libva - Debian Package Tracker

general

source: libva (main)
version: 2.24.1-2
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Reinhard Tartler (DMD) – Sebastian Ramacher (DMD)
arch: any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.10.0-1
oldstable: 2.17.0-1
stable: 2.22.0-3
testing: 2.24.1-2
unstable: 2.24.1-2

versioned links

2.10.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.17.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.22.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.24.1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libva-dev
libva-drm2
libva-glx2
libva-wayland2 (1 bugs: 0, 1, 0, 0)
libva-x11-2
libva2
va-driver-all (1 bugs: 0, 1, 0, 0)

action needed

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-56438: Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Created: 2026-11-13 Last update: 2026-11-13 02:31

Depends on packages which need a new maintainer normal

The packages that libva depends on which need a new maintainer are:

intel-vaapi-driver-shaders (#1153557)
- Depends: i965-va-driver-shaders

Created: 2026-11-10 Last update: 2026-11-13 11:31

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 14f2f744715ddd05d7371ee21fa12855f98b2230
Author: Sebastian Ramacher <sramacher@debian.org>
Date:   Tue Jul 14 21:22:55 2026 +0200

    Make use of dh 14's substvar handling

commit 81700fa389b9c5c57ccdc301fa9c592a50a3e202
Author: Sebastian Ramacher <sramacher@debian.org>
Date:   Tue Jul 14 21:22:37 2026 +0200

    Reuse function from dpkg to check vendor

Created: 2026-07-14 Last update: 2026-11-08 02:33

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-56438: (needs triaging) Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-11-13 Last update: 2026-11-13 02:31

news

[rss feed]

[2026-07-20] libva 2.24.1-2 MIGRATED to testing (Debian testing watch)
[2026-07-14] Accepted libva 2.24.1-2 (source) into unstable (Benjamin Drung)
[2026-07-12] Accepted libva 2.24.1-1 (source) into unstable (Sebastian Ramacher)
[2026-07-09] libva 2.24.0-1 MIGRATED to testing (Debian testing watch)
[2026-07-04] Accepted libva 2.24.0-1 (source) into unstable (Sebastian Ramacher)
[2026-04-02] libva 2.23.0-2 MIGRATED to testing (Debian testing watch)
[2026-03-28] Accepted libva 2.23.0-2 (source) into unstable (Sebastian Ramacher)
[2025-12-25] libva 2.23.0-1 MIGRATED to testing (Debian testing watch)
[2025-12-16] Accepted libva 2.23.0-1 (source) into unstable (Sebastian Ramacher)
[2025-02-25] libva 2.22.0-3 MIGRATED to testing (Debian testing watch)
[2025-02-19] Accepted libva 2.22.0-3 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2025-02-16] libva 2.22.0-2 MIGRATED to testing (Debian testing watch)
[2025-02-10] Accepted libva 2.22.0-2 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-07-10] libva 2.22.0-1 MIGRATED to testing (Debian testing watch)
[2024-07-04] Accepted libva 2.22.0-1 (source) into unstable (Sebastian Ramacher)
[2024-05-14] libva 2.21.0-1 MIGRATED to testing (Debian testing watch)
[2024-05-14] libva 2.21.0-1 MIGRATED to testing (Debian testing watch)
[2024-05-05] Accepted libva 2.21.0-1 (source) into unstable (Sebastian Ramacher)
[2023-09-22] libva 2.20.0-2 MIGRATED to testing (Debian testing watch)
[2023-09-17] Accepted libva 2.20.0-2 (source) into unstable (Sebastian Ramacher)
[2023-09-17] Accepted libva 2.20.0-1 (source) into unstable (Sebastian Ramacher)
[2023-07-16] libva 2.19.0-1 MIGRATED to testing (Debian testing watch)
[2023-07-16] libva 2.19.0-1 MIGRATED to testing (Debian testing watch)
[2023-07-11] Accepted libva 2.19.0-1 (source) into unstable (Sebastian Ramacher)
[2023-06-18] libva 2.18.0-1 MIGRATED to testing (Debian testing watch)
[2023-06-11] Accepted libva 2.18.0-1 (source) into unstable (Sebastian Ramacher)
[2023-01-04] Accepted libva 2.17.0-1~bpo11+1 (source) into bullseye-backports (Nicholas D Steeves)
[2023-01-03] libva 2.17.0-1 MIGRATED to testing (Debian testing watch)
[2022-12-29] Accepted libva 2.17.0-1 (source) into unstable (Sebastian Ramacher)
[2022-10-16] libva 2.16.0-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 2
RC: 0
I&N: 2
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.24.1-2
5 bugs (1 patch)