Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian....@packages.debian.org
Usertags: pu

[ Reason ]
In order to receive further upstream support (i.e. CVE fixes), we need
to switch src:nvidia-graphics-drivers from the 525 series (EoL 12/2023)
to the 535 series, a new LTSB branch sufficient for the lifetime of
bookworm. (The first 535 beta appeared during deep freeze of bookworm.)
This driver supports a superset of the GPUs supported by the 525
drivers, no GPUs have been dropped.

New metapackage: nvidia-driver-full
Removed package: libnvidia-compiler (internal library)
New package:     libnvidia-pkcs11-openssl3 (internal library)

[ Impact ]
A proprietary driver with unfixed CVEs.

[ Tests ]
Only installability and module build tests, everything else would
require use of nvidia hardware and driver.

[ Risks ]
Switching nvidia driver branches and updating to new upstream
releases in stable has been done in the past.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
      The final changelog entries for uploads to sid and bookworm are
      still missing, but I expect no further changes than that.
  [*] I reviewed all changes and I approve them
      (Excluding the blobs.)
  [*] attach debdiff against the package in (old)stable
      (Excluding the blobs.)
  [ ] the issue is verified as fixed in unstable
      I'm currently doing interoperability tests with
      src:nvidia-open-gpu-kernel-modules. (These two source packages
      need to be updated together due to the strict firmware
      dependency.) An upload to bookworm will only happen after the
      package is in sid.

[ Changes ]
 debian/README.source                               |   4 +-
 debian/changelog                                   | 548 ++++++++++++++++++---
 debian/control                                     |  85 +++-
 debian/control.in                                  |  83 +++-
 debian/control.md5sum                              |   6 +-
 debian/copyright                                   | 525 +++++++++++++-------
 debian/firmware-nvidia-gsp.install.in              |   1 +
 debian/gbp.conf                                    |   2 +-
 debian/libcuda1.lintian-overrides.in               |   2 +-
 debian/libcuda1.symbols                            |  17 +
 debian/libnvcuvid1.symbols                         |   8 +
 debian/libnvidia-compiler.install.in               |   1 -
 debian/libnvidia-compiler.symbols.in               |  25 -
 debian/libnvidia-encode1.symbols                   |   8 +
 debian/libnvidia-glcore.lintian-overrides.in       |   1 +
 debian/libnvidia-glvkspirv.symbols.in              |   5 +
 debian/libnvidia-ml1.symbols                       |  36 +-
 debian/libnvidia-ngx1.symbols                      |   4 +
 debian/libnvidia-nvvm4.symbols                     |  20 +-
 debian/libnvidia-pkcs11-openssl3.install.in        |   1 +
 ...libnvidia-pkcs11-openssl3.lintian-overrides.in} |  10 +-
 debian/libnvidia-pkcs11-openssl3.symbols.in        |   2 +
 .../libnvidia-ptxjitcompiler1.lintian-overrides.in |   4 +-
 debian/libnvidia-rtcore.lintian-overrides.in       |   2 +-
 debian/libnvoptix1.install.in                      |   1 +
 debian/not-installed.in                            |   2 +
 debian/nv-readme-open.ids                          |   5 +
 debian/nv-readme.ids                               |  17 +
 debian/nvidia-alternative.postinst.in              |   1 +
 debian/nvidia-opencl-icd.lintian-overrides.in      |   2 +-
 debian/patches/man-fixes-nvidia-smi.patch          |  69 +--
 ...-minimum-supported-kernel-version-to-3.10.patch |   4 +-
 ...-remove-empty-lines-from-uts_release-outp.patch |   6 +-
 debian/patches/module/0034-fix-typos.patch         |  24 +-
 ...35-fix-build-w-kernel-6.1.76-6.6.15-6.7.3.patch |  99 ----
 debian/patches/module/bashisms.patch               |   2 +-
 debian/patches/module/cc_version_check-gcc5.patch  |   2 +-
 .../module/conftest-prefer-arch-headers.patch      |   2 +-
 debian/patches/module/conftest-verbose.patch       |  14 +-
 debian/patches/module/ppc64el.patch                |  19 -
 debian/patches/module/series.in                    |   2 -
 debian/patches/module/use-kbuild-compiler.patch    |   2 +-
 debian/patches/module/use-kbuild-flags.patch       |   2 +-
 debian/rules                                       |  27 +-
 debian/watch                                       |   4 +-
 45 files changed, 1156 insertions(+), 550 deletions(-)

Besides the three new/removed packages there are only minor packaging
changes this time. 

[ Other info ]
This is a rebuild of the package from sid with no further changes.
This update will require updates of nvidia-settings, nvidia-xconfig,
nvidia-persistenced, nvidia-modprobe to keep the major version in sync
(and therefore avoid user confusion). These packages will most likely be
untouched on further updates of src:nvidia-graphics-drivers 535.*.
There will be no update of src:nvidia-graphics-drivers-tesla which has
already been turned into transitional packages.
(src:nvidia-graphics-drivers-tesla-470 has already been updated in -pu.)

Andreas

Attachment: ngd-535.diff.xz
Description: application/xz

Reply via email to