Bug 21566 - Issue in libdvdcss2 store folders in / instead of ~/.dvdcss
Summary: Issue in libdvdcss2 store folders in / instead of ~/.dvdcss
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA6-64-OK
Keywords: UPSTREAM, advisory, validated_update
Depends on:
Blocks:
 
Reported: 2017-08-19 01:16 CEST by katnatek
Modified: 2018-02-28 14:56 CET (History)
4 users (show)

See Also:
Source RPM: libdvdcss2
CVE:
Status comment:


Attachments
spec for version 1.4.1 of libdvdcss2 (4.21 KB, text/plain)
2018-02-22 18:57 CET, katnatek
Details

Description katnatek 2017-08-19 01:16:49 CEST
Description of problem:

If i remember well the last time i use vlc before MGA 6 
When you play a dvd the "keys" was stored inside home dir
But now i see are created in /

Version-Release number of selected component (if applicable):

libdvdcss2-1.4.0-1.mga6.tainted

How reproducible:

See / folder before plat dvd
Play DVD with vlc
Folder is created in /
Comment 1 Marja Van Waes 2017-08-19 07:44:44 CEST
Assigning to all packagers collectively, since there is no registered maintainer for libdvdcss2.

Assignee: bugsquad => pkg-bugs
CC: (none) => marja11

Comment 2 katnatek 2017-08-24 01:38:44 CEST
Its like this report for manjaro https://forum.manjaro.org/t/long-folder-name-beginning-with-in-root/9096

But for some dvds the name start with the movie/dvd name, by example i have
CURSED-2006051312270000-
Comment 3 katnatek 2018-02-22 00:55:05 CET
Maybe fixed in upstream 1.4.1 https://trac.videolan.org/vlc/ticket/16347
Comment 4 katnatek 2018-02-22 18:57:27 CET
Created attachment 10000 [details]
spec for version 1.4.1 of libdvdcss2

Tested version 1.4.1 of libdvdcss2
The issue is fixed, now the keys are stored in ~/.dvdcss as must and not in /

I just can upload the i586 version to blogdrake's repository, i think this is the kind of stuff that can't be builded  in fedora's copr.

I will try to contact of other packager of our community but almost all are MIA

Please update the libdvdcss2 packages in official repositories
Comment 5 katnatek 2018-02-22 18:59:04 CET
Comment on attachment 10000 [details]
spec for version 1.4.1 of libdvdcss2

>%define major	2
>%define libname %mklibname dvdcss %{major}
>%define develname %mklibname -d dvdcss
>
>Name:		libdvdcss
>Version:	1.4.1
>Release:	%mkrel 1
>Summary:	Library for accessing DVDs as a block device using deCSS if needed
>Source:		http://download.videolan.org/pub/%{name}/%{version}/%{name}-%{version}.tar.bz2
>License:	GPLv2+
>Group:		System/Libraries
>URL:		http://www.videolan.org/libdvdcss
>
>%description
>libdvdcss is a simple library designed for accessing DVDs like a block device
>without having to bother about the decryption. The important features are:
> * Portability. Currently supported platforms are GNU/Linux, FreeBSD, NetBSD,
>   OpenBSD, BSD/OS, BeOS, Windows 95/98, Windows NT/2000, MacOS X, Solaris,
>   and HP-UX.
> * Simplicity. There are currently 7 functions in the API, and we intend to
>   keep this number low.
> * Freedom. libdvdcss is released under the General Public License, ensuring
>   it will stay free, and used only for free software products.
> * Just better. Unlike most similar projects, libdvdcss doesn't require the
>   region of your drive to be set.
>
>This package is in 'tainted' as it may violate patents in some countries.
>
>%package -n	%{libname}
>Summary:	A library for accessing DVDs as a block device using deCSS if needed
>Group:		System/Libraries
>Provides:	%{name} = %{version}-%{release}
>
>%description -n %{libname}
>libdvdcss is a simple library designed for accessing DVDs like a block device
>without having to bother about the decryption. The important features are:
> * Portability. Currently supported platforms are GNU/Linux, FreeBSD, NetBSD,
>   OpenBSD, BSD/OS, BeOS, Windows 95/98, Windows NT/2000, MacOS X, Solaris,
>   and HP-UX.
> * Simplicity. There are currently 7 functions in the API, and we intend to
>   keep this number low.
> * Freedom. libdvdcss is released under the General Public License, ensuring
>   it will stay free, and used only for free software products.
> * Just better. Unlike most similar projects, libdvdcss doesn't require the
>   region of your drive to be set.
>
>%package -n	%{develname}
>Summary:	Development tools for programs which will use the %{name} library
>Group:		Development/C
>Requires:	%{libname} = %{version}
>Provides:	%{name}-devel = %{version}-%{release}
>Obsoletes:	%mklibname -d dvdcss 2
> 
>%description -n %{develname}
>The %{name}-devel package includes the header files and static libraries
>necessary for developing programs which will manipulate DVDs files using
>the %{name} library.
> 
>If you are going to develop programs which will manipulate DVDs, you
>should install %{name}-devel.  You'll also need to have the %{name}
>package installed.
>
>%prep
>%setup -q
>
>%build
>%configure2_5x
>%make
>
>%install
>%makeinstall_std
>
>rm -rf %{buildroot}%{_docdir}/%{name}
>
>%files -n %{libname}
>%doc AUTHORS README
>%{_libdir}/*.so.%{major}*
>
>%files -n %{develname}
>%doc ChangeLog COPYING
>%{_libdir}/*.a
>%{_libdir}/*.la
>%{_libdir}/*.so
>%{_includedir}/*
>%_libdir/pkgconfig/*.pc
>
>
>%changelog
>* Wed Feb 21 2018 katnatek <j.alberto.vc@gmail.com>  1.4.1-1.mga6
>+ Update to 1.4.1
>- Fix mga#21566
>
>* Thu Dec 24 2015 luigiwalser <luigiwalser> 1.4.0-1.mga6
>+ Revision: 914457
>- 1.4.0
>
>* Wed Oct 15 2014 umeabot <umeabot> 1.3.0-3.mga5.tainted
>+ Revision: 747523
>- Second Mageia 5 Mass Rebuild
>
>* Tue Sep 16 2014 umeabot <umeabot> 1.3.0-2.mga5.tainted
>+ Revision: 681429
>- Mageia 5 Mass Rebuild
>
>* Sun Aug 17 2014 luigiwalser <luigiwalser> 1.3.0-1.mga5.tainted
>+ Revision: 664508
>- 1.3.0
>
>* Thu Oct 31 2013 tmb <tmb> 1.2.13-2.mga4.tainted
>+ Revision: 548203
>- Mageia 4 rebuild
>
>* Sun Mar 03 2013 luigiwalser <luigiwalser> 1.2.13-1.mga4.tainted
>+ Revision: 401187
>- 1.2.13
>
>* Sat Jan 12 2013 umeabot <umeabot> 1.2.12-2.mga3.tainted
>+ Revision: 357028
>- Mass Rebuild - https://wiki.mageia.org/en/Feature:Mageia3MassRebuild
>
>  + dams <dams>
>    - clean specfile
>
>* Tue Mar 20 2012 luigiwalser <luigiwalser> 1.2.12-1.mga2.tainted
>+ Revision: 225009
>- 1.2.12
>
>* Fri Dec 30 2011 supp <supp> 1.2.11-1.mga2.tainted
>+ Revision: 188880
>- update to 1.2.11
>
>* Sat Mar 05 2011 tux99 <tux99> 1.2.10-3.mga1
>+ Revision: 64927
>- incremented release number to enable update from plf
>
>* Sat Mar 05 2011 tux99 <tux99> 1.2.10-2.mga1
>+ Revision: 64919
>- cleaned up summary and description
>- removed obsolete conflicts, defines and post/postun scripts
>- imported package libdvdcss
>
katnatek 2018-02-22 23:32:04 CET

Summary: Play DVD with vlc make create folders in / => Issue in libdvdcss2 store folders in / instead of ~/.dvdcss
See Also: (none) => https://trac.videolan.org/vlc/ticket/16347
Keywords: (none) => UPSTREAM

Comment 6 David GEIGER 2018-02-23 02:06:24 CET
libdvdcss now up-to-date on Cauldron and also on mga6!

CC: (none) => geiger.david68210

Comment 7 David GEIGER 2018-02-27 06:45:03 CET
Assigning to QA,


Advisory:
=============================
Current version of libdvdcss (1.4.0) doesn't create or read key cache dir in ~/.dvdcss anymore. So this update fixes this issue.

For reference:
https://trac.videolan.org/vlc/ticket/16347

=============================


Packages in 6/tainted/updates_testing:
========================
libdvdcss-devel-1.4.1-1.mga6.tainted.i586.rpm
libdvdcss2-1.4.1-1.mga6.tainted.i586.rpm
lib64dvdcss-devel-1.4.1-1.mga6.tainted.x86_64.rpm
lib64dvdcss2-1.4.1-1.mga6.tainted.x86_64.rpm

Source RPM: 
========================
libdvdcss-1.4.1-1.mga6.tainted.src.rpm

Assignee: pkg-bugs => qa-bugs

Comment 8 Len Lawrence 2018-02-27 21:36:34 CET
Mageia 6  :: x86_64

Confirmed that when playing a commercial DVD using vlc nothing was written to ~/.dvdcss.  There are some old entries there, going back to 2014.

Enabled tainted updates and updated the two packages.

$ vlc dvd://1
Played the first VOB only.
$ ll .dvdcss
total 20
-rw-r--r-- 1 lcl lcl  199 Feb 27 19:58 CACHEDIR.TAG
drwxr-xr-x 2 lcl lcl 4096 Aug 17  2014 COAST_D1-0000000000000000/
drwxr-xr-x 2 lcl lcl 4096 Feb 27 19:56 DISTRICT_9-2009102919401078-3c1dd3a3a9/
drwxr-xr-x 2 lcl lcl 4096 Aug 21  2014 STARGATE-2000041716561400-e6bc5d770e/
drwxr-xr-x 2 lcl lcl 4096 Aug 21  2014 STARGATE_UNIVERSE-2011071316104100-2d39178a30/

$ ll .dvdcss/DISTRICT_9-2009102919401078-3c1dd3a3a9/
total 192
-rw-r--r-- 1 lcl lcl 16 Feb 27 19:56 00000001e0
-rw-r--r-- 1 lcl lcl 16 Feb 27 19:56 0000006095
................

 This looks fine for 64 bits.

CC: (none) => tarazed25
Whiteboard: (none) => MGA6-64-OK

Lewis Smith 2018-02-28 09:42:59 CET

Keywords: (none) => advisory, validated_update
CC: (none) => sysadmin-bugs

Comment 9 Mageia Robot 2018-02-28 14:56:14 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2018-0039.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.