shield Security update for libvdpau

SUSE-SLE-SDK-12-2015-788

libvdpau was updated to use secure_getenv() instead of getenv() for several variables so it can be more safely used in setuid applications. * CVE-2015-5198: libvdpau: incorrect check for security transition (bnc#943967) * CVE-2015-5199: libvdpau: directory traversal in dlopen (bnc#943968) * CVE-2015-5200: libvdpau: vulnerability in trace functionality (bnc#943969)

• Release Date
  Sep 2 2015
• References
  Bugzilla: 943969, 943968, 943967
  CVEs: CVE-2015-5198, CVE-2015-5199, CVE-2015-5200
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12 ppc64le

• Packages
  libvdpau
  VDPAU wrapper and trace libraries

  0.8-3.1 lock src

  libvdpau-devel
  VDPAU wrapper development files

  0.8-3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 s390x

• Packages
  libvdpau
  VDPAU wrapper and trace libraries

  0.8-3.1 lock src

  libvdpau-devel
  VDPAU wrapper development files

  0.8-3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 x86_64

• Packages
  libvdpau
  VDPAU wrapper and trace libraries

  0.8-3.1 lock src

  libvdpau-devel
  VDPAU wrapper development files

  0.8-3.1 lock rpm