CVE-2015-5199

Published: 1 September 2015

Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.

Priority

Package	Release	Status
libvdpau Launchpad, Ubuntu, Debian	precise	Released (0.4.1-3ubuntu1.2)
	trusty	Released (0.7-1ubuntu0.1)
	upstream	Released (1.1.1)
	vivid	Released (0.9-1ubuntu0.1)
	Patches: upstream: http://cgit.freedesktop.org/~aplattner/libvdpau/commit/?id=d1f9c16b1a8187110e501c9116d21ffee25c0ba4

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.