Bug 22338 - Update request: nvidia-current 384.111
Summary: Update request: nvidia-current 384.111
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA5TOO, MGA6-64-OK, MGA5-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2018-01-06 23:42 CET by Thomas Backlund
Modified: 2018-01-13 15:29 CET (History)
3 users (show)

See Also:
Source RPM: nvidia-current
CVE:
Status comment:


Attachments

Description Thomas Backlund 2018-01-06 23:42:45 CET
This is the Meltdown/Spectre related fixes for nvidia-current driver

Advisory will follow...

Mga5:
SRPMS:
ldetect-lst-0.1.346.10-1.mga5.src.rpm

nvidia-current-384.111-1.mga5.nonfree.src.rpm


i586:
ldetect-lst-0.1.346.10-1.mga5.i586.rpm
ldetect-lst-devel-0.1.346.10-1.mga5.i586.rpm

dkms-nvidia-current-384.111-1.mga5.nonfree.i586.rpm
nvidia-current-cuda-opencl-384.111-1.mga5.nonfree.i586.rpm
nvidia-current-devel-384.111-1.mga5.nonfree.i586.rpm
nvidia-current-doc-html-384.111-1.mga5.nonfree.i586.rpm
x11-driver-video-nvidia-current-384.111-1.mga5.nonfree.i586.rpm


x86_64:
ldetect-lst-0.1.346.10-1.mga5.x86_64.rpm
ldetect-lst-devel-0.1.346.10-1.mga5.x86_64.rpm

dkms-nvidia-current-384.111-1.mga5.nonfree.x86_64.rpm
nvidia-current-cuda-opencl-384.111-1.mga5.nonfree.x86_64.rpm
nvidia-current-devel-384.111-1.mga5.nonfree.x86_64.rpm
nvidia-current-doc-html-384.111-1.mga5.nonfree.x86_64.rpm
radeon-firmware-20160914-1.mga5.nonfree.noarch.rpm
x11-driver-video-nvidia-current-384.111-1.mga5.nonfree.x86_64.rpm



Mga6:
SRPMS:
ldetect-lst-0.3.7.5-1.mga6.src.rpm

nvidia-current-384.111-1.mga6.nonfree.src.rpm


i586:
ldetect-lst-0.3.7.5-1.mga6.i586.rpm
ldetect-lst-devel-0.3.7.5-1.mga6.i586.rpm

dkms-nvidia-current-384.111-1.mga6.nonfree.i586.rpm
nvidia-current-cuda-opencl-384.111-1.mga6.nonfree.i586.rpm
nvidia-current-devel-384.111-1.mga6.nonfree.i586.rpm
nvidia-current-doc-html-384.111-1.mga6.nonfree.i586.rpm
x11-driver-video-nvidia-current-384.111-1.mga6.nonfree.i586.rpm


x86_64:
ldetect-lst-0.3.7.5-1.mga6.x86_64.rpm
ldetect-lst-devel-0.3.7.5-1.mga6.x86_64.rpm

dkms-nvidia-current-384.111-1.mga6.nonfree.x86_64.rpm
nvidia-current-cuda-opencl-384.111-1.mga6.nonfree.x86_64.rpm
nvidia-current-devel-384.111-1.mga6.nonfree.x86_64.rpm
nvidia-current-doc-html-384.111-1.mga6.nonfree.x86_64.rpm
x11-driver-video-nvidia-current-384.111-1.mga6.nonfree.x86_64.rpm
Thomas Backlund 2018-01-06 23:42:55 CET

Whiteboard: (none) => MGA5TOO

Thomas Backlund 2018-01-06 23:45:43 CET

Component: RPM Packages => Security
QA Contact: (none) => security

Comment 2 William Kenney 2018-01-09 19:26:23 CET
On real hardware, M6, Plasma, 64-bit

Package(s) under test:
dkms-nvidia-current ldetect-lst nvidia-current-devel nvidia-current-doc-html x11-driver-video-nvidia-current

default install of dkms-nvidia-current
dkms-nvidia-current ldetect-lst nvidia-current-devel nvidia-current-doc-html x11-driver-video-nvidia-current

[root@localhost wilcal]# uname -a
Linux localhost 4.14.10-desktop-1.mga6 #1 SMP Sat Dec 30 01:10:25 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.10-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi ldetect-lst
Package ldetect-lst-0.3.7.4-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-devel
Package nvidia-current-devel-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-doc-html
Package nvidia-current-doc-html-384.98-2.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-nvidia-current
Package x11-driver-video-nvidia-current-384.98-2.mga6.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current

Boots to a working desktop. Screen sizes are correct. General applications work.

install dkms-nvidia-current ldetect-lst nvidia-current-doc-html x11-driver-video-nvidia-current
from updates_testing

warm reboot system

[root@localhost wilcal]# uname -a
Linux localhost 4.14.10-desktop-1.mga6 #1 SMP Sat Dec 30 01:10:25 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.10-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi ldetect-lst
Package ldetect-lst-0.3.7.5-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-devel
Package nvidia-current-devel-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi nvidia-current-doc-html
Package nvidia-current-doc-html-384.111-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-nvidia-current
Package x11-driver-video-nvidia-current-384.111-1.mga6.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current

Boots to a working desktop. Screen sizes are correct. General applications work.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Samsung 250GB HD

CC: (none) => wilcal.int

Comment 3 Thomas Backlund 2018-01-10 20:01:29 CET
Tested with GTX1070 in Mga6 with 4.9 and 4.14 series kernels and in Caudldron with 4.14 series kernels.

Note that this driver has been in Cauldron since Jan 5th, 2018 so if there would be some bad issues with it we would aldready know.
Comment 4 Thomas Backlund 2018-01-12 22:38:16 CET
Advisory, added to svn:

type: security
subject: Updated nvidia-current packages mitigates security issues
CVE:
 - CVE-2017-5715
 - CVE-2017-5753
 - CVE-2017-5754
src:
  5:
   core:
     - ldetect-lst-0.1.346.10-1.mga5
   nonfree:
     - nvidia-current-384.111-1.mga5.nonfree
  6:
   core:
     - ldetect-lst-0.3.7.5-1.mga6
   nonfree:
     - nvidia-current-384.111-1.mga6.nonfree
description: |
  This update provides the version 384.111 from the R384 branch, in order
  to  help mitigating Spectre and Meltdown CPU security issues and keeps
  the driver working with security hardened kernels.

  Note that so far, nVidia does believe that their GPUs are immune
  to the referenced security issues.

  It also adds support for newer GPUs and  fixes some bugs.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=22338
 - http://nvidia.custhelp.com/app/answers/detail/a_id/4611
 - http://www.nvidia.com/Download/driverResults.aspx/128737/en-us

Keywords: (none) => advisory

Comment 5 Len Lawrence 2018-01-12 22:57:20 CET
This update has been running happily on this machine for a couple of days now.

System:    Host: vega Kernel: 4.14.13-desktop-1.mga6 x86_64
CPU:       Quad core Intel Core i7-4790K (-HT-MCP-) speed/max: 4395/4400 MHz
Graphics:  Card-1: Intel Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller
           Card-2: NVIDIA GK104 [GeForce GTX 770]
           GLX Version: 4.5.0 NVIDIA 384.111
RAM:       15.35 GB

CC: (none) => tarazed25

Comment 6 Len Lawrence 2018-01-13 11:33:57 CET
No problems updating the nvidia graphics driver.
System:    Host: difda Kernel: 4.4.111-desktop-1.mga5 x86_64
Graphics:  Card: NVIDIA GM204 [GeForce GTX 970]
           Resolution: 3840x2160@60.00hz
           GLX Version: 4.5.0 NVIDIA 384.111

Graphics working well.  Stellarium pans OK fullscreen with little motion blur.
Positional updates on objects like the moon running at several Hertz.
glmark2 score 20174, little different from the new kernel value.
Comment 7 Thomas Backlund 2018-01-13 14:59:05 CET
validating based on successful 64bit tests on both mga5 and mga6

Whiteboard: MGA5TOO => MGA5TOO, MGA6-64-OK, MGA5-64-OK
Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 8 Mageia Robot 2018-01-13 15:29:49 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0080.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.