Please backport vlc to 0.9.8a in Intrepid (important security update)

[Bartosz Kosiorek]

Please backport vlc to 0.9.8a in Intrepid.
This is very important security upgrade.

vlc (0.9.8a-1ubuntu1) jaunty; urgency=low

  * merge from debian. LP: #300328, #305100, #289263
  * Fixes CVE-2008-5276
  * remaining changes
    - build against libxul-dev instead of iceape-dev
    - build against libdca-dev, libass-dev and libx264-dev
    - build against and install libx264 plugin
    - adjust Vcs-Bzr Headers in debian/control
    - add Xb-Npp header to vlc package
    - debian/patches/301_DVD_media.diff: Change %U to %f
       in VLC .desktop file, cf LP #275043

https://launchpad.net/ubuntu/jaunty/+source/vlc/0.9.8a-1ubuntu1
http://www.videolan.org/security/

[John Dong (jdong)]

Right now we are considering doing this in intrepid-security directly; if that does not work out we will continue in the Backports route.

[Matti Lindell (mlind)]

I backported vlc from Jaunty for personal use and uploaded it to my PPA.

The following changes were necessary for intrepid:
  * debian/control:
    - Build against versioned (fixed) libass.
    - Build against libxxf86dga-dev and libxxf86vm-dev to fix FTBFS.
  * debian/patches/402_enable_embedded_video.diff:
    - Enable embedded video with Qt >= 4.3.

[Bartosz Kosiorek (gang65)]

The Vlc 0.9.8a is already packaged at Jaunty.
Please backport it, and set Priority to High due to security issues.

[Scott Kitterman (kitterman)]

Security fixes are handled through the security update process, not through backports.

[Kees Cook (kees)]

Fixed in Jaunty.

[Nicola Ferralis (feranick)]

VLC 0.9.9.a available in jaunty. Changelog:

Decoders:
 * Experimental new decoder for Real Video 3.0 & 4.0

Demuxers:
 * Various fixes related to real demuxer

New Localizations:
 * Indonesian
 * Bengali
 * Updates of other localizations

Various bugfixes:
 * Support for receiving RTP packets on odd port numbers.
 * Lots of small bugfixes.
 * Correct Fullscreen behaviour on Multi-Screen setups on Windows
 * Telnet fixes on Windows
 * Resampling fixes when transcoding

[Alex Valavanis (valavanisalex)]

Intrepid Ibex reached end-of-life on 30 April 2010 so I am closing the
report. The bug has been fixed in newer releases of Ubuntu.

[Jamie Strandboge (jdstrand)]

Thank you for reporting this bug and helping to make Ubuntu better. The package referred to in this bug is in universe or multiverse and reported against a release of Ubuntu (hardy) which no longer receives updates outside of the explicitly supported LTS packages. While the bug against hardy is being marked "Won't Fix" for now, if you are interested feel free to post a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures'

Please feel free to report any other bugs you may find.