Public bug reported: Please sync libvdpau 1.1.1-3 (main) from Debian sid (main)
Explanation of the Ubuntu delta and why it can be dropped: * SECURITY UPDATE: privilege escalation when used in setuid or setgid applications - debian/patches/CVE-2015-5xxx.patch: use secure_getenv and protect against directory traversal in configure.ac, src/Makefile.am, src/mesa_dri2.c, src/util.h, src/vdpau_wrapper.c, trace/vdpau_trace.cpp. - CVE-2015-5198 - CVE-2015-5199 - CVE-2015-5200 * SECURITY UPDATE: privilege escalation when used in setuid or setgid applications - debian/patches/CVE-2015-5xxx.patch: use secure_getenv and protect against directory traversal in configure.ac, src/Makefile.am, src/mesa_dri2.c, src/util.h, src/vdpau_wrapper.c, trace/vdpau_trace.cpp. - CVE-2015-5198 - CVE-2015-5199 - CVE-2015-5200 Debian package already include everything in the Ubuntu package. Changelog entries since current xenial version 1.1-1ubuntu1: libvdpau (1.1.1-3) unstable; urgency=medium [ Luca Boccassi ] * Cherry-pick patch for DRI_PRIME crash. (Closes: #802625) * Upload to unstable. -- Andreas Beckmann <a...@debian.org> Thu, 29 Oct 2015 00:47:28 +0100 libvdpau (1.1.1-2) experimental; urgency=medium * Add vdpau-driver-all driver metapackage. (Closes: #800657) * libvdpau1: Recommends: vdpau-driver-all | vdpau-driver. * Upload to experimental. -- Andreas Beckmann <a...@debian.org> Thu, 08 Oct 2015 10:15:00 +0200 libvdpau (1.1.1-1) unstable; urgency=medium [ Andreas Beckmann ] * simplify d/rules [ Luca Boccassi ] * New upstream release. - Use secure_getenv(3) to improve security (CVE-2015-5198, CVE-2015-5199, CVE-2015-5200). Closes: #797895. * Do not check for pdftex, removed upstream * Add myself to Uploaders * Refresh dlopen-path patch, upstream changes * Refresh patch module-searchpath, upstream changes -- Luca Boccassi <luca.bocca...@gmail.com> Thu, 03 Sep 2015 23:31:59 +0100 ** Affects: libvdpau (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1512274 Title: Sync libvdpau 1.1.1-3 (main) from Debian sid (main) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvdpau/+bug/1512274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs