Bug#848829: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1

[Adam D. Barratt]

Control: tags -1 + pending

On Sat, 2016-12-31 at 17:17 +, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Tue, 2016-12-20 at 03:09 +0100, Andreas Beckmann wrote:
> > for fixing CVE-2016-8826, CVE-2016-7382, CVE-2016-7389 in
> > nvidia-graphics-drivers-legacy-304xx we need to update to a new upstream
> > version.
> > 
> > The packaging contains further changes to
> > * switch from our manually maintained conftest.h (that had to be updated
> >   for each new upstream release) to using upstream's conftest.sh script
> >   instead. This required backporting several build system fixes for the
> >   kernel module.
> > * switch the source layout to have one .orig-$ARCH.tar.gz per
> >   architecture
> > * backport minor fixes and description updates from sid
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#848829: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #848829 [release.debian.org] jessie-pu: package 
nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1
Added tag(s) pending.

-- 
848829: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848829
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#848829: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1

[Adam D. Barratt]

Control: tags -1 + confirmed

On Tue, 2016-12-20 at 03:09 +0100, Andreas Beckmann wrote:
> for fixing CVE-2016-8826, CVE-2016-7382, CVE-2016-7389 in
> nvidia-graphics-drivers-legacy-304xx we need to update to a new upstream
> version.
> 
> The packaging contains further changes to
> * switch from our manually maintained conftest.h (that had to be updated
>   for each new upstream release) to using upstream's conftest.sh script
>   instead. This required backporting several build system fixes for the
>   kernel module.
> * switch the source layout to have one .orig-$ARCH.tar.gz per
>   architecture
> * backport minor fixes and description updates from sid

Please go ahead.

Regards,

Adam

Processed: Re: Bug#848829: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + confirmed
Bug #848829 [release.debian.org] jessie-pu: package 
nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1
Added tag(s) confirmed.

-- 
848829: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848829
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#848829: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1

[Andreas Beckmann]

Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

Hi,

for fixing CVE-2016-8826, CVE-2016-7382, CVE-2016-7389 in
nvidia-graphics-drivers-legacy-304xx we need to update to a new upstream
version.

The packaging contains further changes to
* switch from our manually maintained conftest.h (that had to be updated
  for each new upstream release) to using upstream's conftest.sh script
  instead. This required backporting several build system fixes for the
  kernel module.
* switch the source layout to have one .orig-$ARCH.tar.gz per
  architecture
* backport minor fixes and description updates from sid


+nvidia-graphics-drivers-legacy-304xx (304.134-0~deb8u1) jessie; urgency=medium
+
+  * New upstream legacy 304xx branch release 304.134 (2016-12-14).
+* Fixed CVE-2016-8826.  (Closes: #848195)
+- Added support for X.Org xserver ABI 23 (xorg-server 1.19)
+* Improved compatibility with recent Linux kernels.
+  * New upstream legacy 304xx branch release 304.132 (2016-09-26).
+* Fixed CVE-2016-7382, CVE-2016-7389.  (Closes: #846331)
+- Added /var/log/dmesg to the list of paths which are searched by
+  nvidia-bug-report.sh for kernel messages.
+- Fixed a bug that caused kernel panics when using the NVIDIA driver on
+  v4.5 and newer Linux kernels built with CONFIG_DEBUG_VM_PGFLAGS.
+* Improved compatibility with recent Linux kernels.
+
+  [ Andreas Beckmann ]
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-304xx 304.134-1:
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-340xx 340.101-1:
+  * Synchronize packaging with nvidia-graphics-drivers 370.28-2:
+- Overhaul package descriptions.
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-304xx 304.132-1:
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-340xx 340.98-1:
+  * Synchronize packaging with nvidia-graphics-drivers 358.16-1:
+- get-orig-source: Generate .orig-$ARCH.tar.gz for each architecture.
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-304xx 304.131-4:
+  * Synchronize kernel module build with nvidia-graphics-drivers:
+- Simplify maintaining the module build process.
+- Use NVIDIA's conftest.sh script to determine settings during module
+  build instead of our manually maintained conftest.h header.
+- Hand over as much as possible to Kbuild.
+- Support building a 64-bit kernel module with 32-bit userspace.
+  * Synchronize get-orig-source target with nvidia-graphics-drivers.
+  * Synchronize bug-control, bug-script target with nvidia-graphics-drivers.
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-340xx 340.96-4:
+  * Synchronize packaging with nvidia-graphics-drivers 352.79-6:
+- Stop special-casing the nvidia-alternative substitution.
+- Add B-D: dpkg-dev (>= 1.17.0) for dpkg-parsechangelog --show-field.
+- Bump Standards-Version to 3.9.8. No changes needed.
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-340xx 340.96-3:
+  * Synchronize packaging with nvidia-graphics-drivers 352.79-5:
+- Drop incomplete Perfkit support.
+- Support building a 64-bit kernel module with 32-bit userspace.
+  * Synchronize packaging with nvidia-graphics-drivers 352.79-4:
+- nvidia-legacy-304xx-kernel-source: Switch to debhelper compat level 9.
+- rules: Drop support for ancient .run layout.
+- debian/bug-control.mk: New script to generate bug-control.
+  * Synchronize packaging with nvidia-graphics-drivers 352.79-3:
+- rules, rules.defs: Synchronize variable naming with unstable.
+  * Synchronize packaging with nvidia-graphics-drivers-legacy-304xx 304.131-3:
+- Add disable-mtrr.patch to disable MTRR in the kernel module if
+  building on 4.3 or greater, where the deprecated APIs the kernel module
+  uses are no longer exported, causing a failure when the module is
+  loaded at runtime.  (Closes: #809324)
+  * Drop some packaging bits needed for 340.xx and newer drivers only.
+  * Depend on a setuid root Xserver.  (Closes: #805554)
+  * Add xorg-video-abi-23 as alternative dependency.  (Closes: #845639)
+  * nvidia-legacy-304xx-alternative: Restrict Depends: glx-alternative-nvidia
+to (<< 0.7). Uploading a new upstream legacy release to stable will
+invalidate package relationships in unstable, thus permitting some
+(partial) upgrade paths that will fail.
+  * Update lintian overrides.
+
+ -- Andreas Beckmann   Tue, 20 Dec 2016 02:17:01 +0100

Andreas


ngd-304xx-304.134-0~deb8u1.patch.gz
Description: application/gzip