| Summary: | Update request: nvidia-current 384.111 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Thomas Backlund <tmb> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | sysadmin-bugs, tarazed25, wilcal.int |
| Version: | 6 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA5TOO, MGA6-64-OK, MGA5-64-OK | ||
| Source RPM: | nvidia-current | CVE: | |
| Status comment: | |||
|
Description
Thomas Backlund
2018-01-06 23:42:45 CET
Thomas Backlund
2018-01-06 23:42:55 CET
Whiteboard:
(none) =>
MGA5TOO
Thomas Backlund
2018-01-06 23:45:43 CET
Component:
RPM Packages =>
Security References: http://nvidia.custhelp.com/app/answers/detail/a_id/4611 http://www.nvidia.com/Download/driverResults.aspx/128737/en-us On real hardware, M6, Plasma, 64-bit
Package(s) under test:
dkms-nvidia-current ldetect-lst nvidia-current-devel nvidia-current-doc-html x11-driver-video-nvidia-current
default install of dkms-nvidia-current
dkms-nvidia-current ldetect-lst nvidia-current-devel nvidia-current-doc-html x11-driver-video-nvidia-current
[root@localhost wilcal]# uname -a
Linux localhost 4.14.10-desktop-1.mga6 #1 SMP Sat Dec 30 01:10:25 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.10-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi ldetect-lst
Package ldetect-lst-0.3.7.4-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-devel
Package nvidia-current-devel-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-doc-html
Package nvidia-current-doc-html-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-nvidia-current
Package x11-driver-video-nvidia-current-384.98-2.mga6.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
Subsystem: Gigabyte Technology Co., Ltd Device 3518
Kernel driver in use: nvidia
Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current
Boots to a working desktop. Screen sizes are correct. General applications work.
install dkms-nvidia-current ldetect-lst nvidia-current-doc-html x11-driver-video-nvidia-current
from updates_testing
warm reboot system
[root@localhost wilcal]# uname -a
Linux localhost 4.14.10-desktop-1.mga6 #1 SMP Sat Dec 30 01:10:25 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.10-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi ldetect-lst
Package ldetect-lst-0.3.7.5-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-devel
Package nvidia-current-devel-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-doc-html
Package nvidia-current-doc-html-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-nvidia-current
Package x11-driver-video-nvidia-current-384.111-1.mga6.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
Subsystem: Gigabyte Technology Co., Ltd Device 3518
Kernel driver in use: nvidia
Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current
Boots to a working desktop. Screen sizes are correct. General applications work.
Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Samsung 250GB HDCC:
(none) =>
wilcal.int Tested with GTX1070 in Mga6 with 4.9 and 4.14 series kernels and in Caudldron with 4.14 series kernels. Note that this driver has been in Cauldron since Jan 5th, 2018 so if there would be some bad issues with it we would aldready know.
Advisory, added to svn:
type: security
subject: Updated nvidia-current packages mitigates security issues
CVE:
- CVE-2017-5715
- CVE-2017-5753
- CVE-2017-5754
src:
5:
core:
- ldetect-lst-0.1.346.10-1.mga5
nonfree:
- nvidia-current-384.111-1.mga5.nonfree
6:
core:
- ldetect-lst-0.3.7.5-1.mga6
nonfree:
- nvidia-current-384.111-1.mga6.nonfree
description: |
This update provides the version 384.111 from the R384 branch, in order
to help mitigating Spectre and Meltdown CPU security issues and keeps
the driver working with security hardened kernels.
Note that so far, nVidia does believe that their GPUs are immune
to the referenced security issues.
It also adds support for newer GPUs and fixes some bugs.
references:
- https://bugs.mageia.org/show_bug.cgi?id=22338
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611
- http://www.nvidia.com/Download/driverResults.aspx/128737/en-usKeywords:
(none) =>
advisory This update has been running happily on this machine for a couple of days now.
System: Host: vega Kernel: 4.14.13-desktop-1.mga6 x86_64
CPU: Quad core Intel Core i7-4790K (-HT-MCP-) speed/max: 4395/4400 MHz
Graphics: Card-1: Intel Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller
Card-2: NVIDIA GK104 [GeForce GTX 770]
GLX Version: 4.5.0 NVIDIA 384.111
RAM: 15.35 GBCC:
(none) =>
tarazed25 No problems updating the nvidia graphics driver.
System: Host: difda Kernel: 4.4.111-desktop-1.mga5 x86_64
Graphics: Card: NVIDIA GM204 [GeForce GTX 970]
Resolution: 3840x2160@60.00hz
GLX Version: 4.5.0 NVIDIA 384.111
Graphics working well. Stellarium pans OK fullscreen with little motion blur.
Positional updates on objects like the moon running at several Hertz.
glmark2 score 20174, little different from the new kernel value.
validating based on successful 64bit tests on both mga5 and mga6 Whiteboard:
MGA5TOO =>
MGA5TOO, MGA6-64-OK, MGA5-64-OK An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2018-0080.html Status:
NEW =>
RESOLVED |