Bug#987256: unblock: nvidia-graphics-drivers/460.73.01-1
Luca Boccassi
bluca at debian.org
Fri Apr 23 11:13:37 BST 2021
Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock
X-Debbugs-Cc: pkg-nvidia-devel at lists.alioth.debian.org
Please unblock package nvidia-graphics-drivers
The new upstream LTS version 460.73.01 fixes two CVEs and a crash in X.org,
both of which affect Bullseye. It also adds support for a few new cards.
X.org crash under certain conditions, and a security vulnerability
(CVE-2021-1076, CVE-2021-1077 and #987216) has been found in the kernel driver:
https://nvidia.custhelp.com/app/answers/detail/a_id/5172
The inlined debdiff excludes the binary blobs.
unblock nvidia-graphics-drivers/460.73.01-1
--
Kind regards,
Luca Boccassi
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/changelog nvidia-graphics-drivers-460.73.01/debian/changelog
--- nvidia-graphics-drivers-460.67/debian/changelog 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/changelog 2021-04-23 07:59:01.000000000 +0100
@@ -1,3 +1,17 @@
+nvidia-graphics-drivers (460.73.01-1) unstable; urgency=medium
+
+ * New upstream production branch release 460.73.01 (2021-04-14).
+ * Fixed CVE-2021-1076, CVE-2021-1077. (Closes: #987216)
+ https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+ - Added support for the following GPUs: A10, A10G, A30, PG506-232,
+ RTX A4000, RTX A5000, T400, T600.
+
+ [ Andreas Beckmann ]
+ * Update nv-readme.ids.
+ * Restrict watch file to releases from the 460.xx production branch.
+
+ -- Andreas Beckmann <anbe at debian.org> Fri, 23 Apr 2021 08:59:01 +0200
+
nvidia-graphics-drivers (460.67-1) unstable; urgency=medium
* New upstream production branch release 460.67 (2021-03-18).
@@ -5,16 +19,6 @@
result in application instability if the GPUs did not match.
- Fixed an issue that prevented G-SYNC from working properly after a mode
switch on Kepler-based GPUs.
- * New upstream release 450 series.
- - Fixed a driver installation failure on Linux kernel 5.11 release
- candidates, where the NVIDIA kernel module failed to build with error
- "error: implicit declaration of function 'sys_close'".
- * New upstream release 390 series.
- - Fixed a bug where vkCreateSwapchain could cause the X Server to crash when
- an invalid imageFormat was provided.
- - Fixed a driver installation failure on Linux kernel 5.11 release
- candidates, where the NVIDIA kernel module failed to build with error
- "fatal error: asm/kmap_types.h: No such file or directory".
[ Luca Boccassi ]
* Update nv-readme.ids.
@@ -31,15 +35,9 @@
nvidia-graphics-drivers (460.56-1) unstable; urgency=medium
* New upstream production branch release 460.56 (2021-02-25).
- - Added support for the following GPUs: GeForce RTX 3060, CMP 40HX
+ - Added support for the following GPUs: GeForce RTX 3060, CMP 40HX,
CMP 30HX.
- Fixed a bug with indexed ray payloads in Vulkan.
- * New upstream release 450 series.
- - Fixed a bug where calls to vkCreateDevice could fail on Ampere GPUs when
- ray tracing extensions were enabled and the application was running
- within the Steam Linux Runtime.
- - Fixed a regression that could cause display corruption when using
- a scaled resolution after resuming from power management suspend.
[ Luca Boccassi ]
* Update nv-readme.ids.
@@ -65,9 +63,6 @@
- Added support for the following GPUs: GeForce RTX 3080 Laptop GPU,
GeForce RTX 3070 Laptop GPU, GeForce RTX 3060 Laptop GPU,
GeForce GT 1010.
- * New upstream release 450 series.
- - Fixed a bug that could intermittently cause NvFBC applications to fail
- with the error message "Unable to send exported fds".
[ Andreas Beckmann ]
* Update nv-readme.ids.
@@ -280,6 +275,24 @@
-- Andreas Beckmann <anbe at debian.org> Thu, 24 Sep 2020 21:52:54 +0200
+nvidia-graphics-drivers (450.119.03-1) UNRELEASED; urgency=medium
+
+ * New upstream Tesla release 450.119.03 (2021-04-19).
+ * Fixed CVE-2021-1076, CVE-2021-1077.
+ https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+ - Fixed a driver installation failure on Linux kernel 5.11 release
+ candidates, where the NVIDIA kernel module failed to build with error
+ "error: implicit declaration of function 'sys_close'".
+ - Fixed a bug where calls to vkCreateDevice could fail on Ampere GPUs when
+ ray tracing extensions were enabled and the application was running within
+ the Steam Linux Runtime.
+ - Fixed a regression that could cause display corruption when using
+ a scaled resolution after resuming from power management suspend.
+ - Fixed a bug that could intermittently cause NvFBC applications to fail
+ with the error message "Unable to send exported fds".
+
+ -- Andreas Beckmann <anbe at debian.org> Thu, 22 Apr 2021 21:13:14 +0200
+
nvidia-graphics-drivers (450.102.04-1) UNRELEASED; urgency=medium
* New upstream long lived branch release 450.102.04 (2021-01-07).
@@ -497,7 +510,6 @@
display offload sinks, also known as "Reverse PRIME". See the chapter
titled "Offloading Graphics Display with RandR 1.4" in the README for
additional information.
- - Removed 'libGL.la' libtool archive from the install package.
* New upstream release 440 series.
- Fixed a bug where a Vulkan application under PRIME render
offload would not always be correctly throttled to vsync despite
@@ -1022,6 +1034,18 @@
-- Andreas Beckmann <anbe at debian.org> Sat, 25 May 2019 13:49:09 +0200
+nvidia-graphics-drivers (418.197.02-1) buster; urgency=medium
+
+ * New upstream Tesla release 418.197.02 (2021-04-19).
+ * Fixed CVE-2021-1076. (Closes: #987216)
+ https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+
+ [ Andreas Beckmann ]
+ * nvidia-alternative: Add libnvidia-ml.so slave alternative if
+ libnvidia-ml-dev is installed (460.56-2). (Closes: #984881)
+
+ -- Andreas Beckmann <anbe at debian.org> Tue, 20 Apr 2021 15:01:59 +0200
+
nvidia-graphics-drivers (418.181.07-1) buster; urgency=medium
* New upstream Tesla release 418.181.07 (2021-01-19).
@@ -1631,6 +1655,19 @@
-- Andreas Beckmann <anbe at debian.org> Sun, 22 Apr 2018 13:59:45 +0200
+nvidia-graphics-drivers (390.143-1) UNRELEASED; urgency=medium
+
+ * New upstream legacy branch release 390.143 (2021-04-19).
+ * Fixed CVE-2021-1076.
+ https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+ - Fixed a bug where vkCreateSwapchain could cause the X Server to crash
+ when an invalid imageFormat was provided.
+ - Fixed a driver installation failure on Linux kernel 5.11 release
+ candidates, where the NVIDIA kernel module failed to build with error
+ "fatal error: asm/kmap_types.h: No such file or directory".
+
+ -- Andreas Beckmann <anbe at debian.org> Mon, 19 Apr 2021 22:38:56 +0200
+
nvidia-graphics-drivers (390.141-1) UNRELEASED; urgency=medium
* New upstream legacy branch release 390.141 (2021-01-07).
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/control.md5sum nvidia-graphics-drivers-460.73.01/debian/control.md5sum
--- nvidia-graphics-drivers-460.67/debian/control.md5sum 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/control.md5sum 2021-04-23 07:59:01.000000000 +0100
@@ -1,5 +1,5 @@
914ae3291e6bc00eb144031fa24760e6 debian/control
cca8534b0eb0491c30b6b657e127b1d0 debian/control.in
db12f898b07cdaf431ad34bd68a1662e debian/gen-control.pl
-ad9f17f1238e39b61a4819e1455f329d debian/rules
-ad2d99597ef1a57bf22688001c2eb3a7 debian/rules.defs
+de7c9eee1eb720f20919408f850af51a debian/rules
+65a302e51a0a1b628058be29ad1f384e debian/rules.defs
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/detect/nvidia-tesla-460.ids nvidia-graphics-drivers-460.73.01/debian/detect/nvidia-tesla-460.ids
--- nvidia-graphics-drivers-460.67/debian/detect/nvidia-tesla-460.ids 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/detect/nvidia-tesla-460.ids 2021-04-23 07:59:01.000000000 +0100
@@ -210,6 +210,7 @@
10DE1CFA
10DE1CFB
10DE1D01
+10DE1D02
10DE1D10
10DE1D11
10DE1D12
@@ -262,6 +263,7 @@
10DE1F08
10DE1F09
10DE1F0A
+10DE1F0B
10DE1F10
10DE1F11
10DE1F12
@@ -283,19 +285,26 @@
10DE1F98
10DE1F99
10DE1F9C
+10DE1F9D
10DE1FB0
+10DE1FB1
+10DE1FB2
10DE1FB8
10DE1FB9
10DE1FBB
+10DE1FDD
10DE1FF9
10DE20B0
10DE20B1
10DE20B2
+10DE20B6
+10DE20B7
10DE20F1
10DE2182
10DE2184
10DE2187
10DE2188
+10DE2189
10DE2191
10DE2192
10DE21C4
@@ -303,6 +312,17 @@
10DE2204
10DE2206
10DE2230
+10DE2231
10DE2235
+10DE2236
+10DE2237
10DE2484
10DE2486
+10DE249C
+10DE249D
+10DE24B0
+10DE24DC
+10DE24DD
+10DE2503
+10DE2520
+10DE2560
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/nvidia-detect.install nvidia-graphics-drivers-460.73.01/debian/nvidia-detect.install
--- nvidia-graphics-drivers-460.67/debian/nvidia-detect.install 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/nvidia-detect.install 2021-04-23 07:59:01.000000000 +0100
@@ -5,4 +5,5 @@
debian/detect/nvidia-tesla-418.ids usr/share/nvidia/ [amd64 ppc64el]
debian/detect/nvidia-tesla-440.ids usr/share/nvidia/ [amd64 ppc64el]
debian/detect/nvidia-tesla-450.ids usr/share/nvidia/ [amd64 arm64 ppc64el]
+debian/detect/nvidia-tesla-460.ids usr/share/nvidia/ [amd64 arm64 ppc64el]
nvidia.ids usr/share/nvidia/ [!ppc64el]
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/nv-readme.ids nvidia-graphics-drivers-460.73.01/debian/nv-readme.ids
--- nvidia-graphics-drivers-460.67/debian/nv-readme.ids 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/nv-readme.ids 2021-04-23 07:59:01.000000000 +0100
@@ -287,6 +287,8 @@
10DE1F9C
10DE1F9D
10DE1FB0
+10DE1FB1
+10DE1FB2
10DE1FB8
10DE1FB9
10DE1FBB
@@ -295,6 +297,8 @@
10DE20B0
10DE20B1
10DE20B2
+10DE20B6
+10DE20B7
10DE20F1
10DE2182
10DE2184
@@ -308,11 +312,15 @@
10DE2204
10DE2206
10DE2230
+10DE2231
10DE2235
+10DE2236
+10DE2237
10DE2484
10DE2486
10DE249C
10DE249D
+10DE24B0
10DE24DC
10DE24DD
10DE2503
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/rules nvidia-graphics-drivers-460.73.01/debian/rules
--- nvidia-graphics-drivers-460.67/debian/rules 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/rules 2021-04-23 07:59:01.000000000 +0100
@@ -166,9 +166,9 @@
sed 's/libGLX_nvidia.so.0/libGL.so.1/' $< > $@
nv-readme.ids: unpack-stamp
- sed -e '0,/A. Supported\|APPENDIX A: SUPPORTED/d' \
- -e '0,/Appendix A. Supported\|APPENDIX A: SUPPORTED/d' \
- -e '0,/^Below\|APPENDIX B/{/ 0x/s/.* 0x\([0-9a-fA-F]\{4\}\).*/10de\1/p; /^.\{41\} [0-9a-fA-F]\{4\} /s/^.\{41\} \([0-9a-fA-F]\{4\}\) .*/10de\1/p};d' \
+ sed -r -e '0,/A. Supported|APPENDIX A: SUPPORTED/d' \
+ -e '0,/Appendix A. Supported|APPENDIX A: SUPPORTED/d' \
+ -e '0,/^Below|APPENDIX B/{/ 0x/s/.* 0x([0-9a-fA-F]{4}).*/10de\1/p; /^(.{41}|.{49}) [0-9a-fA-F]{4} /s/^(.{41}|.{49}) ([0-9a-fA-F]{4}) .*/10de\2/p};d' \
NVIDIA-Linux/README.txt \
| tr a-f A-F | sort -u > $@
@set -e -x ; \
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/rules.defs nvidia-graphics-drivers-460.73.01/debian/rules.defs
--- nvidia-graphics-drivers-460.67/debian/rules.defs 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/rules.defs 2021-04-23 07:59:01.000000000 +0100
@@ -2,7 +2,7 @@
#TESLA_MAJOR =
#NVIDIA_TESLA = $(TESLA_MAJOR)
#NVIDIA_LEGACY =
-WATCH_VERSION =
+WATCH_VERSION = 460
NVIDIA_SETTINGS = nvidia-settings (>= $(version_major))
NVIDIA_LEGACY_CHECK = nvidia-legacy-check (>= 396) [amd64]
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/watch nvidia-graphics-drivers-460.73.01/debian/watch
--- nvidia-graphics-drivers-460.67/debian/watch 2021-03-21 19:51:46.000000000 +0000
+++ nvidia-graphics-drivers-460.73.01/debian/watch 2021-04-23 07:59:01.000000000 +0100
@@ -7,5 +7,5 @@
# https://us.download.nvidia.com/tesla/450.51.05/NVIDIA-Linux-aarch64-450.51.05.run
opts=component=amd64 \
-https://download.nvidia.com/XFree86/Linux-x86_64/(\d[\d\.\-]*)/NVIDIA-Linux-x86_64-(\d[\d\.\-]*)\.run
-#opts=searchmode=plain https://docs.nvidia.com/datacenter/tesla/index.html Version.(\d[\d\.\-]*)
+https://download.nvidia.com/XFree86/Linux-x86_64/(460(?:\.[\d\.\-]+)?)/NVIDIA-Linux-x86_64-(\d[\d\.\-]*)\.run
+#opts=searchmode=plain https://docs.nvidia.com/datacenter/tesla/index.html Version.(460(?:\.[\d\.\-]+)?)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-nvidia-devel/attachments/20210423/8c0b30d6/attachment-0001.sig>
More information about the pkg-nvidia-devel
mailing list