-
libvdpau (0.4.1-3ubuntu1.2) precise-security; urgency=medium
* SECURITY UPDATE: privilege escalation when used in setuid or setgid
applications
- debian/patches/CVE-2015-5xxx.patch: use secure_getenv and protect
against directory traversal in configure.ac, src/Makefile.am,
src/util.h, src/vdpau_wrapper.c, trace/vdpau_trace.cpp.
- CVE-2015-5198
- CVE-2015-5199
- CVE-2015-5200
-- Marc Deslauriers <email address hidden> Wed, 02 Sep 2015 09:16:53 -0400
-
libvdpau (0.4.1-3ubuntu1.1) precise-proposed; urgency=low
[ Sebastian Boehm ]
* Apply Stephen Warren's patch for blue tint in Adobe Flash videos
(LP: #967091). (Applied to Debian version libvdpau-0.4.1-5.1 by
Maurizio Avogadro.)
[ Marc Deslauriers ]
* debian/libvdpau1.install: also ship /etc/vdpau_wrapper.cfg
-- Marc Deslauriers <email address hidden> Wed, 07 Nov 2012 13:10:33 -0500
-
libvdpau (0.4.1-3ubuntu1) precise; urgency=low
* Merge from debian testing. Remaining changes:
- Drop gcc-multilib and ia32-libs-dev from build-dependencies
- Drop lib32vdpau1 binary package from debian/control
- Drop lib32vdpau1.{lintian-overriders,install,symbols,postinst} files
- Comment out 32-ARCHS in debian/rules so multilib stuff isn't run
- Mark Debian VCS links XS-Debian
libvdpau (0.4.1-3) unstable; urgency=low
[ Andres Mejia ]
* Update to my @debian.org email.
[ Andreas Beckmann ]
* Build for multiarch. Patch from Daniel Schaal. (Closes: #631174)
* Search the vdpau module in multiple directories, starting with
${ORIGIN}/vdpau and fall back to /usr/lib/vdpau in the end.
* Add Conflicts to prevent mixing biarch and multiarch packages (i.e.
lib32vdpau1:amd64 and libvdpau1:i386).
* Use unversioned Conflicts/Replaces on nvidia-libvdpau* to remove the old
transitional packages.
* Use binary:Version for relationship between libvdpau1 and libvdpau-dev.
* Switch Build-Depends-Indep to doxygen-latex, graphviz, ghostscript.
(Closes: #616264)
* track_dynamic_library_handles_and_free_them_on_exit.patch: Pick upstream
commit 4262513e: "vdpau_wrapper.c: Track dynamic library handles and free
them on exit using __attribute__((destructor))". This could fix #592204.
* Switch to debhelper 8.
* Switch to dh-autoreconf: add to B-D, use dh --with autoreconf and drop
autoreconf_-fi.patch.
* Remove debian/libvdpau-get-orig-source, repackaging is no longer necessary
with dh-autoreconf.
* Build with LDFLAGS="-Wl,--as-needed".
* Add myself to Uploaders.
-- Micah Gersten <email address hidden> Tue, 06 Dec 2011 20:52:27 -0600
-
libvdpau (0.4.1-2ubuntu1) natty; urgency=low
* Merge from debian unstable. Remaining changes: (LP: #689778)
- Disable 32bit libraries on amd64, ia32-libs is in universe.
libvdpau (0.4.1-2) unstable; urgency=high
* Provide an upload to unstable to fix build failure. (Closes: #603220)
* Set urgency to high so it enters testing ASAP.
libvdpau (0.4.1-1) experimental; urgency=low
* New upstream release.
* Use script to generate latest source.
* Add get-orig-source rule that runs libvdpau-get-orig-source script.
* Update Vcs-* entries for new location for packaging.
* Refresh patches.
* Change Build-Depends of ia32-libs to ia32-libs-dev.
* Bump Standards-Version to 3.9.1. No other changes needed.
* Use proper Depends versioning for a binary-all package depending on
a binary-any package.
-- Artur Rona <email address hidden> Sat, 04 Dec 2010 17:03:43 +0100
