December 2017 - ffmpeg-cvslog

[ffmpeg-web] branch master updated. edb87c9 web: Add FFmpeg 3.3.6
by ffmpeg-git＠ffmpeg.org 31 Dec '17

31 Dec '17

The branch, master has been updated via edb87c912a85a4ea64228ea4d514931fb4dc5129 (commit) via 77a02a670069ae7c279540be8bcc80963411aebf (commit) from 552c0d90f6667550065f8e71121a61f0b21aaf26 (commit) - Log ----------------------------------------------------------------- commit edb87c912a85a4ea64228ea4d514931fb4dc5129 Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Sun Dec 31 23:57:14 2017 +0100 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Sun Dec 31 23:57:14 2017 +0100 web: Add FFmpeg 3.3.6 Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> diff --git a/src/download b/src/download index 557043e..2add1cb 100644 --- a/src/download +++ b/src/download @@ -310,10 +310,10 @@ libpostproc 54. 7.100</pre> </div>  </div>  - <h3 id="release_3.3">FFmpeg 3.3.5 "Hilbert"</h3> + <h3 id="release_3.3">FFmpeg 3.3.6 "Hilbert"</h3> <p> - 3.3.5 was released on 2017-10-26. It is the latest stable FFmpeg release + 3.3.6 was released on 2017-12-31. It is the latest stable FFmpeg release from the 3.3 release branch, which was cut from master on 2017-04-02. </p> <p>It includes the following library versions: @@ -331,19 +331,19 @@ libpostproc 54. 5.100</pre> <div class="row"> <div class="col-md-3"> - <a class="btn btn-success" href="releases/ffmpeg-3.3.5.tar.xz">Download xz tarball</a> - <small><a href="releases/ffmpeg-3.3.5.tar.xz.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-3.3.6.tar.xz">Download xz tarball</a> + <small><a href="releases/ffmpeg-3.3.6.tar.xz.asc">PGP signature</a></small> </div>  <div class="col-md-3"> - <a class="btn btn-success" href="releases/ffmpeg-3.3.5.tar.bz2">Download bzip2 tarball</a> - <small><a href="releases/ffmpeg-3.3.5.tar.bz2.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-3.3.6.tar.bz2">Download bzip2 tarball</a> + <small><a href="releases/ffmpeg-3.3.6.tar.bz2.asc">PGP signature</a></small> </div>  <div class="col-md-3"> - <a class="btn btn-success" href="releases/ffmpeg-3.3.5.tar.gz">Download gzip tarball</a> - <small><a href="releases/ffmpeg-3.3.5.tar.gz.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-3.3.6.tar.gz">Download gzip tarball</a> + <small><a href="releases/ffmpeg-3.3.6.tar.gz.asc">PGP signature</a></small> </div>  <div class="col-md-3 text-right"> - <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.3.5">Changelog</a></small> + <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.3.6">Changelog</a></small> <a class="btn btn-success" href="https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/refs/heads/release/3.3:/RELEA…">Release Notes</a> </div>  </div>  diff --git a/src/security b/src/security index f299550..8d81d74 100644 --- a/src/security +++ b/src/security @@ -23,6 +23,15 @@ CVE-2017-17081, 127a362630e11fe724e2e63fc871791fdcbcfa64 <h2>FFmpeg 3.3</h2> +<h3>3.3.6</h3> +<p> +Fixes following vulnerabilities: +</p> +<pre> +CVE-2017-16840, a7aac19933a91e22d77b0b4dd4ecd61edf52d43f / 3228ac730c11eca49d5680d5550128e397061c85 +CVE-2017-17081, 96fe37a3390aaa07a1798d8daa6aa2d622c4870b / 58cf31cee7a456057f337b3102a03206d833d5e8 +</pre> + <h3>3.3.5</h3> <p> Fixes following vulnerabilities: commit 77a02a670069ae7c279540be8bcc80963411aebf Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Sun Dec 31 23:55:51 2017 +0100 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Sun Dec 31 23:55:51 2017 +0100 web/security: Add CVE-2017-17081 to 3.3.5 diff --git a/src/security b/src/security index f4e61ae..f299550 100644 --- a/src/security +++ b/src/security @@ -29,6 +29,7 @@ Fixes following vulnerabilities: </p> <pre> CVE-2017-15186, 0a231e7dd32bdea4b2fc1c48040047986d1d4925 / df62b70de8aaa285168e72fe8f6e740843ca91fa +CVE-2017-17081, aa6c44c33399a8dd5799dc57d18e0f8235b17f86 / 127a362630e11fe724e2e63fc871791fdcbcfa64 </pre> <h3>3.3.4</h3> ----------------------------------------------------------------------- Summary of changes: src/download | 18 +++++++++--------- src/security | 10 ++++++++++ 2 files changed, 19 insertions(+), 9 deletions(-) hooks/post-receive --

1 0

Tag n3.3.6 : FFmpeg 3.3.6 release
by git＠videolan.org 31 Dec '17

31 Dec '17

[ffmpeg] [branch: refs/tags/n3.3.6] Tag: e27f87ecb5d996351c1275f59743cdba498225df > http://git.videolan.org/gitweb.cgi/ffmpeg.git?a=tag;h=e27f87ecb5d996351c127… Tagger: Michael Niedermayer <michael(a)niedermayer.cc> Date: Sun Dec 31 23:36:43 2017 +0100 FFmpeg 3.3.6 release

1 0

avformat/hls: release mem resource to fix memleak
by Steven Liu 31 Dec '17

31 Dec '17

ffmpeg | branch: master | Steven Liu <lq(a)chinaffmpeg.org> | Sat Dec 30 20:42:13 2017 +0800| [2906363d1bb804994cf741ad2c99d8c76efff5f0] | committer: Aman Gupta avformat/hls: release mem resource to fix memleak fix CID: 1426991 Signed-off-by: Steven Liu <lq(a)chinaffmpeg.org> Signed-off-by: Aman Gupta <aman(a)tmm1.net> Signed-off-by: Derek Buitenhuis <derek.buitenhuis(a)gmail.com> > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2906363d1bb804994… --- libavformat/hls.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/libavformat/hls.c b/libavformat/hls.c index d9f7c6de4d..950cc4c3bd 100644 --- a/libavformat/hls.c +++ b/libavformat/hls.c @@ -1473,8 +1473,11 @@ reload: if (c->http_multiple == -1) { uint8_t *http_version_opt = NULL; - av_opt_get(v->input, "http_version", AV_OPT_SEARCH_CHILDREN, &http_version_opt); - c->http_multiple = http_version_opt && strncmp((const char *)http_version_opt, "1.1", 3) == 0; + int r = av_opt_get(v->input, "http_version", AV_OPT_SEARCH_CHILDREN, &http_version_opt); + if (r >= 0) { + c->http_multiple = strncmp((const char *)http_version_opt, "1.1", 3) == 0; + av_freep(&http_version_opt); + } } seg = next_segment(v);

1 0

avcodec/libx264: remove NV21, its not supported
by Michael Niedermayer 31 Dec '17

31 Dec '17

ffmpeg | branch: release/2.4 | Michael Niedermayer <michael(a)niedermayer.cc> | Sun Dec 31 16:45:18 2017 +0100| [2633ac3a969f60905eb72080289b5d16f6451726] | committer: Michael Niedermayer avcodec/libx264: remove NV21, its not supported Regression introduced in 8d75aa8d79519c21f91a7dd96f330ad30d6625ed Found-by: jamrial Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2633ac3a969f60905… --- libavcodec/libx264.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/libavcodec/libx264.c b/libavcodec/libx264.c index 7f46abd80b..72427d3931 100644 --- a/libavcodec/libx264.c +++ b/libavcodec/libx264.c @@ -747,9 +747,6 @@ static const enum AVPixelFormat pix_fmts_all[] = { AV_PIX_FMT_YUVJ444P, AV_PIX_FMT_NV12, AV_PIX_FMT_NV16, -#ifdef X264_CSP_NV21 - AV_PIX_FMT_NV21, -#endif AV_PIX_FMT_YUV420P10, AV_PIX_FMT_YUV422P10, AV_PIX_FMT_YUV444P10,

1 0

[ffmpeg-web] branch master updated. 552c0d9 web/security: Add CVE-2017-7862 and CVE-2017-7866
by ffmpeg-git＠ffmpeg.org 31 Dec '17

31 Dec '17

The branch, master has been updated via 552c0d90f6667550065f8e71121a61f0b21aaf26 (commit) from 60d3f37b88703060228077cc0df1a215a810b2f5 (commit) - Log ----------------------------------------------------------------- commit 552c0d90f6667550065f8e71121a61f0b21aaf26 Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Sun Dec 31 17:54:01 2017 +0100 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Sun Dec 31 17:54:01 2017 +0100 web/security: Add CVE-2017-7862 and CVE-2017-7866 diff --git a/src/security b/src/security index f4af63a..f4e61ae 100644 --- a/src/security +++ b/src/security @@ -87,6 +87,15 @@ CVE-2017-9996, 973a66108b8e01ceb85cf2d6922a5cbb47f6a657 / e1b60aad77c27ed5d4dfc1 CVE-2017-9996, a483e46b794539d21b1ec0f3e521f681a54a86d2 / 1e42736b95065c69a7481d0cf55247024f54b660 </pre> +<h3>3.3</h3> +<p> +Fixes following vulnerabilities: +</p> +<pre> +CVE-2017-7862, 8c2ea3030af7b40a3c4275696fb5c76cdb80950a +CVE-2017-7866, e371f031b942d73e02c090170975561fabd5c264 +</pre> + <h2>FFmpeg 3.2</h2> @@ -158,6 +167,15 @@ Fixes following vulnerabilities: <pre> CVE-2017-5024, ed2572b9c8f885e2a4764d2e34604442a71899a1 / 2d453188c2303da641dafb048dc1806790526dfd CVE-2017-5025, cf8e004a51b08c6e8ceaeebca85ab84c7ed0b4cf / fd30e4d57fe5841385f845440688505b88c0f4a9 +CVE-2017-7862, a1a14982ec5b9954637cdc9ce8daf01d211e5c79 / 8c2ea3030af7b40a3c4275696fb5c76cdb80950a +</pre> + +<h3>3.2.3</h3> +<p> +Fixes following vulnerabilities: +</p> +<pre> +CVE-2017-7866, bd6c1d5149fbc4f2a0200ad99e7f56f4fb7d518a / e371f031b942d73e02c090170975561fabd5c264 </pre> <h3>3.2.2</h3> @@ -249,6 +267,8 @@ Fixes following vulnerabilities: <pre> CVE-2017-5024, 02a5e88ebc725b09f675bfcbbd4db1133e41708e / 2d453188c2303da641dafb048dc1806790526dfd CVE-2017-5025, b6efd022b77349f2797afe756b791e82ec4a1d96 / fd30e4d57fe5841385f845440688505b88c0f4a9 +CVE-2017-7862, 68e9caf16f4421478634c1c2ffc4706393304db3 / 8c2ea3030af7b40a3c4275696fb5c76cdb80950a +CVE-2017-7866, 00bbf3063c9ef8033c23612dc25a9928beb3aa3d / e371f031b942d73e02c090170975561fabd5c264 </pre> <h3>3.1.6</h3> @@ -331,6 +351,15 @@ Fixes following vulnerabilities: <pre> CVE-2017-5024, dc1e099bf281e69d162bde02bd87112bbcb1ab5c / 2d453188c2303da641dafb048dc1806790526dfd CVE-2017-5025, 4f7064c9da35cd8156f6aee4a25e9b4e7f4ae607 / fd30e4d57fe5841385f845440688505b88c0f4a9 +CVE-2017-7862, bb504aa5eb7eb32dbb62545772285e794af85651 / 8c2ea3030af7b40a3c4275696fb5c76cdb80950a +</pre> + +<h3>3.0.6</h3> +<p> +Fixes following vulnerabilities: +</p> +<pre> +CVE-2017-7866, 99c78466ff27311b2a06d874cb7bbd8b1cefc597 / e371f031b942d73e02c090170975561fabd5c264 </pre> <h3>3.0.5</h3> @@ -391,6 +420,8 @@ Fixes following vulnerabilities: <pre> CVE-2017-5024, 4adc99ecb6e9aec301fdd79ec097d433346045b6 / 2d453188c2303da641dafb048dc1806790526dfd CVE-2017-5025, 8be3724e55b2c55337c14c9cb7a69c5a85d42a65 / fd30e4d57fe5841385f845440688505b88c0f4a9 +CVE-2017-7862, 142c1737e325d324c46d9450dbce711720e84430 / 8c2ea3030af7b40a3c4275696fb5c76cdb80950a +CVE-2017-7866, 1febd817b1d84a520dd2bc96ceacdfe7fb8a0dd2 / e371f031b942d73e02c090170975561fabd5c264 </pre> <h3>2.8.10</h3> @@ -792,6 +823,8 @@ CVE-2017-14223, f8c52dfa1583f0d2c039bad8c9422d2fd190a039 / afc9c683ed9db01edb357 CVE-2017-17081, 27f8d386829689c346ff0cef00d3af57b9fb8903 / 58cf31cee7a456057f337b3102a03206d833d5e8 CVE-2017-5024, 01308b492a0e713eee078514d7b3143650dc5886 / 2d453188c2303da641dafb048dc1806790526dfd CVE-2017-5025, bb7fd512391ef891a85edccd446954b6a7198fd2 / fd30e4d57fe5841385f845440688505b88c0f4a9 +CVE-2017-7862, cdbaa022f4c814eb074b05dbeaa88d8af5ed6c2b / 8c2ea3030af7b40a3c4275696fb5c76cdb80950a +CVE-2017-7866, 62244f37d116af28949787d160f80f5210083e55 / e371f031b942d73e02c090170975561fabd5c264 CVE-2017-9991, a579264bc9f3014adcc9defae0086594a16d7f00 / 441026fcb13ac23aa10edc312bdacb6445a0ad06 CVE-2017-9992, 5204a50013705ad3882413ff65edcfceb2e86fab / f52fbf4f3ed02a7d872d8a102006f29b4421f360 CVE-2017-9993, 7e6b64a7d9a2dd64e652b3e42a741b673cda3a26 / 189ff4219644532bdfa7bab28dfedaee4d6d4021 ----------------------------------------------------------------------- Summary of changes: src/security | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) hooks/post-receive --

1 0

avfilter/af_afir: rework FIR gain measurement
by Paul B Mahol 31 Dec '17

31 Dec '17

ffmpeg | branch: master | Paul B Mahol <onemda(a)gmail.com> | Sun Dec 31 19:09:07 2017 +0100| [f3552c3b9d517e278ec45d5e2bd53bf3e7dc754b] | committer: Paul B Mahol avfilter/af_afir: rework FIR gain measurement Signed-off-by: Paul B Mahol <onemda(a)gmail.com> > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f3552c3b9d517e278… --- libavfilter/af_afir.c | 24 +++++++++++++++++++----- 1 file changed, 19 insertions(+), 5 deletions(-) diff --git a/libavfilter/af_afir.c b/libavfilter/af_afir.c index c81a1e22cf..6687242631 100644 --- a/libavfilter/af_afir.c +++ b/libavfilter/af_afir.c @@ -105,7 +105,7 @@ static int fir_channel(AVFilterContext *ctx, void *arg, int ch, int nb_jobs) if (out) { float *ptr = (float *)out->extended_data[ch]; - s->fdsp->vector_fmul_scalar(ptr, dst, s->gain * s->wet_gain, FFALIGN(out->nb_samples, 4)); + s->fdsp->vector_fmul_scalar(ptr, dst, s->wet_gain, FFALIGN(out->nb_samples, 4)); emms_c(); } @@ -166,7 +166,6 @@ static int convert_coeffs(AVFilterContext *ctx) { AudioFIRContext *s = ctx->priv; int i, ch, n, N; - float power = 0; s->nb_taps = av_audio_fifo_size(s->fifo[1]); if (s->nb_taps <= 0) @@ -217,13 +216,29 @@ static int convert_coeffs(AVFilterContext *ctx) av_audio_fifo_read(s->fifo[1], (void **)s->in[1]->extended_data, s->nb_taps); + if (s->again) { + float power = 0; + + for (ch = 0; ch < ctx->inputs[1]->channels; ch++) { + float *time = (float *)s->in[1]->extended_data[!s->one2many * ch]; + + for (i = 0; i < s->nb_taps; i++) + power += FFABS(time[i]); + } + + s->gain = sqrtf(1.f / (ctx->inputs[1]->channels * power)) / (sqrtf(ctx->inputs[1]->channels)); + for (ch = 0; ch < ctx->inputs[1]->channels; ch++) { + float *time = (float *)s->in[1]->extended_data[!s->one2many * ch]; + + s->fdsp->vector_fmul_scalar(time, time, s->gain, FFALIGN(s->nb_taps, 4)); + } + } + for (ch = 0; ch < ctx->inputs[1]->channels; ch++) { float *time = (float *)s->in[1]->extended_data[!s->one2many * ch]; float *block = s->block[ch]; FFTComplex *coeff = s->coeff[ch]; - power += s->fdsp->scalarproduct_float(time, time, s->nb_taps); - for (i = FFMAX(1, s->length * s->nb_taps); i < s->nb_taps; i++) time[i] = 0; @@ -252,7 +267,6 @@ static int convert_coeffs(AVFilterContext *ctx) } av_frame_free(&s->in[1]); - s->gain = s->again ? 1.f / sqrtf(power / ctx->inputs[1]->channels) : 1.f; av_log(ctx, AV_LOG_DEBUG, "nb_taps: %d\n", s->nb_taps); av_log(ctx, AV_LOG_DEBUG, "nb_partitions: %d\n", s->nb_partitions); av_log(ctx, AV_LOG_DEBUG, "partition size: %d\n", s->part_size);

1 0

tcp: properly return EOF
by wm4 31 Dec '17

31 Dec '17

ffmpeg | branch: master | wm4 <nfxjfg(a)googlemail.com> | Sat Dec 30 17:44:03 2017 +0100| [0e1f771d2200d14d298df09c91e14f51e418fd3a] | committer: wm4 tcp: properly return EOF There is no POSIX error code for EOF - recv() signals EOF by simply returning 0. But libavformat recently changed its conventions and requires an explicit AVERROR_EOF, or it might get into an endless retry loop, consuming 100% CPU while doing nothing. > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0e1f771d2200d14d2… --- libavformat/tcp.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavformat/tcp.c b/libavformat/tcp.c index fef0729da6..8773493df1 100644 --- a/libavformat/tcp.c +++ b/libavformat/tcp.c @@ -225,6 +225,8 @@ static int tcp_read(URLContext *h, uint8_t *buf, int size) return ret; } ret = recv(s->fd, buf, size, 0); + if (ret == 0) + return AVERROR_EOF; return ret < 0 ? ff_neterrno() : ret; }

1 0

[ffmpeg-web] branch master updated. 60d3f37 web: Add 2.4.14
by ffmpeg-git＠ffmpeg.org 31 Dec '17

31 Dec '17

The branch, master has been updated via 60d3f37b88703060228077cc0df1a215a810b2f5 (commit) from 979b3a6608b30683dc1d722e0304315a44f86cf7 (commit) - Log ----------------------------------------------------------------- commit 60d3f37b88703060228077cc0df1a215a810b2f5 Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Sun Dec 31 13:23:06 2017 +0100 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Sun Dec 31 13:27:49 2017 +0100 web: Add 2.4.14 diff --git a/src/olddownload b/src/olddownload index ed4af8a..d380b2f 100644 --- a/src/olddownload +++ b/src/olddownload @@ -129,10 +129,10 @@ libpostproc 53. 3.100</pre> </div>  - <h3 id="release_2.4">FFmpeg 2.4.13 "Fresnel"</h3> + <h3 id="release_2.4">FFmpeg 2.4.14 "Fresnel"</h3> <p> - 2.4.13 was released on 2016-02-02. It is the latest stable FFmpeg release + 2.4.14 was released on 2017-12-31. It is the latest stable FFmpeg release from the 2.4 release branch, which was cut from master on 2014-09-14. Amongst lots of other changes, it includes all changes from ffmpeg-mt, libav master of 2014-09-14, libav 11.4 as of 2015-08-25. @@ -152,15 +152,15 @@ libpostproc 53. 0.100</pre> <div class="row"> <div class="col-md-4"> - <a class="btn btn-success" href="releases/ffmpeg-2.4.13.tar.bz2">Download bzip2 tarball</a> - <small><a href="releases/ffmpeg-2.4.13.tar.bz2.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-2.4.14.tar.bz2">Download bzip2 tarball</a> + <small><a href="releases/ffmpeg-2.4.14.tar.bz2.asc">PGP signature</a></small> </div>  <div class="col-md-4"> - <a class="btn btn-success" href="releases/ffmpeg-2.4.13.tar.gz">Download gzip tarball</a> - <small><a href="releases/ffmpeg-2.4.13.tar.gz.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-2.4.14.tar.gz">Download gzip tarball</a> + <small><a href="releases/ffmpeg-2.4.14.tar.gz.asc">PGP signature</a></small> </div>  <div class="col-md-4 text-right"> - <small><a href="http://git.videolan.org/?p=ffmpeg.git;a=shortlog;h=n2.4.13">Changelog</a></small> + <small><a href="http://git.videolan.org/?p=ffmpeg.git;a=shortlog;h=n2.4.14">Changelog</a></small> <a class="btn btn-success" href="http://git.videolan.org/?p=ffmpeg.git;a=blob;f=RELEASE_NOTES;hb=release/2.4">Release Notes</a> </div>  </div>  diff --git a/src/security b/src/security index 3f81464..f4af63a 100644 --- a/src/security +++ b/src/security @@ -762,6 +762,45 @@ CVE-2014-9319, ea38e5a6b75706477898eb1e6582d667dbb9946c <h2>FFmpeg 2.4</h2> +<h3>2.4.14</h3> +<p> +Fixes following vulnerabilities: +</p> +<pre> +CVE-2016-10191, 4c5ebe4b014a208b8c8f52d61c4fb42b98d60e67 / 7d57ca4d9a75562fa32e40766211de150f8b3ee7 +CVE-2016-10192, a07cf6423ec30be54493d46ad541c8f91fe1c13e / a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156 +CVE-2016-6164, d7ab6e93a688688ad27c03ba3ba15711e59036dc / 8a3221cc67a516dfc1700bdae3566ec52c7ee823 +CVE-2016-6881, 46ecb01f62e5944b46f1df23be714dc3e920649a / a453bbb68f3eec202673728988bba3bc76071761 +CVE-2016-7122, 1c5515181334c3da779fb8afcd4940ea2b092b27 / e4e4a9cad7f21593d4bcb1f2404ea0d373c36c43 +CVE-2016-7450, 9243dbb5599ed9e4796c0534cc2f77268fc27c8d / a5af1240fce845f645440364c1335e0f8e44ee6c +CVE-2016-7502, 6438fb13406d2c0cc6023fa9d2ca8942e9ebd682 / 0e318f110bcd6bb8e7de9127f2747272e60f48d7 +CVE-2016-7562, a672688086ba51f51ccf6e580a076244778268a1 / 69449da436169e7facaa6d1f3bcbc41cf6ce2754 +CVE-2016-7785, b490cf4350abfec4746d6e033d533e0a15cfa93c / 14bac7e00d72eac687612d9b125e585011a56d4f +CVE-2016-7905, 45f5e17aa43a4cebed77d8e9781447ad29a0ed61 / 2679ad4773aa356e7c3da5c68bc81f02a194617f +CVE-2017-11399, 96349da5ec8eda9f0368446e557fe0c8ba0e66b7 / ba4beaf6149f7241c8bd85fe853318c2f6837ad0 +CVE-2017-11665, 52bb9d6d58c2df3044c793871bcbe8fe71002aff / ffcc82219cef0928bed2d558b19ef6ea35634130 +CVE-2017-11665, b7fed5da525a3a63d39ca63ce230562fcd8983a4 / 08c073434e25cba8c43aae5ed9554fdd594adfb0 +CVE-2017-14055, 0ca5c57d9d0670097235102abd54cccfb3f3c2db / 4f05e2e2dc1a89f38cd9f0960a6561083d714f1e +CVE-2017-14056, 2ac9bc34978cf77eebaf288741bdfa669e1df195 / 96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de +CVE-2017-14057, e7dc286b16ab54342e0b415abb4dc4e0cc22f736 / 7f9ec5593e04827249e7aeb466da06a98a0d7329 +CVE-2017-14058, 7ba100d3e6e8b1e5d5342feb960a7f081d6e15af / 7ec414892ddcad88313848494b6fc5f437c9ca4a +CVE-2017-14059, 983f90ef1819a0d4d3a5685b8a617a18eaecbd4b / 7e80b63ecd259d69d383623e75b318bf2bd491f6 +CVE-2017-14169, a4e85b2e1c8d5b4bf0091157bbdeb0e457fb7b8f / 9d00fb9d70ee8c0cc7002b89318c5be00f1bbdad +CVE-2017-14170, f173cdfe669556aa92857adafe60cbe5f2aa1210 / 900f39692ca0337a98a7cf047e4e2611071810c2 +CVE-2017-14171, 4fedc4ceabe32bb3bea68ab71cb42f0b6e409586 / c24bcb553650b91e9eff15ef6e54ca73de2453b7 +CVE-2017-14223, f8c52dfa1583f0d2c039bad8c9422d2fd190a039 / afc9c683ed9db01edb357bc8c19edad4282b3a97 +CVE-2017-17081, 27f8d386829689c346ff0cef00d3af57b9fb8903 / 58cf31cee7a456057f337b3102a03206d833d5e8 +CVE-2017-5024, 01308b492a0e713eee078514d7b3143650dc5886 / 2d453188c2303da641dafb048dc1806790526dfd +CVE-2017-5025, bb7fd512391ef891a85edccd446954b6a7198fd2 / fd30e4d57fe5841385f845440688505b88c0f4a9 +CVE-2017-9991, a579264bc9f3014adcc9defae0086594a16d7f00 / 441026fcb13ac23aa10edc312bdacb6445a0ad06 +CVE-2017-9992, 5204a50013705ad3882413ff65edcfceb2e86fab / f52fbf4f3ed02a7d872d8a102006f29b4421f360 +CVE-2017-9993, 7e6b64a7d9a2dd64e652b3e42a741b673cda3a26 / 189ff4219644532bdfa7bab28dfedaee4d6d4021 +CVE-2017-9993, a34d0a23923db7b61776635350d43543ca678ca3 / a5d849b149ca67ced2d271dc84db0bc95a548abb +CVE-2017-9994, 3f8882fa5bfd7b8d7f9388f21a08fa983a2322a4 / 6b5d3fb26fb4be48e4966e4b1d97c2165538d4ef +CVE-2017-9996, 7c1be72e2461e3c6db61626df2c71f985ba0990e / 1e42736b95065c69a7481d0cf55247024f54b660 +CVE-2017-9996, e334e402fe727c630c2f9eae2b2f7f56d702ca1b / e1b60aad77c27ed5d4dfc11e5e6a05a38c70489d +</pre> + <h3>2.4.13</h3> <p> Fixes following vulnerabilities: ----------------------------------------------------------------------- Summary of changes: src/olddownload | 14 +++++++------- src/security | 39 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 46 insertions(+), 7 deletions(-) hooks/post-receive --

1 0

Tag n2.4.14 : FFmpeg 2.4.14 release
by git＠videolan.org 31 Dec '17

31 Dec '17

[ffmpeg] [branch: refs/tags/n2.4.14] Tag: 4d62c6ee36f8411cde663df6ead27818b3f85bac > http://git.videolan.org/gitweb.cgi/ffmpeg.git?a=tag;h=4d62c6ee36f8411cde663… Tagger: Michael Niedermayer <michael(a)niedermayer.cc> Date: Sun Dec 31 13:12:43 2017 +0100 FFmpeg 2.4.14 release

1 0

changelog: update with previous commit
by James Almer 31 Dec '17

31 Dec '17

ffmpeg | branch: release/2.4 | James Almer <jamrial(a)gmail.com> | Sat Dec 30 19:38:23 2017 -0300| [935c93c069d3330ebba46ea05785eef3906b1c7c] | committer: Michael Niedermayer changelog: update with previous commit Signed-off-by: James Almer <jamrial(a)gmail.com> (cherry picked from commit 03292829aa2e7a7db36de490c6cc19a4792ab3cc) Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=935c93c069d3330eb… --- Changelog | 1 + 1 file changed, 1 insertion(+) diff --git a/Changelog b/Changelog index c839d0f85d..9d84d8f68c 100644 --- a/Changelog +++ b/Changelog @@ -2,6 +2,7 @@ Entries are sorted chronologically from oldest to youngest within each release, releases are sorted from youngest to oldest. version 2.4.14: +- x264: Support version 153 - avcodec/exr: Check buf_size more completely - avcodec/flacdec: Fix overflow in multiplication in decode_subframe_fixed() - avcodec/hevcdsp_template: Fix Invalid shifts in put_hevc_qpel_bi_w_h() and put_hevc_qpel_bi_w_w()

1 0