| 2019-12-14 21:19:00 |
Steve Langasek |
bug |
|
|
added bug |
| 2019-12-14 21:19:21 |
Steve Langasek |
linux-restricted-modules (Ubuntu): importance |
Undecided |
High |
|
| 2019-12-14 21:19:38 |
Steve Langasek |
bug task added |
|
ubuntu-drivers-common (Ubuntu) |
|
| 2019-12-14 21:19:58 |
Steve Langasek |
bug task added |
|
nvidia-graphics-drivers-435 (Ubuntu) |
|
| 2019-12-14 21:20:10 |
Steve Langasek |
nvidia-graphics-drivers-435 (Ubuntu): importance |
Undecided |
High |
|
| 2019-12-14 21:20:12 |
Steve Langasek |
ubuntu-drivers-common (Ubuntu): importance |
Undecided |
High |
|
| 2019-12-16 09:59:37 |
Alberto Milone |
bug |
|
|
added subscriber Seth Forshee |
| 2019-12-16 22:05:48 |
Seth Forshee |
bug task added |
|
linux (Ubuntu) |
|
| 2019-12-16 22:05:56 |
Seth Forshee |
nominated for series |
|
Ubuntu Eoan |
|
| 2019-12-16 22:05:56 |
Seth Forshee |
bug task added |
|
linux (Ubuntu Eoan) |
|
| 2019-12-16 22:05:56 |
Seth Forshee |
bug task added |
|
linux-restricted-modules (Ubuntu Eoan) |
|
| 2019-12-16 22:05:56 |
Seth Forshee |
bug task added |
|
ubuntu-drivers-common (Ubuntu Eoan) |
|
| 2019-12-16 22:05:56 |
Seth Forshee |
bug task added |
|
nvidia-graphics-drivers-435 (Ubuntu Eoan) |
|
| 2019-12-16 22:06:10 |
Seth Forshee |
linux (Ubuntu): status |
New |
Invalid |
|
| 2019-12-16 22:06:17 |
Seth Forshee |
linux-restricted-modules (Ubuntu): status |
New |
Invalid |
|
| 2019-12-16 22:06:27 |
Seth Forshee |
linux (Ubuntu Eoan): importance |
Undecided |
High |
|
| 2019-12-16 22:06:27 |
Seth Forshee |
linux (Ubuntu Eoan): status |
New |
In Progress |
|
| 2019-12-16 22:06:27 |
Seth Forshee |
linux (Ubuntu Eoan): assignee |
|
Seth Forshee (sforshee) |
|
| 2019-12-16 22:06:42 |
Seth Forshee |
linux-restricted-modules (Ubuntu Eoan): importance |
Undecided |
High |
|
| 2019-12-16 22:06:42 |
Seth Forshee |
linux-restricted-modules (Ubuntu Eoan): status |
New |
In Progress |
|
| 2019-12-16 22:06:42 |
Seth Forshee |
linux-restricted-modules (Ubuntu Eoan): assignee |
|
Seth Forshee (sforshee) |
|
| 2019-12-16 22:13:59 |
Bryan Quigley |
bug |
|
|
added subscriber Bryan Quigley |
| 2019-12-16 23:09:58 |
Launchpad Janitor |
nvidia-graphics-drivers-435 (Ubuntu): status |
New |
Confirmed |
|
| 2019-12-16 23:09:58 |
Launchpad Janitor |
ubuntu-drivers-common (Ubuntu): status |
New |
Confirmed |
|
| 2019-12-16 23:09:58 |
Launchpad Janitor |
nvidia-graphics-drivers-435 (Ubuntu Eoan): status |
New |
Confirmed |
|
| 2019-12-16 23:09:58 |
Launchpad Janitor |
ubuntu-drivers-common (Ubuntu Eoan): status |
New |
Confirmed |
|
| 2019-12-16 23:10:05 |
dann frazier |
bug |
|
|
added subscriber dann frazier |
| 2019-12-17 07:30:27 |
Andrew Cloke |
bug |
|
|
added subscriber Andrew Cloke |
| 2019-12-17 15:15:06 |
Martin Wimpress |
nvidia-graphics-drivers-435 (Ubuntu Eoan): assignee |
|
Seth Forshee (sforshee) |
|
| 2019-12-17 15:15:16 |
Martin Wimpress |
ubuntu-drivers-common (Ubuntu Eoan): assignee |
|
Seth Forshee (sforshee) |
|
| 2019-12-17 16:12:31 |
Seth Forshee |
description |
The linux-restricted-modules package exists so that users who install the nvidia drivers can get known-good, signed modules instead of having to locally self-sign and enroll a signing key through MOK. But lrm in eoan is only building driver packages for nvidia 390 and 430, and nvidia 435 is present in eoan.
So on a new Ubuntu 19.10 install, ubuntu-drivers is picking 435 as the newest driver instead of using the signed 430 driver.
We should never allow the archive to get into this situation. We should be enforcing that any version of the nvidia driver that we expect ubuntu-drivers to install by default on any hardware is integrated into linux-restricted-modules, and we should ensure that ubuntu-drivers always prefers the signed drivers over other options. |
SRU Justification
Impact: The nvidia-435 drivers are missing from linux-restricted-modules in eoan. On install ubuntu-drivers picks 435 as the newest version, and users must use self-signed dkms drivers and enroll a MOK.
Fix: Add nvidia-435 dkms builds to linux and l-r-m for eoan.
Test Case: A test build is available in ppa:sforshee/test-builds. Verify that signed drivers for nvidia-435 can be installed for eoan via the linux-modules-nvidia-435-{generic,lowlatency} packages.
Regression Potential: The nvidia-435 l-r-m drivers are new packages built from the same source as the nvidia-435 dkms driver, so regressions are unlikely.
---
The linux-restricted-modules package exists so that users who install the nvidia drivers can get known-good, signed modules instead of having to locally self-sign and enroll a signing key through MOK. But lrm in eoan is only building driver packages for nvidia 390 and 430, and nvidia 435 is present in eoan.
So on a new Ubuntu 19.10 install, ubuntu-drivers is picking 435 as the newest driver instead of using the signed 430 driver.
We should never allow the archive to get into this situation. We should be enforcing that any version of the nvidia driver that we expect ubuntu-drivers to install by default on any hardware is integrated into linux-restricted-modules, and we should ensure that ubuntu-drivers always prefers the signed drivers over other options. |
|
| 2019-12-18 05:10:25 |
Khaled El Mously |
linux-restricted-modules (Ubuntu Eoan): status |
In Progress |
Fix Committed |
|
| 2019-12-18 05:10:28 |
Khaled El Mously |
linux (Ubuntu Eoan): status |
In Progress |
Fix Committed |
|
| 2019-12-19 10:56:52 |
Ubuntu Kernel Bot |
tags |
|
verification-needed-eoan |
|
| 2020-01-06 12:54:23 |
Launchpad Janitor |
linux-restricted-modules (Ubuntu Eoan): status |
Fix Committed |
Fix Released |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
linux (Ubuntu Eoan): status |
Fix Committed |
Fix Released |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
cve linked |
|
2019-14895 |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
cve linked |
|
2019-14896 |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
cve linked |
|
2019-14897 |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
cve linked |
|
2019-14901 |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
cve linked |
|
2019-18660 |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
cve linked |
|
2019-19055 |
|
| 2020-01-06 12:53:38 |
Launchpad Janitor |
cve linked |
|
2019-19072 |
|
| 2020-04-15 22:22:34 |
dann frazier |
bug task added |
|
ubuntu-meta (Ubuntu) |
|
| 2020-08-18 17:03:16 |
Brian Murray |
ubuntu-meta (Ubuntu Eoan): status |
New |
Won't Fix |
|
| 2023-05-12 15:38:33 |
Bryan Quigley |
removed subscriber Bryan Quigley |
|
|
|
