Bug#1067821: bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1

[Adam D. Barratt]

Control: tags -1 + confirmed

In order to receive further upstream support (i.e. CVE fixes), we
need
to switch src:nvidia-graphics-drivers from the 525 series (EoL
12/2023)
to the 535 series, a new LTSB branch sufficient for the lifetime of
bookworm. (The first 535 beta appeared during deep freeze of
bookworm.)
This driver supports a superset of the GPUs supported by the 525
drivers, no GPUs have been dropped.

[...]

      I'm currently doing interoperability tests with
      src:nvidia-open-gpu-kernel-modules. (These two source packages
      need to be updated together due to the strict firmware
      dependency.) An upload to bookworm will only happen after the
      package is in sid.

Please go ahead, bearing in mind that the window for 12.6 closes over
the coming weekend.

Regards,

Adam

[Debian Bug Tracking System]

Post by Adam D. Barratt
tags -1 + confirmed

Bug #1067821 [release.debian.org] bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
Added tag(s) confirmed.

[Andreas Beckmann]

Post by Adam D. Barratt
Please go ahead, bearing in mind that the window for 12.6 closes over
the coming weekend.

The whole nvidia stack has now been uploaded,
src:nvidia-graphics-drivers is sitting in NEW.

Andreas

[Adam D. Barratt]

Post by Andreas Beckmann

Post by Adam D. Barratt
Please go ahead, bearing in mind that the window for 12.6 closes over
the coming weekend.

The whole nvidia stack has now been uploaded,
src:nvidia-graphics-drivers is sitting in NEW.

It's now in stable-new.

We have a bit of an issue in terms of accepting / shipping the 535
bookworm stack, however. The upload of 535 to unstable is blocked from
migration to testing by openssl, which is in turn blocked by dpkg,
which is manually blocked for the time64 transition.

Would we be better to ship the 525 packages that are already in p-u and
revisit 535 for 12.7, or skip those updates as well and just include
535 when we can?

Regards,

Adam

[Andreas Beckmann]

On 29/03/2024 19.40, Adam D. Barratt wrote:

libnvidia-pkcs11-openssl3 is a reverse dependency of libcuda1 (seems to
get dlopen()ed by it), so we cannot avoid the openssl dependency without
risking cuda breakage in sid.

Would uploading the 535 stack to testing-proposed-updates be helpful?

Post by Adam D. Barratt
Would we be better to ship the 525 packages that are already in p-u and
revisit 535 for 12.7,

Then let's stick to the 525 from -pu for now and hope the 64bit time_t
transition is over next time. ;-)

Post by Adam D. Barratt
or skip those updates as well and just include
535 when we can?

The 525 packages are also in stable-updates for fixing module build
breakage caused by some backported changes in src:linux in the last
point release. So skipping them is no option ;-)


Andreas

PS: nvidia-modprobe should be independent of the driver stack and t64
transition and could be included in 12.6

[Adam D. Barratt]

Please reject nvidia-graphics-drivers/535.161.08-1~deb12u1, nvidia-
driver-full is uninstallable on ppc64el (but that was hidden by the
other t64 transition blockers).

Done, thanks for letting us know.

Regards,

Adam

[Andreas Beckmann]

Post by Adam D. Barratt

Please reject nvidia-graphics-drivers/535.161.08-1~deb12u1, nvidia-
driver-full is uninstallable on ppc64el (but that was hidden by the
other t64 transition blockers).

Done, thanks for letting us know.

nvidia-graphics-drivers (and the remainder of the 535 nvidia driver
stack) has migrated to testing, so I've uploaded 535.161.08-2~deb12u1
and now the 535 stack should be ready for inclusion in the next bookworm
point release.


Andreas

[Debian Bug Tracking System]

retitle -1 bookworm-pu: package nvidia-graphics-drivers/535.161.08-2~deb12u1

Bug #1067821 [release.debian.org] bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
Changed Bug title to 'bookworm-pu: package nvidia-graphics-drivers/535.161.08-2~deb12u1' from 'bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1'.

[Adam D Barratt]

package release.debian.org
tags 1067821 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: nvidia-graphics-drivers
Version: 535.161.08-2~deb12u1

Explanation: new upstream stable release [CVE-2023-0180 CVE-2023-0183 CVE-2023-0184 CVE-2023-0185 CVE-2023-0187 CVE-2023-0188 CVE-2023-0189 CVE-2023-0190 CVE-2023-0191 CVE-2023-0194 CVE-2023-0195 CVE-2023-0198 CVE-2023-0199 CVE-2023-25515 CVE-2023-25516 CVE-2023-31022 CVE-2024-0074 CVE-2024-0075 CVE-2024-0078]

[Debian Bug Tracking System]

Post by Adam D Barratt
package release.debian.org

Limiting to bugs with field 'package' containing at least one of 'release.debian.org'
Limit currently set to 'package':'release.debian.org'

Post by Adam D Barratt
tags 1067821 = bookworm pending

Bug #1067821 [release.debian.org] bookworm-pu: package nvidia-graphics-drivers/535.161.08-2~deb12u1
Added tag(s) pending; removed tag(s) confirmed.

Post by Adam D Barratt
thanks

Stopping processing here.

Please contact me if you need assistance.