Control: fixed -1 384.111-1 Control: tags -1 stretch On Wed, 2018-01-10 at 15:11 +0100, Julien Aubin wrote: > Package: nvidia-driver > Version: 375.82-1~deb9u1 > Severity: critical > > Hi, > > NVidia upgraded their blob to version 384.111 in order to fix Spectre > / > Meltdown vulnerability. It turns out that the 375.xx branch is no > longer > supported, so we cannot expect getting driver patches for the current > stretch drivers. > > More details on this bulletin : > https://nvidia.custhelp.com/app/answers/detail/a_id/4611 > > What I suggest is first to put the 384.111 driver in BPO, and then > once > we've checked it is good enough put it in the next p-u so that users > are no > longer vulnerable. > > What do you think of it ? > > Rgds,
I'm a little confused as what their blobs could possible have to do with spectre/meltdown to be honest - but in general it sounds like a good idea to move 384 to stable-p-u, since it's won't be the last CVE we get and as you said 375 is dead and buried. Andreas, what do you think? -- Kind regards, Luca Boccassi
signature.asc
Description: This is a digitally signed message part
