Bug#886852: NVidia driver : upgrade to version 384.111
Andreas Beckmann
anbe at debian.org
Wed Jan 10 22:58:59 UTC 2018
On 2018-01-10 15:25, Luca Boccassi wrote:
> I'm a little confused as what their blobs could possible have to do
> with spectre/meltdown to be honest
meltdown does not seem to be an issue, but for spectre it is not
neccessarily the GPU bits being fixed, but the CPU side of the driver -
which can run untrusted user supplied code (e.g. compiling shaders) ...
that could be comparable to the sandboxed javascript in the browser
accessing all the browser memory.
> - but in general it sounds like a
> good idea to move 384 to stable-p-u, since it's won't be the last CVE
> we get and as you said 375 is dead and buried.
>
> Andreas, what do you think?
Just uploaded to stretch-backports, will need to go through backports-new.
Untested on my side - please try it out :-)
Andreas
More information about the pkg-nvidia-devel
mailing list