Dear maintainer,
Here is the NMU diff according to DevRef 5.11.1[1][2] for bug: #598308.
See the debian/patches directory for the important fixes.
Let me know if it's ok to proceed with the NMU.
Thank you for maintaining the package,
Jari Aalto
[1] http://www.debian.org/doc/developers-reference/pkgs.html#nmu
[2] http://dep.debian.net/deps/dep1.html
lsdiff(1) of changes:
vdr-1.6.0/debian/changelog
vdr-1.6.0/debian/vdrleaktest
diffstat for vdr_1.6.0-18 vdr_1.6.0-18.1
changelog | 8 ++++++++
vdrleaktest | 2 +-
2 files changed, 9 insertions(+), 1 deletion(-)
diff -u vdr-1.6.0/debian/changelog vdr-1.6.0/debian/changelog
--- vdr-1.6.0/debian/changelog
+++ vdr-1.6.0/debian/changelog
@@ -1,3 +1,11 @@
+vdr (1.6.0-18.1) unstable; urgency=low
+
+ * debian/vdrleaktest
+ - Asjust LD_LIBRARY_PATH use according to CVE-2010-3387.
+ (normal, security; Closes: #598308).
+
+ -- Jari Aalto <jari.aa...@cante.net> Sat, 16 Oct 2010 20:59:56 +0300
+
vdr (1.6.0-18) unstable; urgency=low
* Added Danish translation of the debconf templates (Thx to Joe Hansen)
diff -u vdr-1.6.0/debian/vdrleaktest vdr-1.6.0/debian/vdrleaktest
--- vdr-1.6.0/debian/vdrleaktest
+++ vdr-1.6.0/debian/vdrleaktest
@@ -65,7 +65,7 @@
/etc/init.d/vdr stop
-LANG=C LD_LIBRARY_PATH="/usr/lib/debug;$LD_LIBRARY_PATH" \
+LANG=C LD_LIBRARY_PATH="/usr/lib/debug:${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}" \
valgrind --tool=memcheck --leak-check=yes --num-callers=20 \
--suppressions=/usr/share/vdr/valgrind.supp \
/usr/bin/vdr-dbg -v $VIDEO_DIR -c $CFG_DIR -L $PLUGIN_DIR -r $REC_CMD \
