[ubuntu/wily-proposed] libvdpau 1.1-1ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Wed Sep 2 13:16:15 UTC 2015


libvdpau (1.1-1ubuntu1) wily; urgency=medium

  * SECURITY UPDATE: privilege escalation when used in setuid or setgid
    applications
    - debian/patches/CVE-2015-5xxx.patch: use secure_getenv and protect
      against directory traversal in configure.ac, src/Makefile.am,
      src/mesa_dri2.c, src/util.h, src/vdpau_wrapper.c,
      trace/vdpau_trace.cpp.
    - CVE-2015-5198
    - CVE-2015-5199
    - CVE-2015-5200

Date: Wed, 02 Sep 2015 08:38:06 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libvdpau/1.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 Sep 2015 08:38:06 -0400
Source: libvdpau
Binary: libvdpau-dev libvdpau1 libvdpau-doc libvdpau1-dbg
Architecture: source
Version: 1.1-1ubuntu1
Distribution: wily
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 libvdpau-dev - Video Decode and Presentation API for Unix (development files)
 libvdpau-doc - Video Decode and Presentation API for Unix (documentation)
 libvdpau1  - Video Decode and Presentation API for Unix (libraries)
 libvdpau1-dbg - Video Decode and Presentation API for Unix (debug symbols)
Changes:
 libvdpau (1.1-1ubuntu1) wily; urgency=medium
 .
   * SECURITY UPDATE: privilege escalation when used in setuid or setgid
     applications
     - debian/patches/CVE-2015-5xxx.patch: use secure_getenv and protect
       against directory traversal in configure.ac, src/Makefile.am,
       src/mesa_dri2.c, src/util.h, src/vdpau_wrapper.c,
       trace/vdpau_trace.cpp.
     - CVE-2015-5198
     - CVE-2015-5199
     - CVE-2015-5200
Checksums-Sha1:
 a1c7c1a28eeddd33f6dd1102fa552b86bccd90b3 2391 libvdpau_1.1-1ubuntu1.dsc
 e907462ef28fe967bc077440ecbccb721ec36eac 17012 libvdpau_1.1-1ubuntu1.debian.tar.xz
Checksums-Sha256:
 0a8523b62577ceaa32186493718771a05786cacef61e5fd22ebffe5984dd61d4 2391 libvdpau_1.1-1ubuntu1.dsc
 a590bbc82d5f842585b526017f0e66c4feddbc2a08910640d9dc6c2e9776b51b 17012 libvdpau_1.1-1ubuntu1.debian.tar.xz
Files:
 9d90ef9d6e3ef03e89706a380a6d67b4 2391 libs optional libvdpau_1.1-1ubuntu1.dsc
 eb58674a7ff0c1f09520ee463f328abb 17012 libs optional libvdpau_1.1-1ubuntu1.debian.tar.xz
Original-Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=r0mZ
-----END PGP SIGNATURE-----


More information about the Wily-changes mailing list