Package: release.debian.org Severity: normal Tags: trixie User: [email protected] Usertags: pu X-Debbugs-Cc: [email protected] Control: affects -1 + src:nvidia-graphics-drivers-tesla-535
[ Reason ] For fixing some CVEs we need a new upstream release of the proprietary nvidia-graphics-drivers-tesla-535 in stable. [ Impact ] (What is the impact for the user if the update isn't approved?) [ Tests ] Only build testing of the kernel module, also by autopkgtests. Anything else would require a NVIDIA GPU and using the proprietary driver. [ Risks ] Low. Updating src:nvidia-graphics-drivers* in stable to new upstream releases is an established procedure. [ Checklist ] [*] *all* changes are documented in the d/changelog [*] I reviewed all changes and I approve them [*] attach debdiff against the package in (old)stable [*] the issue is verified as fixed in unstable [ Changes ] This is a rebuild of the package from sid with no further changes. [ Other info ] - Andreas
diff --git a/debian/changelog b/debian/changelog index 3fc2a5132..32875b536 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,21 @@ +nvidia-graphics-drivers-tesla-535 (535.274.02-1~deb13u1) trixie; urgency=medium + + * Rebuild for trixie. + + -- Andreas Beckmann <[email protected]> Mon, 27 Oct 2025 01:04:58 +0100 + +nvidia-graphics-drivers-tesla-535 (535.274.02-1) unstable; urgency=medium + + * New upstream LTS and Tesla branch release 535.274.02 (2025-09-30). + * Fixed CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, CVE-2025-23330, + CVE-2025-23332, CVE-2025-23345. (Closes: #1118688) + https://nvidia.custhelp.com/app/answers/detail/a_id/5703 + + [ Andreas Beckmann ] + * Refresh patches. + + -- Andreas Beckmann <[email protected]> Sat, 25 Oct 2025 22:45:02 +0200 + nvidia-graphics-drivers-tesla-535 (535.261.03-1) unstable; urgency=medium * New upstream LTS and Tesla branch release 535.261.03 (2025-07-17). diff --git a/debian/control.md5sum b/debian/control.md5sum index 9c3d56009..67d9c3cf2 100644 --- a/debian/control.md5sum +++ b/debian/control.md5sum @@ -2,4 +2,4 @@ b5e274c2a7ae898a2ad8747528ca49c8 debian/control 6badaaf7d6a2aaa8f6b177a15cddb705 debian/control.in 8489c83cfe0171c9de6d052c01a6d19b debian/gen-control.pl edf87fc3e75d36637927cd4358266ae1 debian/rules -741c32fc957febf522831cc9b119431d debian/rules.defs +b4f17427c846b0ffed21ca5128df141f debian/rules.defs diff --git a/debian/copyright b/debian/copyright index 61367bb53..43561016f 100644 --- a/debian/copyright +++ b/debian/copyright @@ -16,7 +16,7 @@ Files: amd64/* arm64/* Copyright: - 1993-2023 NVIDIA Corporation. All rights reserved. + (c) 1993-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved. License: NVIDIA-graphics-drivers Files: supported-gpus/supported-gpus.json @@ -42,7 +42,7 @@ License: GPL-2.0+ Files: debian/patches/* Copyright: - (c) 1993-2022 NVIDIA CORPORATION & AFFILIATES. All rights reserved. + (c) 1993-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved. License: Expat Comment: Except where noted otherwise, the individual kernel module source files diff --git a/debian/patches/module/0002-conftest.sh-remove-empty-lines-from-uts_release-outp.patch b/debian/patches/module/0002-conftest.sh-remove-empty-lines-from-uts_release-outp.patch index b5fe78cba..e176b50be 100644 --- a/debian/patches/module/0002-conftest.sh-remove-empty-lines-from-uts_release-outp.patch +++ b/debian/patches/module/0002-conftest.sh-remove-empty-lines-from-uts_release-outp.patch @@ -1,4 +1,4 @@ -From c273e7506268be0ca9810464f2c98f19f9fd5f3a Mon Sep 17 00:00:00 2001 +From f2d5397d4dfbcc14511b812290ef97e1fc79e311 Mon Sep 17 00:00:00 2001 From: Andreas Beckmann <[email protected]> Date: Mon, 31 Oct 2022 14:40:42 +0100 Subject: [PATCH] conftest.sh: remove empty lines from uts_release output @@ -8,10 +8,10 @@ Subject: [PATCH] conftest.sh: remove empty lines from uts_release output 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conftest.sh b/conftest.sh -index 79baf185..012bc0dc 100755 +index 6136cb57..0326a6d7 100755 --- a/conftest.sh +++ b/conftest.sh -@@ -5958,7 +5958,7 @@ compile_test() { +@@ -5995,7 +5995,7 @@ compile_test() { echo "#include <generated/utsrelease.h> UTS_RELEASE" > conftest$$.c diff --git a/debian/patches/module/0034-fix-typos.patch b/debian/patches/module/0034-fix-typos.patch index bcb52c8b6..2d9f29c48 100644 --- a/debian/patches/module/0034-fix-typos.patch +++ b/debian/patches/module/0034-fix-typos.patch @@ -1,4 +1,4 @@ -From f4fdb2cdb13d4b50f19565ba91682af77cf846a9 Mon Sep 17 00:00:00 2001 +From bf19bfcf8d485ac9058edeab0db627ef9ec7cf50 Mon Sep 17 00:00:00 2001 From: Andreas Beckmann <[email protected]> Date: Wed, 31 Jan 2024 03:06:19 +0100 Subject: [PATCH] fix typos @@ -31,10 +31,10 @@ index ee5eef43..30326157 100644 (g_uvm_perf_thrashing_lapse_usec == UVM_PERF_THRASHING_LAPSE_USEC_DEFAULT)) { va_space_thrashing->params.lapse_ns = UVM_PERF_THRASHING_LAPSE_USEC_DEFAULT_EMULATION * 1000; diff --git a/nvidia/nv.c b/nvidia/nv.c -index f49e8dd7..499a55e3 100644 +index bee58531..458b71e8 100644 --- a/nvidia/nv.c +++ b/nvidia/nv.c -@@ -4483,7 +4483,7 @@ NvU64 NV_API_CALL nv_get_dma_start_address( +@@ -4506,7 +4506,7 @@ NvU64 NV_API_CALL nv_get_dma_start_address( * Otherwise, the DMA start address only needs to be set once, and it * won't change afterward. Just return the cached value if asked again, * to avoid the kernel printing redundant messages to the kernel diff --git a/debian/patches/module/0060-backport-module_import_ns_takes_string_literal-chang.patch b/debian/patches/module/0060-backport-module_import_ns_takes_string_literal-chang.patch index 9edd89f40..d32c64de6 100644 --- a/debian/patches/module/0060-backport-module_import_ns_takes_string_literal-chang.patch +++ b/debian/patches/module/0060-backport-module_import_ns_takes_string_literal-chang.patch @@ -1,4 +1,4 @@ -From e080e43c4f0ff8d861f29821b3a319a8933e49cd Mon Sep 17 00:00:00 2001 +From 082c51f8fc48fa1911168e7813316de2b720ccc5 Mon Sep 17 00:00:00 2001 From: Andreas Beckmann <[email protected]> Date: Fri, 21 Feb 2025 10:21:42 +0100 Subject: [PATCH] backport module_import_ns_takes_string_literal changes from @@ -10,10 +10,10 @@ Subject: [PATCH] backport module_import_ns_takes_string_literal changes from 2 files changed, 18 insertions(+) diff --git a/conftest.sh b/conftest.sh -index 012bc0dc..aae3b07a 100755 +index 0326a6d7..a2dbd2d0 100755 --- a/conftest.sh +++ b/conftest.sh -@@ -5490,6 +5490,23 @@ compile_test() { +@@ -5527,6 +5527,23 @@ compile_test() { else echo "#undef NV_OF_PROPERTY_READ_VARIABLE_U32_ARRAY_PRESENT" | append_conftest "functions" fi diff --git a/debian/patches/module/bashisms.patch b/debian/patches/module/bashisms.patch index bb6dfa0db..d7539b400 100644 --- a/debian/patches/module/bashisms.patch +++ b/debian/patches/module/bashisms.patch @@ -3,7 +3,7 @@ Description: fix bashisms in conftest.sh --- a/conftest.sh +++ b/conftest.sh -@@ -7039,7 +7039,7 @@ case "$5" in +@@ -7076,7 +7076,7 @@ case "$5" in if [ -n "$VGX_BUILD" ]; then if [ -f /proc/xen/capabilities ]; then diff --git a/debian/patches/module/cc_version_check-gcc5.patch b/debian/patches/module/cc_version_check-gcc5.patch index dc8648bdd..b40e4d684 100644 --- a/debian/patches/module/cc_version_check-gcc5.patch +++ b/debian/patches/module/cc_version_check-gcc5.patch @@ -5,7 +5,7 @@ Description: ignore __GNUC_MINOR__ from GCC 5 onwards --- a/conftest.sh +++ b/conftest.sh -@@ -6873,7 +6873,7 @@ case "$5" in +@@ -6910,7 +6910,7 @@ case "$5" in kernel_cc_minor=`echo ${kernel_cc_version} | cut -d '.' -f 2` echo " diff --git a/debian/rules.defs b/debian/rules.defs index 42dcb1686..33cab180d 100644 --- a/debian/rules.defs +++ b/debian/rules.defs @@ -5,7 +5,7 @@ NVIDIA_TESLA = $(TESLA_MAJOR) XORG_ABI_LIST = 25 24 23 20 19 18 15 14 13 12 11 10 8 6.0 XORG_BOUND = (<< 2:21.99) -LINUX_KMOD_TESTED = 6.15 +LINUX_KMOD_TESTED = 6.16 ARCH_LIST = amd64 ARCH_LIST += i386
