Your message dated Mon, 07 Feb 2022 11:19:33 +0000 with message-id <e1nh23r-000bx6...@fasolo.debian.org> and subject line Bug#1004847: fixed in nvidia-graphics-drivers 510.47.03-1 has caused the Debian Bug report #1004847, regarding nvidia-graphics-drivers: CVE-2022-21813, CVE-2022-21814 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1004847: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1004847 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Severity: serious Tags: security upstream Control: clone -1 -2 -3 -4 -5 -6 -7 Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6 Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2022-21813, CVE-2022-21814 Control: tag -2 + wontfix Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4 Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2022-21813, CVE-2022-21814 Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1 Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2022-21813, CVE-2022-21814 Control: reassign -5 src:nvidia-graphics-drivers-tesla-450 450.51.05-1 Control: retitle -5 nvidia-graphics-drivers-tesla-450: CVE-2022-21813, CVE-2022-21814 Control: reassign -6 src:nvidia-graphics-drivers-tesla-460 460.32.03-1 Control: retitle -6 nvidia-graphics-drivers-tesla-460: CVE-2022-21813, CVE-2022-21814 Control: reassign -7 src:nvidia-graphics-drivers-tesla-470 470.57.02-1 Control: retitle -7 nvidia-graphics-drivers-tesla-470: CVE-2022-21813, CVE-2022-21814 Control: found -1 340.24-1 Control: found -1 343.22-1 Control: found -1 396.18-1 Control: found -1 430.14-1 Control: found -1 450.51-1 Control: found -1 455.23.04-1 Control: found -1 465.24.02-1 Control: found -1 495.44-1 https://nvidia.custhelp.com/app/answers/detail/a_id/5312 CVE‑2022‑21813 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. CVE‑2022‑21814 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. Driver Branch CVE IDs Addressed R510, R470 CVE-2022-21813, CVE-2022-21814 Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers Source-Version: 510.47.03-1 Done: Andreas Beckmann <a...@debian.org> We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1004...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 07 Feb 2022 11:45:15 +0100 Source: nvidia-graphics-drivers Architecture: source Version: 510.47.03-1 Distribution: experimental Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Closes: 1004847 Changes: nvidia-graphics-drivers (510.47.03-1) experimental; urgency=medium . * New upstream production branch release 510.47.03 (2022-02-01). * Fixed CVE‑2022‑21813, CVE‑2022‑21814. (Closes: #1004847) https://nvidia.custhelp.com/app/answers/detail/a_id/5312 - Added support for Vulkan 1.3. * New upstream beta 510.39.01 (2022-01-11). - Added a new daemon, nvidia-powerd, to provide support for the Dynamic Boost feature on supported systems. Dynamic Boost balances power between the CPU and the GPU for improved performance. For more details, see the "Dynamic Boost on Linux" chapter in the README. - Updated nvidia-bug-report.sh to search the systemd journal for nvidia-powerd logs. - Fixed several issues which caused the supported-gpus.json file to contain incorrect product information. - Added a new module parameter, "peerdirect_support", to the nvidia-peermem.ko kernel module, to correctly support GPUDirect RDMA on MOFED 5.0 and older releases. - Fixed a bug which caused Vulkan applications to hang when the __GL_THREADED_OPTIMIZATIONS environment variable was set to enable threaded optimizations in the NVIDIA driver. - Fixed a bug where calls to vkWaitForPresentKHR would fail with VK_TIMEOUT on Maxwell and Pascal GPUs. - Added support for the VK_EXT_depth_clip_control extension. - Added support for the VK_EXT_border_color_swizzle extension. - Added support for the VK_EXT_image_view_min_lod extension. - Fixed a bug in the Vulkan compiler where 64-bit atomics were partially broken. - Fixed a bug in the Vulkan driver where VK_NULL_HANDLE was not properly handled as input to VkRenderingFragmentShadingRateAttachmentInfoKHR.imageView. - Added support for the VK_KHR_dynamic_rendering extension. - Added support for the bufferDeviceAddressCaptureReplay Vulkan feature. - Optimized the Vulkan fullscreen presentation path for X11 and direct-to-display swapchains. - Added AV1 decode support to the NVIDIA VDPAU driver. See the VDPAU Support appendix in the README for supported AV1 decoder profiles. - Added support for the VK_KHR_format_feature_flags2 extension. - Added support for the VK_KHR_maintenance4 extension. - Fixed a bug in the Vulkan driver where the SPIR-V Centroid interpolation decoration was not ignored when used in conjunction with FragCoord. - Fixed a bug in the Vulkan driver where unreferenced descriptor bindings were sometimes not ignored properly. - Fixed a bug in the Vulkan driver where vkCmdBindDescriptorSets would not properly handle pDynamicOffsets for compute pipelines. - Added support for the VK_KHR_shader_integer_dot_product extension. - Added support for the VK_EXT_primitive_topology_list_restart extension. - Added support for the VK_EXT_load_store_op_none extension. - Fixed a bug which caused OpenGL and Vulkan applications to generate excessive traffic over dbus while attempting to communicate with nvidia-powerd, even though nvidia-powerd was not running. - Enabled GSP Firmware by default on NVIDIA T4, A100, A30, A40, A16, A2, and several other Tesla products. Please see the "GSP Firmware" chapter in the README for details. * New upstream release 495 series. - Fixed a bug in the Vulkan driver where some Ray Tracing shaders would timeout, resulting in device loss. * New upstream release 470 series. - Added an application profile to avoid an image corruption issue in Blender, as described at https://developer.blender.org/T76874 * New upstream release 390 series. - Fixed a driver installation failure on Linux kernel 5.17 release candidates, where the NVIDIA kernel module failed to build with error "implicit declaration of function 'PDE'". . [ Andreas Beckmann ] * Refresh patches. * Update nv-readme.ids. * Update symbols files. * libcuda1: Add Provides: libcuda-11.6-1{,-i386}. * nvidia-detect: Add support for Tesla 510 drivers. * Prepare nvidia-powerd: New package for the NVIDIA Dynamic Boost daemon. * Do not ship libnvidia-compiler-next.so.*. Checksums-Sha1: 09e51de438e3ad6752166d26372396c5fc954e51 6606 nvidia-graphics-drivers_510.47.03-1.dsc aecd5aa769dad32530c1458687cfba99e139857c 328808562 nvidia-graphics-drivers_510.47.03.orig-amd64.tar.gz 191a3457152f097d9ae49da9458df20378378468 210687552 nvidia-graphics-drivers_510.47.03.orig-arm64.tar.gz cc437ddac9671ba77f58b4d20dc1403bd41babc1 138 nvidia-graphics-drivers_510.47.03.orig.tar.gz e96c563b979e82d5458e5842c4b43dfc916b6a52 208228 nvidia-graphics-drivers_510.47.03-1.debian.tar.xz 043f91e5a5114c28003df5df783c3b81e4d459e6 5571 nvidia-graphics-drivers_510.47.03-1_source.buildinfo Checksums-Sha256: da4923e25d86be3d57e676e0ae712fbd83312f2b0f79b82a0e71b33118820b43 6606 nvidia-graphics-drivers_510.47.03-1.dsc 1f5190c5da5fbfbed0fdb274ab5e6961df0418ed6bef80a3255550750cf4a1f6 328808562 nvidia-graphics-drivers_510.47.03.orig-amd64.tar.gz 2eee28552c8a0a323919f8259104a1358261aa05153f9b047a063a77c15018a1 210687552 nvidia-graphics-drivers_510.47.03.orig-arm64.tar.gz 911155fcc97df8a9fbeab69a15b58e6d9bc34e43c4e6001fb76555b54ec4988b 138 nvidia-graphics-drivers_510.47.03.orig.tar.gz 3c081e8f0438c32b80032ce4eab01241c6feb9592113ddd7d85da7d9a763d70a 208228 nvidia-graphics-drivers_510.47.03-1.debian.tar.xz de98b454a7d8339f891bafe92d37f12d56b06b55ab896b9cedcb35a98258f2d9 5571 nvidia-graphics-drivers_510.47.03-1_source.buildinfo Files: c796bb281cee2660b704963528d53265 6606 non-free/libs optional nvidia-graphics-drivers_510.47.03-1.dsc 92ba154aef016accd96bbed881fd7e0a 328808562 non-free/libs optional nvidia-graphics-drivers_510.47.03.orig-amd64.tar.gz 34967ed2bb6e5d1cd6754cfd909fe66f 210687552 non-free/libs optional nvidia-graphics-drivers_510.47.03.orig-arm64.tar.gz dc3e1dfcdb6d0d558e6f5dac895c7f2e 138 non-free/libs optional nvidia-graphics-drivers_510.47.03.orig.tar.gz 65851cd4f183e01a58ae50e98ec9b207 208228 non-free/libs optional nvidia-graphics-drivers_510.47.03-1.debian.tar.xz c23966650028ccf9ae2c8076d98359d6 5571 non-free/libs optional nvidia-graphics-drivers_510.47.03-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAmIA+OAQHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCITXD/4/Xe1A+AeRvTI2Uu+Vz727fCygt1Pn4ApD RVysCFDWfmlFzyN9aSvP06ZTLDU4wYL85vpgdcFGpLB1BTqx1zECedRNaIPdYn0G 1BIhd8i5JY2+mq4Z9B7ukRkkhKF1RI7MbVxMuob3XvL7BkjmsPM4XGpZLIWPP6gV iwQEf+A+HcFkWaCfOFSwZolQyu3ceoDwU7ViH2ou2qHNTdXXC9shzHoQZmFEWonc m+txPSgEDEpYsWkvo+BkCh63tk9kmoyQpSob4/pA74ixeUmYbCo6ByB8dcCLeNo0 T+1iQ1bjAnLfO4111KljMLQtjtIkxzSmV9WqzCxxd1bCKsmdhbvj0n4oYJCcKOIp f41k8GtFvt3oc1gPYMD+h9XANX5I1+Oz2kGRDcgJYgcXM627hQpq6KS6n1/2kcgI 2quh3vIk/obExYY5eM0aqP4Db3YW7Al3JGEwHDmaS+mpQrkY2eTkqeCMtvXjn3BR NNG8UbTYNAgYLlU0doq8uHt9XZkv4sueYDfPovt1YKzEGCsKCiMc0fbxkuKCslDv dNU9yueYVNAMDXNIFYru25Iz6i2FTCZb2PaeKkA1OHBnYWyywHnYN9oZT9FblbsC gqlzoRayA42I6GJGi2KdqQyR99jKB0GyoayTuwqtVyBUsd8Be24hd3Ts2wdSQusQ qewKzMFyUA== =sf7o -----END PGP SIGNATURE-----
--- End Message ---
