Bug#987256: unblock: nvidia-graphics-drivers-legacy-390xx/390.143-1

[Luca Boccassi]

Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock
X-Debbugs-Cc: pkg-nvidia-devel at lists.alioth.debian.org

Please unblock package nvidia-graphics-drivers-legacy-390xx

The new upstream LTS version 390.143 fixes a CVE and a crash in X.org,
both of which affect Bullseye.

X.org crash under certain conditions, and a security vulnerability
(CVE-2021-1076 and #987218) has been found in the kernel driver:
https://nvidia.custhelp.com/app/answers/detail/a_id/5172

The inlined debdiff excludes the binary blobs.

unblock nvidia-graphics-drivers-legacy-390xx/390.143-1

-- 
Kind regards,
Luca Boccassi

diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-legacy-390xx-390.141/debian/changelog nvidia-graphics-drivers-legacy-390xx-390.143/debian/changelog
--- nvidia-graphics-drivers-legacy-390xx-390.141/debian/changelog	2021-03-13 21:39:29.000000000 +0000
+++ nvidia-graphics-drivers-legacy-390xx-390.143/debian/changelog	2021-04-20 01:04:19.000000000 +0100
@@ -1,3 +1,16 @@
+nvidia-graphics-drivers-legacy-390xx (390.143-1) unstable; urgency=medium
+
+  * New upstream legacy branch release 390.143 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987218)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Fixed a bug where vkCreateSwapchain could cause the X Server to crash
+      when an invalid imageFormat was provided.
+    - Fixed a driver installation failure on Linux kernel 5.11 release
+      candidates, where the NVIDIA kernel module failed to build with error
+      "fatal error: asm/kmap_types.h: No such file or directory".
+
+ -- Andreas Beckmann <anbe at debian.org>  Tue, 20 Apr 2021 02:04:19 +0200
+
 nvidia-graphics-drivers-legacy-390xx (390.141-3) unstable; urgency=medium
 
   * nvidia-legacy-390xx-alternative: Add libnvidia-ml.so slave alternative if
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-legacy-390xx-390.141/debian/control.md5sum nvidia-graphics-drivers-legacy-390xx-390.143/debian/control.md5sum
--- nvidia-graphics-drivers-legacy-390xx-390.141/debian/control.md5sum	2021-03-13 21:39:29.000000000 +0000
+++ nvidia-graphics-drivers-legacy-390xx-390.143/debian/control.md5sum	2021-04-20 01:04:19.000000000 +0100
@@ -1,5 +1,5 @@
 a1db8e174e35b30f771fffdf4690ea8b  debian/control
 0a204645020c143be44b04bd5daf7b85  debian/control.in
 db12f898b07cdaf431ad34bd68a1662e  debian/gen-control.pl
-365281fc24d824d688be59ab97ae1ca5  debian/rules
+e0a6daa55d2509f44d21bbb591ccbad1  debian/rules
 181fae6bc60df1e667ef475560be4fdf  debian/rules.defs
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-legacy-390xx-390.141/debian/rules nvidia-graphics-drivers-legacy-390xx-390.143/debian/rules
--- nvidia-graphics-drivers-legacy-390xx-390.141/debian/rules	2021-03-13 21:39:29.000000000 +0000
+++ nvidia-graphics-drivers-legacy-390xx-390.143/debian/rules	2021-04-20 01:04:19.000000000 +0100
@@ -138,9 +138,9 @@
 	cat $^ | sort -u > $@
 
 nv-readme.ids: unpack-stamp debian/nv-readme.ids
-	sed	-e '0,/A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/Appendix A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/^Below\|APPENDIX B/{/ 0x/s/.*  0x\([0-9a-fA-F]\{4\}\).*/10de\1/p; /^.\{41\} [0-9a-fA-F]\{4\} /s/^.\{41\} \([0-9a-fA-F]\{4\}\) .*/10de\1/p};d' \
+	sed -r	-e '0,/A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/Appendix A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/^Below|APPENDIX B/{/ 0x/s/.*  0x([0-9a-fA-F]{4}).*/10de\1/p; /^(.{41}|.{49}) [0-9a-fA-F]{4} /s/^(.{41}|.{49}) ([0-9a-fA-F]{4}) .*/10de\2/p};d' \
 		NVIDIA-Linux/README.txt \
 		| tr a-f A-F | sort -u > $@
 	@set -e -x ; \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-nvidia-devel/attachments/20210420/54a77085/attachment.sig>