Your message dated Sun, 20 Mar 2022 19:02:07 +0000 with message-id <e1nw0oz-0006w6...@fasolo.debian.org> and subject line Bug#1004851: fixed in nvidia-graphics-drivers-tesla-450 450.172.01-2~deb11u1 has caused the Debian Bug report #1004851, regarding nvidia-graphics-drivers-tesla-450: CVE-2022-21813, CVE-2022-21814 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1004851: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1004851 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nvidia-graphics-drivers Severity: serious Tags: security upstream Control: clone -1 -2 -3 -4 -5 -6 -7 Control: reassign -2 src:nvidia-graphics-drivers-legacy-340xx 340.76-6 Control: retitle -2 nvidia-graphics-drivers-legacy-340xx: CVE-2022-21813, CVE-2022-21814 Control: tag -2 + wontfix Control: reassign -3 src:nvidia-graphics-drivers-legacy-390xx 390.48-4 Control: retitle -3 nvidia-graphics-drivers-legacy-390xx: CVE-2022-21813, CVE-2022-21814 Control: reassign -4 src:nvidia-graphics-drivers-tesla-418 418.87.01-1 Control: retitle -4 nvidia-graphics-drivers-tesla-418: CVE-2022-21813, CVE-2022-21814 Control: reassign -5 src:nvidia-graphics-drivers-tesla-450 450.51.05-1 Control: retitle -5 nvidia-graphics-drivers-tesla-450: CVE-2022-21813, CVE-2022-21814 Control: reassign -6 src:nvidia-graphics-drivers-tesla-460 460.32.03-1 Control: retitle -6 nvidia-graphics-drivers-tesla-460: CVE-2022-21813, CVE-2022-21814 Control: reassign -7 src:nvidia-graphics-drivers-tesla-470 470.57.02-1 Control: retitle -7 nvidia-graphics-drivers-tesla-470: CVE-2022-21813, CVE-2022-21814 Control: found -1 340.24-1 Control: found -1 343.22-1 Control: found -1 396.18-1 Control: found -1 430.14-1 Control: found -1 450.51-1 Control: found -1 455.23.04-1 Control: found -1 465.24.02-1 Control: found -1 495.44-1 https://nvidia.custhelp.com/app/answers/detail/a_id/5312 CVE‑2022‑21813 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. CVE‑2022‑21814 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. Driver Branch CVE IDs Addressed R510, R470 CVE-2022-21813, CVE-2022-21814 Andreas
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-tesla-450 Source-Version: 450.172.01-2~deb11u1 Done: Andreas Beckmann <a...@debian.org> We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-tesla-450, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1004...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-tesla-450 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 20 Mar 2022 16:53:36 +0100 Source: nvidia-graphics-drivers-tesla-450 Architecture: source Version: 450.172.01-2~deb11u1 Distribution: bullseye Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Closes: 996595 999670 1004851 1005932 Changes: nvidia-graphics-drivers-tesla-450 (450.172.01-2~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. . nvidia-graphics-drivers-tesla-450 (450.172.01-2) unstable; urgency=medium . * Add xorg-video-abi-25 (Xorg Xserver 21) as alternative dependency. (Closes: #1005932) * Backport pde_data changes from 470.103.01 to fix kernel module build for Linux 5.17. * dkms.conf: Use a BUILD_EXCLUSIVE equivalent hack to skip building for -rt kernels, not supported upstream (510.54-1). * Declare Testsuite: autopkgtest-pkg-dkms (510.54-1). . nvidia-graphics-drivers-tesla-450 (450.172.01-1) unstable; urgency=medium . * New upstream Tesla release 450.172.01 (2022-01-31). * Fixed CVE‑2022‑21813, CVE‑2022‑21814. (Closes: #1004851) https://nvidia.custhelp.com/app/answers/detail/a_id/5312 - Fixed a bug that caused nvidia-drm.ko to crash when loading with DRM-KMS enabled (modeset=1) on Linux v5.14. * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. * nvidia-tesla-450-kernel-support: Provide /etc/modprobe.d/nvidia-options.conf as a template taking into account the module renaming. This is a slave alternative of the nvidia alternative (470.86-1). (Closes: #999670) . nvidia-graphics-drivers-tesla-450 (450.156.00-1) unstable; urgency=medium . * New upstream Tesla release 450.156.00 (2021-10-26). - Fixed a bug that could cause the /proc/driver/nvidia/suspend power management interface to fail to preserve and restore video memory allocations when the NVreg_TemporaryFilePath module parameter for nvidia.ko specified an invalid path. . [ Andreas Beckmann ] * bug-script: Show the nvidia and glx alternatives (470.82.00-1). * nvidia-tesla-450-alternative: libnvidia-cfg.so.1 on its own is not sufficient to activate a nvidia alternative (470.82.00-1). (Closes: #996595) * Fix bashisms in upstream scripts (470.82.00-1). * Drop the unusable leftover non-GLVND libegl1-nvidia-tesla-450 package (470.82.00-1). * nvidia-tesla-450-alternative: Drop unused non-GLVND slave links (470.82.00-1). * Update lintian overrides. . nvidia-graphics-drivers-tesla-450 (450.142.00-2) unstable; urgency=medium . * Backport drm_device_has_pdev and set_current_state changes from 470.63.01 to fix kernel module build for Linux 5.14. * Generate tight dependencies on libnvidia*-glcore/libnvidia*-eglcore (470.57.02-3). * Bump Standards-Version to 4.6.0. No changes needed. Checksums-Sha1: 5deb667a72db1906166c92abceda27e2a9716a58 7471 nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1.dsc 9e7cd50a9752716797df50c9176972558f85ba8e 200312 nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1.debian.tar.xz 47344797196769b3e7f621ecf1e4376a69ad5187 8098 nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1_source.buildinfo Checksums-Sha256: 7d3c5fcc43d0e1675895ddc8f662fd131861ab9a9814c7d024ee7439a9069ef4 7471 nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1.dsc 56383662e75252df7ae0997c3fbf30889e46af49af5d165fd1a44079cdb0fcfa 200312 nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1.debian.tar.xz becb26d94c314522a438377bab99fbe3e4ca213372338de3a9bab051f482ff51 8098 nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1_source.buildinfo Files: 6d673dd5e99aac566b02f4238ab3f951 7471 non-free/libs optional nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1.dsc fd4eecef0d2fe4e136280728b46543e4 200312 non-free/libs optional nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1.debian.tar.xz 7bfdf0ce97a744af21728b669bac0da7 8098 non-free/libs optional nvidia-graphics-drivers-tesla-450_450.172.01-2~deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAmI3TyAQHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCCl6EACSDMUqgnHksJ2kfmdQ15gaPmCteX6rg+tf xLTAMogSTgdYsDnFR3MqOjIFE+F3PFLZIHJcTb/VhGuUY1iThSXlCEAF4UR4ELRi 9qMGHvc8Ztfba8sVRYh4GBJGmhbnlaFcdvwOiWxYqjj93QAGSFfmwZyXGN0uZ+2t 96Tk3THUZIn4mV23VUALvcCDuUUDv8D7GhsLSye5xGRB6lG8PCErZHwDViZMcC5M YR/tpI3VXJq4magm+qEg9QhD9kBuCZt0qqSYrS1gYOsqo6Enr/8WsMzf4tlpDF1M fVoVbLD6up/9sG80y5cVguMrS0GdGaF5/vysoF0vTgXBcvbJlYZVafibwu++l8XI 3bL4z3i8kkygFTgBcd5narJugVegozHvrNHP3FuYQwfBEOfR4mUdxmclTTMrP9mm fHzTNh8g7WflkegeNobGJ2MJ56tyzKtjAgoy6ZUCJqPaHtTzNZQSkMisbcq2tUjR rRjOBro3Ybb5D0dMNHfPaJjayZMFx88dHjjOsoTzNPRTePykw6/9JC3PbSwASDgv ToZsJ7fh/xINKbDxIJZ1VVTK6qyNlwaYBPc3jKDHJQ2EPke1pepfRSfz6YaPOcYx 8Dqv3PpzVEpGd+fKYK9/gfgSyQ6qow7wVf3V3y508ajHovnazqJRD16LcV+50mlo A9OR0LxFag== =svZJ -----END PGP SIGNATURE-----
--- End Message ---
