Your message dated Mon, 30 Apr 2018 20:51:49 +0000
with message-id <[email protected]>
and subject line Bug#894338: fixed in nvidia-graphics-drivers 384.130-1
has caused the Debian Bug report #894338,
regarding nvidia-graphics-drivers: CVE-2018-6249, CVE-2018-6253: null pointer
dereference and infinite recursion due to malformed shader
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
894338: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894338
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: nvidia-graphics-drivers
Version: 384.111
Severity: serious
Tags: security upstream
http://nvidia.custhelp.com/app/answers/detail/a_id/4649
CVE-2018-6249
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer
handler where a NULL pointer dereference may lead to denial of service
or potential escalation of privileges.
CVE-2018-6253
NVIDIA GPU Display Driver contains a vulnerability in the DirectX and
OpenGL Usermode drivers where a specially crafted pixel shader can
cause infinite recursion leading to denial of service.
Fixed versions:
R390 390.46
R384 384.125
--
Kind regards,
Luca Boccassi
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---
Source: nvidia-graphics-drivers
Source-Version: 384.130-1
We believe that the bug you reported is fixed in the latest version of
nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Beckmann <[email protected]> (supplier of updated nvidia-graphics-drivers
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 17 Apr 2018 14:40:27 +0200
Source: nvidia-graphics-drivers
Binary: nvidia-driver nvidia-driver-bin nvidia-driver-libs
nvidia-driver-libs-i386 nvidia-driver-libs-nonglvnd
nvidia-driver-libs-nonglvnd-i386 xserver-xorg-video-nvidia nvidia-legacy-check
libglvnd0-nvidia libopengl0-glvnd-nvidia libglx0-glvnd-nvidia libglx-nvidia0
libgl1-glvnd-nvidia-glx libgl1-nvidia-glvnd-glx libgl1-nvidia-glx
libnvidia-glcore libegl1-glvnd-nvidia libegl1-nvidia libegl-nvidia0
libgles1-glvnd-nvidia libgles1-nvidia libgles-nvidia1 libgles2-glvnd-nvidia
libgles2-nvidia libgles-nvidia2 libnvidia-eglcore nvidia-egl-common
nvidia-egl-icd libnvidia-egl-wayland1 nvidia-egl-wayland-common
nvidia-egl-wayland-icd nvidia-vulkan-common nvidia-vulkan-icd
nvidia-nonglvnd-vulkan-common nvidia-nonglvnd-vulkan-icd libnvidia-cfg1
nvidia-alternative nvidia-kernel-support nvidia-kernel-dkms
nvidia-kernel-source nvidia-vdpau-driver nvidia-smi nvidia-cuda-mps libcuda1
libcuda1-i386 libnvidia-compiler libnvidia-fatbinaryloader
libnvidia-ptxjitcompiler1 libnvcuvid1
libnvidia-encode1 libnvidia-ifr1 libnvidia-fbc1 libnvidia-ml1
nvidia-opencl-common nvidia-opencl-icd nvidia-libopencl1
nvidia-detect
Architecture: source
Version: 384.130-1
Distribution: stretch
Urgency: medium
Maintainer: Debian NVIDIA Maintainers <[email protected]>
Changed-By: Andreas Beckmann <[email protected]>
Description:
libcuda1 - NVIDIA CUDA Driver Library${nvidia:LegacyDesc}
libcuda1-i386 - NVIDIA CUDA 32-bit runtime library${nvidia:LegacyDesc}
libegl-nvidia0 - NVIDIA binary EGL library${nvidia:LegacyDesc}
libegl1-glvnd-nvidia - Vendor neutral GL dispatch library -- libEGL
libegl1-nvidia - NVIDIA binary EGL library (non-GLVND
variant)${nvidia:LegacyDesc}
libgl1-glvnd-nvidia-glx - Vendor neutral GL dispatch library -- libGL
libgl1-nvidia-glvnd-glx - NVIDIA binary OpenGL/GLX library (GLVND
variant)${nvidia:LegacyDe
libgl1-nvidia-glx - NVIDIA binary OpenGL/GLX library (non-GLVND
variant)${nvidia:Lega
libgles-nvidia1 - NVIDIA binary OpenGL|ES 1.x library${nvidia:LegacyDesc}
libgles-nvidia2 - NVIDIA binary OpenGL|ES 2.x library${nvidia:LegacyDesc}
libgles1-glvnd-nvidia - NVIDIA binary OpenGL|ES 1.x GLVND stub library
libgles1-nvidia - NVIDIA binary OpenGL|ES 1.x library
(transitional)${nvidia:Legacy
libgles2-glvnd-nvidia - NVIDIA binary OpenGL|ES 2.x GLVND stub library
libgles2-nvidia - NVIDIA binary OpenGL|ES 2.x library
(transitional)${nvidia:Legacy
libglvnd0-nvidia - Vendor neutral GL dispatch library -- libGLdispatch
libglx-nvidia0 - NVIDIA binary GLX library${nvidia:LegacyDesc}
libglx0-glvnd-nvidia - Vendor neutral GL dispatch library -- libGLX
libnvcuvid1 - NVIDIA CUDA Video Decoder runtime library${nvidia:LegacyDesc}
libnvidia-cfg1 - NVIDIA binary OpenGL/GLX configuration
library${nvidia:LegacyDesc
libnvidia-compiler - NVIDIA runtime compiler library${nvidia:LegacyDesc}
libnvidia-egl-wayland1 - NVIDIA binary Wayland EGL external platform library
libnvidia-eglcore - NVIDIA binary EGL core libraries${nvidia:LegacyDesc}
libnvidia-encode1 - NVENC Video Encoding runtime library${nvidia:LegacyDesc}
libnvidia-fatbinaryloader - NVIDIA FAT binary loader${nvidia:LegacyDesc}
libnvidia-fbc1 - NVIDIA OpenGL-based Framebuffer Capture runtime
library${nvidia:L
libnvidia-glcore - NVIDIA binary OpenGL/GLX core libraries${nvidia:LegacyDesc}
libnvidia-ifr1 - NVIDIA OpenGL-based Inband Frame Readback runtime
library${nvidia
libnvidia-ml1 - NVIDIA Management Library (NVML) runtime
library${nvidia:LegacyDe
libnvidia-ptxjitcompiler1 - NVIDIA PTX JIT Compiler${nvidia:LegacyDesc}
libopengl0-glvnd-nvidia - Vendor neutral GL dispatch library -- libOpenGL
nvidia-alternative - allows the selection of NVIDIA as GLX
provider${nvidia:LegacyDesc
nvidia-cuda-mps - NVIDIA CUDA Multi Process Service (MPS)
nvidia-detect - NVIDIA GPU detection utility
nvidia-driver - NVIDIA metapackage${nvidia:LegacyDesc}
nvidia-driver-bin - NVIDIA driver support binaries${nvidia:LegacyDesc}
nvidia-driver-libs - NVIDIA metapackage (OpenGL/GLX/EGL/GLES
libraries)${nvidia:Legacy
nvidia-driver-libs-i386 - NVIDIA metapackage (OpenGL/GLX/EGL/GLES 32-bit
libraries)${nvidia
nvidia-driver-libs-nonglvnd - NVIDIA metapackage (non-GLVND
OpenGL/GLX/EGL/GLES libraries)${nvi
nvidia-driver-libs-nonglvnd-i386 - NVIDIA metapackage (non-GLVND
OpenGL/GLX/EGL/GLES 32-bit librarie
nvidia-egl-common - NVIDIA binary EGL driver - common files
nvidia-egl-icd - NVIDIA EGL installable client driver (ICD)
nvidia-egl-wayland-common - NVIDIA binary Wayland EGL external platform -
common files
nvidia-egl-wayland-icd - NVIDIA Wayland EGL external platform library (ICD)
nvidia-kernel-dkms - NVIDIA binary kernel module DKMS
source${nvidia:LegacyDesc}
nvidia-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc}
nvidia-kernel-support - NVIDIA binary kernel module support
files${nvidia:LegacyDesc}
nvidia-legacy-check - check for NVIDIA GPUs requiring a legacy driver
nvidia-libopencl1 - NVIDIA OpenCL ICD Loader library
nvidia-nonglvnd-vulkan-common - NVIDIA Vulkan driver - common files (non-GLVND
variant)
nvidia-nonglvnd-vulkan-icd - NVIDIA Vulkan installable client driver (ICD)
(non-GLVND variant)
nvidia-opencl-common - NVIDIA OpenCL driver - common files
nvidia-opencl-icd - NVIDIA OpenCL installable client driver
(ICD)${nvidia:LegacyDesc}
nvidia-smi - NVIDIA System Management Interface${nvidia:LegacyDesc}
nvidia-vdpau-driver - Video Decode and Presentation API for Unix - NVIDIA
driver${nvidi
nvidia-vulkan-common - NVIDIA Vulkan driver - common files
nvidia-vulkan-icd - NVIDIA Vulkan installable client driver
(ICD)${nvidia:LegacyDesc}
xserver-xorg-video-nvidia - NVIDIA binary Xorg driver${nvidia:LegacyDesc}
Closes: 888028 894338
Changes:
nvidia-graphics-drivers (384.130-1) stretch; urgency=medium
.
* New upstream long lived branch release 384.130 (2018-03-28).
* Fixed CVE-2018-6249, CVE-2018-6253.
https://nvidia.custhelp.com/app/answers/detail/a_id/4649
(Closes: #894338)
- Improved compatibility with recent Linux kernels.
- Fixed a string concatenation bug that caused libGL to accidentally try to
create the directory "$HOME.nv" rather than "$HOME/.nv" in some cases
where /tmp isn't accessible. (Closes: #888028)
- Increased the version numbers of the GLVND libGL, libGLESv1_CM,
libGLESv2, and libEGL libraries, to prevent concurrently installed
non-GLVND libraries from taking precedence in the dynamic linker
cache.
* New upstream release 340 series.
- Fixed a bug which could cause X servers that export a Video Driver
ABI earlier than 0.8 to crash when running X11 applications which
call XRenderAddTraps().
.
[ Luca Boccassi ]
* Install the renamed GLVND libraries and add SONAME symlinks.
.
[ Andreas Beckmann ]
* Bump the required glx-diversions/glx-alternative-nvidia version for the
renamed GLVND libraries.
* Upload to stretch
Checksums-Sha1:
72e894ea34933e02bb3d364756c8cacab2917855 8395
nvidia-graphics-drivers_384.130-1.dsc
4b2a4be237569a2cdb8ce84eaeb5faab0486beee 82225587
nvidia-graphics-drivers_384.130.orig-amd64.tar.gz
3eebebf6cb22bc0d63c78ab1e2f46502bc6461d9 28862083
nvidia-graphics-drivers_384.130.orig-armhf.tar.gz
e577313dd2a54e760310e59c20e4b86e4e200f6a 47504082
nvidia-graphics-drivers_384.130.orig-i386.tar.gz
918395ba2da05c5bfb5b1223bc9a257ee10b8e0c 139
nvidia-graphics-drivers_384.130.orig.tar.gz
102886d73e8ca0b6e138335ffbd2a035623eff3e 173716
nvidia-graphics-drivers_384.130-1.debian.tar.xz
dbdbb054cdb056ef487b2f1d2e7ec20c7828dc86 7075
nvidia-graphics-drivers_384.130-1_source.buildinfo
Checksums-Sha256:
f1bd701afc8bd81e4679a1d16fda9408c766d0963cc2f0b57818af9ae04c92c1 8395
nvidia-graphics-drivers_384.130-1.dsc
5b8104cae58a3a0487a4eae596716ee25c105d1c823cce2ab862b1292ae83754 82225587
nvidia-graphics-drivers_384.130.orig-amd64.tar.gz
e5e636c163dc153bd4662ae4ba29d3e1cde0d0b479ff88dd5f03458f7fc411fb 28862083
nvidia-graphics-drivers_384.130.orig-armhf.tar.gz
6d6465c7f52466c33b3c9fcb9a8c3fd65275e67a793418997cc33a78788fb3e9 47504082
nvidia-graphics-drivers_384.130.orig-i386.tar.gz
97dc8c203e7ca5d32535e16e5a84dca7ffa8f5bb401ba0c7f25a4a7ca992c59d 139
nvidia-graphics-drivers_384.130.orig.tar.gz
8b6d63d746c5a15124a9256566a2061b3eceaf19f09f89f74546f4c492fa4176 173716
nvidia-graphics-drivers_384.130-1.debian.tar.xz
ccde3e1283eda463cbe679a3fd4138a89d2892b1f0fcd4d3baccf3cc0fdc0c49 7075
nvidia-graphics-drivers_384.130-1_source.buildinfo
Files:
27296ee2baca6263901982bd9f32ad70 8395 non-free/libs optional
nvidia-graphics-drivers_384.130-1.dsc
bd533cbe768055e509b1c345695cd74a 82225587 non-free/libs optional
nvidia-graphics-drivers_384.130.orig-amd64.tar.gz
e7a0e31f9ac7f53c820961fe0d86bd8c 28862083 non-free/libs optional
nvidia-graphics-drivers_384.130.orig-armhf.tar.gz
1fab2293d4f37c89f5597aca9c13a256 47504082 non-free/libs optional
nvidia-graphics-drivers_384.130.orig-i386.tar.gz
185d83f72bf7684d8a16859e9b018924 139 non-free/libs optional
nvidia-graphics-drivers_384.130.orig.tar.gz
6c03f9d03f93da9f842e949599f81a4d 173716 non-free/libs optional
nvidia-graphics-drivers_384.130-1.debian.tar.xz
803f4d77b272e9331620d5672d6111ac 7075 non-free/libs optional
nvidia-graphics-drivers_384.130-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Tnyj
-----END PGP SIGNATURE-----
--- End Message ---
