Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian....@packages.debian.org
Usertags: pu
Control: affects -1 + src:nvidia-graphics-drivers

[ Reason ]
Let's update nvidia-graphics-drivers in bullseye to a new upstream
release to fix some CVEs.

At the same time I'll switch to the Tesla driver series, i.e. add
blobs for ppc64el and enable building the package for ppc64el.
(S.t. it is in line with the handling of nvidia-graphics-drivers in
stable and sid.)
nvidia-cuda-mps will be built from this package instead of
src:n-g-d-tesla-470.
That makes the package essentially identical to
src:nvidia-graphics-drivers-tesla-470.

[ Impact ]
A proprietary graphics driver with some unfixed CVEs.

[ Tests ]
The module can only be build-tested, everything else would require use
of nvidia hardware and driver.

[ Risks ]
Updating n-g-d in oldstable to a new upstream release has been done
previously without problems.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
      (excluding the blobs)
  [*] attach debdiff against the package in (old)stable
      (excluding the binary .run file)
  [.] the issue is verified as fixed in unstable
      (so far as src:nvidia-graphics-drivers-tesla-470,
      src:nvidia-graphics-drivers is still being prepared)

[ Changes ]
nvidia-graphics-drivers (470.239.06-1) bullseye; urgency=medium

  * New upstream long term support branch release 470.239.06 (2024-02-22).
    * Fixed CVE-2024-0074, CVE-2024-0078, CVE-2022-42265.  (Closes: #1064983)
      https://nvidia.custhelp.com/app/answers/detail/a_id/5520
    * Improved compatibility with recent Linux kernels.

  [ Andreas Beckmann ]
  * Refresh patches.
  * Upload to bullseye.

 -- Andreas Beckmann <a...@debian.org>  Thu, 29 Feb 2024 00:25:42 +0100

nvidia-graphics-drivers (470.223.02-4) UNRELEASED; urgency=medium

  * Apply pfn_valid patch from gentoo to fix kernel module build for
    Linux 6.1.76, 6.6.15, 6.7.3, 6.8.  (Closes: #1063361)
  * Update lintian overrides.

 -- Andreas Beckmann <a...@debian.org>  Thu, 08 Feb 2024 14:23:21 +0100

nvidia-graphics-drivers (470.223.02-3) UNRELEASED; urgency=medium

  * Switch src:nvidia-graphics-drivers to the Tesla 470 driver series.
  * Build for ppc64el.
  * Build all unversioned packages from src:nvidia-graphics-drivers.
  * New Romanian (ro) debconf translations by Remus-Gabriel Chelu.

 -- Andreas Beckmann <a...@debian.org>  Thu, 25 Jan 2024 19:48:07 +0100

 debian/README.source                               |  63 ++-
 debian/bug-control.mk                              |   4 +-
 debian/changelog                                   | 359 +++++++++++++++--
 debian/control                                     |  79 ++--
 debian/control.in                                  |   2 +-
 debian/control.md5sum                              |   8 +-
 debian/copyright                                   |   8 +-
 debian/detect/nvidia-418.ids                       | 304 --------------
 debian/detect/nvidia-470.ids                       | 439 ---------------------
 debian/detect/nvidia-detect.in                     |  76 ++--
 debian/gbp.conf                                    |   1 +
 debian/libnvidia-eglcore.lintian-overrides.in      |   1 +
 debian/libnvidia-glcore.lintian-overrides.in       |   1 +
 ...anagement-features-were-not-yet-in-Linux.patch} |  14 +-
 ...-includes-to-fix-module-build-for-ppc64el.patch |  30 ++
 debian/module/debian/patches/0034-fix-typos.patch  |  62 +++
 debian/module/debian/patches/bashisms.patch        |   2 +-
 .../debian/patches/cc_version_check-gcc5.patch     |   2 +-
 debian/module/debian/patches/ppc64el.patch         |  19 -
 debian/module/debian/patches/series.in             |   5 +-
 debian/not-installed.in                            |   5 -
 debian/nvidia-detect.install                       |   4 +-
 debian/patches/legacy-470.patch                    |   2 +-
 debian/po/ro.po                                    |  81 ++++
 debian/rules                                       |  15 +-
 debian/rules.defs                                  |   9 +-
 debian/source/lintian-overrides                    |   1 +
 debian/tests/autopkgtest-pkg-dkms.conf             |   2 +-
 debian/tests/control                               |  10 +-
 debian/tests/control.in                            |   8 +
 debian/watch                                       |   8 +-
 debian/watch.in                                    |   8 +-
 32 files changed, 685 insertions(+), 947 deletions(-)

The big changelog delta comes from changelog unification when switching
to the Tesla drivers.
The patch mentioned in 470.223.02-4 has been superseded by the new
upstream release.
The nvidia-detect changes are part of the switch to the Tesla driver.


[ Other info ]
This time there is no need to expedite this update via stable-updates.

Deviating from stable, I'll not turn
src:nvidia-graphics-drivers-tesla-470 into transitional packages (even
if it will be identical to src:nvidia-graphics-drivers in bullseye after
the addition of ppc64el) because in bookworm src:n-g-d-tesla-470 does
still exist (as non-transitional package supporting some legacy cards
and at a much older version than src:n-g-d).

In order to complete the enabling of ppc64el, we need to update
src:nvidia-settings, too.


Andreas

Attachment: ngd-470.239.06-1.diff.xz
Description: application/xz

Reply via email to