<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<atom:link href="https://dev1galaxy.org/extern.php?action=feed&amp;tid=8244&amp;type=rss" rel="self" type="application/rss+xml" />
		<title><![CDATA[Dev1 Galaxy Forum / Nvidia drivers with security issues - what solutions for Devuan 6?]]></title>
		<link>https://dev1galaxy.org/viewtopic.php?id=8244</link>
		<description><![CDATA[The most recent posts in Nvidia drivers with security issues - what solutions for Devuan 6?.]]></description>
		<lastBuildDate>Tue, 13 Oct 2026 22:32:18 +0000</lastBuildDate>
		<generator>FluxBB</generator>
		<item>
			<title><![CDATA[Re: Nvidia drivers with security issues - what solutions for Devuan 6?]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=66054#p66054</link>
			<description><![CDATA[<p>Hi<br />Another thought following your point re the mess using the Nvidia run files causes. That is use of containerisation. </p><p>Reading this post, developers are using that concept by putting the driver in the opt folder <a href="https://forums.developer.nvidia.com/t/clear-linux-error-unable-to-load-the-nvidia-drm-kernel-module-gtx-970/124836/15" rel="nofollow">https://forums.developer.nvidia.com/t/c … /124836/15</a></p><p>However they are having to use the the utility prefix,&#160; open gl prefix and 32 bit compatibility libraries to avoid messing up the usr bin folders and the usr libraries. The prefixes used and what they do is in the Nvidia installer code options section <a href="https://github.com/NVIDIA/nvidia-installer/blob/main/option_table.h" rel="nofollow">https://github.com/NVIDIA/nvidia-instal … on_table.h</a></p><p>We can see in this post that a user called wild tux <a href="https://forums.developer.nvidia.com/t/libnvidia-wfb-so-issue-with-custom-install/46411" rel="nofollow">https://forums.developer.nvidia.com/t/l … tall/46411</a> had to set x prefix back to usr. <br />These links help infer the risk of having X11&#160; items sandboxed and hence why the defaults for these are not to sandbox to avoid a display server crash</p><p>This is far as I have got. I then started getting a bit lost. It would need someone with more experience to advise if this kind of approach has any legs</p>]]></description>
			<author><![CDATA[dummy@example.com (SS)]]></author>
			<pubDate>Tue, 13 Oct 2026 22:32:18 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=66054#p66054</guid>
		</item>
		<item>
			<title><![CDATA[Re: Nvidia drivers with security issues - what solutions for Devuan 6?]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=66030#p66030</link>
			<description><![CDATA[<p>Hi<br />I did a bit of reading as I have a 4k screen on my laptop with the same card,&#160; but no idea if this would work. I haven&#039;t got round to trying to set up the Nvidia card on it at all. </p><p>1. The Cuda drivers are proprietary not open source.<br />2. The Nvidia guide talks of creating a preferences.d file to ensure pinning is applied to ensure only the 580 version is used when later updates are run <a href="https://docs.nvidia.com/datacenter/tesla/driver-installation-guide/version-locking.html" rel="nofollow">https://docs.nvidia.com/datacenter/tesl … cking.html</a><br />3. The log file here explains why the pinning method is advised by Nvidia <a href="https://forums.developer.nvidia.com/t/debian-cuda-drivers-580-package-580-105-08-1-improperly-pulls-in-v590-components/353805" rel="nofollow">https://forums.developer.nvidia.com/t/d … nts/353805</a><br />4. The NVDC section of the Debian wiki advises to use the pinning method with caveats. <a href="https://wiki.debian.org/NvidiaGraphicsDrivers#Simplified_NV_DC_driver_installation_instructions_on_D-12_.26_D-13" rel="nofollow">https://wiki.debian.org/NvidiaGraphicsD … 2_.26_D-13</a></p><p>This might or might not help. I am new to Devuan and not a developer, but sharing incase of use</p>]]></description>
			<author><![CDATA[dummy@example.com (SS)]]></author>
			<pubDate>Tue, 13 Oct 2026 16:37:37 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=66030#p66030</guid>
		</item>
		<item>
			<title><![CDATA[Re: Nvidia drivers with security issues - what solutions for Devuan 6?]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=66029#p66029</link>
			<description><![CDATA[<p>I have seen somebody claim that MX Linux supports older NVidia graphics. They are said to patch the drivers and adapt them to newer kernels. </p><p>I have no personal experience with MX. </p><p>I stay away from that special graphics company since I started with Linux more than 20 years ago.</p>]]></description>
			<author><![CDATA[dummy@example.com (rolfie)]]></author>
			<pubDate>Tue, 13 Oct 2026 10:34:39 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=66029#p66029</guid>
		</item>
		<item>
			<title><![CDATA[Re: Nvidia drivers with security issues - what solutions for Devuan 6?]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=66023#p66023</link>
			<description><![CDATA[<p>90 vulnerabilities listed...</p><p>Unfortunately, the old advice still stands. As Debian &quot;freeze&quot; the stable release, the Nvidia proprietary driver will most likely remain at that version. So the usual course of action is to install from the Nvidia shellscript (and reinstall from that after every kernel update). As it&#039;s a proprietary driver, no backporting of any security fixes is possible.</p><p>I have always taken the view that Debian simply should not have packaged these from day one, as this is old ground we have been going over for the last 20+ years.</p><p>The Debian wiki article discourages Nvidia hardware and also highlights the &quot;planned obsolescence&quot; aspects - but this is also relevant to AMD and Intel, which it appears to endorse.</p>]]></description>
			<author><![CDATA[dummy@example.com (blackhole)]]></author>
			<pubDate>Tue, 13 Oct 2026 08:17:16 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=66023#p66023</guid>
		</item>
		<item>
			<title><![CDATA[Re: Nvidia drivers with security issues - what solutions for Devuan 6?]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=66017#p66017</link>
			<description><![CDATA[<p>After further investigation I found that apparently even the 580.xx drivers in the official Nvidia repo only include the open source kernel drivers and therefore are not suitable for cards older than the GTX 16xx.</p><div class="quotebox"><blockquote><div><p>The proprietary kernel modules have been removed. The open kernel modules are now the only kernel module flavor provided.</p></div></blockquote></div><p><a href="https://docs.nvidia.com/datacenter/tesla/driver-installation-guide/recent-updates.html" rel="nofollow">https://docs.nvidia.com/datacenter/tesl … dates.html</a></p><p>Therefore for cards older than the GTX 16xx series (that require the proprietary kernel modules) the only options are either use the generic unpackaged Linux driver from the Nvidia driver download page ( <a href="https://www.nvidia.com/en-us/drivers/" rel="nofollow">https://www.nvidia.com/en-us/drivers/</a> ) with all the mess that causes on the filesystem, or wait and hope that the Debian maintainers make the drivers available as deb package in backports.</p><p>Or does anyone here have a better idea?</p>]]></description>
			<author><![CDATA[dummy@example.com (tux_99)]]></author>
			<pubDate>Mon, 12 Oct 2026 21:09:43 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=66017#p66017</guid>
		</item>
		<item>
			<title><![CDATA[Nvidia drivers with security issues - what solutions for Devuan 6?]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=66012#p66012</link>
			<description><![CDATA[<p>As you might know already, two weeks ago Nvidia announced a long list of high-severity CVEs that affect all but their latest drivers.<br />See here: <a href="https://nvidia.custhelp.com/app/answers/detail/a_id/5861" rel="nofollow">https://nvidia.custhelp.com/app/answers … /a_id/5861</a></p><p>The minimum driver version that has fixes for those CVEs is <strong>580.178.04</strong></p><p>Debian is stuck on 550.163.01 even for unstable, there is no sign of the 580 branch drivers (or any even newer branch), not even in experimental: <a href="https://tracker.debian.org/pkg/nvidia-graphics-drivers" rel="nofollow">https://tracker.debian.org/pkg/nvidia-graphics-drivers</a></p><p>To be fair Debian doesn&#039;t officially support the Nvidia drivers as they are in the non-free repo so if they want they can just ignore this (although it looks <span class="bbu">very bad</span> having such important drivers with so many CVEs in an official repo).</p><p>Nvidia themselves provide an official&#160; repo with driver packages for Debian 13, but the oldest driver branch in this repo is 590 which only works for newer cards (<strong>GTX 16xx</strong> onwards): <a href="https://developer.download.nvidia.com/compute/cuda/repos/debian13/x86_64/" rel="nofollow">https://developer.download.nvidia.com/c … 13/x86_64/</a><br />Switching to this repo could be a good solution for anyone with newer cards (GTX 16xx onwards).</p><p>I have a GTX 1050 so I need the 580.xx driver branch.</p><p>Nvidia has the 580.178.04 driver (the version with all CVEs fixed) both in their Ubuntu 24.04 and in their Debian 12 repos:<br /><a href="https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64/" rel="nofollow">https://developer.download.nvidia.com/c … 12/x86_64/</a><br /><a href="https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2404/x86_64/" rel="nofollow">https://developer.download.nvidia.com/c … 04/x86_64/</a></p><p>I read that some people installed the 580.xx drivers from the Debian 12 repo on Debian 13 and apparently it worked for them.</p><p>OTOH Ubuntu 2404 seems to be more version-aligned with Debian 13 / Devuan 6 than Debian 12.<br />Do you think that on Devuan 6 it might be a better idea to try the 580.xx drivers for Ubuntu 2404 or the ones for Debian 12?</p><p>Or should I continue to wait and hope that the Debian Nvidia driver maintainers eventually catch up and make the patched 580.178.04 driver available in Debian 13 backports?<br />Is there any chance that this will happen within the next few weeks?</p><p>What are other Devuan 6 + Nvidia users here planning to do?</p>]]></description>
			<author><![CDATA[dummy@example.com (tux_99)]]></author>
			<pubDate>Mon, 12 Oct 2026 19:35:06 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=66012#p66012</guid>
		</item>
	</channel>
</rss>
