Your message dated Thu, 05 Apr 2018 16:44:15 +0000 with message-id <e1f47zj-0000im...@fasolo.debian.org> and subject line Bug#894338: fixed in nvidia-graphics-drivers 390.48-1 has caused the Debian Bug report #894338, regarding nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer dereference and infinite recursion due to malformed shader to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 894338: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894338 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Version: 384.111 Severity: serious Tags: security upstream http://nvidia.custhelp.com/app/answers/detail/a_id/4649 CVE-2018-6249 NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges. CVE-2018-6253 NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursion leading to denial of service. Fixed versions: R390 390.46 R384 384.125 -- Kind regards, Luca Boccassi
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers Source-Version: 390.48-1 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 894...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 05 Apr 2018 17:51:02 +0200 Source: nvidia-graphics-drivers Binary: nvidia-driver nvidia-driver-bin nvidia-driver-libs nvidia-driver-libs-i386 nvidia-driver-libs-nonglvnd nvidia-driver-libs-nonglvnd-i386 xserver-xorg-video-nvidia nvidia-legacy-check libglvnd0-nvidia libopengl0-glvnd-nvidia libglx0-glvnd-nvidia libglx-nvidia0 libgl1-glvnd-nvidia-glx libgl1-nvidia-glvnd-glx libgl1-nvidia-glx libnvidia-glcore libegl1-glvnd-nvidia libegl1-nvidia libegl-nvidia0 libgles1-glvnd-nvidia libgles1-nvidia libgles-nvidia1 libgles2-glvnd-nvidia libgles2-nvidia libgles-nvidia2 libnvidia-eglcore nvidia-egl-common nvidia-egl-icd libnvidia-egl-wayland1 nvidia-egl-wayland-common nvidia-egl-wayland-icd nvidia-vulkan-common nvidia-vulkan-icd nvidia-nonglvnd-vulkan-common nvidia-nonglvnd-vulkan-icd libnvidia-cfg1 nvidia-alternative nvidia-kernel-support nvidia-kernel-dkms nvidia-kernel-source nvidia-vdpau-driver nvidia-smi nvidia-cuda-mps libcuda1 libcuda1-i386 libnvidia-compiler libnvidia-fatbinaryloader libnvidia-ptxjitcompiler1 libnvcuvid1 libnvidia-encode1 libnvidia-ifr1 libnvidia-fbc1 libnvidia-ml1 nvidia-opencl-common nvidia-opencl-icd nvidia-libopencl1 nvidia-detect Architecture: source Version: 390.48-1 Distribution: unstable Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libcuda1 - NVIDIA CUDA Driver Library libcuda1-i386 - NVIDIA CUDA 32-bit runtime library libegl-nvidia0 - NVIDIA binary EGL library libegl1-glvnd-nvidia - Vendor neutral GL dispatch library -- libEGL libegl1-nvidia - NVIDIA binary EGL library (non-GLVND variant) libgl1-glvnd-nvidia-glx - Vendor neutral GL dispatch library -- libGL libgl1-nvidia-glvnd-glx - NVIDIA binary OpenGL/GLX library (GLVND variant) libgl1-nvidia-glx - NVIDIA binary OpenGL/GLX library (non-GLVND variant) libgles-nvidia1 - NVIDIA binary OpenGL|ES 1.x library libgles-nvidia2 - NVIDIA binary OpenGL|ES 2.x library libgles1-glvnd-nvidia - NVIDIA binary OpenGL|ES 1.x GLVND stub library libgles1-nvidia - NVIDIA binary OpenGL|ES 1.x library (transitional) libgles2-glvnd-nvidia - NVIDIA binary OpenGL|ES 2.x GLVND stub library libgles2-nvidia - NVIDIA binary OpenGL|ES 2.x library (transitional) libglvnd0-nvidia - Vendor neutral GL dispatch library -- libGLdispatch libglx-nvidia0 - NVIDIA binary GLX library libglx0-glvnd-nvidia - Vendor neutral GL dispatch library -- libGLX libnvcuvid1 - NVIDIA CUDA Video Decoder runtime library libnvidia-cfg1 - NVIDIA binary OpenGL/GLX configuration library libnvidia-compiler - NVIDIA runtime compiler library libnvidia-egl-wayland1 - NVIDIA binary Wayland EGL external platform library libnvidia-eglcore - NVIDIA binary EGL core libraries libnvidia-encode1 - NVENC Video Encoding runtime library libnvidia-fatbinaryloader - NVIDIA FAT binary loader libnvidia-fbc1 - NVIDIA OpenGL-based Framebuffer Capture runtime library libnvidia-glcore - NVIDIA binary OpenGL/GLX core libraries libnvidia-ifr1 - NVIDIA OpenGL-based Inband Frame Readback runtime library libnvidia-ml1 - NVIDIA Management Library (NVML) runtime library libnvidia-ptxjitcompiler1 - NVIDIA PTX JIT Compiler libopengl0-glvnd-nvidia - Vendor neutral GL dispatch library -- libOpenGL nvidia-alternative - allows the selection of NVIDIA as GLX provider nvidia-cuda-mps - NVIDIA CUDA Multi Process Service (MPS) nvidia-detect - NVIDIA GPU detection utility nvidia-driver - NVIDIA metapackage nvidia-driver-bin - NVIDIA driver support binaries nvidia-driver-libs - NVIDIA metapackage (OpenGL/GLX/EGL/GLES libraries) nvidia-driver-libs-i386 - NVIDIA metapackage (OpenGL/GLX/EGL/GLES 32-bit libraries) nvidia-driver-libs-nonglvnd - NVIDIA metapackage (non-GLVND OpenGL/GLX/EGL/GLES libraries) nvidia-driver-libs-nonglvnd-i386 - NVIDIA metapackage (non-GLVND OpenGL/GLX/EGL/GLES 32-bit librarie nvidia-egl-common - NVIDIA binary EGL driver - common files nvidia-egl-icd - NVIDIA EGL installable client driver (ICD) nvidia-egl-wayland-common - NVIDIA binary Wayland EGL external platform - common files nvidia-egl-wayland-icd - NVIDIA Wayland EGL external platform library (ICD) nvidia-kernel-dkms - NVIDIA binary kernel module DKMS source nvidia-kernel-source - NVIDIA binary kernel module source nvidia-kernel-support - NVIDIA binary kernel module support files nvidia-legacy-check - check for NVIDIA GPUs requiring a legacy driver nvidia-libopencl1 - NVIDIA OpenCL ICD Loader library nvidia-nonglvnd-vulkan-common - NVIDIA Vulkan driver - common files (non-GLVND variant) nvidia-nonglvnd-vulkan-icd - NVIDIA Vulkan installable client driver (ICD) (non-GLVND variant) nvidia-opencl-common - NVIDIA OpenCL driver - common files nvidia-opencl-icd - NVIDIA OpenCL installable client driver (ICD) nvidia-smi - NVIDIA System Management Interface nvidia-vdpau-driver - Video Decode and Presentation API for Unix - NVIDIA driver nvidia-vulkan-common - NVIDIA Vulkan driver - common files nvidia-vulkan-icd - NVIDIA Vulkan installable client driver (ICD) xserver-xorg-video-nvidia - NVIDIA binary Xorg driver Closes: 894338 Changes: nvidia-graphics-drivers (390.48-1) unstable; urgency=medium . * New upstream long lived branch release 390.48 (2018-03-28). * Fixed CVE-2018-6249, CVE-2018-625. https://nvidia.custhelp.com/app/answers/detail/a_id/4649 (Closes: #894338) - Added support for the following GPUs: Quadro GV100, Tesla V100-SXM2-32GB, Tesla V100-PCIE-32GB, Tesla V100-DGXS-32GB. - Updated the driver to prevent G-SYNC from being enabled when a Quadro Sync board is installed. G-SYNC and Quadro Sync were always mutually incompatible features, and this change makes it easier to use G-SYNC capable monitors on Quadro Sync configurations, as it is now no longer necessary to manually disable G-SYNC. - Further improved the fix for occasional flicker when using the X driver's composition pipeline. This was mostly fixed in 390.42, but now the fix should be more complete. . [ Luca Boccassi ] * Update nv-readme.ids. * Drop linux-4.15.patch, merged upstream. . [ Andreas Beckmann ] * Merge changes from 384.130-1 (UNRELEASED). * Update lintian overrides. Checksums-Sha1: 95d562ff86b5ca0be9998abe2c5b3682905907ed 8391 nvidia-graphics-drivers_390.48-1.dsc 222c54bb711a0fdb7eaf3316d9e6d1e33bcd59c8 81306808 nvidia-graphics-drivers_390.48.orig-amd64.tar.gz e3a6ce24952adc9f50b180f1e27f216981ac1a98 28654692 nvidia-graphics-drivers_390.48.orig-armhf.tar.gz 65588c3bf5e23f84744b79d51b45e51efef24e2c 47338104 nvidia-graphics-drivers_390.48.orig-i386.tar.gz 6399ae8a327ce6366855c91435e457f9cfe14669 138 nvidia-graphics-drivers_390.48.orig.tar.gz a44b8ef05ef125d69e357b9cbdf228131fc6fb59 177480 nvidia-graphics-drivers_390.48-1.debian.tar.xz 92e6de812ed635724b6898ca0f99712c363c4f35 6805 nvidia-graphics-drivers_390.48-1_source.buildinfo Checksums-Sha256: 77d447e6ce405d0983368d2df750df7cb0cfd095c8a1d97e126965f330c962a5 8391 nvidia-graphics-drivers_390.48-1.dsc a6e93aaa0e4b8be96f7c6ae37d4483e319233e057eb1b6bf58d1e70466d467f5 81306808 nvidia-graphics-drivers_390.48.orig-amd64.tar.gz b6b7dac61d521c6be8f1c531c1e589912ac8684e5b81b852f49f99d10f23ba68 28654692 nvidia-graphics-drivers_390.48.orig-armhf.tar.gz 8fa42992fe42e3d087959fd9dbb82a4fb29eff1a0bfce192db28cc1c857e4d2b 47338104 nvidia-graphics-drivers_390.48.orig-i386.tar.gz fbf704e2bcfd27db1817f42027575fd81e5edfda14e79d481c3688ea20b07aad 138 nvidia-graphics-drivers_390.48.orig.tar.gz c34d678755b5842cf62b035d6e07e0e463034d5905fe516724d0f8e5a985e933 177480 nvidia-graphics-drivers_390.48-1.debian.tar.xz 91d40129344b91d2ae380bd2cd4f645a69001e2fdaf58fe5ea9d3964c489d47b 6805 nvidia-graphics-drivers_390.48-1_source.buildinfo Files: 500c3c6f3adeb81cfded98a051e6f0d2 8391 non-free/libs optional nvidia-graphics-drivers_390.48-1.dsc 0a1729110d179074998f5caff7ddb1d0 81306808 non-free/libs optional nvidia-graphics-drivers_390.48.orig-amd64.tar.gz d5fbcd3e8d1217b75d313e91c4c7ba2c 28654692 non-free/libs optional nvidia-graphics-drivers_390.48.orig-armhf.tar.gz 1d4a8a8e0ad65c6e133662520f591c7d 47338104 non-free/libs optional nvidia-graphics-drivers_390.48.orig-i386.tar.gz 6f9fb58ccb02f13bc3b05f4057072917 138 non-free/libs optional nvidia-graphics-drivers_390.48.orig.tar.gz ba8486bd08771067fcfe85432b20fbd8 177480 non-free/libs optional nvidia-graphics-drivers_390.48-1.debian.tar.xz 0fe51a1f002b005db73e11fd5441dada 6805 non-free/libs optional nvidia-graphics-drivers_390.48-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAlrGSVYQHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCOcXD/9E7EZA+xhQibiSpuijdZc3UlEqunRN6EBY T/53Aw1j28KrWMKipoYnh0FzpUUlTtN/96T9WddDw4IhZTHVMUDsL3ocAGgRSBPN S9vrk5Qrq7skMQY8m0Ipay+E9CtB4BJGILUqWmrMeKzTKSkgBfrvAjQPTWAUzBFk m7SldyS2sZ0ca0l4LWQQ+d1lN74edEAb07LYo50YrqaKuC+N9Pae9pWpxwg77JEo genrEyNldZRR5bF3vXkyJBa/B8i/tnJLf4QTwJX7iuzE0Rwxa+Kns2CI+CCp6Gli BpApGdEOmpzGlBO0J0qhjvyOEshT/i0E0W+Fu73eXetFcDBpT5ehob4Ab/sXi4v4 IPSytIVmyQ1KoFZeKEAEyIoI2ElYS/r/XZQ591ElCw+18sU0nKg3djnf3OCcgIDe /L1TZyV4tYt7ai829gSHSxgSCS5RSKvMvGGQHoGg4f2V/jhOGBlz4Qqr7OxW1OPx Q6BbycJ7ltz9SYfK9T3ISvq1RJo/5+wic+DY0nSCGoYgJstGKIaGI6kh+r3y0xYE tZo/3fPQnmvL3cf5J8HbH5yxliH7xr33JeJ3Q4vw0nM9aMa3ee8Nm92ZIjKNciwV oTp6e1lCg/HA36qKGmgALAkRjC1NBhJvyz4MZSuoHuXs42s36VXspQObLdQSNjc7 jaBOQQDh1g== =MRCO -----END PGP SIGNATURE-----
--- End Message ---
