[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1025756: marked as done (bullseye-pu: package nvidia-graphics-drivers/470.161.03-1)

Your message dated Sat, 17 Dec 2022 10:57:10 +0000
with message-id <03e9b90cf2f149b9e2835590c9ec0ccb048b744d.camel@adam-barratt.org.uk>
and subject line Closing p-u requests for fixes included in 11.6
has caused the Debian Bug report #1025756,
regarding bullseye-pu: package nvidia-graphics-drivers/470.161.03-1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1025756: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1025756
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian.org@packages.debian.org
Usertags: pu

A huge bunch of CVEs has been fixed upstream in the supported branches
of the proprietary nvidia driver. This is probably related to the
release of an open source variant of the kernel module (with the
proprietary bits being restricted to a firmware blob).

So let's upload a new upstream release to stable.
This is not a backport from sid (which has already a 510 driver which is
not suitable for stable since it drops support for certain cards), but
an equivalent package to the already -pu'ed tesla-470 driver of the same
version.

Packaging changes include the addition some new substitutions that are
needed for the packaging of above mentioned open source kernel module
(and are included here in order to mimimize the diff between different
driver series maintained in different releases).
The (tesla-)470 driver also includes the removal of make-kpkg support
and the simplification of the -source package to only support
module-assistant. This change was only backported to 470 but not older
series since only the 470 tesla driver has sufficient upstream support
life left to be included in bookworm.

The changelog diff looks huge due to rewrapping of long lines, but
the relevant changelog entries are only

+nvidia-graphics-drivers (470.161.03-1) bullseye; urgency=medium
+
+  * New upstream production branch release 470.161.03 (2022-11-22).
+    * Fixed CVE-2022-34670, CVE-2022-34674, CVE-2022-34675, CVE-2022-34677,
+      CVE-2022-34679, CVE-2022-34680, CVE-2022-34682, CVE-2022-42254,
+      CVE-2022-42255, CVE-2022-42256, CVE-2022-42257, CVE-2022-42258,
+      CVE-2022-42259, CVE-2022-42260, CVE-2022-42261, CVE-2022-42262,
+      CVE-2022-42263, CVE-2022-42264.  (Closes: #1025279)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5415
+    - Fixed a bug that caused the Xorg server to crash if an NvFBC capture
+      session is started while video memory is full.
+    * Improved compatibility with recent Linux kernels.  (Closes: #1024852)
+  * New upstream Tesla release (amd64 only) 470.141.10 (2022-10-19).
+
+  [ Andreas Beckmann ]
+  * Refresh patches.
+  * Add missing #includes to fix kernel module build for ppc64el.
+  * Rename the internally used ARCH variable which might clash on externally
+    set values.
+  * Use substitutions for ${nvidia-kernel} and friends (510.108.03-1).
+  * Try to compile a kernel module at package build time (510.108.03-1).
+  * Upload to bullseye.
+
+ -- Andreas Beckmann <anbe@debian.org>  Thu, 08 Dec 2022 17:30:11 +0100
+
+nvidia-graphics-drivers (470.141.03-3) UNRELEASED; urgency=medium
+
+  * Backport get_task_ioprio changes from 510.85.02, acpi changes from
+    510.85.02 and 515.65.01, drm_frambuffer.h changes from 515.76 to fix
+    kernel module build for Linux 6.0.  (Closes: #1021974, #1022738)
+
+ -- Andreas Beckmann <anbe@debian.org>  Mon, 24 Oct 2022 18:00:40 +0200
+
+nvidia-graphics-drivers (470.141.03-2) unstable; urgency=medium
+
+  * Add support for unversioned Tesla packages (tesla 510.85.02-1).
+    (Closes: #1020697)
+  * Switch *-source to a modern module-assistant based template.
+  * Drop support for kernel-package and make-kpkg, gone since stretch.
+
+ -- Andreas Beckmann <anbe@debian.org>  Tue, 27 Sep 2022 14:18:14 +0200

 debian/README.source                                                              |  49 +--
 debian/bug-control.mk                                                             |   8 +-
 debian/build-module-packages.sh.in                                                |   2 +-
 debian/changelog                                                                  | 741 ++++++++++++++++++++++++----------------
 debian/control                                                                    |  30 +-
 debian/control.in                                                                 |  34 +-
 debian/control.kmod                                                               |   6 +-
 debian/control.md5sum                                                             |   8 +-
 debian/libglx-nvidia0.lintian-overrides.in                                        |   1 +
 debian/module/debian/README.Debian                                                |  11 -
 debian/module/debian/clean                                                        |   7 -
 debian/module/debian/{control.template.binary.in => control.modules.in.binary.in} |  16 +-
 debian/module/debian/genchanges                                                   |  21 --
 debian/module/debian/{install.template.in => install.modules.in.in}               |   0
 debian/module/debian/kernel-version                                               |  40 ---
 debian/module/debian/patches/0009-backport-pci-dma-changes-from-470.129.06.patch  |  12 +-
 debian/module/debian/patches/bashisms.patch                                       |   2 +-
 debian/module/debian/patches/cc_version_check-gcc5.patch                          |   2 +-
 debian/module/debian/patches/conftest-prefer-arch-headers.patch                   |   2 +-
 debian/module/debian/patches/conftest-verbose.patch                               |  21 +-
 debian/module/debian/patches/fragile-ARCH.patch                                   |  36 ++
 debian/module/debian/patches/linux-2.6.34-dev_pm_info-runtime_auto.patch          |   2 +-
 debian/module/debian/patches/ppc64el.patch                                        |  19 ++
 debian/module/debian/patches/series.in                                            |   7 +-
 debian/module/debian/patches/use-kbuild-compiler.patch                            |  11 +
 debian/module/debian/prep-modules                                                 |  97 ------
 debian/module/debian/rules.in                                                     | 132 +++----
 debian/module/debian/source/format                                                |   1 -
 debian/nvidia-alternative.postinst.in                                             |   8 +-
 debian/nvidia-kernel-dkms.dkms.in                                                 |   2 +-
 debian/nvidia-kernel-source.README.Debian.in                                      |   8 +-
 debian/nvidia-kernel-source.install.in                                            |  11 +-
 debian/nvidia-kernel-support.install.in                                           |   8 +-
 debian/nvidia-modprobe.conf.in                                                    |   4 +-
 debian/rules                                                                      |  65 ++--
 debian/rules.defs                                                                 |   3 +-
 debian/tests/control                                                              |   1 +
 debian/tests/control.in                                                           |   5 +-
 38 files changed, 747 insertions(+), 686 deletions(-)


Andreas

Attachment: ngd-470.161.03-1.diff.xz
Description: application/xz


--- End Message ---
--- Begin Message --- 
Package: release.debian.org
Version: 11.6

Hi,

Each of the updates referred to in these requests was included in this
morning's 11.6 point release.

Regards,

Adam

--- End Message ---
Reply to: