Bug#886852: NVidia driver : upgrade to version 384.111
bluca at debian.org
Wed Jan 10 14:25:53 UTC 2018
Control: fixed -1 384.111-1
Control: tags -1 stretch
On Wed, 2018-01-10 at 15:11 +0100, Julien Aubin wrote:
> Package: nvidia-driver
> Version: 375.82-1~deb9u1
> Severity: critical
> NVidia upgraded their blob to version 384.111 in order to fix Spectre
> Meltdown vulnerability. It turns out that the 375.xx branch is no
> supported, so we cannot expect getting driver patches for the current
> stretch drivers.
> More details on this bulletin :
> What I suggest is first to put the 384.111 driver in BPO, and then
> we've checked it is good enough put it in the next p-u so that users
> are no
> longer vulnerable.
> What do you think of it ?
I'm a little confused as what their blobs could possible have to do
with spectre/meltdown to be honest - but in general it sounds like a
good idea to move 384 to stable-p-u, since it's won't be the last CVE
we get and as you said 375 is dead and buried.
Andreas, what do you think?
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 488 bytes
Desc: This is a digitally signed message part
More information about the pkg-nvidia-devel