Bug#1004849: nvidia-graphics-drivers: CVE-2022-21813, CVE-2022-21814

[Andreas Beckmann]

On 23/02/2022 13.10, Vincent Lefevre wrote:
> Bug 1004847 against src:nvidia-graphics-drivers was cloned as 1004849,
> which got reassigned to src:nvidia-graphics-drivers-legacy-390xx, but
> is 390xx affected? It is not listed on
> 
>    https://nvidia.custhelp.com/app/answers/detail/a_id/5312
> 
> Only driver branches R470 and R510 are listed.

I'd expect that they mention if some release branch (that is still 
supported) is not affected, so I always assume the worst case - a CVE 
affects all past releases.

R450 had a corresponding update ...

And while R418 is not mentioned directly, there is a fixed version 
bundled with updated vgpu software ...

Andreas