stretch-pu: package nvidia-graphics-drivers/375.82-1~deb9u1

[Luca Boccassi]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian.org at packages.debian.org
Usertags: pu

Dear Release Team,

The non-free proprietary nvidia-graphics-drivers version 375.66 in
Stretch is affected by CVE-2017-6257 and CVE-2017-6259. Debian bug:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869783

Please consider allowing the new upstream version 375.82, which fixes
these CVEs, in proposed-updates. As usual with these proprietary
drivers, we cannot just cherry-pick the fixes for the CVEs as they are
in the binary blobs.

I have tested this new version on a Stretch amd64 desktop and didn't
encounter any issue.

The debdiff from 375.66-2~deb9u1 to 375.82-1 is attached.

Apart from the new upstream version, the other bug fixes are:

- update binary library blobs symbols files reflecting upstream changes
- allow parallel dkms builds if requested (#864639) by a user
- re-allow dkms ccache usage if enabled by a user
- switch watch files protocol to https, as upstream deprecated ftp
(#868815)
- mark the dkms modules as build-tested up to kernel 4.11
- add support for buster in the nvidia-detect script (#866126), that
helps the users choose the correct drivers that support their hardware

Kind regards,
Luca Boccassi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: debdiff_375.66-2~deb9u1_to_375.82-1.diff
Type: text/x-patch
Size: 36460 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-nvidia-devel/attachments/20170726/d12b61c6/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-nvidia-devel/attachments/20170726/d12b61c6/attachment-0001.sig>