Your message dated Sat, 03 Mar 2018 11:02:13 +0000
with message-id <e1es4vd-0001li...@fasolo.debian.org>
and subject line Bug#886852: fixed in nvidia-graphics-drivers-legacy-340xx 
340.106-2~deb9u1
has caused the Debian Bug report #886852,
regarding nvidia-graphics-drivers: CVE-2017-5753/CVE-2017-5715 (spectre), 
CVE-2017-5754 (meltdown)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
886852: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886852
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: nvidia-driver
Version: 375.82-1~deb9u1
Severity: critical

Hi,

NVidia upgraded their blob to version 384.111 in order to fix Spectre /
Meltdown vulnerability. It turns out that the 375.xx branch is no longer
supported, so we cannot expect getting driver patches for the current
stretch drivers.

More details on this bulletin :
https://nvidia.custhelp.com/app/answers/detail/a_id/4611

What I suggest is first to put the 384.111 driver in BPO, and then once
we've checked it is good enough put it in the next p-u so that users are no
longer vulnerable.

What do you think of it ?

Rgds,

--- End Message ---
--- Begin Message ---
Source: nvidia-graphics-drivers-legacy-340xx
Source-Version: 340.106-2~deb9u1

We believe that the bug you reported is fixed in the latest version of
nvidia-graphics-drivers-legacy-340xx, which is due to be installed in the 
Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 886...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Beckmann <a...@debian.org> (supplier of updated 
nvidia-graphics-drivers-legacy-340xx package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 26 Feb 2018 01:10:49 +0100
Source: nvidia-graphics-drivers-legacy-340xx
Binary: nvidia-legacy-340xx-driver nvidia-legacy-340xx-driver-bin 
nvidia-legacy-340xx-driver-libs nvidia-legacy-340xx-driver-libs-i386 
xserver-xorg-video-nvidia-legacy-340xx libgl1-nvidia-legacy-340xx-glx 
libnvidia-legacy-340xx-glcore libegl1-nvidia-legacy-340xx 
libgles1-nvidia-legacy-340xx libgles2-nvidia-legacy-340xx 
libnvidia-legacy-340xx-eglcore libnvidia-legacy-340xx-cfg1 
nvidia-legacy-340xx-alternative nvidia-legacy-340xx-kernel-support 
nvidia-legacy-340xx-kernel-dkms nvidia-legacy-340xx-kernel-source 
nvidia-legacy-340xx-vdpau-driver nvidia-legacy-340xx-smi 
libnvidia-legacy-340xx-cuda1 libnvidia-legacy-340xx-cuda1-i386 
libnvidia-legacy-340xx-compiler libnvidia-legacy-340xx-nvcuvid1 
libnvidia-legacy-340xx-encode1 libnvidia-legacy-340xx-ifr1 
libnvidia-legacy-340xx-fbc1 libnvidia-legacy-340xx-ml1 
nvidia-legacy-340xx-opencl-icd
Architecture: source
Version: 340.106-2~deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org>
Changed-By: Andreas Beckmann <a...@debian.org>
Description:
 libegl1-nvidia-legacy-340xx - NVIDIA binary EGL library${nvidia:LegacyDesc}
 libgl1-nvidia-legacy-340xx-glx - NVIDIA binary OpenGL/GLX 
library${nvidia:LegacyDesc}
 libgles1-nvidia-legacy-340xx - NVIDIA binary OpenGL|ES 1.x 
library${nvidia:LegacyDesc}
 libgles2-nvidia-legacy-340xx - NVIDIA binary OpenGL|ES 2.x 
library${nvidia:LegacyDesc}
 libnvidia-legacy-340xx-cfg1 - NVIDIA binary OpenGL/GLX configuration 
library${nvidia:LegacyDesc
 libnvidia-legacy-340xx-compiler - NVIDIA runtime compiler 
library${nvidia:LegacyDesc}
 libnvidia-legacy-340xx-cuda1 - NVIDIA CUDA Driver Library${nvidia:LegacyDesc}
 libnvidia-legacy-340xx-cuda1-i386 - NVIDIA CUDA 32-bit runtime 
library${nvidia:LegacyDesc}
 libnvidia-legacy-340xx-eglcore - NVIDIA binary EGL core 
libraries${nvidia:LegacyDesc}
 libnvidia-legacy-340xx-encode1 - NVENC Video Encoding runtime 
library${nvidia:LegacyDesc}
 libnvidia-legacy-340xx-fbc1 - NVIDIA OpenGL-based Framebuffer Capture runtime 
library${nvidia:L
 libnvidia-legacy-340xx-glcore - NVIDIA binary OpenGL/GLX core 
libraries${nvidia:LegacyDesc}
 libnvidia-legacy-340xx-ifr1 - NVIDIA OpenGL-based Inband Frame Readback 
runtime library${nvidia
 libnvidia-legacy-340xx-ml1 - NVIDIA Management Library (NVML) runtime 
library${nvidia:LegacyDe
 libnvidia-legacy-340xx-nvcuvid1 - NVIDIA CUDA Video Decoder runtime 
library${nvidia:LegacyDesc}
 nvidia-legacy-340xx-alternative - allows the selection of NVIDIA as GLX 
provider${nvidia:LegacyDesc
 nvidia-legacy-340xx-driver - NVIDIA metapackage${nvidia:LegacyDesc}
 nvidia-legacy-340xx-driver-bin - NVIDIA driver support 
binaries${nvidia:LegacyDesc}
 nvidia-legacy-340xx-driver-libs - NVIDIA metapackage (OpenGL/GLX/EGL/GLES 
libraries)${nvidia:Legacy
 nvidia-legacy-340xx-driver-libs-i386 - NVIDIA metapackage (OpenGL/GLX/EGL/GLES 
32-bit libraries)${nvidia
 nvidia-legacy-340xx-kernel-dkms - NVIDIA binary kernel module DKMS 
source${nvidia:LegacyDesc}
 nvidia-legacy-340xx-kernel-source - NVIDIA binary kernel module 
source${nvidia:LegacyDesc}
 nvidia-legacy-340xx-kernel-support - NVIDIA binary kernel module support 
files${nvidia:LegacyDesc}
 nvidia-legacy-340xx-opencl-icd - NVIDIA OpenCL installable client driver 
(ICD)${nvidia:LegacyDesc}
 nvidia-legacy-340xx-smi - NVIDIA System Management 
Interface${nvidia:LegacyDesc}
 nvidia-legacy-340xx-vdpau-driver - Video Decode and Presentation API for Unix 
- NVIDIA driver${nvidi
 xserver-xorg-video-nvidia-legacy-340xx - NVIDIA binary Xorg 
driver${nvidia:LegacyDesc}
Closes: 865964 872330 883615 883637 886852
Changes:
 nvidia-graphics-drivers-legacy-340xx (340.106-2~deb9u1) stretch; urgency=medium
 .
   * Rebuild for stretch.
 .
 nvidia-graphics-drivers-legacy-340xx (340.106-2) unstable; urgency=medium
 .
   * nvidia-kernel-{dkms,source}: Mention the supported architecture(s) in the
     long Description (384.111-4).
   * Use dh_missing --fail-missing (384.111-4).
   * Update lintian overrides.
 .
 nvidia-graphics-drivers-legacy-340xx (340.106-1) unstable; urgency=medium
 .
   * New upstream legacy 340xx branch release 340.106 (2018-01-16).
     * Fixed CVE-2017-5753, CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown).
       https://nvidia.custhelp.com/app/answers/detail/a_id/4611
       (Closes: #886852)
     - Fixed a compatibility problem between the nvidia.ko's Page Attribute
       Table (PAT) support and the kernel Page Table Isolation (PTI) patches.
       To optimize stores to memory, nvidia.ko contains support for
       configuring the CPU's PAT registers, as a fallback for Linux kernels
       that predate kernel native PAT support.  On any recent kernel
       with CONFIG_X86_PAT enabled, the driver will detect that setup has
       already been done and skip its PAT setup.  However, a static inline
       function called by nvidia.ko's PAT fallback support was updated in
       the PTI patches to use the EXPORT_SYMBOL_GPL symbol 'cpu_tlbstate'.
       nvidia.ko was updated to only contain its PAT fallback support,
       at build time, on kernels without CONFIG_X86_PAT.
     * Improved compatibility with recent Linux kernels.
 .
   [ Luca Boccassi ]
   * Drop nvidia-drm-pci-init.patch and timer.patch, fixed upstream.
 .
 nvidia-graphics-drivers-legacy-340xx (340.104-4) unstable; urgency=medium
 .
   [ Andreas Beckmann ]
   * Bump Standards-Version to 4.1.3. No changes needed.
   * Stop shipping the classic libnvidia-tls.so.* and ship the modern one (for
     Linux 2.6 onwards) in the regular libdir instead of the tls/ subdir
     (384.111-1).  (Closes: #883615)
   * Add #tls# substitution for the tls/ source directory (384.111-1).
   * nvidia-legacy-340xx-alternative.prerm: Trigger register-glx-alternative-
     nvidia upon removal (384.111-3).  (Closes: #883637)
   * libgl1-nvidia-legacy-340xx-glx.prerm: Do not forcibly remove the nvidia
     alternative, this would reset it from manual mode to auto mode while it
     could still be needed by other packages, e.g. libcuda1. Let the
     nvidia-legacy-340xx-alternative triggers handle it instead (384.111-3).
 .
   [ Luca Boccassi ]
   * Add timer.patch to fix kernel module build on Linux 4.15 and newer.
 .
 nvidia-graphics-drivers-legacy-340xx (340.104-3) unstable; urgency=medium
 .
   * B-D: dpkg-dev (>= 1.18.8) for SOURCE_DATE_EPOCH in pkg-info.mk (375.82-9).
   * Set Rules-Requires-Root: no (375.82-9).
 .
 nvidia-graphics-drivers-legacy-340xx (340.104-2) unstable; urgency=medium
 .
   * Use debian/substvars for substitutions by dpkg-genchanges (dpkg 1.19)
     (375.82-7).
   * nvidia-detect: Detect devices in PCI classes 0301 (XGA compatible
     controller) and 0302 (3D controller), too (375.82-7).
   * bug-script: List these devices, too (375.82-7).
   * Use https:// URLs where possible (375.82-8).
 .
 nvidia-graphics-drivers-legacy-340xx (340.104-1) unstable; urgency=medium
 .
   * New upstream legacy 340xx branch release 340.104 (2017-09-19).
     * Improved compatibility with recent Linux kernels.
 .
   [ Andreas Beckmann ]
   * Add GRID K1/K2/K340 to EoL models, no longer supported from 375.xx on.
   * Bump Standards-Version to 4.1.1. No changes needed.
   * bug-control: Add arch qualification to M-A:same packages in report-with
     list otherwise reportbug will ignore them if more than one is installed
     (375.82-5).
   * Simplify upstream changelog handling (375.82-5).
 .
   [ Luca Boccassi ]
   * Switch to my debian.org email address in Uploaders.
   * Drop drm-driver-legacy.patch, deprecated-cpu-events.patch,
     vmf-address.patch, drm-unload.patch, fatal-signal.patch and
     set-memory.patch, fixed upstream.
   * Refresh vm-fault.patch to remove fuzz from upstream changes.
   * Add nvidia-drm-pci-init.patch to fix kernel module build on Linux 4.14
     and newer.
 .
   [ Russ Allbery ]
   * Remove myself from Uploaders.
 .
 nvidia-graphics-drivers-legacy-340xx (340.102-3) unstable; urgency=medium
 .
   [ Andreas Beckmann ]
   * disable-preempt_rt_sanity_check.patch: Remove, unsupported upstream.
   * Bump Standards-Version to 4.0.1. No changes needed.
   * nvidia-alternative: Explicitly use interest-await triggers (375.82-2).
   * Switch from dh_install --list-missing to dh_missing (375.82-2).
   * Use dpkg makefile snippets instead of manual changelog parsing (375.82-2).
   * build-module-packages.sh: Order kernels by descending version.
     Skip PREEMPT_RT (*-rt-*) kernels, unsupported upstream (375.82-2).
   * Switch watch URL from ftp:// to https:// (375.82-1).
   * Update lintian overrides.
 .
   [ Luca Boccassi ]
   * Add set-memory.patch to fix kernel module build on Linux 4.12 and newer.
     (Closes: #872330)
 .
 nvidia-graphics-drivers-legacy-340xx (340.102-2) unstable; urgency=medium
 .
   [ Andreas Beckmann ]
   * nvidia-kernel-dkms: Honor parallel setting from dkms (375.82-1).
   * Do not prevent ccache usage. The bug was fixed in ccache 3.0 (in squeeze)
     (375.82-1).
 .
   [ Luca Boccassi ]
   * Add drm-unload.patch, fatal-signal.patch, and vm-fault.patch to fix kernel
     module build on Linux 4.11 and newer.  (Closes: #865964)
Checksums-Sha1:
 11588ada289a1293266ef615f8e84b9f0166db04 6439 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1.dsc
 af6bcf527be08f3cf73945cc1a3788e8f4b89988 67068 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1.debian.tar.xz
 72f39167ac9c4f22399c8b85e155b0ff77f41551 6740 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1_source.buildinfo
Checksums-Sha256:
 3c72ca111ab644ad0a6ce8188967458556676545206510c7e6fbecb7ce162b7e 6439 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1.dsc
 2b85bbd81eedcc8b8b8b14e5a0ea355d3416ebae97f390beed2f5493cd827ddf 67068 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1.debian.tar.xz
 1dc960a4495be835ae2b1dfdfe94d6dac77724b9186bc4f1a08fd3d1d722e5c1 6740 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1_source.buildinfo
Files:
 283a70ee01dcc64f94579f1d760cb8db 6439 non-free/libs optional 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1.dsc
 49ba6979bed92c0d0060aaa8128dd021 67068 non-free/libs optional 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1.debian.tar.xz
 563018d140f70676d199cf3c579e2567 6740 non-free/libs optional 
nvidia-graphics-drivers-legacy-340xx_340.106-2~deb9u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAlqTV64QHGFuYmVAZGVi
aWFuLm9yZwAKCRBfsz+TWentCI1LD/92FFtQLVYl48Nk4SfBQIqRnp43GjHIWt+7
KeD0ajtosOK1sLpcdl0rxk7rz7jwtrXvY0yTe86U7aorZbZgHetFKsYfuWoxzEDf
Uc0X6wL82T/MMbBRWCx3cJ6tz+ulfZ867DyKp29rSskIKYpfeiNJjmpfikckmSbF
rrPKlTrDCJTpYb3V4FCym0AMM4HHqOl55DlC75Z5KQrgSEytSqYJ5fkPXVA2jFqS
gtTZDI2V+xWJqpjCXfZgGbD7KNE052iwK4kvR7asQnaZ6zCRetexsGSaWjLSbWyY
N5l89r0MbzPkKsSmQ8QMzUMg0kcN+n5IhH0ZbdGA8FY0BR6+4VJaEMuut0aK495b
Xhsab3v865x9Yus/lXhi2FUYfQZxuSKLNerKv8oReGVxz34iFy6FIM6e5VexlWD9
wm1ZylfD46NUclF6ZNlpzB21Rkb/nmj/dT6S5yNewbkIo3DXPynLnSBLtGqt8f7n
PrODpZn9z5Ybn6WxT1PqyhYGVzovFaztXweT5mExXmWG5FnpQ96tIALW0ZIpveC9
+AiC2KKuJHYSDl0RlbgOYtigMsuUZTxt01ra4O5b0fCuaAsDmQmCehFCz9xOhlI5
f2Jn7MA3uXKUPLBa9Zfozy83cvvbdSIHD+dxCbIWlznAdvF3u7sidlDzNhXY9lN5
DBE8a5SrEA==
=9fAa
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to