- Update libvdpau to version 1.1.1
libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files. See CVE-2015-5198, CVE-2015-5199, and CVE-2015-5200 for more details. This release uses the secure_getenv() function, when available, to fix these problems. The updated libvdpau will instead use a fallback implementation of secure_getenv() when the platform doesn't provide one. If you use the NVIDIA .run installer packages, please see https://devtalk.nvidia.com/default/topic/873035 for additional information. This release also adds tracing of HEVC picture structures to libvdpau_trace. - supersedes patch: libvdpau-nopdftex.patch OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libvdpau?expand=0&rev=4
This commit is contained in:
parent
29e60cc6c5
commit
3c0ea2b4ad
3
libvdpau-1.1.1.tar.bz2
Normal file
3
libvdpau-1.1.1.tar.bz2
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:857a01932609225b9a3a5bf222b85e39b55c08787d0ad427dbd9ec033d58d736
|
||||||
|
size 429576
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:59c8bcfead6410d12284f1dc11ee919d3b11a684424597ba8961211ad8fdf34c
|
|
||||||
size 424233
|
|
@ -1,28 +0,0 @@
|
|||||||
diff -ur libvdpau-0.9.orig/configure.ac libvdpau-0.9/configure.ac
|
|
||||||
--- libvdpau-0.9.orig/configure.ac 2014-12-19 18:32:57.000000000 +0100
|
|
||||||
+++ libvdpau-0.9/configure.ac 2014-12-23 09:09:51.170774748 +0100
|
|
||||||
@@ -56,11 +56,9 @@
|
|
||||||
if test "x$DOCS" != xno; then
|
|
||||||
AC_CHECK_TOOL([DOXYGEN], [doxygen], [no])
|
|
||||||
AC_CHECK_TOOL([DOT], [dot], [no])
|
|
||||||
- AC_CHECK_TOOL([PDFTEX], [pdftex], [no])
|
|
||||||
else
|
|
||||||
DOXYGEN=no
|
|
||||||
DOT=no
|
|
||||||
- PDFTEX=no
|
|
||||||
fi
|
|
||||||
if test "x$DOCS" = xyes; then
|
|
||||||
if test "x$DOXYGEN" = xno; then
|
|
||||||
@@ -69,11 +67,8 @@
|
|
||||||
if test "x$DOT" = xno; then
|
|
||||||
AC_ERROR([Documentation enabled but dot was not found in your path. Please install graphviz])
|
|
||||||
fi
|
|
||||||
- if test "x$PDFTEX" = xno; then
|
|
||||||
- AC_ERROR([Documentation enabled but pdftex was not found in your path])
|
|
||||||
- fi
|
|
||||||
fi
|
|
||||||
-AM_CONDITIONAL([ENABLE_DOCS], [test "x$DOXYGEN" != xno -a "x$DOT" != xno -a "x$PDFTEX" != xno])
|
|
||||||
+AM_CONDITIONAL([ENABLE_DOCS], [test "x$DOXYGEN" != xno -a "x$DOT" != xno])
|
|
||||||
AC_SUBST(DOXYGEN)
|
|
||||||
|
|
||||||
# Options
|
|
@ -1,3 +1,26 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Sep 1 14:02:11 UTC 2015 - sndirsch@suse.com
|
||||||
|
|
||||||
|
- Update libvdpau to version 1.1.1
|
||||||
|
libvdpau versions 1.1 and earlier, when used in setuid or setgid
|
||||||
|
applications, contain vulnerabilities related to environment
|
||||||
|
variable handling that could allow an attacker to execute
|
||||||
|
arbitrary code or overwrite arbitrary files. See CVE-2015-5198,
|
||||||
|
CVE-2015-5199, and CVE-2015-5200 for more details.
|
||||||
|
|
||||||
|
This release uses the secure_getenv() function, when available,
|
||||||
|
to fix these problems. The updated libvdpau will instead use a
|
||||||
|
fallback implementation of secure_getenv() when the platform
|
||||||
|
doesn't provide one.
|
||||||
|
|
||||||
|
If you use the NVIDIA .run installer packages, please see
|
||||||
|
https://devtalk.nvidia.com/default/topic/873035 for additional
|
||||||
|
information.
|
||||||
|
|
||||||
|
This release also adds tracing of HEVC picture structures to
|
||||||
|
libvdpau_trace.
|
||||||
|
- supersedes patch: libvdpau-nopdftex.patch
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Tue Mar 17 08:38:21 UTC 2015 - sndirsch@suse.com
|
Tue Mar 17 08:38:21 UTC 2015 - sndirsch@suse.com
|
||||||
|
|
||||||
|
@ -17,7 +17,7 @@
|
|||||||
|
|
||||||
|
|
||||||
Name: libvdpau
|
Name: libvdpau
|
||||||
Version: 1.1
|
Version: 1.1.1
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: VDPAU wrapper and trace libraries
|
Summary: VDPAU wrapper and trace libraries
|
||||||
License: MIT
|
License: MIT
|
||||||
@ -28,8 +28,6 @@ Source1: http://people.freedesktop.org/~aplattner/vdpau/vdpauinfo-1.0.tar
|
|||||||
Source2: README
|
Source2: README
|
||||||
Source99: baselibs.conf
|
Source99: baselibs.conf
|
||||||
Source100: %{name}-rpmlintrc
|
Source100: %{name}-rpmlintrc
|
||||||
# PATCH-FIX-OPENSUSE libvdpau-nopdftex.patch -- don't requires pdftex for building
|
|
||||||
Patch1: libvdpau-nopdftex.patch
|
|
||||||
BuildRequires: autoconf
|
BuildRequires: autoconf
|
||||||
BuildRequires: automake
|
BuildRequires: automake
|
||||||
BuildRequires: doxygen
|
BuildRequires: doxygen
|
||||||
@ -85,7 +83,6 @@ Its usage is documented in the README.
|
|||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q -b1
|
%setup -q -b1
|
||||||
%patch1 -p1
|
|
||||||
|
|
||||||
%build
|
%build
|
||||||
autoreconf -fi
|
autoreconf -fi
|
||||||
|
Loading…
Reference in New Issue
Block a user