@@ -1,364 +0,0 @@

--------------------------------------------------------------------

-Wed Jun 25 08:40:15 UTC 2025 - Yifan Jiang <yfjiang@suse.com>

-

-- Built with noopenh264, drop ffmpeg-dlopen-openh264.patch

-  (jsc#PED-12607)

-

--------------------------------------------------------------------

-Thu Jun 12 17:48:49 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

-

-- Enable libiec61883 integration boo#1244453

-

--------------------------------------------------------------------

-Fri Apr  4 09:34:14 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

-

-- Disable OpenVINO, too many dependencies for Factory ring1.

-

--------------------------------------------------------------------

-Tue Apr  1 23:38:08 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

-

-- Update to release 7.1.1

-  * avformat/wavdec: Fix overflow of intermediate in

-    block_align check

-  * avformat/dvdvideodec: drop packets with unset PTS or DTS

-  * avutil/timecode: Avoid fps overflow in

-    av_timecode_get_smpte_from_framenum()

-  * avcodec/mjpegdec: Disallow progressive bayer images

-  * avformat/mov: don't unconditionally set all audio packets

-    in fragments as key frames

-  * avcodec/libx265: resolve build failure for

-    libx265.so.n, n >= 213

-  * avfilter/buffersrc: check for valid sample rate.

-    (CVE-2025-22919, bsc#1237371)

-  * avfilter/af_pan: Fix sscanf() use.

-    (CVE-2025-0518, bsc#1236007)   

-  * avformat/iamf_parse: add missing constrains for num_parameters

-    in audio_element_oub().

-    (CVE-2025-1816, bsc#1238728)

-- Delete ffmpeg-7-CVE-2025-22919.patch,

-  ffmpeg-7-CVE-2025-0518.patch, ffmpeg-7-CVE-2025-1816.patch

-  (merged)

-

--------------------------------------------------------------------

-Tue Mar 25 11:48:21 UTC 2025 - Adrian Schröter <adrian@suse.de>

-

-- Move BcntSync tag to the %else part where the mini package gets defined

-

--------------------------------------------------------------------

-Sun Mar 23 23:21:26 UTC 2025 - Mia Herkt <mia@0x0.st>

-

-- Build with OpenVINO support in libavfilter

-

--------------------------------------------------------------------

-Sun Mar 23 15:33:59 UTC 2025 - Cliff Zhao <qzhao@suse.com>

-

-- Add ffmpeg-7-CVE-2025-1816.patch:

-  Backport 0526535c from upstream, add missing constrains for

-  num_parameters in audio_element_oub().

-  (CVE-2025-1816, bsc#1238728)

-

--------------------------------------------------------------------

-Wed Mar  5 09:46:09 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

-

-- Add 0001-avcodec-libsvtav1-unbreak-build-with-latest-svtav1.patch

-  to build with SVT-AV1 3.0.0.

-

--------------------------------------------------------------------

-Fri Feb 19 05:17:22 UTC 2025 - Cliff Zhao <qzhao@suse.com>

-

-- Add ffmpeg-7-CVE-2025-22921.patch:

-  Backport 7f9c7f98 from upstream, clear array length when

-  freeing it.

-  (CVE-2025-22921, bsc#1237382)

-

--------------------------------------------------------------------

-Fri Feb 19 04:27:06 UTC 2025 - Cliff Zhao <qzhao@suse.com>

-

-- Add ffmpeg-7-CVE-2025-25473.patch:

-  Backport c08d3004 from upstream, clear FFFormatContext packet.

-  When packet_buffer is used in mux.c, and if a muxing process fails

-  at a point where packets remained in said queue.

-  (CVE-2025-25473, bsc#1237351)

-

--------------------------------------------------------------------

-Fri Feb 19 03:18:02 UTC 2025 - Cliff Zhao <qzhao@suse.com>

-

-- Add ffmpeg-7-CVE-2025-0518.patch:

-  Backport b5b6391d from upstream, fixes memory data leak when

-  use sscanf().

-  (CVE-2025-0518, bsc#1236007)

-

--------------------------------------------------------------------

-Fri Feb 19 02:58:01 UTC 2025 - Cliff Zhao <qzhao@suse.com>

-

-- Add ffmpeg-7-CVE-2025-22919.patch:

-  Backport 1446e37d from upstream, check for valid sample rate

-  As the sample rate <= 0 is invalid.

-  (CVE-2025-22919, bsc#1237371)

-

--------------------------------------------------------------------

-Tue Oct 15 08:18:54 UTC 2024 - Antonio Larrosa <alarrosa@suse.com>

-

-- Adjust bconds to build the package in SLFO without xvidcore.

-

--------------------------------------------------------------------

-Wed Oct  2 08:20:18 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

-

-- Update to release 7.1

-  * ffmpeg CLI filtergraph chaining

-  * pad_vaapi, drawbox_vaapi filters

-  * vf_scale supports secondary ref input and framesync options

-  * vf_scale2ref deprecated

-  * removed DEC Alpha DSP and support code

-  * perlin video source

-  * Cropping metadata parsing and writing in Matroska and MP4/MOV

-    de/muxers

-  * YUV colorspace negotiation for codecs and filters, obsoleting

-    the YUVJ pixel format

-  * Vulkan H.264 and H.265 encoders

-  * stream specifiers in fftools can now match by stream

-    disposition

-  * LCEVC enhancement data exporting in H.26x and MP4/ISOBMFF

-  * LCEVC filter

-  * avcodec/mpegvideo_enc: Add check for av_packet_new_side_data (CVE-2024-12361, bsc#1237358)

-  * avformat/dump: print only the actual streams in a tile grid group (CVE-2025-22920, bsc#1237380)

-  * avcodec/rkmppdec: Fix double-free on error (CVE-2024-35368, bsc#1234028)

-  * avcodec/wavarc: fix signed integer overflow in block type 6/19 (CVE-2024-36619, bsc#1234023)

-  * avcodec/vp9: Fix race when attaching side-data for show-existing frame (CVE-2024-36615, bsc#1234017)

-- Delete patches/ffmpeg-7-fix-crashes.patch,

-  0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch (merged)

-

--------------------------------------------------------------------

-Mon Sep 30 12:34:56 UTC 2024 - olaf@aepfle.de

-

-- Fix assertion due to missing priv_data cleanup on failed VAAPI

-  acceleration with 11013-avcodec-decode-clean-up-if-get_hw_frames_parameters-.patch

-  (ffmpeg#11013, vlc#28811)

-

--------------------------------------------------------------------

-Thu Sep 26 10:02:20 UTC 2024 - Stefan Dirsch <sndirsch@suse.com>

-

-- no longer build against libmfx; build also 15.5 against libvpl

- (boo#1230983, boo#1219494)

-

-- dropping support for libmfx below covers:

-  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)

-  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)

-  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)

-  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)

-  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)

-  * Multiple vulnerabilities in the Intel Media SDK (libmfx1) (bsc#1226892)

-  * Drop libmfx dependency from our product (jira #PED-10024)

-

--------------------------------------------------------------------

-Wed Aug 21 09:58:42 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

-

-- Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch

-  to resolve build failure on armv7 boo#1229338

-

--------------------------------------------------------------------

-Wed Aug  7 07:37:24 UTC 2024 - Cliff Zhao <qzhao@suse.com>

-

-- Update to version 7.0.2:

-  * avcodec/snow: Fix off by 1 error in run_buffer

-  * avcodec/utils: apply the same alignment to YUV410 as we do to YUV420 for snow

-  * avformat/iamf_parse: Check for 0 samples

-  * swscale: loongarch Fix checkasm-sw_yuv2rgb failure.

-  * avcodec/aacps_tablegen_template: don't redefine CONFIG_HARDCODED_TABLES

-  * avutil/hwcontext_vaapi: use the correct type for VASurfaceAttribExternalBuffers.buffers

-  * avcodec/pcm-bluray/dvd: Use correct pointer types on BE

-  * avcodec/pngenc: fix sBIT writing for indexed-color PNGs

-  * avcodec/pngdec: use 8-bit sBIT cap for indexed PNGs per spec

-  * avformat/mov: check that child boxes of trak are only present inside it

-  * avformat/mov: check that sample and chunk count is 1 for HEIF

-  * avcodec/videotoolboxenc: Fix bitrate doesn't work as expected

-  * avdevice/dshow: Don't skip audio devices if no video device is present

-  * avcodec/hdrenc: Allocate more space

-  * avcodec/cfhdenc: Height of 16 is not supported

-  * avcodec/cfhdenc: Allocate more space

-  * avcodec/osq: fix integer overflow when applying factor

-  * avcodec/osq: avoid using too large numbers for shifts and integers in update_residue_parameter()

-  * avcodec/hevcdec: fix segfault on invalid film grain metadata (CVE-2024-32228, bsc#1227277)

-  * avfilter/vf_tiltandshift: fix buffer offset for yuv422p input (CVE-2024-32229, bsc#1227295)

-  * avcodec/mpegvideo_enc: Fix 1 line and one column images (CVE-2024-32230, bsc#1227296)

-  * avcodec/pnmdec: Use 64bit for input size check (CVE-2024-7055, bsc#1229026)

-  * fftools/ffmpeg_mux_init: Fix double-free on error (CVE-2024-35365, bsc#1235091)

-  * avformat/dxa: Adjust order of operations around block align (CVE-2024-36613, bsc#1235092)

-  * avfilter/vf_minterpolate: Check pts before division (CVE-2023-51798, bsc#1223304)

-  * avfilter/vf_weave: Fix odd height handling (CVE-2023-51793, bsc#1223272)

-  * avfilter/vf_gradfun: Do not overread last line (CVE-2023-50010, bsc#1223256)

-  * avfilter/af_stereowiden: Check length (CVE-2023-51794, bsc#1223437)

-  * avutil/hwcontext: Don't assume frames_uninit is reentrant (CVE-2024-31578, bsc#1223070)

-  * avformat/avidec: Fix integer overflow iff ULONG_MAX < INT64_MAX (CVE-2024-36618, bsc#1234020)

-  * avformat/cafdec: dont seek beyond 64bit (CVE-2024-36617, bsc#1234019)

-  * avformat/westwood_vqa: Fix 2g packets (CVE-2024-36616, bsc#1234018)

-- Drop ffmpeg-7-CVE-2024-32228.patch:

-  The fix has been merged.

-- Drop ffmpeg-7-CVE-2024-32229.patch:

-  The fix has been merged.

-- Drop ffmpeg-7-CVE-2024-32230.patch:

​