Your message dated Sun, 10 Jan 2021 02:53:54 +0000 with message-id <e1kyqra-000b25...@fasolo.debian.org> and subject line Bug#979672: fixed in nvidia-graphics-drivers-legacy-390xx 390.141-1 has caused the Debian Bug report #979672, regarding nvidia-graphics-drivers-legacy-390xx: CVE‑2021‑1056 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 979672: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979672 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Severity: serious Tags: security upstream Control: clone -1 -2 -3 -4 -5 -6 Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE‑2021‑1056 Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE‑2021‑1056 Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE‑2021‑1056 Control: reassign -5 src:nvidia-graphics-drivers-tesla-440 Control: retitle -5 nvidia-graphics-drivers-tesla-440: CVE‑2021‑1056 Control: reassign -6 src:nvidia-graphics-drivers-tesla-450 Control: retitle -6 nvidia-graphics-drivers-tesla-450: CVE‑2021‑1052, CVE‑2021‑1053, CVE‑2021‑1056 Control: found -1 340.24-1 Control: found -1 343.22-1 Control: found -1 396.18-1 Control: found -1 430.14-1 Control: found -1 450.51-1 Control: found -1 455.23.04-1 https://nvidia.custhelp.com/app/answers/detail/a_id/5142 CVE‑2021‑1052 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure. CVE‑2021‑1053 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service. CVE‑2021‑1056 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure. CVE‑2021‑1052 and CVE‑2021‑1053 affect R460 and R450 driver branches only. Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-legacy-390xx Source-Version: 390.141-1 Done: Andreas Beckmann <a...@debian.org> We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-legacy-390xx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 979...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-legacy-390xx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 10 Jan 2021 03:31:58 +0100 Source: nvidia-graphics-drivers-legacy-390xx Architecture: source Version: 390.141-1 Distribution: unstable Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Closes: 979672 Changes: nvidia-graphics-drivers-legacy-390xx (390.141-1) unstable; urgency=medium . * New upstream legacy branch release 390.141 (2021-01-07). * Fixed CVE‑2021‑1056. (Closes: #979672) https://nvidia.custhelp.com/app/answers/detail/a_id/5142 - Fixed a driver installation failure on Linux kernel 5.8 release candidates, where the NVIDIA kernel module failed to build with error "'struct mm_struct' has no member named 'mmap_sem'". - Fixed a driver installation failure on Linux kernel 5.8 release candidates, where the NVIDIA kernel module failed to build with error "too many arguments to function '__vmalloc'". . [ Andreas Beckmann ] * Re-enable building the nvidia-uvm module. * Refresh patches. * Update symbols files. * Update lintian overrides. Checksums-Sha1: 10c89d8b602167f94380adb2fa5dbcdaafbb16a2 7598 nvidia-graphics-drivers-legacy-390xx_390.141-1.dsc 7591ea3f1b748c757d44bbae10725d2d51d84a63 85295317 nvidia-graphics-drivers-legacy-390xx_390.141.orig-amd64.tar.gz 67572e41fe17d8395cab03af93d3f9bb59c38b92 29972961 nvidia-graphics-drivers-legacy-390xx_390.141.orig-armhf.tar.gz 5a30d842de9cd37631f377bee424714aff61728b 49551824 nvidia-graphics-drivers-legacy-390xx_390.141.orig-i386.tar.gz 060940ef0ccbff6ffbbd34a5d3bb1258e5cd2f8c 139 nvidia-graphics-drivers-legacy-390xx_390.141.orig.tar.gz 1cbef74f4c63d6aa098fa43c940a63958f374a18 175572 nvidia-graphics-drivers-legacy-390xx_390.141-1.debian.tar.xz 1c6ba7f12967e54ab978b04bee6f71a7d022f9f7 7962 nvidia-graphics-drivers-legacy-390xx_390.141-1_source.buildinfo Checksums-Sha256: c8a310048ef692f5a7a66f1179be978e7933d8aec65031eccd50d94370ab11d8 7598 nvidia-graphics-drivers-legacy-390xx_390.141-1.dsc a438394671cd4dc7f60f01c91b5d156887d79bac5d31ba1cf53668960ea31d67 85295317 nvidia-graphics-drivers-legacy-390xx_390.141.orig-amd64.tar.gz 63a2ee20641f882ce81acecb57f111a135d6f81c6e993916ee278dbd3a13f053 29972961 nvidia-graphics-drivers-legacy-390xx_390.141.orig-armhf.tar.gz c2bcd93e48eca83552dc5a3c72be206d53837708416a6158e4d98354077e9901 49551824 nvidia-graphics-drivers-legacy-390xx_390.141.orig-i386.tar.gz f1ea7e36387cba63a46d8257309eaa52ae13b23af6ae1b1aef9d1e788c93c173 139 nvidia-graphics-drivers-legacy-390xx_390.141.orig.tar.gz be5b677b38b192f6ad1ed22564ef0dcb520a21b13bbc6a6130744c8cf17e2a96 175572 nvidia-graphics-drivers-legacy-390xx_390.141-1.debian.tar.xz 4ac35189c25d5d41e5aa7a47b0b7087dc6f1bf342ffb5e9101c8586273ebc7b6 7962 nvidia-graphics-drivers-legacy-390xx_390.141-1_source.buildinfo Files: bc5a0e9e370a750838026794ccecc284 7598 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.141-1.dsc 8b143a59cd8a05f683517d407559b113 85295317 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.141.orig-amd64.tar.gz fd061e9f6957dbde2db018f9399a5738 29972961 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.141.orig-armhf.tar.gz acf506761b029954243976f34a5be3cf 49551824 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.141.orig-i386.tar.gz 4b9d421cdf848cc67e5e505a64611570 139 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.141.orig.tar.gz 6674c39077b1892c5588e2bea0add569 175572 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.141-1.debian.tar.xz 2d9c1830a6e10f000b36c123bb9815b9 7962 non-free/libs optional nvidia-graphics-drivers-legacy-390xx_390.141-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAl/6Z54QHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCHbeEACym9aAKW7EUj3hWtzJOnRFpDJ8zcUtGjHT o1gMXy8rl+QebaacL+8/0YwhAtMyMrnlNAnL1Nfu1EolsWNwl7ukc2qsDmlYKTOb /vP/b0bcjH/wLIVDT0jBf0odfQF/xt64o3VQNzlFafXPP6vFXiZ3H7NVfRwWFfYZ fDsFoDxDSmg+dRJyJWU3mu8VQKJ+OGkF6C9hIt0miYW+1zszy+G/ew4ozVdkgsWf j+2mE5yGY7Gv1zXCDGOg9+eL94lPzn5b+vPd83CeZ1MvP2mqLKHxQE6gsf2uakh2 M4y2GyQ83vGH7UtYRHYcQ9IeAwiAFz4igCljdDbgRIUoE1c0CqTY6Zk5pjuTo15D P90d54d25/THrWU9rM89TKZ81U9ffYQKn8eWDpr+o/WNDefRm+BPlcHO9VWNadbf IwHogBXkilOdOKjfUwb2s40bk9EvH9MchjNVu8+Snrd3YDJGO95ikST7vPqUbVG1 26m0CZMHmmKRH+/A1oUVEgSOHNtG9qRkuDDl28210otUjLvwGoltuIElT/lvCymD oF+UdsxejRXSyPHHc9utJI9N8e2j/7ijbk8gDsCydy4p8g3RaU7L0OaX3cr+bQVn IRnzB6ofC+U5uHQAYPoap151vylxtUFAmxdHV4jdDYLEkRli5cgzXY5WyvnxWy3m wvkGg8qMJg== =3LjS -----END PGP SIGNATURE-----
--- End Message ---
