Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian.org@packages.debian.org
Usertags: pu
A huge bunch of CVEs has been fixed upstream in the supported branches
of the proprietary nvidia driver. This is probably related to the
release of an open source variant of the kernel module (with the
proprietary bits being restricted to a firmware blob).
So let's upload a new upstream release to stable.
This is a rebuild of the package from sid with no further changes.
Packaging changes include the addition some new substitutions that are
needed for the packaging of above mentioned open source kernel module
(and are included here in order to mimimize the diff between different
driver series maintained in different releases).
The (tesla-)470 driver also includes the removal of make-kpkg support
and the simplification of the -source package to only support
module-assistant. This change was only backported to 470 but not older
series since only the 470 tesla driver has sufficient upstream support
life left to be included in bookworm.
The changelog diff looks huge due to rewrapping of long lines, but
the relevant changelog entries are only
+nvidia-graphics-drivers-tesla-470 (470.161.03-1~deb11u1) bullseye; urgency=medium
+
+ * Rebuild for bullseye.
+
+ -- Andreas Beckmann <anbe@debian.org> Thu, 08 Dec 2022 15:30:30 +0100
+
+nvidia-graphics-drivers-tesla-470 (470.161.03-1) unstable; urgency=medium
+
+ * New upstream production branch release 470.161.03 (2022-11-22).
+ * Fixed CVE-2022-34670, CVE-2022-34674, CVE-2022-34675, CVE-2022-34677,
+ CVE-2022-34679, CVE-2022-34680, CVE-2022-34682, CVE-2022-42254,
+ CVE-2022-42255, CVE-2022-42256, CVE-2022-42257, CVE-2022-42258,
+ CVE-2022-42259, CVE-2022-42260, CVE-2022-42261, CVE-2022-42262,
+ CVE-2022-42263, CVE-2022-42264. (Closes: #1025285)
+ https://nvidia.custhelp.com/app/answers/detail/a_id/5415
+ - Fixed a bug that caused the Xorg server to crash if an NvFBC capture
+ session is started while video memory is full.
+ * Improved compatibility with recent Linux kernels.
+ * New upstream Tesla release (amd64 only) 470.141.10 (2022-10-19).
+
+ [ Andreas Beckmann ]
+ * Refresh patches.
+ * Add missing #includes to fix kernel module build for ppc64el.
+ * Rename the internally used ARCH variable which might clash on externally
+ set values.
+ * Use substitutions for ${nvidia-kernel} and friends (510.108.03-1).
+ * Try to compile a kernel module at package build time (510.108.03-1).
+
+ -- Andreas Beckmann <anbe@debian.org> Thu, 08 Dec 2022 15:18:42 +0100
+
+nvidia-graphics-drivers-tesla-470 (470.141.03-3) unstable; urgency=medium
+
+ * Backport get_task_ioprio changes from 510.85.02, acpi changes from
+ 510.85.02 and 515.65.01, drm_frambuffer.h changes from 515.76 to fix
+ kernel module build for Linux 6.0. (Closes: #1021974, #1022738)
+
+ -- Andreas Beckmann <anbe@debian.org> Mon, 24 Oct 2022 18:00:40 +0200
+
+nvidia-graphics-drivers-tesla-470 (470.141.03-2) unstable; urgency=medium
+
+ * Rebuild as Tesla 470 driver.
+
+ -- Andreas Beckmann <anbe@debian.org> Tue, 27 Sep 2022 16:37:25 +0200
+
+nvidia-graphics-drivers (470.141.03-2) unstable; urgency=medium
+
+ * Add support for unversioned Tesla packages (tesla 510.85.02-1).
+ (Closes: #1020697)
+ * Switch *-source to a modern module-assistant based template.
+ * Drop support for kernel-package and make-kpkg, gone since stretch.
+
+ -- Andreas Beckmann <anbe@debian.org> Tue, 27 Sep 2022 14:18:14 +0200
debian/README.source | 49 +--
debian/bug-control.mk | 8 +-
debian/build-module-packages.sh.in | 2 +-
debian/changelog | 761 +++++++++++++++++++++++++---------------
debian/control | 27 +-
debian/control.in | 34 +-
debian/control.kmod | 6 +-
debian/control.md5sum | 8 +-
debian/gbp.conf | 2 +-
debian/libglx-nvidia0.lintian-overrides.in | 1 +
debian/module/debian/README.Debian | 11 -
debian/module/debian/clean | 7 -
debian/module/debian/{control.template.binary.in => control.modules.in.binary.in} | 16 +-
debian/module/debian/genchanges | 21 --
debian/module/debian/{install.template.in => install.modules.in.in} | 0
debian/module/debian/kernel-version | 40 ---
debian/module/debian/patches/0009-backport-pci-dma-changes-from-470.129.06.patch | 12 +-
debian/module/debian/patches/bashisms.patch | 2 +-
debian/module/debian/patches/cc_version_check-gcc5.patch | 2 +-
debian/module/debian/patches/conftest-prefer-arch-headers.patch | 2 +-
debian/module/debian/patches/conftest-verbose.patch | 21 +-
debian/module/debian/patches/fragile-ARCH.patch | 36 ++
debian/module/debian/patches/linux-2.6.34-dev_pm_info-runtime_auto.patch | 2 +-
debian/module/debian/patches/ppc64el.patch | 19 +
debian/module/debian/patches/series.in | 7 +-
debian/module/debian/patches/use-kbuild-compiler.patch | 11 +
debian/module/debian/prep-modules | 97 -----
debian/module/debian/rules.in | 132 +++----
debian/module/debian/source/format | 1 -
debian/nvidia-alternative.postinst.in | 8 +-
debian/nvidia-kernel-dkms.dkms.in | 2 +-
debian/nvidia-kernel-source.README.Debian.in | 8 +-
debian/nvidia-kernel-source.install.in | 11 +-
debian/nvidia-kernel-support.install.in | 8 +-
debian/nvidia-modprobe.conf.in | 4 +-
debian/rules | 65 ++--
debian/rules.defs | 3 +-
debian/tests/control | 1 +
debian/tests/control.in | 5 +-
39 files changed, 767 insertions(+), 685 deletions(-)
Andreas
Attachment:
ngd-tesla-470-470.161.03-1~deb11u1.diff.xz
Description: application/xz