Bug#886852: NVidia driver : upgrade to version 384.111

Andreas Beckmann anbe at debian.org
Wed Jan 10 22:58:59 UTC 2018


On 2018-01-10 15:25, Luca Boccassi wrote:
> I'm a little confused as what their blobs could possible have to do
> with spectre/meltdown to be honest

meltdown does not seem to be an issue, but for spectre it is not
neccessarily the GPU bits being fixed, but the CPU side of the driver -
which can run untrusted user supplied code (e.g. compiling shaders) ...
that could be comparable to the sandboxed javascript in the browser
accessing all the browser memory.

> - but in general it sounds like a
> good idea to move 384 to stable-p-u, since it's won't be the last CVE
> we get and as you said 375 is dead and buried.
> 
> Andreas, what do you think?

Just uploaded to stretch-backports, will need to go through backports-new.
Untested on my side - please try it out :-)


Andreas



More information about the pkg-nvidia-devel mailing list