Your message dated Thu, 04 Aug 2022 09:52:15 +0000 with message-id <e1ojxwz-004aj4...@fasolo.debian.org> and subject line Bug#1016616: fixed in nvidia-graphics-drivers-legacy-390xx 390.154-1 has caused the Debian Bug report #1016616, regarding nvidia-graphics-drivers-legacy-390xx: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1016616: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016616 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Severity: serious Tags: security upstream Control: clone -1 -2 -3 -4 -5 -6 -7 -8 Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6 Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Control: tag -2 + wontfix Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4 Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1 Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Control: tag -4 + wontfix Control: reassign -5 src:nvidia-graphics-drivers-tesla-450 450.51.05-1 Control: retitle -5 nvidia-graphics-drivers-tesla-450: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Control: reassign -6 src:nvidia-graphics-drivers-tesla-460 460.32.03-1 Control: retitle -6 nvidia-graphics-drivers-tesla-460: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Control: tag -6 + wontfix Control: close -6 460.106.00-3 Control: reassign -7 src:nvidia-graphics-drivers-tesla-470 470.57.02-1 Control: retitle -7 nvidia-graphics-drivers-tesla-470: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Control: reassign -8 src:nvidia-graphics-drivers-tesla-510 510.47.03-1 Control: retitle -8 nvidia-graphics-drivers-tesla-510: CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Control: found -1 340.24-1 Control: found -1 343.22-1 Control: found -1 396.18-1 Control: found -1 430.14-1 Control: found -1 455.23.04-1 Control: found -1 465.24.02-1 Control: found -1 495.44-1 https://nvidia.custhelp.com/app/answers/detail/a_id/5383 CVE-2022-31607 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure. CVE-2022-31608 NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. CVE-2022-31615 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service. Linux Driver Branch CVE IDs Addressed R515, R510, R470, R450, R390 CVE-2022-31607, CVE-2022-31608, CVE-2022-31615 Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-legacy-390xx Source-Version: 390.154-1 Done: Andreas Beckmann <a...@debian.org> We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-legacy-390xx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1016...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-legacy-390xx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 04 Aug 2022 11:32:14 +0200 Source: nvidia-graphics-drivers-legacy-390xx Architecture: source Version: 390.154-1 Distribution: unstable Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Closes: 1016616 Changes: nvidia-graphics-drivers-legacy-390xx (390.154-1) unstable; urgency=medium . * New upstream legacy branch release 390.154 (2022-08-02). * Fixed CVE-2022-31607, CVE-2022-31608, CVE-2022-31615. (Closes: #1016616) https://nvidia.custhelp.com/app/answers/detail/a_id/5383 * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. * Minor packaging sync and cleanup (470.129.06-6). * Drop references to kernel-package and make-kpkg, gone since stretch (470.141.03-1). * Overhaul build-module-packages.sh (470.141.03-1). * Add module-assistant based autopkgtest for the *-source package (470.141.03-1). * Simplify changelog management for the *-source package (470.141.03-1). * Copy the Source stanza from d/control to the module control file (470.141.03-1). * Update lintian overrides. Checksums-Sha1: 2f6bf9d7f5bfa7a3206ffa99777b5266632fbddb 7993 nvidia-graphics-drivers-legacy-390xx_390.154-1.dsc a0e4aaf03e03c3e99d28ef8eecaf10231a4f9862 84402970 nvidia-graphics-drivers-legacy-390xx_390.154.orig-amd64.tar.gz 5ef622d037074f22974c136cc6e22942cae7b06f 30212086 nvidia-graphics-drivers-legacy-390xx_390.154.orig-armhf.tar.gz 41ac555ef2814bbe5ab805f5310d5e24e9982682 49325122 nvidia-graphics-drivers-legacy-390xx_390.154.orig-i386.tar.gz 7cc1c94bdbd4de107c80ab1b5e80b432ffce2674 139 nvidia-graphics-drivers-legacy-390xx_390.154.orig.tar.gz 73b8e13421adcc7a20bd62f320a60268fd4b3429 178432 nvidia-graphics-drivers-legacy-390xx_390.154-1.debian.tar.xz 0d7a3d8453661d9299d29c279b34075a70c5137e 7534 nvidia-graphics-drivers-legacy-390xx_390.154-1_source.buildinfo Checksums-Sha256: 66ef3433fd91b50a1929ff1c0ad4c97ca5c15ac8f5133539d873924065a81310 7993 nvidia-graphics-drivers-legacy-390xx_390.154-1.dsc 2630482d46205cc677a5ffcff0936c54e0094e563700b516b951e73c421fd32b 84402970 nvidia-graphics-drivers-legacy-390xx_390.154.orig-amd64.tar.gz 2f97e720a2434a7c98574a354cddb672885bc13c11e499acc59838f6078bc762 30212086 nvidia-graphics-drivers-legacy-390xx_390.154.orig-armhf.tar.gz 2e8574f2edb59903e98f3bb0971799206a9a17b145ad04e6e0fbe301a639b097 49325122 nvidia-graphics-drivers-legacy-390xx_390.154.orig-i386.tar.gz cd0a41141087632258e10e3b8fb24eb90f049a3c944f97026b6ea6426656f74d 139 nvidia-graphics-drivers-legacy-390xx_390.154.orig.tar.gz df181ebf5df1f5e4110f55a7bf2713bd7ad859a5b74d7ba7ccd59fc98a9f925a 178432 nvidia-graphics-drivers-legacy-390xx_390.154-1.debian.tar.xz 42b00054dfba42fdc63efceb17f8978a2e5486a8823e4561eaafbde7b3d07038 7534 nvidia-graphics-drivers-legacy-390xx_390.154-1_source.buildinfo Files: 9f44fbd7d0c824723820da4194a7bb76 7993 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.154-1.dsc f5733dad3dd436f67eda8dbf0a707d2d 84402970 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.154.orig-amd64.tar.gz 07b7206e4f0016f8658f584b18781cdc 30212086 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.154.orig-armhf.tar.gz 5fb622de243cb8a41462b9e98734268f 49325122 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.154.orig-i386.tar.gz 9cb44ff9054b7840fc9d23ca12304990 139 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.154.orig.tar.gz ad8f998ae3e0735b28344928e3a84089 178432 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.154-1.debian.tar.xz 8699b531875bafdb06c908f7bc593ef7 7534 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.154-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAmLrkucQHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCLslD/9T6DaM4dT347UPYjzqY0k8PZ9t4GxV68Aw hDzwbIw/QRRZg4yFIvgtE4w4Ucsl7EKmzyBzZEOiR4q+tmtffwjTjcfVPYDfdNg4 Q7zePdiEhIBHZ2vs4UrZ0TjyuZA6lcKrlSMj1x5iruS72xVA8WK1sLgh/7S0OT0S FZwgLcYxJXKIoQSrJpGUeE154AkOFFrqYiISZxdcwAznejInerRyqu4ERZjRsF1S ouH1CvIZqGdKLRwdnWqqOqsZbN0J5DtSYizLMcLQ2FYwRnIuIIie62g6g0XnQ41N vhE0f8PFFvqpo3Xe4S+JFZLcY01Xu34Gps/iI53eL/Sh+PjZaNmiSuMMpYQCKxWj qAitWFo+6MB3lqFuqP6g55kw0wfcOX4NywugZOoEue4hr+9VCcWaaZzuYAFgT6jp iQ/tn1ut7+azfUxnKUxHt1ByoINiPpQyfJ3L66fBXEGA8L5R6HYw8o0bns2kO2Im RsY0bjdwH1pfmHI1+PlJKB4PbPSTj6nif6Y+dlWSFSO0LR8jBjg+mdrAzIe38lPk EjdrOGa3jN5NtJT7nT3TkjAfZ8nIhHf5FtLe2V9BtLXG8L6tYmehrGxS+AUTibXh QAiU2OSaKjwjHC52tUkewyIUShmLyK7lNA7u87hOhtb6rbfQf7o1Dq8GXuY/jiBl 8/mOK4ZVjg== =ox+a -----END PGP SIGNATURE-----
--- End Message ---
