Your message dated Wed, 17 Jan 2018 21:11:15 +0000 with message-id <e1ebuzl-000j9l...@fasolo.debian.org> and subject line Bug#886852: fixed in nvidia-graphics-drivers-legacy-340xx 340.106-1 has caused the Debian Bug report #886852, regarding nvidia-graphics-drivers: CVE-2017-5753/CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 886852: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886852 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: nvidia-driver Version: 375.82-1~deb9u1 Severity: critical Hi, NVidia upgraded their blob to version 384.111 in order to fix Spectre / Meltdown vulnerability. It turns out that the 375.xx branch is no longer supported, so we cannot expect getting driver patches for the current stretch drivers. More details on this bulletin : https://nvidia.custhelp.com/app/answers/detail/a_id/4611 What I suggest is first to put the 384.111 driver in BPO, and then once we've checked it is good enough put it in the next p-u so that users are no longer vulnerable. What do you think of it ? Rgds,
--- End Message ---
--- Begin Message ---Source: nvidia-graphics-drivers-legacy-340xx Source-Version: 340.106-1 We believe that the bug you reported is fixed in the latest version of nvidia-graphics-drivers-legacy-340xx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 886...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Beckmann <a...@debian.org> (supplier of updated nvidia-graphics-drivers-legacy-340xx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 17 Jan 2018 20:50:05 +0100 Source: nvidia-graphics-drivers-legacy-340xx Binary: nvidia-legacy-340xx-driver nvidia-legacy-340xx-driver-bin nvidia-legacy-340xx-driver-libs nvidia-legacy-340xx-driver-libs-i386 xserver-xorg-video-nvidia-legacy-340xx libgl1-nvidia-legacy-340xx-glx libnvidia-legacy-340xx-glcore libegl1-nvidia-legacy-340xx libgles1-nvidia-legacy-340xx libgles2-nvidia-legacy-340xx libnvidia-legacy-340xx-eglcore libnvidia-legacy-340xx-cfg1 nvidia-legacy-340xx-alternative nvidia-legacy-340xx-kernel-support nvidia-legacy-340xx-kernel-dkms nvidia-legacy-340xx-kernel-source nvidia-legacy-340xx-vdpau-driver nvidia-legacy-340xx-smi libnvidia-legacy-340xx-cuda1 libnvidia-legacy-340xx-cuda1-i386 libnvidia-legacy-340xx-compiler libnvidia-legacy-340xx-nvcuvid1 libnvidia-legacy-340xx-encode1 libnvidia-legacy-340xx-ifr1 libnvidia-legacy-340xx-fbc1 libnvidia-legacy-340xx-ml1 nvidia-legacy-340xx-opencl-icd Architecture: source Version: 340.106-1 Distribution: unstable Urgency: medium Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-de...@lists.alioth.debian.org> Changed-By: Andreas Beckmann <a...@debian.org> Description: libegl1-nvidia-legacy-340xx - NVIDIA binary EGL library libgl1-nvidia-legacy-340xx-glx - NVIDIA binary OpenGL/GLX library libgles1-nvidia-legacy-340xx - NVIDIA binary OpenGL|ES 1.x library libgles2-nvidia-legacy-340xx - NVIDIA binary OpenGL|ES 2.x library libnvidia-legacy-340xx-cfg1 - NVIDIA binary OpenGL/GLX configuration library libnvidia-legacy-340xx-compiler - NVIDIA runtime compiler library libnvidia-legacy-340xx-cuda1 - NVIDIA CUDA Driver Library libnvidia-legacy-340xx-cuda1-i386 - NVIDIA CUDA 32-bit runtime library libnvidia-legacy-340xx-eglcore - NVIDIA binary EGL core libraries libnvidia-legacy-340xx-encode1 - NVENC Video Encoding runtime library libnvidia-legacy-340xx-fbc1 - NVIDIA OpenGL-based Framebuffer Capture runtime library libnvidia-legacy-340xx-glcore - NVIDIA binary OpenGL/GLX core libraries libnvidia-legacy-340xx-ifr1 - NVIDIA OpenGL-based Inband Frame Readback runtime library libnvidia-legacy-340xx-ml1 - NVIDIA Management Library (NVML) runtime library libnvidia-legacy-340xx-nvcuvid1 - NVIDIA CUDA Video Decoder runtime library nvidia-legacy-340xx-alternative - allows the selection of NVIDIA as GLX provider nvidia-legacy-340xx-driver - NVIDIA metapackage nvidia-legacy-340xx-driver-bin - NVIDIA driver support binaries nvidia-legacy-340xx-driver-libs - NVIDIA metapackage (OpenGL/GLX/EGL/GLES libraries) nvidia-legacy-340xx-driver-libs-i386 - NVIDIA metapackage (OpenGL/GLX/EGL/GLES 32-bit libraries) nvidia-legacy-340xx-kernel-dkms - NVIDIA binary kernel module DKMS source nvidia-legacy-340xx-kernel-source - NVIDIA binary kernel module source nvidia-legacy-340xx-kernel-support - NVIDIA binary kernel module support files nvidia-legacy-340xx-opencl-icd - NVIDIA OpenCL installable client driver (ICD) nvidia-legacy-340xx-smi - NVIDIA System Management Interface nvidia-legacy-340xx-vdpau-driver - Video Decode and Presentation API for Unix - NVIDIA driver xserver-xorg-video-nvidia-legacy-340xx - NVIDIA binary Xorg driver Closes: 886852 Changes: nvidia-graphics-drivers-legacy-340xx (340.106-1) unstable; urgency=medium . * New upstream legacy 340xx branch release 340.106 (2018-01-16). * Fixed CVE-2017-5753, CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown). https://nvidia.custhelp.com/app/answers/detail/a_id/4611 (Closes: #886852) * Improved compatibility with recent Linux kernels. . [ Luca Boccassi ] * Drop nvidia-drm-pci-init.patch and timer.patch, fixed upstream. Checksums-Sha1: 9910d151a73cd524d8a09127394d17500aeafd1e 6411 nvidia-graphics-drivers-legacy-340xx_340.106-1.dsc 1f9264417ad5e2fc854e06947befde857788ea0a 69956126 nvidia-graphics-drivers-legacy-340xx_340.106.orig-amd64.tar.gz f97bc3703efd71a00d5125bab709932cfabe2b67 23472630 nvidia-graphics-drivers-legacy-340xx_340.106.orig-armhf.tar.gz ceedb29bb1db356038bfa75816df1f2598f33510 38784831 nvidia-graphics-drivers-legacy-340xx_340.106.orig-i386.tar.gz 04023638fea62f390eaeec11a001d65697303a7e 138 nvidia-graphics-drivers-legacy-340xx_340.106.orig.tar.gz d62c29948a0b144b15fc61e2ff67a955424a1646 66504 nvidia-graphics-drivers-legacy-340xx_340.106-1.debian.tar.xz 399e84dc6463f2976f51d73aef418585f149d777 6434 nvidia-graphics-drivers-legacy-340xx_340.106-1_source.buildinfo Checksums-Sha256: 994cf20b48fe08aa8fa0316ad334e872f69d703d9e3905b5bea490496ca5b6d2 6411 nvidia-graphics-drivers-legacy-340xx_340.106-1.dsc 73e7d1da74f73c53d7976073010b732a0ae1eda9e267b566418caa6c3d75277b 69956126 nvidia-graphics-drivers-legacy-340xx_340.106.orig-amd64.tar.gz 5402c4b9364467c3f2b8a9ea5d2552bc69fa31cc411d4189b40cfd8333882147 23472630 nvidia-graphics-drivers-legacy-340xx_340.106.orig-armhf.tar.gz c5da50c6b81b2657671684fd59d9d8de1e3edf00d2bc4977cc4f1ea095addc80 38784831 nvidia-graphics-drivers-legacy-340xx_340.106.orig-i386.tar.gz 987c7768b176cff684a98c8da89ff3f3af9142caac675fd271bf1163ccf5871d 138 nvidia-graphics-drivers-legacy-340xx_340.106.orig.tar.gz 2e79d2bdca3173fdded17cfb544c2fa4dc000d3edcca764eca73b37e42d9d871 66504 nvidia-graphics-drivers-legacy-340xx_340.106-1.debian.tar.xz 6fd4b12fee5536b18a1824041cdf1da6982b3feb5ae65e09dec0dcf8457e7362 6434 nvidia-graphics-drivers-legacy-340xx_340.106-1_source.buildinfo Files: 838c343ead03583a1a1c5b7ad0f87389 6411 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.106-1.dsc a123cc3953dc07225978180891dcfed7 69956126 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.106.orig-amd64.tar.gz b6baec8ac6304d8da5caec15ebec3b34 23472630 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.106.orig-armhf.tar.gz 33f93f3313570c3529f8d9e598ce8cb5 38784831 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.106.orig-i386.tar.gz a87cd7669746ead3fcaf79052690c5b4 138 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.106.orig.tar.gz f4ad06efa3e480ee502a861b745207f7 66504 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.106-1.debian.tar.xz 4292fabb56a5eafce4c7d51b7b56e1b7 6434 non-free/libs optional nvidia-graphics-drivers-legacy-340xx_340.106-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE6/MKMKjZxjvaRMaUX7M/k1np7QgFAlpfq3YQHGFuYmVAZGVi aWFuLm9yZwAKCRBfsz+TWentCA79EACHvXMaPtgCV5sSLNTW+n/pplftxiJkEjJB YeKjVQov6TY0evI1Hkuar3i4OBWFoUuxyyYBX2rGu/U+1TZGUvs4VpIDQA2RWbnL IgCRpYorf8w3gKeVTueGQ8BJ6TPmpuMp6FVq9kF48D8xHw4sagjK9lWnMtH9Di3Y j8USixW6i8DwUq6DLl96WWbRpLqdukwxAwLpCYVzM7oMp2H5YJNjP0/CjJMpK6uZ KKvbAy0srwz3NEe25wX6KS+PnaDbLxbKuL882LKkMd7oBmaa7P1zeli8OWsllrKx CUetX1jz99XvIw+85Nni5oL4X9i8iwvWX95E51OI/b5KvQHZpwbQ7zrQ1xsl4cQE s9duuQVQvgtK7t4gWkGAcUfubLLAKof0pnTwrxLSn/AGJ4p+Ba+F0QltKpNgynDB VR6ShVUF68ZVuvarrJhy7THWmfjYEXa86g1YeVknkSy4DLVUogRa57C3XwgRQnLV S7I2scrue/fEfEbx0eVrv6UHT12JwCjc2g7ORSWkOfp6iUflybZ7GJU2BWJ6UyLJ cuDic5pMuwyVZznrus05kbncENLZPAE0tNZ2JhWZKE4rOKNF9VcRGGhprBl8HIVI Hn0RzRbiI3UMOVxmxUKurrbLcPy5WGyNFStOKUneyB1nK0gOqLd1rtjv9M6uW8qx h1P+JpyLEw== =kYXn -----END PGP SIGNATURE-----
--- End Message ---
