Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian....@packages.debian.org
Usertags: pu

[ Reason ]
We need to update src:nvidia-graphics-drivers in bullseye to a new
upstream release fixing a few new CVEs.

There are a few dependency fixes and several changelog updates resulting
from resynchronizing the supported driver branches.

[ Impact ]
A proprietary grpahics driver with open CVEs.

[ Tests ]
Only building the module can e tested without using nvidia hardware and
driver.

[ Risks ]
Updating (old)stable to new upstream releases from the same branch has
been done in the past (and at least once for the current point release).

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
      (excluding the blobs)
  [*] attach debdiff against the package in (old)stable
      (excluding the blobs)
  [*] the issue is verified as fixed in unstable

[ Changes ]
+  * New upstream LTS and Tesla branch release 470.256.02 (2024-06-04).
+    * Fixed CVE-2024-0090, CVE-2024-0092.  (Closes: #1072792)
+      https://nvidia.custhelp.com/app/answers/detail/a_id/5551
+    - Fixed a bug that could cause the X server to crash when graphics
+      applications requested single-buffered drawables while certain
+      features (such as Vulkan sharpening) are enabled.
+
+  [ Andreas Beckmann ]
+  * Refresh patches.
+  * xserver-xorg-video-nvidia: Recommend nvidia-vulkan-icd.
+  * Move the libnvidia-glvkspirv dependency to libnvidia-(e)glcore.
+    (Cf. #1064194)
+  * Bump Standards-Version to 4.7.0. No changes needed.

[ Other info ]
This package is nearly equivalent to
src:nvidia-graphics-drivers-tesla-470 in sid/bookworm/bullseye.

The package has already been accepted, but associated with the wrong
bullseye-pu request: #1072965 for src:nvidia-graphics-drivers-tesla-470
(which is a nearly identical package with nearly identical changes)
since I seem to have missed to file this PU request while uploading.

Fortunately we'll get rid of similar package duplication in bookworm
in the upcoming point release (which makes
src:nvidia-graphics-drivers-tesla transitional).


Andreas

Attachment: ngd-470.256.02-1.diff.xz
Description: application/xz

Reply via email to