Bug#886852: NVidia driver : upgrade to version 384.111

[Luca Boccassi]

Control: fixed -1 384.111-1
Control: tags -1 stretch

On Wed, 2018-01-10 at 15:11 +0100, Julien Aubin wrote:
> Package: nvidia-driver
> Version: 375.82-1~deb9u1
> Severity: critical
> 
> Hi,
> 
> NVidia upgraded their blob to version 384.111 in order to fix Spectre
> /
> Meltdown vulnerability. It turns out that the 375.xx branch is no
> longer
> supported, so we cannot expect getting driver patches for the current
> stretch drivers.
> 
> More details on this bulletin :
> https://nvidia.custhelp.com/app/answers/detail/a_id/4611
> 
> What I suggest is first to put the 384.111 driver in BPO, and then
> once
> we've checked it is good enough put it in the next p-u so that users
> are no
> longer vulnerable.
> 
> What do you think of it ?
> 
> Rgds,

I'm a little confused as what their blobs could possible have to do
with spectre/meltdown to be honest - but in general it sounds like a
good idea to move 384 to stable-p-u, since it's won't be the last CVE
we get and as you said 375 is dead and buried.

Andreas, what do you think?

-- 
Kind regards,
Luca Boccassi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-nvidia-devel/attachments/20180110/22b7bcf0/attachment.sig>