squeeze update of libvdpau?

[Luca Boccassi]

On Mon, 2015-09-07 at 21:21 +0200, Andreas Beckmann wrote:
> Hi Luca and Vincent,
> 
> thanks fo handling the libvdpau security updates while I was on holidays!

Welcome back! Hope you had a good time :-)

> Some nitpicking:
> * the branches should be called $DISTRO, not $DISTRO-security (these
> uploads will end up in $DISTRO at some point release regardless of the
> upload queue being used (security or pu)) (with the exception of
> squeeze-lts which is a "partial" (add-on) distro like $DISTRO-backports)

Fixed the jessie branch [1], sorry about that.

Unfortunately I could not do the update on top of the wheezy branch,
since it holds an unreleased version (0.4.1-8 [2], versus 0.4.1-7 in
wheezy [3]) with an additional patch cherry-picked from upstream. Since
the documentation for security updates stresses to keep changes to a
minimum, I didn't want to add that additional backported code.

Should I leave it in the wheezy-security branch and update its gbp.conf?

> * if you update the Uploaders (not neccessary as Vincent already wrote),
> copy the entry from sid
> * if you are going to update the metadata, you could update Vcs-* as
> well (copy the URLs from sid and append '-b <$BRANCH>' with the
> respective branch to Vcs-Git)

Sorry, my bad, I thought it was necessary to update the uploaders field.

> * don't forget to update 'debian-branch' in d/gbp.conf, too

Ah, completely forgot. Sorry! Fixed now.

> * for Uploaders I generally prefer a trailing comma after the last entry
> since appending another one results in a smaller diff (+ vs. -++)
> but some people might disagree here

Ack.

> * for tagging I'd prefer the actual uploader to create and sign the tag
> at uploading time but to only push the tag once the upload was accepted
> into the archive (especially for things going through NEW that could get
> rejected). This comes with a small risk of forgetting to push the tag
> ... happens to me as well :-)
> (you cannot "update" git tags after they were were published in a
> deterministic fashion, but you could easily delete and redo a local
> (unpublished) tag)

Ack.

> Regarding testing libvdpau: you should be able to test the libvdpau from
> squeeze(-lts) with any driver from jessie or wheezy (but probably not
> from stretch any more).
> 
> 
> Andreas
> 
> PS: Now going to look at what the new driver releases brought ...

Mainly bug fixes, couple new devices, nothing exiting :-)

Kind regards,
Luca Boccassi

[1] https://anonscm.debian.org/cgit/pkg-nvidia/libvdpau.git/log/?h=jessie
[2] https://anonscm.debian.org/cgit/pkg-nvidia/libvdpau.git/log/?h=wheezy
[3] https://packages.debian.org/source/oldstable/libvdpau