Bug#913467: nvidia-graphics-drivers: CVE‑2018‑6260: access to application data processed on the GPU through a side channel exposed by the GPU performance counters

Luca Boccassi bluca at debian.org
Mon Nov 12 14:36:23 GMT 2018


On Mon, 2018-11-12 at 13:47 +0100, Andreas Beckmann wrote:
> On 2018-11-11 13:54, Luca Boccassi wrote:
> > https://nvidia.custhelp.com/app/answers/detail/a_id/4738
> 
> So we expect new releases soon. There is already 415.* ...
> 
> Please refrain from any uploads for now while I'm preparing
> infrastructure changes. I'll do a 390.87-3 upload soon, thereafter
> you
> could update that in sid. If there are some pkern commits in the
> repository, use them, if not, they will come with -2.
> 
> (Procedure in 390:
> do all commits incl. finalization of changelog in 390
> merge into master
> upload from master
> )
> 
> Andreas

Ok, I see -3 is now in unstable (thanks!) so if something comes out for
the 390 branch I'll follow that procedure and upload to unstable from
master.

What about -legacy-390xx?

> PS: finally a reason to push 390 to stretch, lets do it soon at the
> beginning of the new point release cycle

Yes, sounds good, 384 is not maintained anymore.

-- 
Kind regards,
Luca Boccassi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-nvidia-devel/attachments/20181112/249676aa/attachment.sig>


More information about the pkg-nvidia-devel mailing list