Bug#987305: unblock: nvidia-graphics-drivers-tesla-418/418.197.02-1

[Luca Boccassi]

Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock
X-Debbugs-Cc: pkg-nvidia-devel at lists.alioth.debian.org

Please unblock package nvidia-graphics-drivers-tesla-418

The new upstream version 418.197.02 fixes a CVE and a crash in X.org,
both of which affect Bullseye.

X.org crash under certain conditions, and a security vulnerability
(CVE-2021-1076 and #987219) has been found in the kernel driver:
https://nvidia.custhelp.com/app/answers/detail/a_id/5172

The inlined debdiff excludes the binary blobs.

unblock nvidia-graphics-drivers-tesla-418/418.197.02-1

-- 
Kind regards,
Luca Boccassi

diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-418-418.181.07/debian/changelog nvidia-graphics-drivers-tesla-418-418.197.02/debian/changelog
--- nvidia-graphics-drivers-tesla-418-418.181.07/debian/changelog	2021-03-12 19:11:00.000000000 +0000
+++ nvidia-graphics-drivers-tesla-418-418.197.02/debian/changelog	2021-04-20 15:15:04.000000000 +0100
@@ -1,3 +1,23 @@
+nvidia-graphics-drivers-tesla-418 (418.197.02-1) unstable; urgency=medium
+
+  * New upstream Tesla release 418.197.02 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987219)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+
+ -- Andreas Beckmann <anbe at debian.org>  Tue, 20 Apr 2021 16:15:04 +0200
+
+nvidia-graphics-drivers (418.197.02-1) buster; urgency=medium
+
+  * New upstream Tesla release 418.197.02 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987216)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+
+  [ Andreas Beckmann ]
+  * nvidia-alternative: Add libnvidia-ml.so slave alternative if
+    libnvidia-ml-dev is installed (460.56-2).  (Closes: #984881)
+
+ -- Andreas Beckmann <anbe at debian.org>  Tue, 20 Apr 2021 15:01:59 +0200
+
 nvidia-graphics-drivers-tesla-418 (418.181.07-2) unstable; urgency=medium
 
   * Switch to dh-sequence-dkms (460.56-1).
@@ -717,6 +737,19 @@
 
  -- Andreas Beckmann <anbe at debian.org>  Sun, 22 Apr 2018 13:59:45 +0200
 
+nvidia-graphics-drivers (390.143-1) UNRELEASED; urgency=medium
+
+  * New upstream legacy branch release 390.143 (2021-04-19).
+    * Fixed CVE-2021-1076.
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Fixed a bug where vkCreateSwapchain could cause the X Server to crash
+      when an invalid imageFormat was provided.
+    - Fixed a driver installation failure on Linux kernel 5.11 release
+      candidates, where the NVIDIA kernel module failed to build with error
+      "fatal error: asm/kmap_types.h: No such file or directory".
+
+ -- Andreas Beckmann <anbe at debian.org>  Mon, 19 Apr 2021 22:38:56 +0200
+
 nvidia-graphics-drivers (390.141-1) UNRELEASED; urgency=medium
 
   * New upstream legacy branch release 390.141 (2021-01-07).
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-418-418.181.07/debian/control.md5sum nvidia-graphics-drivers-tesla-418-418.197.02/debian/control.md5sum
--- nvidia-graphics-drivers-tesla-418-418.181.07/debian/control.md5sum	2021-03-12 19:11:00.000000000 +0000
+++ nvidia-graphics-drivers-tesla-418-418.197.02/debian/control.md5sum	2021-04-20 15:15:04.000000000 +0100
@@ -1,5 +1,5 @@
 2b166b1ac6588e638946982df3fde7df  debian/control
 7e76ad93933bc9855c55a24a0a29739f  debian/control.in
 db12f898b07cdaf431ad34bd68a1662e  debian/gen-control.pl
-c7cc02af2fecdcf0d2be8781c0036133  debian/rules
+1c2e4bda5c346493c1e55efebba869c2  debian/rules
 5c030ac5e276798b2e17c170aa15d998  debian/rules.defs
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-418-418.181.07/debian/rules nvidia-graphics-drivers-tesla-418-418.197.02/debian/rules
--- nvidia-graphics-drivers-tesla-418-418.181.07/debian/rules	2021-03-12 19:11:00.000000000 +0000
+++ nvidia-graphics-drivers-tesla-418-418.197.02/debian/rules	2021-04-20 15:15:04.000000000 +0100
@@ -169,9 +169,9 @@
 	sed 's/__NV_VK_ICD__/libGL.so.1/' $< > $@
 
 nv-readme.ids: unpack-stamp
-	sed	-e '0,/A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/Appendix A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/^Below\|APPENDIX B/{/ 0x/s/.*  0x\([0-9a-fA-F]\{4\}\).*/10de\1/p; /^.\{41\} [0-9a-fA-F]\{4\} /s/^.\{41\} \([0-9a-fA-F]\{4\}\) .*/10de\1/p};d' \
+	sed -r	-e '0,/A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/Appendix A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/^Below|APPENDIX B/{/ 0x/s/.*  0x([0-9a-fA-F]{4}).*/10de\1/p; /^(.{41}|.{49}) [0-9a-fA-F]{4} /s/^(.{41}|.{49}) ([0-9a-fA-F]{4}) .*/10de\2/p};d' \
 		NVIDIA-Linux/README.txt \
 		| tr a-f A-F | sort -u > $@
 	@set -e -x ; \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-nvidia-devel/attachments/20210421/396a6c8c/attachment.sig>