Your message dated Mon, 30 Apr 2018 20:52:30 +0000 with message-id <e1fdfmg-000jb4...@fasolo.debian.org> and subject line Bug#886852: fixed in nvidia-graphics-drivers 340.106-1 has caused the Debian Bug report #886852, regarding nvidia-graphics-drivers: CVE-2017-5753/CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 886852: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886852 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: nvidia-driver Version: 375.82-1~deb9u1 Severity: critical Hi, NVidia upgraded their blob to version 384.111 in order to fix Spectre / Meltdown vulnerability. It turns out that the 375.xx branch is no longer supported, so we cannot expect getting driver patches for the current stretch drivers. More details on this bulletin : https://nvidia.custhelp.com/app/answers/detail/a_id/4611 What I suggest is first to put the 384.111 driver in BPO, and then once we've checked it is good enough put it in the next p-u so that users are no longer vulnerable. What do you think of it ? Rgds,
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers Source-Version: 340.106-1 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 886...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 17 Apr 2018 12:45:05 +0200 Source: nvidia-graphics-drivers Binary: nvidia-driver nvidia-driver-bin nvidia-glx xserver-xorg-video-nvidia libgl1-nvidia-glx libgl1-nvidia-glx-i386 libegl1-nvidia libgles1-nvidia libgles2-nvidia libnvidia-eglcore nvidia-alternative nvidia-kernel-dkms nvidia-kernel-source nvidia-vdpau-driver nvidia-smi nvidia-cuda-mps libcuda1 libcuda1-i386 libnvidia-compiler libnvcuvid1 libnvidia-encode1 libnvidia-ifr1 libnvidia-fbc1 libnvidia-ml1 nvidia-opencl-common nvidia-opencl-icd nvidia-libopencl1 nvidia-detect Architecture: source Version: 340.106-1 Distribution: jessie Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libcuda1 - NVIDIA CUDA Driver Library${nvidia:LegacyDesc} libcuda1-i386 - NVIDIA CUDA 32-bit runtime library${nvidia:LegacyDesc} libegl1-nvidia - NVIDIA binary EGL library${nvidia:LegacyDesc} libgl1-nvidia-glx - NVIDIA binary OpenGL/GLX libraries${nvidia:LegacyDesc} libgl1-nvidia-glx-i386 - NVIDIA binary OpenGL/GLX 32-bit libraries${nvidia:LegacyDesc} libgles1-nvidia - NVIDIA binary OpenGL|ES 1.x library${nvidia:LegacyDesc} libgles2-nvidia - NVIDIA binary OpenGL|ES 2.x library${nvidia:LegacyDesc} libnvcuvid1 - NVIDIA CUDA Video Decoder runtime library${nvidia:LegacyDesc} libnvidia-compiler - NVIDIA runtime compiler library${nvidia:LegacyDesc} libnvidia-eglcore - NVIDIA binary EGL core libraries${nvidia:LegacyDesc} libnvidia-encode1 - NVENC Video Encoding runtime library${nvidia:LegacyDesc} libnvidia-fbc1 - NVIDIA OpenGL-based Framebuffer Capture runtime library${nvidia:L libnvidia-ifr1 - NVIDIA OpenGL-based Inband Frame Readback runtime library${nvidia libnvidia-ml1 - NVIDIA Management Library (NVML) runtime library${nvidia:LegacyDe nvidia-alternative - allows the selection of NVIDIA as GLX provider${nvidia:LegacyDesc nvidia-cuda-mps - NVIDIA CUDA Multi Process Service (MPS) nvidia-detect - NVIDIA GPU detection utility nvidia-driver - NVIDIA metapackage${nvidia:LegacyDesc} nvidia-driver-bin - NVIDIA driver support binaries${nvidia:LegacyDesc} nvidia-glx - transition to ${nvidia}-driver nvidia-kernel-dkms - NVIDIA binary kernel module DKMS source${nvidia:LegacyDesc} nvidia-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc} nvidia-libopencl1 - NVIDIA OpenCL ICD Loader library nvidia-opencl-common - NVIDIA OpenCL driver - common files nvidia-opencl-icd - NVIDIA OpenCL installable client driver (ICD)${nvidia:LegacyDesc} nvidia-smi - NVIDIA System Management Interface${nvidia:LegacyDesc} nvidia-vdpau-driver - Video Decode and Presentation API for Unix - NVIDIA driver${nvidi xserver-xorg-video-nvidia - NVIDIA binary Xorg driver${nvidia:LegacyDesc} Closes: 883615 886852 Changes: nvidia-graphics-drivers (340.106-1) jessie; urgency=medium . * New upstream legacy 340xx branch release 340.106 (2018-01-16). * Fixed CVE-2017-5753, CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown). https://nvidia.custhelp.com/app/answers/detail/a_id/4611 (Closes: #886852) - Fixed a compatibility problem between the nvidia.ko's Page Attribute Table (PAT) support and the kernel Page Table Isolation (PTI) patches. To optimize stores to memory, nvidia.ko contains support for configuring the CPU's PAT registers, as a fallback for Linux kernels that predate kernel native PAT support. On any recent kernel with CONFIG_X86_PAT enabled, the driver will detect that setup has already been done and skip its PAT setup. However, a static inline function called by nvidia.ko's PAT fallback support was updated in the PTI patches to use the EXPORT_SYMBOL_GPL symbol 'cpu_tlbstate'. nvidia.ko was updated to only contain its PAT fallback support, at build time, on kernels without CONFIG_X86_PAT. * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Switch watch URL from ftp:// to https:// (375.82-1). * build-module-packages.sh: Order kernels by descending version (375.82-2). * bug-control: Add arch qualification to M-A:same packages in report-with list otherwise reportbug will ignore them if more than one is installed (375.82-5). * Use https:// URLs where possible (375.82-8). * Stop shipping the classic libnvidia-tls.so.* and ship the modern one (for Linux 2.6 onwards) in the regular libdir instead of the tls/ subdir (384.111-1). (Closes: #883615) * Add #tls# substitution for the tls/ source directory (384.111-1). * nvidia-kernel-{dkms,source}: Mention the supported architecture(s) in the long Description (384.111-4). * Update lintian overrides. * Upload to jessie. . [ Luca Boccassi ] * Switch to my debian.org email address in Uploaders. * Drop drm-driver-legacy.patch, deprecated-cpu-events.patch and vmf-address.patch, fixed upstream. * Add vm-fault.patch to fix kernel module build on Linux 4.11 and newer. . [ Russ Allbery ] * Remove myself from Uploaders. Checksums-Sha1: 99de05ce72ecb73648d92dec1c6346e8b6cf5227 5476 nvidia-graphics-drivers_340.106-1.dsc 1f9264417ad5e2fc854e06947befde857788ea0a 69956126 nvidia-graphics-drivers_340.106.orig-amd64.tar.gz f97bc3703efd71a00d5125bab709932cfabe2b67 23472630 nvidia-graphics-drivers_340.106.orig-armhf.tar.gz ceedb29bb1db356038bfa75816df1f2598f33510 38784831 nvidia-graphics-drivers_340.106.orig-i386.tar.gz 04023638fea62f390eaeec11a001d65697303a7e 138 nvidia-graphics-drivers_340.106.orig.tar.gz 02e0a22454e3aad9468f5fa8b50618b2bf0b2f42 125396 nvidia-graphics-drivers_340.106-1.debian.tar.xz Checksums-Sha256: bfb5ae906eaafba186c8360382f0af45a393e607c88a0ac898219eafd8c3b3c1 5476 nvidia-graphics-drivers_340.106-1.dsc 73e7d1da74f73c53d7976073010b732a0ae1eda9e267b566418caa6c3d75277b 69956126 nvidia-graphics-drivers_340.106.orig-amd64.tar.gz 5402c4b9364467c3f2b8a9ea5d2552bc69fa31cc411d4189b40cfd8333882147 23472630 nvidia-graphics-drivers_340.106.orig-armhf.tar.gz c5da50c6b81b2657671684fd59d9d8de1e3edf00d2bc4977cc4f1ea095addc80 38784831 nvidia-graphics-drivers_340.106.orig-i386.tar.gz 987c7768b176cff684a98c8da89ff3f3af9142caac675fd271bf1163ccf5871d 138 nvidia-graphics-drivers_340.106.orig.tar.gz df860890c5919edc3abe52ac5faec3a58ddd2bef30636755989e21a6b5791652 125396 nvidia-graphics-drivers_340.106-1.debian.tar.xz Files: b97b5951e45dfa955e5d53e46efb1842 5476 non-free/libs optional nvidia-graphics-drivers_340.106-1.dsc a123cc3953dc07225978180891dcfed7 69956126 non-free/libs optional nvidia-graphics-drivers_340.106.orig-amd64.tar.gz b6baec8ac6304d8da5caec15ebec3b34 23472630 non-free/libs optional nvidia-graphics-drivers_340.106.orig-armhf.tar.gz 33f93f3313570c3529f8d9e598ce8cb5 38784831 non-free/libs optional nvidia-graphics-drivers_340.106.orig-i386.tar.gz a87cd7669746ead3fcaf79052690c5b4 138 non-free/libs optional nvidia-graphics-drivers_340.106.orig.tar.gz 68f606dc83a3bd2db5f24dc14dd0ffa2 125396 non-free/libs optional nvidia-graphics-drivers_340.106-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAlrV0yEQHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCATVEACRpNlHpZmC4Ky0nHq28bGhJUlhcTjSb5wt o2vqc9YXdVVtPeAjXbSmA5eteZ+qq6Z3WyjOlRJqSgoyP+q5YiHaGYN5akXI6SC0 lDqXz0FagOcE9DoLKSn/3wJS77fkWRwyaDbFhiEXdVAchqN+hPX4DNoCRY2Hv/l8 vrAmSjQ8ogf7eN74OKOEoTjVXBW0pJIiqpCTlnHmsJWeDLn2MwCFSSM1CAbnPX2D cv+Oa8bpe0p47xTUD6Q0dEdAuHB4oQ5YfBt00iv9kpAQWQIhETXLyz9i7dzdvzg7 mYfQKjLXrSfAUlgbWm3VOdIIhDmc8J4yXPGga1OX5S+OFVmGZIev77jlvRU9rbNI G8rrb/jWa776sxUbXMrfTYHpCoShcsUDe10ZoWEM6dn6r1rmJ1NkVqTchOScdIec 8nxug9jZIb4L5g7rPx+THFRVHJa//XelMWf/qCaTIVSbwne63woSCW/OIFe8ltGo mopf7RytEJ5EtQabgBPSDQAG+MXrtEACoZ0QYYXGm5xXVJMMe3TJtuR4QmJpFbNA D10WTc8U00VgmkHNhQnIvsBCX09lpXbpHEdBgbOEBSGYf5mbfiTJ5NZnnzjsLdrR XQ7+PraAm5lBoD7FPmi/Wd/NLOSveO3IFC5g4Gj4U/4OoTMbppoYf8ZSfw6+QzTn UO4xd/6eGg== =GkbL -----END PGP SIGNATURE-----
--- End Message ---
