lp:ubuntu/trusty-security/libvdpau

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

17. By Marc Deslauriers on 2015-09-02

* SECURITY UPDATE: privilege escalation when used in setuid or setgid
  applications
  - debian/patches/CVE-2015-5xxx.patch: use secure_getenv and protect
    against directory traversal in configure.ac, src/Makefile.am,
    src/mesa_dri2.c, src/util.h, src/vdpau_wrapper.c,
    trace/vdpau_trace.cpp.
  - CVE-2015-5198
  - CVE-2015-5199
  - CVE-2015-5200

16. By Andreas Beckmann on 2013-08-15

* New upstream release.
* Add README.source describing the import of a new upstream release.

15. By Andreas Beckmann on 2013-05-06

* Drop Conflicts/Replaces against obsolete squeeze packages.
* libvdpau1: Drop postinst, ancient cleanup code already in squeeze.
* Bump Standards-Version to 3.9.4. No changes needed.
* Use canonical Vcs-* URLs.
* Upload to unstable.

14. By Andreas Beckmann on 2013-01-27

* Update my email address and remove DMUA.
* Cherry-pick upstream commit 837c63d from 0.5+git:
  0003-Fix-leaked-extension-info-on-library-unload.patch (Closes: #592204)
* libvdpau1.symbols: Add _vdp_DRI2RemoveExtension, added in above patch.
* Change Upstream-Contact to <email address hidden>.

13. By Andreas Beckmann <email address hidden> on 2012-08-16

* The last (and only) reverse dependency of lib32vdpau1 was the non-free
  nvidia-vdpau-driver-ia32 which is now an empty transitional package.
* d/{control,lib32vdpau1.*}: Drop lib32vdpau1 package. (Closes: #679524)
* d/{control,rules}: Remove support for building the extra 32-bit biarch
  library on amd64.
* libvdpau1: Add Replaces/Conflicts: lib32vdpau1 to ensure the old biarch
  package gets removed properly.
* Update lintian overrides for duplicate files generated by doxygen.

12. By Andreas Beckmann <email address hidden> on 2012-05-22

[ Maurizio Avogadro ]
* Apply the wise patch supplied by Stephen Warren to fix Adobe Flash
  insanities. (Closes: #668512)

[ Andreas Beckmann ]
* debian/copyright: Switch to copyright-format 1.0 and update years.

11. By Andres Mejia <email address hidden> on 2012-03-19

Use debhelper 9 to use hardened compiler flags.

10. By Andres Mejia <email address hidden> on 2012-03-16

* Allow dev package to be multiarch installable.
* Bump to Standards-Version 3.9.3.

9. By Andreas Beckmann <email address hidden> on 2011-09-08

[ Andres Mejia ]
* Update to my @debian.org email.

[ Andreas Beckmann ]
* Build for multiarch. Patch from Daniel Schaal. (Closes: #631174)
* Search the vdpau module in multiple directories, starting with
  ${ORIGIN}/vdpau and fall back to /usr/lib/vdpau in the end.
* Add Conflicts to prevent mixing biarch and multiarch packages (i.e.
  lib32vdpau1:amd64 and libvdpau1:i386).
* Use unversioned Conflicts/Replaces on nvidia-libvdpau* to remove the old
  transitional packages.
* Use binary:Version for relationship between libvdpau1 and libvdpau-dev.
* Switch Build-Depends-Indep to doxygen-latex, graphviz, ghostscript.
  (Closes: #616264)
* track_dynamic_library_handles_and_free_them_on_exit.patch: Pick upstream
  commit 4262513e: "vdpau_wrapper.c: Track dynamic library handles and free
  them on exit using __attribute__((destructor))". This could fix #592204.
* Switch to debhelper 8.
* Switch to dh-autoreconf: add to B-D, use dh --with autoreconf and drop
  autoreconf_-fi.patch.
* Remove debian/libvdpau-get-orig-source, repackaging is no longer necessary
  with dh-autoreconf.
* Build with LDFLAGS="-Wl,--as-needed".
* Add myself to Uploaders.

8. By Andres Mejia on 2010-11-12

* Provide an upload to unstable to fix build failure. (Closes: #603220)
* Set urgency to high so it enters testing ASAP.