Bug 1223356 (CVE-2024-0090, CVE-2024-0091, CVE-2024-0092) - VUL-0: CVE-2024-0090,CVE-2024-0091,CVE-2024-0092: nvidia-open-driver-G06-signed: May 28 release
Summary: VUL-0: CVE-2024-0090,CVE-2024-0091,CVE-2024-0092: nvidia-open-driver-G06-sign...
Status: CONFIRMED
Alias: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P2 - High : Major
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/403047/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-0090:6.1:(AV:L...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-24 13:00 UTC by Marcus Meissner
Modified: 2024-07-12 12:50 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Marcus Meissner 2024-04-24 13:05:16 UTC
CRD: 2024-05-28 9:00 PDT
Comment 7 Stefan Dirsch 2024-06-05 01:29:11 UTC
All packages submitted. Reassigning.
Comment 8 OBSbugzilla Bot 2024-06-05 01:45:04 UTC
This is an autogenerated message for OBS integration:
This bug (1223356) was mentioned in
https://build.opensuse.org/request/show/1178631 Factory / kernel-firmware-nvidia-gspx-G06
https://build.opensuse.org/request/show/1178632 Factory / nvidia-open-driver-G06-signed
Comment 10 Alexander Bergmann 2024-06-05 06:07:04 UTC
The NVIDIA driver version 550.90.07 was released, but without any CVE references.

Lifting embargo.

https://www.nvidia.com/download/driverResults.aspx/226768/en-us/
Comment 12 OBSbugzilla Bot 2024-06-05 09:55:02 UTC
This is an autogenerated message for OBS integration:
This bug (1223356) was mentioned in
https://build.opensuse.org/request/show/1178692 Factory / kernel-firmware-nvidia-gspx-G06
https://build.opensuse.org/request/show/1178694 Factory / nvidia-open-driver-G06-signed
Comment 14 Maintenance Automation 2024-06-11 12:30:04 UTC
SUSE-SU-2024:1990-1: An update that solves three vulnerabilities can now be installed.

Category: security (important)
Bug References: 1223356
CVE References: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
Maintenance Incident: [SUSE:Maintenance:34154](https://smelt.suse.de/incident/34154/)
Sources used:
openSUSE Leap 15.5 (src):
 nvidia-open-driver-G06-signed-550.90.07-150500.3.47.1
SUSE Linux Enterprise Micro 5.5 (src):
 nvidia-open-driver-G06-signed-550.90.07-150500.3.47.1
Basesystem Module 15-SP5 (src):
 nvidia-open-driver-G06-signed-550.90.07-150500.3.47.1
Public Cloud Module 15-SP5 (src):
 nvidia-open-driver-G06-signed-550.90.07-150500.3.47.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 15 Maintenance Automation 2024-06-12 12:32:20 UTC
SUSE-SU-2024:2005-1: An update that solves three vulnerabilities can now be installed.

Category: security (important)
Bug References: 1223356
CVE References: CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
Maintenance Incident: [SUSE:Maintenance:34153](https://smelt.suse.de/incident/34153/)
Sources used:
openSUSE Leap 15.4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise Micro 5.3 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise Micro 5.4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Manager Proxy 4.3 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Manager Retail Branch Server 4.3 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1
SUSE Manager Server 4.3 (src):
 nvidia-open-driver-G06-signed-550.90.07-150400.9.62.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 16 Stefan Dirsch 2024-07-08 14:12:26 UTC
I'm wondering when this will be available also for sle15-sp6?