CVE-2020-5991 (https://nvidia.custhelp.com/app/answers/detail/a_id/5094): NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or information disclosure. Maintainers, please cleanup.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ca72dce41454b63e96cec1fc1e4e34ea0b48a315 commit ca72dce41454b63e96cec1fc1e4e34ea0b48a315 Author: David Seifert <soap@gentoo.org> AuthorDate: 2020-12-27 20:08:56 +0000 Commit: David Seifert <soap@gentoo.org> CommitDate: 2020-12-27 20:08:56 +0000 dev-util/nvidia-cuda-toolkit: Version bump to 11.2.0 Bug: https://bugs.gentoo.org/691284 Bug: https://bugs.gentoo.org/749903 Bug: https://bugs.gentoo.org/760708 Package-Manager: Portage-3.0.12, Repoman-3.0.2 Signed-off-by: David Seifert <soap@gentoo.org> dev-util/nvidia-cuda-toolkit/Manifest | 1 + ...da-toolkit-11.2.0-nsight-systems-launcher.patch | 12 + .../nvidia-cuda-toolkit-11.2.0.ebuild | 258 +++++++++++++++++++++ 3 files changed, 271 insertions(+)
Package list is empty or all packages have requested keywords.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0bf1115193ab82db31e31e684938d9c2b1749308 commit 0bf1115193ab82db31e31e684938d9c2b1749308 Author: David Seifert <soap@gentoo.org> AuthorDate: 2021-12-20 10:57:39 +0000 Commit: David Seifert <soap@gentoo.org> CommitDate: 2021-12-20 10:57:39 +0000 profiles: last-rite CUDA 10 Closes: https://github.com/gentoo/gentoo/pull/23425 Bug: https://bugs.gentoo.org/721808 Bug: https://bugs.gentoo.org/760708 Signed-off-by: David Seifert <soap@gentoo.org> profiles/base/package.use.mask | 6 ++++++ profiles/package.mask | 7 +++++++ 2 files changed, 13 insertions(+)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4fb1bccf8f7d49a5ce14afa2a1b6ff2c7a5da117 commit 4fb1bccf8f7d49a5ce14afa2a1b6ff2c7a5da117 Author: David Seifert <soap@gentoo.org> AuthorDate: 2022-03-20 17:32:08 +0000 Commit: David Seifert <soap@gentoo.org> CommitDate: 2022-03-20 17:32:08 +0000 dev-util/nvidia-cuda-toolkit: drop 10.2.89-r4 Closes: https://bugs.gentoo.org/749903 Bug: https://bugs.gentoo.org/760708 Signed-off-by: David Seifert <soap@gentoo.org> dev-util/nvidia-cuda-toolkit/Manifest | 1 - dev-util/nvidia-cuda-toolkit/metadata.xml | 1 - .../nvidia-cuda-toolkit-10.2.89-r4.ebuild | 158 --------------------- profiles/package.mask | 6 - 4 files changed, 166 deletions(-)
All done, thanks!