Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian.org@packages.debian.org
Usertags: pu
[ Reason ]
In oder to fix CVE-2023-31022 we need to upgrade
nvidia-graphics-drivers-tesla-470 to a new upstream release.
[ Impact ]
A proprietary graphics driver with more CVEs open.
[ Tests ]
Only module building has been tested. Anything else would require
certain hardware and driver usage.
[ Risks ]
Low. Upgrading to a new nvidia driver release in (old-)stable is an
established procedure.
[ Checklist ]
[*] *all* changes are documented in the d/changelog
[*] I reviewed all changes and I approve them
(excluding the blobs)
[*] attach debdiff against the package in (old)stable
(excluding the blobs)
[*] the issue is verified as fixed in unstable
[ Changes ]
There is infrastructure prepared for a new binary package
(nvidia-suspend-common) that will not yet be enabled in the backport for
bookworm (but it is built in sid from the -tesla package).
(I expect that to be enabled once we switch to the 535 series in
bookworm.)
The nvidia-powerd package is not built from this source but from the
-tesla package. The changes were synced from there.
There are only minor additional packaging changes, most changes
originate from keeping the many driver packages in sync.
debian/README.source | 9 +-
debian/changelog | 175 ++++++++++++++++++++++++++++++++----
debian/control | 2 +-
debian/control.in | 13 ++-
debian/control.md5sum | 8 +-
debian/copyright | 3 +-
debian/detect/nvidia-tesla.ids | 4 +
debian/not-installed.in | 14 ++-
debian/nv-readme.ids | 4 +
debian/nvidia-options.conf.in | 12 ++-
debian/nvidia-powerd.examples | 2 +
debian/nvidia-powerd.install | 2 +-
debian/nvidia-suspend-common.install | 5 ++
debian/nvidia-suspend-common.lintian-overrides | 18 ++++
.../patches/module/0001-bump-minimum-supported-kernel-version-to-3.10.patch | 4 +-
.../module/0002-conftest.sh-remove-empty-lines-from-uts_release-outp.patch | 6 +-
debian/patches/module/0010-backport-pci-dma-changes-for-ppc64el.patch | 68 --------------
debian/patches/module/bashisms.patch | 2 +-
debian/patches/module/cc_version_check-gcc5.patch | 2 +-
debian/patches/module/conftest-verbose.patch | 8 +-
debian/patches/module/series.in | 1 -
debian/rules | 12 ++-
debian/rules.defs | 6 +-
debian/xserver-xorg-video-nvidia.examples | 1 -
24 files changed, 259 insertions(+), 122 deletions(-)
[ Other info ]
This is a rebuild of the package from sid with only a minimal change:
not enabling nvidia-suspend-common.
Andreas
Attachment:
ngd-525.147.05-1~deb12u1.diff.xz
Description: application/xz