[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1039854: marked as done (bullseye-pu: package nvidia-graphics-drivers/470.199.02-1)

Your message dated Sat, 07 Oct 2023 12:41:28 +0100
with message-id <84bb5ff8312f749ebe536897993782bf35aa1977.camel@adam-barratt.org.uk>
and subject line Closing opu requests for updates included in 11.8
has caused the Debian Bug report #1039854,
regarding bullseye-pu: package nvidia-graphics-drivers/470.199.02-1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1039854: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1039854
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian.org@packages.debian.org
Usertags: pu

[ Reason ]
Let's update nvidia-graphics-drivers in bullseye to a new
upstream release fixing some CVEs.

[ Impact ]
A proprietary graphics driver with more CVEs open.

[ Tests ]
Only module building has been tested. Anything else would require
certain hardware and driver usage.

[ Risks ]
Low. Upgrading to a new nvidia driver release in stable is an
established procedure.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
      (excluding the blobs)
  [x] attach debdiff against the package in (old)stable
      (excluding the blobs)
  [ ] the issue is verified as fixed in unstable
      will be fixed with an upload of the 525 driver soon

[ Changes ]
This package is nearly identical to
src:nvidia-graphics-drivers-tesla-470 470.199.02-1* in
sid/bookworm (soon)/bullseye (soon).
There are no packaging changes this time ;-)

[ Other info ]
n/a

Andreas

diff --git a/debian/README.source b/debian/README.source
index 05196920..f12ec8c5 100644
--- a/debian/README.source
+++ b/debian/README.source
@@ -33,7 +33,7 @@ Upstream support timeframes
     Tesla 460 (PB)      01/2022 EoL
     Tesla 470 (LTSB)    07/2024
     Tesla 510 (PB)      01/2023 EoL
-    Tesla 515 (PB)      05/2023
+    Tesla 515 (PB)      05/2023 EoL
     Tesla 525 (PB)      12/2023
 
 
@@ -67,20 +67,12 @@ The branch structure in the GIT repository
     460-tesla           EoL   (bullseye)          470-tesla, tesla-460/main
     tesla-460/main      EoL   (bullseye),(sid)    tesla-470/main, tesla-460/transition-470
     tesla-460/transition-470  bullseye,sid
-    470                       bullseye            510, 470-tesla
-    470-tesla                 (bullseye)          510-tesla, tesla-470/main
-    tesla-470/main            bullseye,bookworm,sid tesla-510/main
-    510                 EoL   (bookworm),sid      515, 510-tesla
-    510-tesla           EoL   (bookworm)          515-tesla, tesla-510/main
-    tesla-510/main      EoL   (bookworm),(sid)    tesla/510, tesla-510/transition
-    tesla-510/transition      sid
-    tesla/510           EoL   (bookworm),sid      tesla/515
-    515                       (bookworm),sid      525, 515-tesla
-    515-tesla                 (bookworm)          525-tesla, tesla/515
-    tesla/515                 (bookworm),sid      tesla/525
-    525                       (bookworm),sid      YYY, 525-tesla
+    470                       bullseye            525, 470-tesla
+    470-tesla                 (bullseye)          525-tesla, tesla-470/main
+    tesla-470/main            bullseye,bookworm,sid tesla/525
+    525                       bookworm,sid        YYY, 525-tesla
     525-tesla                 (bookworm)          ZZZ-tesla, tesla/525
-    tesla/525                 (bookworm),sid      tesla/ZZZ
+    tesla/525                 bookworm,sid        tesla/ZZZ
     main                      sid                 YYY
     tesla/main                sid
     YYY                       experimental        ZZZ, (main)
diff --git a/debian/changelog b/debian/changelog
index 3cfb9f5c..13cf2635 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,25 @@
+nvidia-graphics-drivers (470.199.02-1) bullseye; urgency=medium
+
+  * New upstream production branch release 470.199.02 (2023-06-26).
+    * Fixed CVE-2023-25515, CVE-2023-25516.  (Closes: #1039678)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5468
+    * Improved compatibility with recent Linux kernels.
+
+  [ Andreas Beckmann ]
+  * Refresh patches.
+  * Upload to bullseye.
+
+ -- Andreas Beckmann <anbe@debian.org>  Wed, 28 Jun 2023 23:20:58 +0200
+
+nvidia-graphics-drivers (470.182.03-2) UNRELEASED; urgency=medium
+
+  * Backport vm_area_struct_has_const_vm_flags changes from 470.199.02 to fix
+    kernel module build for Linux 6.3.
+  * Backport drm_driver_has_dumb_destroy changes from 525.116.03 to fix kernel
+    module build for Linux 6.4.
+
+ -- Andreas Beckmann <anbe@debian.org>  Sun, 18 Jun 2023 14:02:19 +0200
+
 nvidia-graphics-drivers (470.182.03-1) bullseye; urgency=medium
 
   * New upstream production branch release 470.182.03 (2023-03-30).
@@ -6,6 +28,12 @@ nvidia-graphics-drivers (470.182.03-1) bullseye; urgency=medium
       CVE-2023-0190, CVE-2023-0194, CVE-2023-0195, CVE-2023-0191.
       https://nvidia.custhelp.com/app/answers/detail/a_id/5452
       (Closes: #1033774)
+    - Fixed a bug that could cause fullscreen PRIME Render Offload
+      applications and/or X to crash when an NVIDIA GPU is driving
+      multiple displays with Reverse PRIME.
+    - Added support for console restoration when using simpledrm.
+    - Disabled Fixed Rate Link (FRL) when using passive DisplayPort
+      to HDMI dongles, which are incompatible with FRL.
     * Improved compatibility with recent Linux kernels.
 
   [ Andreas Beckmann ]
@@ -546,6 +574,20 @@ nvidia-graphics-drivers (465.24.02-1) experimental; urgency=medium
 
  -- Andreas Beckmann <anbe@debian.org>  Tue, 27 Apr 2021 18:48:53 +0200
 
+nvidia-graphics-drivers (460.106.00-12) UNRELEASED; urgency=medium
+
+  * Backport drm_driver_has_dumb_destroy changes from 525.116.03 to fix kernel
+    module build for Linux 6.4.
+
+ -- Andreas Beckmann <anbe@debian.org>  Fri, 16 Jun 2023 18:50:07 +0200
+
+nvidia-graphics-drivers (460.106.00-11) UNRELEASED; urgency=medium
+
+  * Backport vm_area_struct_has_const_vm_flags changes from 470.199.02 to fix
+    kernel module build for Linux 6.3.
+
+ -- Andreas Beckmann <anbe@debian.org>  Fri, 16 Jun 2023 12:59:21 +0200
+
 nvidia-graphics-drivers (460.106.00-10) UNRELEASED; urgency=medium
 
   * Backport acpi_op_remove changes from 470.182.03 to fix kernel module build
@@ -973,6 +1015,32 @@ nvidia-graphics-drivers (455.23.04-1) experimental; urgency=medium
 
  -- Andreas Beckmann <anbe@debian.org>  Thu, 24 Sep 2020 21:52:54 +0200
 
+nvidia-graphics-drivers (450.248.02-1) UNRELEASED; urgency=medium
+
+  * New upstream Tesla release 450.248.02 (2023-06-26).
+    * Fixed CVE-2023-25515, CVE-2023-25516.
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5468
+    * Improved compatibility with recent Linux kernels.
+
+  [ Andreas Beckmann ]
+  * Refresh patches.
+
+ -- Andreas Beckmann <anbe@debian.org>  Wed, 28 Jun 2023 20:01:45 +0200
+
+nvidia-graphics-drivers (450.236.01-3) UNRELEASED; urgency=medium
+
+  * Backport drm_driver_has_dumb_destroy changes from 525.116.03 to fix kernel
+    module build for Linux 6.4.
+
+ -- Andreas Beckmann <anbe@debian.org>  Fri, 16 Jun 2023 18:29:09 +0200
+
+nvidia-graphics-drivers (450.236.01-2) UNRELEASED; urgency=medium
+
+  * Backport vm_area_struct_has_const_vm_flags changes from 470.199.02 to fix
+    kernel module build for Linux 6.3.
+
+ -- Andreas Beckmann <anbe@debian.org>  Fri, 16 Jun 2023 10:54:54 +0200
+
 nvidia-graphics-drivers (450.236.01-1) UNRELEASED; urgency=medium
 
   * New upstream Tesla release 450.236.01 (2023-03-30).
@@ -1883,6 +1951,20 @@ nvidia-graphics-drivers (430.14-1) experimental; urgency=medium
 
  -- Andreas Beckmann <anbe@debian.org>  Sat, 25 May 2019 13:49:09 +0200
 
+nvidia-graphics-drivers (418.226.00-12) UNRELEASED; urgency=medium
+
+  * Backport drm_driver_has_dumb_destroy changes from 525.116.03 to fix kernel
+    module build for Linux 6.4.
+
+ -- Andreas Beckmann <anbe@debian.org>  Fri, 16 Jun 2023 17:43:27 +0200
+
+nvidia-graphics-drivers (418.226.00-11) UNRELEASED; urgency=medium
+
+  * Backport vm_area_struct_has_const_vm_flags changes from 470.199.02 to fix
+    kernel module build for Linux 6.3.
+
+ -- Andreas Beckmann <anbe@debian.org>  Thu, 15 Jun 2023 14:07:08 +0200
+
 nvidia-graphics-drivers (418.226.00-10) UNRELEASED; urgency=medium
 
   * Backport acpi_op_remove changes from 470.182.03 to fix kernel module build
@@ -2632,6 +2714,20 @@ nvidia-graphics-drivers (396.18-1) experimental; urgency=medium
 
  -- Andreas Beckmann <anbe@debian.org>  Sun, 22 Apr 2018 13:59:45 +0200
 
+nvidia-graphics-drivers (390.157-4) UNRELEASED; urgency=medium
+
+  * Backport drm_driver_has_dumb_destroy changes from 525.116.03 to fix kernel
+    module build for Linux 6.4.
+
+ -- Andreas Beckmann <anbe@debian.org>  Fri, 16 Jun 2023 17:29:02 +0200
+
+nvidia-graphics-drivers (390.157-3) UNRELEASED; urgency=medium
+
+  * Backport vm_area_struct_has_const_vm_flags changes from 470.199.02 to fix
+    kernel module build for Linux 6.3.
+
+ -- Andreas Beckmann <anbe@debian.org>  Thu, 15 Jun 2023 10:01:34 +0200
+
 nvidia-graphics-drivers (390.157-2) UNRELEASED; urgency=medium
 
   * Backport acpi_op_remove changes from 470.182.03 to fix kernel module build
@@ -5423,6 +5519,9 @@ nvidia-graphics-drivers (343.22-1) experimental; urgency=medium
 
 nvidia-graphics-drivers (340.108-2) UNRELEASED; urgency=medium
 
+  * Backport vm_area_struct_has_const_vm_flags changes from 470.199.02 to fix
+    kernel module build for Linux 6.3.
+
   * Backport acpi_op_remove changes from 470.182.03 to fix kernel module build
     for Linux 6.2.
 
diff --git a/debian/control.md5sum b/debian/control.md5sum
index 61d9f79e..76e5a243 100644
--- a/debian/control.md5sum
+++ b/debian/control.md5sum
@@ -2,4 +2,4 @@
 a03b1c3511020f2bae70f2b938d106ee  debian/control.in
 8489c83cfe0171c9de6d052c01a6d19b  debian/gen-control.pl
 38c5abbc803a9ccc4c7356d7bb12e641  debian/rules
-cd7b084d9134f50237577569f86c4720  debian/rules.defs
+9b6a75c099315e21ed4bad4dedb3a0c7  debian/rules.defs
diff --git a/debian/module/debian/patches/bashisms.patch b/debian/module/debian/patches/bashisms.patch
index c7ed225b..b3b77a67 100644
--- a/debian/module/debian/patches/bashisms.patch
+++ b/debian/module/debian/patches/bashisms.patch
@@ -3,7 +3,7 @@ Description: fix bashisms in conftest.sh
 
 --- a/conftest.sh
 +++ b/conftest.sh
-@@ -5108,7 +5108,7 @@ case "$5" in
+@@ -5151,7 +5151,7 @@ case "$5" in
  
          if [ -n "$VGX_BUILD" ]; then
              if [ -f /proc/xen/capabilities ]; then
diff --git a/debian/module/debian/patches/cc_version_check-gcc5.patch b/debian/module/debian/patches/cc_version_check-gcc5.patch
index d8f33c8a..e836edf6 100644
--- a/debian/module/debian/patches/cc_version_check-gcc5.patch
+++ b/debian/module/debian/patches/cc_version_check-gcc5.patch
@@ -5,7 +5,7 @@ Description: ignore __GNUC_MINOR__ from GCC 5 onwards
 
 --- a/conftest.sh
 +++ b/conftest.sh
-@@ -4938,7 +4938,7 @@ case "$5" in
+@@ -4981,7 +4981,7 @@ case "$5" in
          kernel_cc_minor=`echo ${kernel_cc_version} | cut -d '.' -f 2`
  
          echo "
diff --git a/debian/rules.defs b/debian/rules.defs
index 381d7f9e..97fda3f3 100644
--- a/debian/rules.defs
+++ b/debian/rules.defs
@@ -11,7 +11,7 @@ NVIDIA_LEGACY_CHECK	 = nvidia-legacy-check (>= 396) [amd64]
 XORG_ABI_LIST		 = 25 24 23 20 19 18 15 14 13 12 11 10 8 6.0
 XORG_BOUND		 = (<< 2:21.99)
 
-LINUX_KMOD_TESTED	 = 6.2
+LINUX_KMOD_TESTED	 = 6.4
 
 ARCH_LIST		 = amd64
 ARCH_LIST		+= i386
diff --git a/debian/source/lintian-overrides b/debian/source/lintian-overrides
index db64088c..4d74d9a0 100644
--- a/debian/source/lintian-overrides
+++ b/debian/source/lintian-overrides
@@ -18,4 +18,3 @@ package-placeholder-in-symbols-file
 # only binary releases
 upstream-metadata-missing-repository
 very-long-line-length-in-source-file * > 512 [*/NVIDIA-Linux-*-*.run:*]
-unicode-trojan * [*/NVIDIA-Linux-*-*.run:*]

--- End Message ---
--- Begin Message --- 
Package: release.debian.org
Version: 11.8

Hi,

The updates referred to by each of these requests were included in
today's 11.8 bullseye point release.

Regards,

Adam

--- End Message ---
Reply to: