Bug#987384: unblock: nvidia-graphics-drivers-tesla-450/450.119.03-1

Luca Boccassi bluca at debian.org
Thu Apr 22 22:55:25 BST 2021


Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock
X-Debbugs-Cc: pkg-nvidia-devel at lists.alioth.debian.org

Please unblock package nvidia-graphics-drivers-tesla-450

The new upstream version 450.119.03 fixes a CVE and a several bugs,
all of which affect Bullseye.

X.org crash under certain conditions, and a security vulnerability
(CVE-2021-1076 and #987221) has been found in the kernel driver:
https://nvidia.custhelp.com/app/answers/detail/a_id/5172

The inlined debdiff excludes the binary blobs.

unblock nvidia-graphics-drivers-tesla-450/450.119.03-1

-- 
Kind regards,
Luca Boccassi

diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-450-450.102.04/debian/changelog nvidia-graphics-drivers-tesla-450-450.119.03/debian/changelog
--- nvidia-graphics-drivers-tesla-450-450.102.04/debian/changelog	2021-03-13 17:43:15.000000000 +0000
+++ nvidia-graphics-drivers-tesla-450-450.119.03/debian/changelog	2021-04-22 20:13:14.000000000 +0100
@@ -1,3 +1,21 @@
+nvidia-graphics-drivers-tesla-450 (450.119.03-1) unstable; urgency=medium
+
+  * New upstream Tesla release 450.119.03 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987221)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Fixed a driver installation failure on Linux kernel 5.11 release
+      candidates, where the NVIDIA kernel module failed to build with error
+      "error: implicit declaration of function 'sys_close'".
+    - Fixed a bug where calls to vkCreateDevice could fail on Ampere GPUs when
+      ray tracing extensions were enabled and the application was running within
+      the Steam Linux Runtime.
+    - Fixed a regression that could cause display corruption when using
+      a scaled resolution after resuming from power management suspend.
+    - Fixed a bug that could intermittently cause NvFBC applications to fail
+      with the error message "Unable to send exported fds".
+
+ -- Andreas Beckmann <anbe at debian.org>  Thu, 22 Apr 2021 21:13:14 +0200
+
 nvidia-graphics-drivers-tesla-450 (450.102.04-2) unstable; urgency=medium
 
   * Switch to dh-sequence-dkms (460.56-1).
@@ -258,7 +276,6 @@
       display offload sinks, also known as "Reverse PRIME". See the chapter
       titled "Offloading Graphics Display with RandR 1.4" in the README for
       additional information.
-    - Removed 'libGL.la' libtool archive from the install package.
   * New upstream release 440 series.
     - Fixed a bug where a Vulkan application under PRIME render
       offload would not always be correctly throttled to vsync despite
@@ -816,6 +833,26 @@
 
  -- Andreas Beckmann <anbe at debian.org>  Sat, 25 May 2019 13:49:09 +0200
 
+nvidia-graphics-drivers-tesla-418 (418.197.02-1) unstable; urgency=medium
+
+  * New upstream Tesla release 418.197.02 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987219)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+
+ -- Andreas Beckmann <anbe at debian.org>  Tue, 20 Apr 2021 16:15:04 +0200
+
+nvidia-graphics-drivers (418.197.02-1) buster; urgency=medium
+
+  * New upstream Tesla release 418.197.02 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987216)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+
+  [ Andreas Beckmann ]
+  * nvidia-alternative: Add libnvidia-ml.so slave alternative if
+    libnvidia-ml-dev is installed (460.56-2).  (Closes: #984881)
+
+ -- Andreas Beckmann <anbe at debian.org>  Tue, 20 Apr 2021 15:01:59 +0200
+
 nvidia-graphics-drivers-tesla-418 (418.181.07-2) unstable; urgency=medium
 
   * Switch to dh-sequence-dkms (460.56-1).
@@ -1535,6 +1572,19 @@
 
  -- Andreas Beckmann <anbe at debian.org>  Sun, 22 Apr 2018 13:59:45 +0200
 
+nvidia-graphics-drivers (390.143-1) UNRELEASED; urgency=medium
+
+  * New upstream legacy branch release 390.143 (2021-04-19).
+    * Fixed CVE-2021-1076.
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Fixed a bug where vkCreateSwapchain could cause the X Server to crash
+      when an invalid imageFormat was provided.
+    - Fixed a driver installation failure on Linux kernel 5.11 release
+      candidates, where the NVIDIA kernel module failed to build with error
+      "fatal error: asm/kmap_types.h: No such file or directory".
+
+ -- Andreas Beckmann <anbe at debian.org>  Mon, 19 Apr 2021 22:38:56 +0200
+
 nvidia-graphics-drivers (390.141-1) UNRELEASED; urgency=medium
 
   * New upstream legacy branch release 390.141 (2021-01-07).
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-450-450.102.04/debian/control.md5sum nvidia-graphics-drivers-tesla-450-450.119.03/debian/control.md5sum
--- nvidia-graphics-drivers-tesla-450-450.102.04/debian/control.md5sum	2021-03-13 17:43:15.000000000 +0000
+++ nvidia-graphics-drivers-tesla-450-450.119.03/debian/control.md5sum	2021-04-22 20:13:14.000000000 +0100
@@ -1,5 +1,5 @@
 f7eb3755f20b606b6c02febfa92cbb6d  debian/control
 807ae812aa88a6bd3515fc4e4ea95ce3  debian/control.in
 db12f898b07cdaf431ad34bd68a1662e  debian/gen-control.pl
-94fc2cf02a896617e959f54edb431e36  debian/rules
+81c359ec8007bcb1766814c30c8931b8  debian/rules
 beb8fea9a88b05fd523f5c5d278b2267  debian/rules.defs
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-450-450.102.04/debian/rules nvidia-graphics-drivers-tesla-450-450.119.03/debian/rules
--- nvidia-graphics-drivers-tesla-450-450.102.04/debian/rules	2021-03-13 17:43:15.000000000 +0000
+++ nvidia-graphics-drivers-tesla-450-450.119.03/debian/rules	2021-04-22 20:13:14.000000000 +0100
@@ -168,9 +168,9 @@
 	sed 's/libGLX_nvidia.so.0/libGL.so.1/' $< > $@
 
 nv-readme.ids: unpack-stamp
-	sed	-e '0,/A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/Appendix A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/^Below\|APPENDIX B/{/ 0x/s/.*  0x\([0-9a-fA-F]\{4\}\).*/10de\1/p; /^.\{41\} [0-9a-fA-F]\{4\} /s/^.\{41\} \([0-9a-fA-F]\{4\}\) .*/10de\1/p};d' \
+	sed -r	-e '0,/A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/Appendix A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/^Below|APPENDIX B/{/ 0x/s/.*  0x([0-9a-fA-F]{4}).*/10de\1/p; /^(.{41}|.{49}) [0-9a-fA-F]{4} /s/^(.{41}|.{49}) ([0-9a-fA-F]{4}) .*/10de\2/p};d' \
 		NVIDIA-Linux/README.txt \
 		| tr a-f A-F | sort -u > $@
 	@set -e -x ; \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-nvidia-devel/attachments/20210422/ac167e24/attachment-0001.sig>


More information about the pkg-nvidia-devel mailing list