On Wed, May 10, 2023 at 06:09:16PM +0200, Emilio Pozuelo Monfort wrote: > On 10/05/2023 11:42, Tobias Frost wrote: > > On Wed, May 10, 2023 at 10:00:11AM +0200, Emilio Pozuelo Monfort wrote: > > > On 07/05/2023 10:20, Tobias Frost wrote: > > > > Hi, > > > > > > > > (this thread is linked in dla-needed.txt and such) I'm not sure > > > > about the status of the nvidia drivers in LTS, so I thought it > > > > is better to ask if or not we support nvidia-drivers > > > > > > > > Said that I've juse claimed them from dla-needed.txt and will work > > > > on them, unless someone tells me not to do so ;-) > > > > > > I'd say it falls in the same category as firmware-nonfree. If we can > > > support > > > it with a reasonable effort then we shall do it, since there's no other > > > pocket for such updates (e.g. proposed-updates). But once the various > > > branches go EOL then we should just declare them EOL as well. > > > > I agree! > > > > After anaylzing nvidia-graphics-drivers yesterday, I'd suggest to EOL it: > > The > > driver version (418) in buster has been EOLed by nvidia in 02/2022. I've > > checked if it would make sense to update to 470 (EOL date > > 07/2024) but the 470 drivers introduces new libraries and also remove some > > others, I think this is not worth the effort. > > > > For nvidia-graphics-drivers-legacy-390xx, buster has actually not the latest > > 390 version, so I think it makes sense to do an (final) update here. > > (Though, I did not check yet if the new version has also some surprises > > ready) > > After that, the package should be also EOLed (nvidia support ended 12/2022)) > > Sounds good.
nvidia-graphics-drivers-legacy-390xx is now uploaded, (tested with some old GTX770…) A procedural question: For the remaining CVE's (and those of nvidia-graphics-drivers), do I mark them "end-of-life" (e.g by saying in CVE/list: [buster] - nvidia-graphics-drivers <end-of-life> (EOL in buster LTS) or just ignore them? Cheers, -- tobi > > Cheers, > Emilio
signature.asc
Description: PGP signature