Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu
Hi,
I'd like to update the 340xx legacy nvidia driver in stretch with a new
upstream version that brings spectre/meltdown mitigation fixes and
related kernel support. Security updates for the non-free drivers have
always been done via proposed-updates.
The package is a plain rebuild from sid with no further changes needed
and therefore contains also all the accumulated bugfixes from the
package in sid (and some of them are already in nvidia-graphics-drivers
in stretch, since we had a security update in the previous stretch point
release). The proposed package is now also available in
stretch-backports to allow further testing.
The changelog stanza in addition to the attached diff (debian/ tree only,
blobs excluded) will be
--- debian/changelog (revision 7831)
+++ debian/changelog (working copy)
@@ -1,3 +1,9 @@
+nvidia-graphics-drivers-legacy-340xx (340.106-1~deb9u1) stretch; urgency=medium
+
+ * Rebuild for stretch.
+
+ -- Andreas Beckmann Wed, 24 Jan 2018 07:06:23 +0100
+
nvidia-graphics-drivers-legacy-340xx (340.106-1) unstable; urgency=medium
* New upstream legacy 340xx branch release 340.106 (2018-01-16).
Andreas
Index: debian/libgl1-nvidia-glx.prerm.in
===
--- debian/libgl1-nvidia-glx.prerm.in (.../tags/340.102-1)(revision 7831)
+++ debian/libgl1-nvidia-glx.prerm.in (.../trunk) (revision 7831)
@@ -1,13 +0,0 @@
-#!/bin/sh
-set -e
-
-
-if [ "$1" = "remove" ] || [ "$1" = "deconfigure" ]; then
-
- update-alternatives --remove nvidia /usr/lib/#PRIVATE#
- dpkg-trigger register-glx-alternative-nvidia
-
-fi
-
-
-#DEBHELPER#
Index: debian/nvidia-alternative.prerm.in
===
--- debian/nvidia-alternative.prerm.in (.../tags/340.102-1)(revision 7831)
+++ debian/nvidia-alternative.prerm.in (.../trunk) (revision 7831)
@@ -5,6 +5,7 @@
if [ "$1" = "remove" ] || [ "$1" = "deconfigure" ]; then
update-alternatives --remove nvidia /usr/lib/#PRIVATE#
+ dpkg-trigger --no-await register-glx-alternative-nvidia
fi
Index: debian/not-installed.in
===
--- debian/not-installed.in (.../tags/340.102-1)(revision 0)
+++ debian/not-installed.in (.../trunk) (revision 7831)
@@ -0,0 +1,37 @@
+.manifest
+LICENSE
+gl.h
+glext.h
+glx.h
+glxext.h
+libGL.la
+#!armhf#libnvidia-tls.so.#VERSION#
+libnvidia-wfb.so.#VERSION#
+libvdpau.so.#VERSION#
+libvdpau_trace.so.#VERSION#
+makeself-help-script.sh
+makeself.sh
+mkprecompiled
+nvidia-installer
+nvidia-installer.1
+nvidia-modprobe
+nvidia-modprobe.1
+nvidia-persistenced
+nvidia-persistenced-init.tar.bz2
+nvidia-persistenced.1
+nvidia-settings
+nvidia-settings.1
+nvidia-settings.desktop
+nvidia-settings.png
+nvidia-xconfig
+nvidia-xconfig.1
+pci.ids
+pkg-history.txt
+tls_test
+tls_test_dso.so
+
+libOpenCL.so.1.0.0
+nvidia.icd
+nvidia-cuda-mps-control
+nvidia-cuda-mps-control.1
+nvidia-cuda-mps-server
Index: debian/changelog
===
--- debian/changelog(.../tags/340.102-1)(revision 7831)
+++ debian/changelog(.../trunk) (revision 7831)
@@ -1,3 +1,113 @@
+nvidia-graphics-drivers-legacy-340xx (340.106-1) unstable; urgency=medium
+
+ * New upstream legacy 340xx branch release 340.106 (2018-01-16).
+ * Fixed CVE-2017-5753, CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown).
+ https://nvidia.custhelp.com/app/answers/detail/a_id/4611
+ (Closes: #886852)
+* Improved compatibility with recent Linux kernels.
+
+ [ Luca Boccassi ]
+ * Drop nvidia-drm-pci-init.patch and timer.patch, fixed upstream.
+
+ -- Andreas Beckmann Wed, 17 Jan 2018 20:50:05 +0100
+
+nvidia-graphics-drivers-legacy-340xx (340.104-4) unstable; urgency=medium
+
+ [ Andreas Beckmann ]
+ * Bump Standards-Version to 4.1.3. No changes needed.
+ * Stop shipping the classic libnvidia-tls.so.* and ship the modern one (for
+Linux 2.6 onwards) in the regular libdir instead of the tls/ subdir
+(384.111-1). (Closes: #883615)
+ * Add #tls# substitution for the tls/ source directory (384.111-1).
+ * nvidia-legacy-340xx-alternative.prerm: Trigger register-glx-alternative-
+nvidia upon removal (384.111-3). (Closes: #883637)
+ * libgl1-nvidia-legacy-340xx-glx.prerm: Do not forcibly remove the nvidia
+alternative, this would reset it from manual mode to auto mode while it
+could still be needed by other packages, e.g. libcuda1. Let the
+nvidia-legacy-340xx-alternative triggers handle it instead (384.111-3).
+
+ [ Luca Boccassi ]
+ * Add timer.patch to fix kernel module build on Linux 4.15 and newer.
+
+ -- Andreas Beckmann Tue, 16 Jan 2018 03:08:52 +0100
+