Bug 28853 - Update request: nvidia390-390.143-1.mga8.nonfree
Summary: Update request: nvidia390-390.143-1.mga8.nonfree
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7TOO, MGA8-64-OK, MGA7-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2021-04-29 15:48 CEST by Thomas Backlund
Modified: 2021-05-02 18:30 CEST (History)
4 users (show)

See Also:
Source RPM: nvidia390
CVE: CVE‑2021‑1076
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Thomas Backlund 2021-04-29 15:48:28 CEST 
Bugfix and support for newer kernels:


SRPMS:
nvidia390-390.143-1.mga8.nonfree.src.rpm


i586:
dkms-nvidia390-390.143-1.mga8.nonfree.i586.rpm
nvidia390-cuda-opencl-390.143-1.mga8.nonfree.i586.rpm
nvidia390-devel-390.143-1.mga8.nonfree.i586.rpm
nvidia390-doc-html-390.143-1.mga8.nonfree.i586.rpm
nvidia390-utils-390.143-1.mga8.nonfree.i586.rpm
x11-driver-video-nvidia390-390.143-1.mga8.nonfree.i586.rpm


x86_64:
dkms-nvidia390-390.143-1.mga8.nonfree.x86_64.rpm
nvidia390-cuda-opencl-390.143-1.mga8.nonfree.x86_64.rpm
nvidia390-devel-390.143-1.mga8.nonfree.x86_64.rpm
nvidia390-doc-html-390.143-1.mga8.nonfree.x86_64.rpm
nvidia390-lib32-390.143-1.mga8.nonfree.x86_64.rpm
nvidia390-utils-390.143-1.mga8.nonfree.x86_64.rpm
x11-driver-video-nvidia390-390.143-1.mga8.nonfree.x86_64.rpm
Comment 1 Brian Rockwell 2021-04-29 20:03:24 CEST 
I put this together with new kernel.

AMD x3, nvidia 390, desktop (Xfce)


The following 10 packages are going to be installed:

- cpupower-5.10.33-1.mga8.x86_64
- dkms-nvidia390-390.143-1.mga8.nonfree.x86_64
- kernel-desktop-5.10.33-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-5.10.33-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-latest-5.10.33-1.mga8.x86_64
- kernel-desktop-latest-5.10.33-1.mga8.x86_64
- nvidia390-cuda-opencl-390.143-1.mga8.nonfree.x86_64
- nvidia390-doc-html-390.143-1.mga8.nonfree.x86_64
- nvidia390-utils-390.143-1.mga8.nonfree.x86_64
- x11-driver-video-nvidia390-390.143-1.mga8.nonfree.x86_64

-- rebooted

$ uname -a
Linux localhost.localdomain 5.10.33-desktop-1.mga8 #1 SMP Wed Apr 28 15:59:24 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

# lsmod | grep nvidia
nvidia_uvm            925696  0
nvidia_drm             53248  1
drm_kms_helper        270336  1 nvidia_drm
nvidia_modeset       1056768  3 nvidia_drm
nvidia              15831040  84 nvidia_uvm,nvidia_modeset
ipmi_msghandler        69632  2 ipmi_devintf,nvidia
drm                   606208  4 drm_kms_helper,nvidia_drm

systems seems responsive and video is functioning as expected

CC: (none) => brtians1

Comment 2 Aurelien Oudelet 2021-04-30 09:36:19 CEST 
Adding upstream security advisory.
This 390.143 update fixes CVE‑2021‑1076 

Reference: https://nvidia.custhelp.com/app/answers/detail/a_id/5172

Component: RPM Packages => Security
CVE: (none) => CVE‑2021‑1076
CC: (none) => ouaurelien
QA Contact: (none) => security

Comment 3 Aurelien Oudelet 2021-04-30 10:10:04 CEST 
Advisory:
========================

Updated nvidia390 packages fix security vulnerability:

The updated nvidia390 packages fix:

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption (CVE-2021-1076).

references:
 - https://bugs.mageia.org/show_bug.cgi?id=28853
 - https://nvidia.custhelp.com/app/answers/detail/a_id/5172
========================

Updated packages in core/updates_testing:
========================
ldetect-lst-0.6.26.3-1.mga8

from SRPM:
ldetect-lst-0.6.26.3-1.mga8.src.rpm

========================

Updated packages in nonfree/updates_testing:
========================
dkms-nvidia390-390.143-1.mga8.nonfree
nvidia390-cuda-opencl-390.143-1.mga8.nonfree
nvidia390-devel-390.143-1.mga8.nonfree
nvidia390-doc-html-390.143-1.mga8.nonfree
nvidia390-lib32-390.143-1.mga8.nonfree
nvidia390-utils-390.143-1.mga8.nonfree
x11-driver-video-nvidia390-390.143-1.mga8.nonfree

from SRPM:
nvidia390-390.143-1.mga8.nonfree.src.rpm
Comment 4 Thomas Backlund 2021-04-30 10:14:31 CEST 
ldetect-lst is for nvidia-current update, not nvidia390
Comment 5 Thomas Backlund 2021-04-30 11:47:54 CEST 
Mga7 rpms:

SRPMS:
nvidia390-390.143-1.mga7.nonfree.src.rpm

i586:
dkms-nvidia390-390.143-1.mga7.nonfree.i586.rpm
nvidia390-cuda-opencl-390.143-1.mga7.nonfree.i586.rpm
nvidia390-devel-390.143-1.mga7.nonfree.i586.rpm
nvidia390-doc-html-390.143-1.mga7.nonfree.i586.rpm
x11-driver-video-nvidia390-390.143-1.mga7.nonfree.i586.rpm

x86_64:
dkms-nvidia390-390.143-1.mga7.nonfree.x86_64.rpm
nvidia390-cuda-opencl-390.143-1.mga7.nonfree.x86_64.rpm
nvidia390-devel-390.143-1.mga7.nonfree.x86_64.rpm
nvidia390-doc-html-390.143-1.mga7.nonfree.x86_64.rpm
x11-driver-video-nvidia390-390.143-1.mga7.nonfree.x86_64.rpm

Whiteboard: (none) => MGA7TOO

Comment 6 Guillaume Royer 2021-04-30 14:17:59 CEST 
MGA8 XFCE with GeForce 520M and Optimus technology.

Updated with QA repo and:

dkms-nvidia390                 390.143      1.mga8.nonfr> x86_64  
nvidia390-cuda-opencl          390.143      1.mga8.nonfr> x86_64  
nvidia390-utils                390.143      1.mga8.nonfr> x86_64  
x11-driver-video-nvidia390     390.143      1.mga8.nonfr> x86_64

After reboot all is ok. Load test OK.

CC: (none) => guillaume.royer

Thomas Backlund 2021-04-30 20:33:42 CEST

Keywords: (none) => advisory

Comment 7 Brian Rockwell 2021-04-30 22:37:12 CEST 
MGA7 - AMD x3-450, nvidia 730gt (390), Plasma (physical hardware)

The following 4 packages are going to be installed:

- dkms-nvidia390-390.143-1.mga7.nonfree.x86_64
- nvidia390-cuda-opencl-390.143-1.mga7.nonfree.x86_64
- nvidia390-doc-html-390.143-1.mga7.nonfree.x86_64
- x11-driver-video-nvidia390-390.143-1.mga7.nonfree.x86_64

--- rebooted

# lsmod | grep nvidia
nvidia_drm             53248  1
nvidia_modeset       1056768  23 nvidia_drm
nvidia              15831040  819 nvidia_modeset
ipmi_msghandler        69632  2 ipmi_devintf,nvidia
drm_kms_helper        262144  1 nvidia_drm
drm                   593920  5 drm_kms_helper,nvidia_drm,ttm

testing for awhile - working as designed
Thomas Backlund 2021-05-02 17:17:50 CEST

Whiteboard: MGA7TOO => MGA7TOO, MGA8-64-OK, MGA7-64-OK

Thomas Backlund 2021-05-02 17:20:49 CEST

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 8 Mageia Robot 2021-05-02 18:30:59 CEST 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0202.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.