On Fri, 2015-10-30 at 14:32 +0100, Alessandro Ghedini wrote: > On Thu, Oct 29, 2015 at 07:52:23pm +0000, luca wrote: > > Package: release.debian.org > > Severity: normal > > Tags: jessie > > User: release.debian....@packages.debian.org > > Usertags: pu > > > > Dear release team, > > > > We would like to update libvdpau in jessie to address a segmentation fault > > in a > > particular use case. > > > > 0.8-3+deb8u1 was uploaded through jessie-security with an upstream fix for 3 > > security bugs: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 (see > > https://bugs.debian.org/797895). > > > > The upstream patch unfortunately introduced a regression when running with > > DRI_PRIME=1, as reported by a user in https://bugs.debian.org/802625 and > > upstream has committed a fix for it. > > > > We already uploaded a fixed version to unstable, and now we would like to > > backport it to jessie as well. The debdiff follows. I have verified that it > > fixes the problem on a vanilla jessie amd64 installation. > > > > Thank you! > > > > Kind regards, > > Luca Boccassi > > > > > > diff -Nru libvdpau-0.8/debian/changelog libvdpau-0.8/debian/changelog > > --- libvdpau-0.8/debian/changelog 2015-09-05 13:14:50.000000000 +0100 > > +++ libvdpau-0.8/debian/changelog 2015-10-29 19:30:28.000000000 +0000 > > @@ -1,3 +1,10 @@ > > +libvdpau (0.8-3+deb8u2) jessie; urgency=medium > > The diff looks good, could you change the target to jessie-security and upload > to security-master?
Committed in git, but I'll have to ask Andreas to upload as I lack the supercow powers :-) Andreas, the new version is tested and ready in the jessie branch in git [1], could you please upload to security-master when you have time? Thanks! > Also, do you plan to prepare an update for wheezy-security as well? I'll have access to a wheezy guinea pig machine on Monday, so if the regression is present there as well I'll test a patched version and reply back here. Kind regards, Luca Boccassi [1] https://anonscm.debian.org/cgit/pkg-nvidia/libvdpau.git/log/?h=jessie
signature.asc
Description: This is a digitally signed message part
