squeeze update of libvdpau?

[Santiago Ruano Rincón]

On Sat, Sep 05, 2015 at 01:03:35PM +0100, Luca Boccassi wrote:
> On Tue, 2015-09-01 at 23:30 +0200, Santiago Ruano Rincón wrote:
> > Hello dear Debian NVIDIA Maintainers,
> > 
> > the Debian LTS team would like to fix the security issues which are
> > currently open in the Squeeze version of libvdpau:
> > https://security-tracker.debian.org/tracker/source-package/libvdpau
> > 
> > Would you like to take care of this yourself? We are still understaffed so
> > any help is always highly appreciated.
> > 
> > If yes, please follow the workflow we have defined here:
> > http://wiki.debian.org/LTS/Development
> > 
> > If that workflow is a burden to you, feel free to just prepare an
> > updated source package and send it to debian-lts at lists.debian.org
> > (via a debdiff, or with an URL pointing to the the source package,
> > or even with a pointer to your packaging repository), and the members
> > of the LTS team will take care of the rest. Indicate clearly whether you
> > have tested the updated package or not.
> > 
> > If you don't want to take care of this update, it's not a problem, we
> > will do our best with your package. Just let us know whether you would
> > like to review and/or test the updated package before it gets released.
> 
> Dear Santiago and dear LTS team,
> 

Hi Luca,

> I have backported the patch to squeeze. The debdiff is attached for
> review.
> 
> As I mentioned in the bug thread opened by the Security Team [1], I have
> only verified that it builds (amd64 and i386 chroots), but I am not able
> to test it due to the need for hardware capable of running with squeeze
> very old drivers, which I do not possess.
> 

Unfortunately, I don't have any Nvidia hardware either.

> I have however verified that the wheezy version works, and given that
> it's the same upstream release (4.1) I am reasonably confident that it
> should be fine.
> 
> In the aforementioned thread [1] I have asked the Security Team whether
> this upload should go through security.debian.org or through the updates
> process instead, so I will wait for an answer before I start on the LTS
> workflow you mentioned.
> 
> Thank you!

Thanks for your work, Luca! Don't hesitate to ask if you have any doubt
about the LTS workflow.

Cheers,

Santiago

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-nvidia-devel/attachments/20150905/4d75c108/attachment.sig>