Bug#987427: unblock: nvidia-graphics-drivers-tesla-460/460.73.01-1

Luca Boccassi bluca at debian.org
Fri Apr 23 18:50:03 BST 2021


Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock
X-Debbugs-Cc: pkg-nvidia-devel at lists.alioth.debian.org

Please unblock package nvidia-graphics-drivers-tesla-460

The new upstream version 460.73.01 fixes a CVE and a several bugs,
all of which affect Bullseye. It also adds support for a few new cards.

X.org crash under certain conditions, and a security vulnerability
(CVE-2021-1076 and CVE-2021-1077, and #987222) has been found in the kernel driver:
https://nvidia.custhelp.com/app/answers/detail/a_id/5172

The inlined debdiff excludes the binary blobs.

unblock nvidia-graphics-drivers-tesla-460/460.73.01-1

-- 
Kind regards,
Luca Boccassi

diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-460-460.32.03/debian/changelog nvidia-graphics-drivers-tesla-460-460.73.01/debian/changelog
--- nvidia-graphics-drivers-tesla-460-460.32.03/debian/changelog	2021-03-13 20:31:33.000000000 +0000
+++ nvidia-graphics-drivers-tesla-460-460.73.01/debian/changelog	2021-04-23 14:20:03.000000000 +0100
@@ -1,3 +1,87 @@
+nvidia-graphics-drivers-tesla-460 (460.73.01-1) unstable; urgency=medium
+
+  * New upstream production branch release 460.73.01 (2021-04-14).
+    * Fixed CVE-2021-1076, CVE-2021-1077.  (Closes: #987222)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Added support for the following GPUs: A10, A10G, A30, PG506-232,
+      RTX A4000, RTX A5000, T400, T600.
+
+  [ Andreas Beckmann ]
+  * Update nv-readme.ids.
+
+ -- Andreas Beckmann <anbe at debian.org>  Fri, 23 Apr 2021 15:20:03 +0200
+
+nvidia-graphics-drivers (460.73.01-1) unstable; urgency=medium
+
+  * New upstream production branch release 460.73.01 (2021-04-14).
+    * Fixed CVE-2021-1076, CVE-2021-1077.  (Closes: #987216)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Added support for the following GPUs: A10, A10G, A30, PG506-232,
+      RTX A4000, RTX A5000, T400, T600.
+
+  [ Andreas Beckmann ]
+  * Update nv-readme.ids.
+  * Restrict watch file to releases from the 460.xx production branch.
+
+ -- Andreas Beckmann <anbe at debian.org>  Fri, 23 Apr 2021 08:59:01 +0200
+
+nvidia-graphics-drivers (460.67-1) unstable; urgency=medium
+
+  * New upstream production branch release 460.67 (2021-03-18).
+    - Fixed a bug where using ray tracing extensions on multi-GPU setups could
+      result in application instability if the GPUs did not match.
+    - Fixed an issue that prevented G-SYNC from working properly after a mode
+      switch on Kepler-based GPUs.
+
+  [ Luca Boccassi ]
+  * Update nv-readme.ids.
+
+ -- Andreas Beckmann <anbe at debian.org>  Sun, 21 Mar 2021 20:51:46 +0100
+
+nvidia-graphics-drivers (460.56-2) unstable; urgency=medium
+
+  * nvidia-alternative: Add libnvidia-ml.so slave alternative if
+    libnvidia-ml-dev is installed.  (Closes: #984881)
+
+ -- Andreas Beckmann <anbe at debian.org>  Wed, 10 Mar 2021 21:03:59 +0100
+
+nvidia-graphics-drivers (460.56-1) unstable; urgency=medium
+
+  * New upstream production branch release 460.56 (2021-02-25).
+    - Added support for the following GPUs: GeForce RTX 3060, CMP 40HX,
+      CMP 30HX.
+    - Fixed a bug with indexed ray payloads in Vulkan.
+
+  [ Luca Boccassi ]
+  * Update nv-readme.ids.
+
+  [ Andreas Beckmann ]
+  * Switch to dh-sequence-dkms.
+  * Simplify dh_dkms usage.
+
+ -- Andreas Beckmann <anbe at debian.org>  Sun, 28 Feb 2021 00:26:36 +0100
+
+nvidia-graphics-drivers (460.39-1) unstable; urgency=medium
+
+  * New upstream production branch release 460.39 (2021-01-26).
+    - Updated the NVIDIA driver to restore functionality of some features,
+      including runtime power management, hotplugging audio-capable display
+      devices, and S0ix-based system suspend, with recent kernels such as
+      Linux 5.10.  (Closes: #981187)
+    - Fixed a bug that caused bindless texture samplers to be incorrectly
+      counted towards the MAX_COMPUTE_TEXTURE_IMAGE_UNITS limit.
+    - Fixed a bug that could cause the GPU to hang when attempting to
+      perform link training on an HDMI 2.1 Fixed Rate Link (FRL) display,
+      while the display is powered off.
+    - Added support for the following GPUs: GeForce RTX 3080 Laptop GPU,
+      GeForce RTX 3070 Laptop GPU, GeForce RTX 3060 Laptop GPU,
+      GeForce GT 1010.
+
+  [ Andreas Beckmann ]
+  * Update nv-readme.ids.
+
+ -- Andreas Beckmann <anbe at debian.org>  Thu, 28 Jan 2021 01:33:29 +0100
+
 nvidia-graphics-drivers-tesla-460 (460.32.03-3) unstable; urgency=medium
 
   * Switch to dh-sequence-dkms (460.56-1).
@@ -152,10 +236,6 @@
       xf86-video-intel driver.
     - Fixed a bug in a Vulkan barrier optimization that allowed some
       back-to-back copies to run unordered.
-  * New upstream release 450 series.
-    - Fixed a performance regression in the NVIDIA X driver which affected
-      some X11 RENDER extension use cases.
-    - Added AMD Secure Memory Encryption compatibility.
 
   [ Andreas Beckmann ]
   * Update nv-readme.ids.
@@ -168,11 +248,6 @@
     - Fixed a bug that caused X to crash when the NVIDIA RandR provider was
       disabled while using an NVIDIA-driven display as a PRIME Display Offload
       sink.  (Closes: #972860)
-  * New upstream release 450 series.
-    - Fixed a bug where glGetGraphicsResetStatusARB would incorrectly
-      return GL_PURGED_CONTEXT_RESET_NV immediately after application
-      start-up if the system had previously been suspended.
-    - Added support for the following GPUs: A100 Graphics Device.
 
   [ Luca Boccassi ]
   * Update nv-readme.ids.
@@ -235,6 +310,24 @@
 
  -- Andreas Beckmann <anbe at debian.org>  Thu, 24 Sep 2020 21:52:54 +0200
 
+nvidia-graphics-drivers-tesla-450 (450.119.03-1) unstable; urgency=medium
+
+  * New upstream Tesla release 450.119.03 (2021-04-19).
+    * Fixed CVE-2021-1076, CVE-2021-1077.  (Closes: #987221)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Fixed a driver installation failure on Linux kernel 5.11 release
+      candidates, where the NVIDIA kernel module failed to build with error
+      "error: implicit declaration of function 'sys_close'".
+    - Fixed a bug where calls to vkCreateDevice could fail on Ampere GPUs when
+      ray tracing extensions were enabled and the application was running within
+      the Steam Linux Runtime.
+    - Fixed a regression that could cause display corruption when using
+      a scaled resolution after resuming from power management suspend.
+    - Fixed a bug that could intermittently cause NvFBC applications to fail
+      with the error message "Unable to send exported fds".
+
+ -- Andreas Beckmann <anbe at debian.org>  Thu, 22 Apr 2021 21:13:14 +0200
+
 nvidia-graphics-drivers-tesla-450 (450.102.04-2) unstable; urgency=medium
 
   * Switch to dh-sequence-dkms (460.56-1).
@@ -495,7 +588,6 @@
       display offload sinks, also known as "Reverse PRIME". See the chapter
       titled "Offloading Graphics Display with RandR 1.4" in the README for
       additional information.
-    - Removed 'libGL.la' libtool archive from the install package.
   * New upstream release 440 series.
     - Fixed a bug where a Vulkan application under PRIME render
       offload would not always be correctly throttled to vsync despite
@@ -1053,6 +1145,26 @@
 
  -- Andreas Beckmann <anbe at debian.org>  Sat, 25 May 2019 13:49:09 +0200
 
+nvidia-graphics-drivers-tesla-418 (418.197.02-1) unstable; urgency=medium
+
+  * New upstream Tesla release 418.197.02 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987219)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+
+ -- Andreas Beckmann <anbe at debian.org>  Tue, 20 Apr 2021 16:15:04 +0200
+
+nvidia-graphics-drivers (418.197.02-1) buster; urgency=medium
+
+  * New upstream Tesla release 418.197.02 (2021-04-19).
+    * Fixed CVE-2021-1076.  (Closes: #987216)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+
+  [ Andreas Beckmann ]
+  * nvidia-alternative: Add libnvidia-ml.so slave alternative if
+    libnvidia-ml-dev is installed (460.56-2).  (Closes: #984881)
+
+ -- Andreas Beckmann <anbe at debian.org>  Tue, 20 Apr 2021 15:01:59 +0200
+
 nvidia-graphics-drivers-tesla-418 (418.181.07-2) unstable; urgency=medium
 
   * Switch to dh-sequence-dkms (460.56-1).
@@ -1772,6 +1884,19 @@
 
  -- Andreas Beckmann <anbe at debian.org>  Sun, 22 Apr 2018 13:59:45 +0200
 
+nvidia-graphics-drivers (390.143-1) UNRELEASED; urgency=medium
+
+  * New upstream legacy branch release 390.143 (2021-04-19).
+    * Fixed CVE-2021-1076.
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5172
+    - Fixed a bug where vkCreateSwapchain could cause the X Server to crash
+      when an invalid imageFormat was provided.
+    - Fixed a driver installation failure on Linux kernel 5.11 release
+      candidates, where the NVIDIA kernel module failed to build with error
+      "fatal error: asm/kmap_types.h: No such file or directory".
+
+ -- Andreas Beckmann <anbe at debian.org>  Mon, 19 Apr 2021 22:38:56 +0200
+
 nvidia-graphics-drivers (390.141-1) UNRELEASED; urgency=medium
 
   * New upstream legacy branch release 390.141 (2021-01-07).
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-460-460.32.03/debian/control.md5sum nvidia-graphics-drivers-tesla-460-460.73.01/debian/control.md5sum
--- nvidia-graphics-drivers-tesla-460-460.32.03/debian/control.md5sum	2021-03-13 20:31:33.000000000 +0000
+++ nvidia-graphics-drivers-tesla-460-460.73.01/debian/control.md5sum	2021-04-23 14:20:03.000000000 +0100
@@ -1,5 +1,5 @@
 47e50c38210eecf62d3c0fce1da4b9a6  debian/control
 90da2424e40c605c9a321a0c6df09731  debian/control.in
 db12f898b07cdaf431ad34bd68a1662e  debian/gen-control.pl
-ad9f17f1238e39b61a4819e1455f329d  debian/rules
+de7c9eee1eb720f20919408f850af51a  debian/rules
 4ffe2180d86093ce6cf421063a86517e  debian/rules.defs
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-460-460.32.03/debian/detect/nvidia-tesla-460.ids nvidia-graphics-drivers-tesla-460-460.73.01/debian/detect/nvidia-tesla-460.ids
--- nvidia-graphics-drivers-tesla-460-460.32.03/debian/detect/nvidia-tesla-460.ids	2021-03-13 20:31:33.000000000 +0000
+++ nvidia-graphics-drivers-tesla-460-460.73.01/debian/detect/nvidia-tesla-460.ids	2021-04-23 14:20:03.000000000 +0100
@@ -210,6 +210,7 @@
 10DE1CFA
 10DE1CFB
 10DE1D01
+10DE1D02
 10DE1D10
 10DE1D11
 10DE1D12
@@ -262,6 +263,7 @@
 10DE1F08
 10DE1F09
 10DE1F0A
+10DE1F0B
 10DE1F10
 10DE1F11
 10DE1F12
@@ -283,19 +285,26 @@
 10DE1F98
 10DE1F99
 10DE1F9C
+10DE1F9D
 10DE1FB0
+10DE1FB1
+10DE1FB2
 10DE1FB8
 10DE1FB9
 10DE1FBB
+10DE1FDD
 10DE1FF9
 10DE20B0
 10DE20B1
 10DE20B2
+10DE20B6
+10DE20B7
 10DE20F1
 10DE2182
 10DE2184
 10DE2187
 10DE2188
+10DE2189
 10DE2191
 10DE2192
 10DE21C4
@@ -303,6 +312,17 @@
 10DE2204
 10DE2206
 10DE2230
+10DE2231
 10DE2235
+10DE2236
+10DE2237
 10DE2484
 10DE2486
+10DE249C
+10DE249D
+10DE24B0
+10DE24DC
+10DE24DD
+10DE2503
+10DE2520
+10DE2560
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-460-460.32.03/debian/nvidia-detect.install nvidia-graphics-drivers-tesla-460-460.73.01/debian/nvidia-detect.install
--- nvidia-graphics-drivers-tesla-460-460.32.03/debian/nvidia-detect.install	2021-03-13 20:31:33.000000000 +0000
+++ nvidia-graphics-drivers-tesla-460-460.73.01/debian/nvidia-detect.install	2021-04-23 14:20:03.000000000 +0100
@@ -5,4 +5,5 @@
 debian/detect/nvidia-tesla-418.ids		usr/share/nvidia/	[amd64 ppc64el]
 debian/detect/nvidia-tesla-440.ids		usr/share/nvidia/	[amd64 ppc64el]
 debian/detect/nvidia-tesla-450.ids		usr/share/nvidia/	[amd64 arm64 ppc64el]
+debian/detect/nvidia-tesla-460.ids		usr/share/nvidia/	[amd64 arm64 ppc64el]
 nvidia.ids					usr/share/nvidia/	[!ppc64el]
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-460-460.32.03/debian/nv-readme.ids nvidia-graphics-drivers-tesla-460-460.73.01/debian/nv-readme.ids
--- nvidia-graphics-drivers-tesla-460-460.32.03/debian/nv-readme.ids	2021-03-13 20:31:33.000000000 +0000
+++ nvidia-graphics-drivers-tesla-460-460.73.01/debian/nv-readme.ids	2021-04-23 14:20:03.000000000 +0100
@@ -210,6 +210,7 @@
 10DE1CFA
 10DE1CFB
 10DE1D01
+10DE1D02
 10DE1D10
 10DE1D11
 10DE1D12
@@ -262,6 +263,7 @@
 10DE1F08
 10DE1F09
 10DE1F0A
+10DE1F0B
 10DE1F10
 10DE1F11
 10DE1F12
@@ -283,19 +285,26 @@
 10DE1F98
 10DE1F99
 10DE1F9C
+10DE1F9D
 10DE1FB0
+10DE1FB1
+10DE1FB2
 10DE1FB8
 10DE1FB9
 10DE1FBB
+10DE1FDD
 10DE1FF9
 10DE20B0
 10DE20B1
 10DE20B2
+10DE20B6
+10DE20B7
 10DE20F1
 10DE2182
 10DE2184
 10DE2187
 10DE2188
+10DE2189
 10DE2191
 10DE2192
 10DE21C4
@@ -303,6 +312,17 @@
 10DE2204
 10DE2206
 10DE2230
+10DE2231
 10DE2235
+10DE2236
+10DE2237
 10DE2484
 10DE2486
+10DE249C
+10DE249D
+10DE24B0
+10DE24DC
+10DE24DD
+10DE2503
+10DE2520
+10DE2560
diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-tesla-460-460.32.03/debian/rules nvidia-graphics-drivers-tesla-460-460.73.01/debian/rules
--- nvidia-graphics-drivers-tesla-460-460.32.03/debian/rules	2021-03-13 20:31:33.000000000 +0000
+++ nvidia-graphics-drivers-tesla-460-460.73.01/debian/rules	2021-04-23 14:20:03.000000000 +0100
@@ -166,9 +166,9 @@
 	sed 's/libGLX_nvidia.so.0/libGL.so.1/' $< > $@
 
 nv-readme.ids: unpack-stamp
-	sed	-e '0,/A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/Appendix A. Supported\|APPENDIX A: SUPPORTED/d' \
-		-e '0,/^Below\|APPENDIX B/{/ 0x/s/.*  0x\([0-9a-fA-F]\{4\}\).*/10de\1/p; /^.\{41\} [0-9a-fA-F]\{4\} /s/^.\{41\} \([0-9a-fA-F]\{4\}\) .*/10de\1/p};d' \
+	sed -r	-e '0,/A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/Appendix A. Supported|APPENDIX A: SUPPORTED/d' \
+		-e '0,/^Below|APPENDIX B/{/ 0x/s/.*  0x([0-9a-fA-F]{4}).*/10de\1/p; /^(.{41}|.{49}) [0-9a-fA-F]{4} /s/^(.{41}|.{49}) ([0-9a-fA-F]{4}) .*/10de\2/p};d' \
 		NVIDIA-Linux/README.txt \
 		| tr a-f A-F | sort -u > $@
 	@set -e -x ; \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-nvidia-devel/attachments/20210423/f602e0ee/attachment-0001.sig>


More information about the pkg-nvidia-devel mailing list