Hi,

regarding the update of nvidia-graphics drivers for LTS a short update
from my side.

I was looking at upstream's 535 series, which is the base candidate for
the udate targeting bullseye. 535 was a LTSB release but has now also
reached end of life Jun 1st. The latest release by upstream is
535.309.01, released Apr 23 this year. It seems to me that this will be
the last update for the 535 series, as it is now EOL.

Choosing this version will include fixes for 
 - CVE-2025-33219 (fixed with 535.288.01)
 - CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, CVE-2025-23330, 
   CVE-2025-23332 and CVE-2025-23345 (fixed with 535.274.02)
 - CVE-2025-23286, CVE-2025-23279 (fixed with 535.261.03)

Bookworm is at 535.261.03, so bookworm should also to be updated to
avoid regressions when people updating their bullseye installation to
bookworm. Bookworm has also nvidia-graphics-driver-tesla-535, so this
will be an additional set of updates.

Question is if we should also have a nvidia-graphics-driver-tesla-535
for bullseye; (I probably wouldn't at this time.)

Beside the nvidia-graphics-driver package, the support packages
"nvidia-modprobe" and "nvidia-settings" have to be updated as well.

Although nvidia-settings is necessary only for the autopkg testsuite for
nvidia-graphics-driver, I think this is a good reason to have it.
nvidia-settings needs additionally "libxnvctrl" updated.

It would probably makes sense to also update nvidia-persistenced,
but I think this is not absolutely necessary, so I'll defer that for
now.

I've have local packages available for bullseye and tested them already
on real hardware, looking good so far,

Next step is to finalize the packaging updates and putting them
somewhere to allow wider testing.

-- 
Cheers, 
tobi


On Tue, Jan 20, 2026 at 06:22:14PM -0300, Santiago Ruano Rincón wrote:
> Hello Andreas,
> 
> Gentle ping :-)
> 
> El 07/12/25 a las 11:23, Tobias Frost escribió:
> > Hi Andreas,
> > 
> > do you have already something to test for me?
> > 
> > -- 
> > Cheers,
> > tobi
> > 
> > On Thu, Oct 30, 2025 at 10:50:58PM +0100, Tobias Frost wrote:
> > > On Wed, Oct 29, 2025 at 07:33:12PM +0100, Andreas Beckmann wrote:
> > > > On 10/26/25 16:12, Tobias Frost wrote:
> > > > > Hi Andreas,
> > > > > 
> > > > > Hope you are doing fine! I was wondering if we are waiting for each 
> > > > > other,
> > > > > so I thought I'll poke a bit in regards to updating nvidia for 
> > > > > bullseye.
> > > > > 
> > > > > Depending what you prefer, I can take over to prepare the uploads, or 
> > > > > if
> > > > > you prefer to handle it yourself, just let me know!
> > > > 
> > > > We have probably been waiting for each other ;-)
> > > > 
> > > > But a few days ago I've uploaded a new 535.xx upstream release fixing a 
> > > > few
> > > > CVEs as n-g-d-tesla-535 (535.274.02-1), so we should probably upload 
> > > > that to
> > > > bullseye. But first I need to prepare the -pu requests for trixie
> > > > (n-g-d-t-535, done) and bookworm (n-g-d).
> > > > Once I've done that, should I prepare bullseye builds for you to test 
> > > > the
> > > > new version?
> > > 
> > > Sounds like a plan! Yeah, I'll test them!
> > > 
> > > tobi
> 
> The 535.274.02-1 pu for bookworm still need to be done before, right?
> 
> [snip]
> 
> Cheers,
> 
> -- 
> Santiago Ruano Rincón ◈  Freexian SARL
> https://www.freexian.com


Attachment: signature.asc
Description: PGP signature

Reply via email to