Hello all, El 24/06/25 a las 14:06, Sylvain Beucler escribió: > Hi, > > On 24/06/2025 12:57, Andreas Beckmann wrote: > > On 6/23/25 20:51, Tobias Frost wrote: > > > Therefore I'd suggest to drop support for nvidia-graphics-drivers and > > > add it to debian-security-support. > > > > No objections. I never attempted this road because I cnosidered non-free > > as not-supported anyway. Just for clarity and completeness, this is the from the Security (Team) FAQ: Q: How is security handled for contrib, non-free and non-free-firmware? A: The short answer is: it's not. Contrib, non-free and non-free-firmware aren't official parts of the Debian Distribution and are not released, and thus not supported by the security team. Some non-free packages are distributed without source or without a license allowing the distribution of modified versions. In those cases no security fixes can be made at all. If it is possible to fix the problem, and the package maintainer or someone else provides correct updated packages, then the security team will generally process them and release an advisory. https://www.debian.org/security/faq#contrib > non-free is not supported, but some of the LTS sponsors use non-free > packages, so LTS provides updates for these when possible. Exactly. > For clarity, instead of debian-security-support, we can reference > nvidia-graphics-drivers in security-support-bullseye.yml in our internal > repo. This may require an exchange with the sponsor (adding coordinator in > Cc:). Unless we decide to (and are able to) backport a newer version. I plan to contact directly the sponsor to study the impact of (officially) stopping supporting nvidia-graphics-driver. But before that, it would be helpful to know if a full version backport is technically possible or not. Help with that will be very appreciated. Any volunteers? > > nvidia-graphics-drivers-tesla-470 is not sponsored and can be left as-is > IMHO. > > Cheers! > Sylvain Beucler > Debian LTS Team > Cheers, -- Santiago
Attachment:
signature.asc
Description: PGP signature