-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 VDPAU is the Video Decode and Presentation API for Unix. This library provides a wrapper that loads the correct vendor-specific implementation driver library, and a tracing library to help with debugging VDPAU applications.
libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files. See CVE-2015-5198, CVE-2015-5199, and CVE-2015-5200 for more details. This release uses the secure_getenv() function, when available, to fix these problems. On platforms where secure_getenv() is not available, the VDPAU environment variables will not be honored by the library. If you use the NVIDIA .run installer packages, please see https://devtalk.nvidia.com/default/topic/873035 for additional information. This release also adds tracing of HEVC picture structures to libvdpau_trace. Aaron Plattner (2): Remove pdflatex dependency Bump version to 1.1.1 Bibhuti Prusty (1): Add tracing for HEVC picture info Emil Velikov (3): .gitignore: add compile configure.ac: remove AM_MAINTAINER_MODE autogen.sh: update/copy over from mesa José Hiram Soltren (2): Fix Doxygen typo: s/no queued/not queued/ Use secure_getenv(3) to improve security git tag: libvdpau-1.1.1 http://people.freedesktop.org/~aplattner/vdpau/libvdpau-1.1.1.tar.bz2 MD5: 2fa0b05a4f4d06791eec83bc9c854d14 libvdpau-1.1.1.tar.bz2 SHA1: 86516e2a962fd34f65d49115d6ddf15fd912f579 libvdpau-1.1.1.tar.bz2 SHA256: 857a01932609225b9a3a5bf222b85e39b55c08787d0ad427dbd9ec033d58d736 libvdpau-1.1.1.tar.bz2 PGP: http://people.freedesktop.org/~aplattner/vdpau/libvdpau-1.1.1.tar.bz2.sig -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV5MPPAAoJEBvvPYQBpohh33QP/3aha1W2ARz1lRWX5BLLp+VW wdJ6qEeisQpIFzH4HIgVSAPS7dNdECgX0OasmlIfHe4KMm/F0upW6/p0Xs85d6w/ i6yU7hzRI7OFLDFXAez0Q5SJbl+J9SS6VbgpbhbLocyr1KVxTG0ArAoH6dWAqUv6 66S+BFK2GpmKbwHwmKAnp/NKB5neb9ISO+s2MC5wpOjK3JwU76DzClv017eLMAKw NVg3i48kkovkbtZu+vR3utX6MKelIPiY/BvPL1Rtxw7cHLGWnNLGi1KQGoxCGtYp RQUorRtF8pCTnE1/sTkNyVroh2467AlAMPrYJYxKG6/OfUcQVcJPDdYn+N86x9qy ikCOJR4FIMs6bXmzXNc6n0spBq2Y8YePvMLA56p7d3iDCUzagNzkeVc+U9pp38X2 NXwqkmiXbWi4abHh4wF9QLLzbzJbdCMSc9HRFpNO4hgicD/WVEZqlxfb8KNM97kp bjdR+czYCB2tur4249SA+c91DCVwiOHk1gANwJ2WtUPC1TgfbfbLOINTDmKj6ZlS zdSVcGKkpTjb0nFoRZDXhwzIlZXvJzAlJpJBf04IZuX6AbYmk4pKUVYKfnRNKYMD JWgrToJJepvGRj4cwCFTR3LYG7dMI6+vAxSoWcw/Tjo03MtOUyW0LxdbP4k+Ti6H Caswf2KKJ+gy4gnC77YZ =4GZm -----END PGP SIGNATURE----- _______________________________________________ xorg-announce mailing list [email protected] http://lists.x.org/mailman/listinfo/xorg-announce
