Bug 22338

Summary: Update request: nvidia-current 384.111
Product: Mageia Reporter: Thomas Backlund <tmb>
Component: SecurityAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact: Sec team <security>
Severity: normal    
Priority: Normal CC: sysadmin-bugs, tarazed25, wilcal.int
Version: 6Keywords: advisory, validated_update
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA5TOO, MGA6-64-OK, MGA5-64-OK
Source RPM: nvidia-current CVE:
Status comment:

Description Thomas Backlund 2018-01-06 23:42:45 CET
This is the Meltdown/Spectre related fixes for nvidia-current driver

Advisory will follow...

Mga5:
SRPMS:
ldetect-lst-0.1.346.10-1.mga5.src.rpm

nvidia-current-384.111-1.mga5.nonfree.src.rpm


i586:
ldetect-lst-0.1.346.10-1.mga5.i586.rpm
ldetect-lst-devel-0.1.346.10-1.mga5.i586.rpm

dkms-nvidia-current-384.111-1.mga5.nonfree.i586.rpm
nvidia-current-cuda-opencl-384.111-1.mga5.nonfree.i586.rpm
nvidia-current-devel-384.111-1.mga5.nonfree.i586.rpm
nvidia-current-doc-html-384.111-1.mga5.nonfree.i586.rpm
x11-driver-video-nvidia-current-384.111-1.mga5.nonfree.i586.rpm


x86_64:
ldetect-lst-0.1.346.10-1.mga5.x86_64.rpm
ldetect-lst-devel-0.1.346.10-1.mga5.x86_64.rpm

dkms-nvidia-current-384.111-1.mga5.nonfree.x86_64.rpm
nvidia-current-cuda-opencl-384.111-1.mga5.nonfree.x86_64.rpm
nvidia-current-devel-384.111-1.mga5.nonfree.x86_64.rpm
nvidia-current-doc-html-384.111-1.mga5.nonfree.x86_64.rpm
radeon-firmware-20160914-1.mga5.nonfree.noarch.rpm
x11-driver-video-nvidia-current-384.111-1.mga5.nonfree.x86_64.rpm



Mga6:
SRPMS:
ldetect-lst-0.3.7.5-1.mga6.src.rpm

nvidia-current-384.111-1.mga6.nonfree.src.rpm


i586:
ldetect-lst-0.3.7.5-1.mga6.i586.rpm
ldetect-lst-devel-0.3.7.5-1.mga6.i586.rpm

dkms-nvidia-current-384.111-1.mga6.nonfree.i586.rpm
nvidia-current-cuda-opencl-384.111-1.mga6.nonfree.i586.rpm
nvidia-current-devel-384.111-1.mga6.nonfree.i586.rpm
nvidia-current-doc-html-384.111-1.mga6.nonfree.i586.rpm
x11-driver-video-nvidia-current-384.111-1.mga6.nonfree.i586.rpm


x86_64:
ldetect-lst-0.3.7.5-1.mga6.x86_64.rpm
ldetect-lst-devel-0.3.7.5-1.mga6.x86_64.rpm

dkms-nvidia-current-384.111-1.mga6.nonfree.x86_64.rpm
nvidia-current-cuda-opencl-384.111-1.mga6.nonfree.x86_64.rpm
nvidia-current-devel-384.111-1.mga6.nonfree.x86_64.rpm
nvidia-current-doc-html-384.111-1.mga6.nonfree.x86_64.rpm
x11-driver-video-nvidia-current-384.111-1.mga6.nonfree.x86_64.rpm
Thomas Backlund 2018-01-06 23:42:55 CET

Whiteboard: (none) => MGA5TOO

Thomas Backlund 2018-01-06 23:45:43 CET

Component: RPM Packages => Security
QA Contact: (none) => security

Comment 2 William Kenney 2018-01-09 19:26:23 CET
On real hardware, M6, Plasma, 64-bit

Package(s) under test:
dkms-nvidia-current ldetect-lst nvidia-current-devel nvidia-current-doc-html x11-driver-video-nvidia-current

default install of dkms-nvidia-current
dkms-nvidia-current ldetect-lst nvidia-current-devel nvidia-current-doc-html x11-driver-video-nvidia-current

[root@localhost wilcal]# uname -a
Linux localhost 4.14.10-desktop-1.mga6 #1 SMP Sat Dec 30 01:10:25 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.10-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi ldetect-lst
Package ldetect-lst-0.3.7.4-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-devel
Package nvidia-current-devel-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-doc-html
Package nvidia-current-doc-html-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-nvidia-current
Package x11-driver-video-nvidia-current-384.98-2.mga6.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current

Boots to a working desktop. Screen sizes are correct. General applications work.

install dkms-nvidia-current ldetect-lst nvidia-current-doc-html x11-driver-video-nvidia-current
from updates_testing

warm reboot system

[root@localhost wilcal]# uname -a
Linux localhost 4.14.10-desktop-1.mga6 #1 SMP Sat Dec 30 01:10:25 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.10-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi ldetect-lst
Package ldetect-lst-0.3.7.5-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-devel
Package nvidia-current-devel-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-doc-html
Package nvidia-current-doc-html-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-nvidia-current
Package x11-driver-video-nvidia-current-384.111-1.mga6.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current

Boots to a working desktop. Screen sizes are correct. General applications work.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Samsung 250GB HD

CC: (none) => wilcal.int

Comment 3 Thomas Backlund 2018-01-10 20:01:29 CET
Tested with GTX1070 in Mga6 with 4.9 and 4.14 series kernels and in Caudldron with 4.14 series kernels.

Note that this driver has been in Cauldron since Jan 5th, 2018 so if there would be some bad issues with it we would aldready know.
Comment 4 Thomas Backlund 2018-01-12 22:38:16 CET
Advisory, added to svn:

type: security
subject: Updated nvidia-current packages mitigates security issues
CVE:
 - CVE-2017-5715
 - CVE-2017-5753
 - CVE-2017-5754
src:
  5:
   core:
     - ldetect-lst-0.1.346.10-1.mga5
   nonfree:
     - nvidia-current-384.111-1.mga5.nonfree
  6:
   core:
     - ldetect-lst-0.3.7.5-1.mga6
   nonfree:
     - nvidia-current-384.111-1.mga6.nonfree
description: |
  This update provides the version 384.111 from the R384 branch, in order
  to  help mitigating Spectre and Meltdown CPU security issues and keeps
  the driver working with security hardened kernels.

  Note that so far, nVidia does believe that their GPUs are immune
  to the referenced security issues.

  It also adds support for newer GPUs and  fixes some bugs.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=22338
 - http://nvidia.custhelp.com/app/answers/detail/a_id/4611
 - http://www.nvidia.com/Download/driverResults.aspx/128737/en-us

Keywords: (none) => advisory

Comment 5 Len Lawrence 2018-01-12 22:57:20 CET
This update has been running happily on this machine for a couple of days now.

System:    Host: vega Kernel: 4.14.13-desktop-1.mga6 x86_64
CPU:       Quad core Intel Core i7-4790K (-HT-MCP-) speed/max: 4395/4400 MHz
Graphics:  Card-1: Intel Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller
           Card-2: NVIDIA GK104 [GeForce GTX 770]
           GLX Version: 4.5.0 NVIDIA 384.111
RAM:       15.35 GB

CC: (none) => tarazed25

Comment 6 Len Lawrence 2018-01-13 11:33:57 CET
No problems updating the nvidia graphics driver.
System:    Host: difda Kernel: 4.4.111-desktop-1.mga5 x86_64
Graphics:  Card: NVIDIA GM204 [GeForce GTX 970]
           Resolution: 3840x2160@60.00hz
           GLX Version: 4.5.0 NVIDIA 384.111

Graphics working well.  Stellarium pans OK fullscreen with little motion blur.
Positional updates on objects like the moon running at several Hertz.
glmark2 score 20174, little different from the new kernel value.
Comment 7 Thomas Backlund 2018-01-13 14:59:05 CET
validating based on successful 64bit tests on both mga5 and mga6

Whiteboard: MGA5TOO => MGA5TOO, MGA6-64-OK, MGA5-64-OK
Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 8 Mageia Robot 2018-01-13 15:29:49 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0080.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED