Your message dated Mon, 18 Dec 2023 18:32:44 +0000
with message-id <e1rfiq0-008ioa...@fasolo.debian.org>
and subject line Bug#1055136: fixed in nvidia-graphics-drivers-tesla-470
470.223.02-2~deb11u1
has caused the Debian Bug report #1055136,
regarding nvidia-graphics-drivers: CVE-2023-31022
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1055136: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055136
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: nvidia-graphics-drivers
Severity: normal
Tags: security
X-Debbugs-Cc: Debian Security Team <t...@security.debian.org>
Control: clone -1 -2 -3 -4 -5 -6 -7 -8 -9
Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6
Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2023-31022
Control: tag -2 + wontfix
Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4
Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2023-31022
Control: tag -3 + wontfix
Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1
Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2023-31022
Control: tag -4 + wontfix
Control: reassign -5 src:nvidia-graphics-drivers-tesla-450 450.51.05-1
Control: retitle -5 nvidia-graphics-drivers-tesla-450: CVE-2023-31022
Control: tag -5 + wontfix
Control: reassign -6 src:nvidia-graphics-drivers-tesla-460 460.32.03-1
Control: retitle -6 nvidia-graphics-drivers-tesla-460: CVE-2023-31022
Control: tag -6 + wontfix
Control: close -6 460.106.00-3
Control: reassign -7 src:nvidia-graphics-drivers-tesla-470 470.57.02-1
Control: retitle -7 nvidia-graphics-drivers-tesla-470: CVE-2023-31022
Control: reassign -8 src:nvidia-graphics-drivers-tesla 510.85.02-1
Control: retitle -8 nvidia-graphics-drivers-tesla: CVE-2023-31022
Control: found -8 515.48.07-1
Control: found -8 525.60.13-1
Control: found -8 535.54.03-1
Control: reassign -9 src:nvidia-open-gpu-kernel-modules 515.43.04-1
Control: retitle -9 nvidia-open-gpu-kernel-modules: CVE-2023-31022
Control: found -9 520.56.06-1
Control: found -9 525.85.12-1
Control: found -9 530.30.02-1
Control: found -9 535.43.02-1
Control: found -9 545.23.06-1
Control: found -1 340.24-1
Control: found -1 343.22-1
Control: found -1 396.18-1
Control: found -1 430.14-1
Control: found -1 455.23.04-1
Control: found -1 465.24.02-1
Control: found -1 495.44-1
Control: found -1 515.48.07-1
Control: found -1 520.56.06-1
Control: found -1 525.53-1
Control: found -1 530.30.02-1
Control: found -1 535.43.02-1
Control: found -1 545.23.06-1
https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE-2023-31022 NVIDIA GPU Display Driver for Windows and Linux contains
a vulnerability in the kernel mode layer, where a NULL-pointer
dereference may lead to denial of service.
Linux Driver Branch CVE IDs Addressed
R545, R535, R525, R470 CVE-2023-31022
Driver Branch Affected Driver Versions Updated Driver
Version
R545 All driver versions prior to 545.29.02 545.29.02
R535 All driver versions prior to 535.129.03 535.129.03
R525 All driver versions prior to 525.147.05 525.147.05
R470 All driver versions prior to 470.223.02 470.223.02
Andreas
--- End Message ---
--- Begin Message ---
Source: nvidia-graphics-drivers-tesla-470
Source-Version: 470.223.02-2~deb11u1
Done: Andreas Beckmann <a...@debian.org>
We believe that the bug you reported is fixed in the latest version of
nvidia-graphics-drivers-tesla-470, which is due to be installed in the Debian
FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1055...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Beckmann <a...@debian.org> (supplier of updated
nvidia-graphics-drivers-tesla-470 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 03 Dec 2023 13:31:00 +0100
Source: nvidia-graphics-drivers-tesla-470
Architecture: source
Version: 470.223.02-2~deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org>
Changed-By: Andreas Beckmann <a...@debian.org>
Closes: 1052069 1055136 1055142 1055503 1057078
Changes:
nvidia-graphics-drivers-tesla-470 (470.223.02-2~deb11u1) bullseye;
urgency=medium
.
* Rebuild for bullseye.
.
nvidia-graphics-drivers-tesla-470 (470.223.02-2~deb12u1) bookworm;
urgency=medium
.
* Rebuild for bookworm.
.
nvidia-graphics-drivers-tesla-470 (470.223.02-2) unstable; urgency=medium
.
* Build libnvidia-tesla-470-fbc1 for arm64, too. (Closes: #1057078)
* bug-control: Report information about more driver components.
.
nvidia-graphics-drivers-tesla-470 (470.223.02-1) unstable; urgency=medium
.
* New upstream Tesla release 470.223.02 (2023-10-31).
* Fixed CVE-2023-31022. (Closes: #1055142)
https://nvidia.custhelp.com/app/answers/detail/a_id/5491
- Fixed a bug which caused incorrect reporting of presentation
times when using the VK_NV_present_barrier Vulkan extension.
* Improved compatibility with recent Linux kernels.
.
[ Andreas Beckmann ]
* Refresh patches.
.
nvidia-graphics-drivers (470.223.02-1) bullseye; urgency=medium
.
* New upstream long term support branch release 470.223.02 (2023-10-31).
* Fixed CVE-2023-31022. (Closes: #1055136)
https://nvidia.custhelp.com/app/answers/detail/a_id/5491
- Fixed a bug which caused incorrect reporting of presentation
times when using the VK_NV_present_barrier Vulkan extension.
* Improved compatibility with recent Linux kernels.
.
[ Andreas Beckmann ]
* Refresh patches.
* Upload to bullseye.
.
nvidia-graphics-drivers-tesla-470 (470.199.02-4) unstable; urgency=medium
.
* Refuse to load module if IBT is enabled. (Closes: #1052069)
* Switch suggestion from obsolete vulkan-utils to vulkan-tools
(525.125.06-3). (Closes: #1055503)
.
nvidia-graphics-drivers-tesla-470 (470.199.02-3) unstable; urgency=medium
.
* Revert backport of pin_user_pages changes.
* Backport drm_gem_prime_handle_to_fd changes from 470.223.02 to fix kernel
module build for Linux 6.6.
.
nvidia-graphics-drivers-tesla-470 (470.199.02-2) unstable; urgency=medium
.
* Backport get_user_pages and pin_user_pages changes from 520.56.06,
525.53 and 535.86.05 to fix kernel module build for Linux 6.5.
Checksums-Sha1:
49efd95a803f8a3fee04e0db94c03ef9179796f4 8096
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1.dsc
428eb4eab922c5f7567f5bed675767b0890ef69f 212356
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1.debian.tar.xz
02063b981a5c0489842c49973db1683f6b42d9fe 8560
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1_source.buildinfo
Checksums-Sha256:
01fba71e2e4e9fcbe810378b2c2601be95e3245b821722feef37ac641cf7b245 8096
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1.dsc
4a7163eee31e662f8bf78456141c4a39de41fc3729057b6216f3e509991d96a8 212356
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1.debian.tar.xz
b9b3784586fa83e02ebfebe7e6edc8e67de58c9fd6a47c4560eaca27a6ebf288 8560
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1_source.buildinfo
Files:
0d2f3bf8850317c25c33e539670d063b 8096 non-free/libs optional
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1.dsc
7d4e2fbd9cc21e3564ce146d34014635 212356 non-free/libs optional
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1.debian.tar.xz
16891973223e4725cc9567121fe1fa24 8560 non-free/libs optional
nvidia-graphics-drivers-tesla-470_470.223.02-2~deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAmVsdkYQHGFuYmVAZGVi
aWFuLm9yZwAKCRBfsz+TWentCI8GEACrXy3u0gQ5FLeeFdrVdhEHJRmaqxhXcwj+
Dq7IVijlSdjvy/BgvcUGsjKf96Pu40lxGpWaZ0uV330xysr0mBxyXgvf30gFiDr3
6d9KiIKgNSFwIskLi0wj+ArFw5ItRqiXVtpYjoEePtKkeHpWlor5v1l/pvuIp9Yz
C2Jpmv0hEyFlkQ3kHlabGEE/nmcQCIcKSQEbtk4nBh8DoGGdvTqsE/Aiu4tM2P/I
hThqAUqg3DPG9OjyrdR7fC5M3w4whDkziJPNrBP/ZRDOJSg8WdMY4PVPdgmTRW0g
KbxDi/XTCmR1SUI21sDSouneOQQ7fIAYVaVEu+zlExRKKYk95K6L2QvOr0mun6Si
5Ovm/iS8uqXDRuqyutMb08X0xnOlcEdeFP8pCGnxhFVFSTKmQRYSsLotdsCollRi
DxoARwHH8FPWTILiLvJmhvMKEx6DNn/w+sLyQsUNNM8uMGzSL8u0xIs3+2DRYvw3
4qYkxIBfiKBacPAHBJlipnAtL2FHaCoBQ0/UtrN31422Kle7r23tUfYAbz+dZVTP
dmefQY8tEB4fgh8fhQlbPMy8jkx3yKcszMPVExJUoYrvDEzfy9DB01wGetmb36uB
HGM5viZIkAGiDKydstObVbAaKKYkWvGagaunXj/CdPG7dP3mrsuVjVw4sPfyKg9s
ioaiqq2MVg==
=fDsr
-----END PGP SIGNATURE-----
--- End Message ---