Your message dated Tue, 09 Aug 2022 22:04:41 +0000
with message-id <e1olxl7-00fhkl...@fasolo.debian.org>
and subject line Bug#1016614: fixed in nvidia-graphics-drivers 510.85.02-1
has caused the Debian Bug report #1016614,
regarding nvidia-graphics-drivers: CVE-2022-31607, CVE-2022-31608,
CVE-2022-31615
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1016614: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016614
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: nvidia-graphics-drivers
Severity: serious
Tags: security upstream
Control: clone -1 -2 -3 -4 -5 -6 -7 -8
Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6
Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2022-31607,
CVE-2022-31608, CVE-2022-31615
Control: tag -2 + wontfix
Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4
Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2022-31607,
CVE-2022-31608, CVE-2022-31615
Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1
Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2022-31607,
CVE-2022-31608, CVE-2022-31615
Control: tag -4 + wontfix
Control: reassign -5 src:nvidia-graphics-drivers-tesla-450 450.51.05-1
Control: retitle -5 nvidia-graphics-drivers-tesla-450: CVE-2022-31607,
CVE-2022-31608, CVE-2022-31615
Control: reassign -6 src:nvidia-graphics-drivers-tesla-460 460.32.03-1
Control: retitle -6 nvidia-graphics-drivers-tesla-460: CVE-2022-31607,
CVE-2022-31608, CVE-2022-31615
Control: tag -6 + wontfix
Control: close -6 460.106.00-3
Control: reassign -7 src:nvidia-graphics-drivers-tesla-470 470.57.02-1
Control: retitle -7 nvidia-graphics-drivers-tesla-470: CVE-2022-31607,
CVE-2022-31608, CVE-2022-31615
Control: reassign -8 src:nvidia-graphics-drivers-tesla-510 510.47.03-1
Control: retitle -8 nvidia-graphics-drivers-tesla-510: CVE-2022-31607,
CVE-2022-31608, CVE-2022-31615
Control: found -1 340.24-1
Control: found -1 343.22-1
Control: found -1 396.18-1
Control: found -1 430.14-1
Control: found -1 455.23.04-1
Control: found -1 465.24.02-1
Control: found -1 495.44-1
https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE-2022-31607 NVIDIA GPU Display Driver for Linux contains a
vulnerability in the kernel mode layer (nvidia.ko), where a local user
with basic capabilities can cause improper input validation, which may
lead to denial of service, escalation of privileges, data tampering, and
limited information disclosure.
CVE-2022-31608 NVIDIA GPU Display Driver for Linux contains a
vulnerability in an optional D-Bus configuration file, where a local
user with basic capabilities can impact protected D-Bus endpoints, which
may lead to code execution, denial of service, escalation of privileges,
information disclosure, and data tampering.
CVE-2022-31615 NVIDIA GPU Display Driver for Linux contains a
vulnerability in the kernel mode layer, where a local user with basic
capabilities can cause a null-pointer dereference, which may lead to
denial of service.
Linux Driver Branch CVE IDs Addressed
R515, R510, R470, R450, R390 CVE-2022-31607, CVE-2022-31608, CVE-2022-31615
Andreas
--- End Message ---
--- Begin Message ---
Source: nvidia-graphics-drivers
Source-Version: 510.85.02-1
Done: Andreas Beckmann <a...@debian.org>
We believe that the bug you reported is fixed in the latest version of
nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1016...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 09 Aug 2022 23:44:14 +0200
Source: nvidia-graphics-drivers
Architecture: source
Version: 510.85.02-1
Distribution: experimental
Urgency: medium
Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org>
Changed-By: Andreas Beckmann <a...@debian.org>
Closes: 1012713 1016614
Changes:
nvidia-graphics-drivers (510.85.02-1) experimental; urgency=medium
.
* New upstream production branch release 510.85.02 (2022-08-02).
(Closes: #1012713, #1016614)
* Fixed CVE-2022-31607, CVE-2022-31608, CVE-2022-31615.
https://nvidia.custhelp.com/app/answers/detail/a_id/5383
* Improved compatibility with recent Linux kernels.
.
[ Andreas Beckmann ]
* Merge changes from 470.141.03-1.
* Refresh patches.
* Update nv-readme.ids.
* Restrict watch file to releases from the 510.xx production branch.
Checksums-Sha1:
d844f8d247aa351447fecb9ef2e8a13b09ebca8a 6942
nvidia-graphics-drivers_510.85.02-1.dsc
d86d3e3660424532af040c0028fc490b3a562748 329820599
nvidia-graphics-drivers_510.85.02.orig-amd64.tar.gz
7f0952873123ff7ea1cb91c360ca33f42a99b721 211404492
nvidia-graphics-drivers_510.85.02.orig-arm64.tar.gz
02d98caab7f153c4a8ad398d18e5cb27d7d79c2d 140
nvidia-graphics-drivers_510.85.02.orig.tar.gz
c1f93cfb18a53094c46999f1ae6ef367ec0a66f8 211152
nvidia-graphics-drivers_510.85.02-1.debian.tar.xz
f4132eb940c5f68076e9a97e0d838aca6a77d308 5775
nvidia-graphics-drivers_510.85.02-1_source.buildinfo
Checksums-Sha256:
844321f120f21de96e6ca300990233b03b8eec15037b0ddb22df5cbd6dbaad3c 6942
nvidia-graphics-drivers_510.85.02-1.dsc
00eb1ec411297a8f3d19835d672d1a12656bcb7c6d601cc60d95f68cd80c58e8 329820599
nvidia-graphics-drivers_510.85.02.orig-amd64.tar.gz
740381714444bb17ee2ad813236a13993d57df3e36c97556331cd67db51f90b6 211404492
nvidia-graphics-drivers_510.85.02.orig-arm64.tar.gz
b18cd050f3f67df443ec13ff4771d5a60d5ff2bff0573b89ac3a1a373dbc0d91 140
nvidia-graphics-drivers_510.85.02.orig.tar.gz
e41f34099c850b61a3f74a0d07db9c620b8568cabe325e4c8d1332b0a63be730 211152
nvidia-graphics-drivers_510.85.02-1.debian.tar.xz
adefb57b15d6c73c14e4b84fee1aae2b80371e5be9bd89eb596ff6faa3cdabc2 5775
nvidia-graphics-drivers_510.85.02-1_source.buildinfo
Files:
452ddb431149d680f9f2401fa7561fd7 6942 non-free/libs optional
nvidia-graphics-drivers_510.85.02-1.dsc
38c5782348e41e3fd4c06e6968029a1e 329820599 non-free/libs optional
nvidia-graphics-drivers_510.85.02.orig-amd64.tar.gz
23cc9e235825f780362ca9790c5a0ca9 211404492 non-free/libs optional
nvidia-graphics-drivers_510.85.02.orig-arm64.tar.gz
eae1637131f35ed8a66233bf5c7b28c3 140 non-free/libs optional
nvidia-graphics-drivers_510.85.02.orig.tar.gz
ba51a928d64a1db68d568f7fd990b9c3 211152 non-free/libs optional
nvidia-graphics-drivers_510.85.02-1.debian.tar.xz
ee3f0694e8371affa938f9c33a455701 5775 non-free/libs optional
nvidia-graphics-drivers_510.85.02-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=BAWX
-----END PGP SIGNATURE-----
--- End Message ---