052278407775ff2efe5fd6d 8078 nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1_source.buildinfo Checksums-Sha256: e064c356f8db39166da8e1276a2e14911285065e6e7110bf501cf1918b82195d 7630 nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1.dsc 64e1224173a38f2cce9bfcf6e560091076e2fa0a2b20b6cd96391500cbbe2c72 175860 nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1.debian.tar.xz 295f1f951f5be3736539e9de438f1f3fd97ac4899298a4f45c761aa3737cba63 8078 nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1_source.buildinfo Files: e907d6160ca98e2f9cf5e5b04a46e19c 7630 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1.dsc 9138339ac4fdee20681b18deb296ee35 175860 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1.debian.tar.xz 38842db9c5fb569301f48ba907e82908 8078 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.144-1~deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAmD+eTEQHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCAx+EACC3nsurL+G5ObVOt7HYn/k4xz6QoItL8Km IJ35pOs+nWkmVggtxB1Hp9FPzWTdnbAaMUJkksGO/jaz/jjumQuDCdCdmW3My5VT gD9V6mdkHDo3CWl6pQ0fNmTTuugvCjBumUS0C+pCsrYRbTPqz7MgvA11GmgD2lnZ eUYgq/UkFVCgzLBYDGh7sg9krl9ZZ8AjNZlLYLvpqW8ERENUMotCeAzI7WVda+aU 0KrzuHyZnm0MFwyLLHtDoNtUjceItWnTPV2fh+Psq+/1qN/MXA4omurYdrCTt4Nm iBynLz/KqiFnAwAix+mPg7CcM83ROcWJBOUuxKYFdcNv76mFegeCsIKgY1kq/uhx YbccDLdKzrQi5o13t2MKAKcdoXJ4y0c3/iC/ihBHL1jHbAtpzWk6YM/JZbFWtBP6 HV2ZkOLHF//yqcIiEBK/kNys2IDSmyp/iDt+oIXomIEJqje/ozH+9Iu3J05i3EjS MwOhX0K3lLURgnS4REQgEnQIAVCINk42M1/qLnxxMND8wrLtaz/TKIAtwd8A56rn QQKnYtP7N6hqq2Y6cHe6TNxioMOi8TOOnKcccr2ZrmeKYx9m5vTb5DML4wY+1IGa 9ISTUE5mn0tM0UDzUI4ShlRuYJ2XB9yYwbFysetz1hWbc0M8GUlP6KJwust3XRKN +UIS+Oplcg== =t6Tb -----END PGP SIGNATURE-----
--- End Message ---
