File ffmpeg-7.changes of Package A_tw-ffmpeg-7

File ffmpeg-7.changes of Package A_tw-ffmpeg-7 (Revision addd410da7788fa24951727643c720a9)

Currently displaying revision addd410da7788fa24951727643c720a9 , Show latest

-------------------------------------------------------------------
Fri May 22 19:11:00 UTC 2026 - Bjørn Lie <bjorn.lie@gmail.com>

- Update to version 7.1.4:
  * Codec, format, filter and various other bugfixes.
  * avcodec/av1dec: check that primary_ref_frame is within range.
    (CVE-2026-30997, bsc#1262047)
- Drop patches fixed upstream:
  * ffmpeg-7-CVE-2026-40962.patch
- Rebase patches with quilt.

-------------------------------------------------------------------
Wed May 13 07:13:19 UTC 2026 - Alynx Zhou <alynx.zhou@suse.com>

- Add ffmpeg-7-CVE-2026-40962.patch: Use 64bit in CENC subsample
  bounds checks. (CVE-2026-40962, bsc#1262237)

-------------------------------------------------------------------
Fri Apr  3 11:06:49 UTC 2026 - Bjørn Lie <bjorn.lie@gmail.com>

- Disable VVC decoders/encoders by default.

-------------------------------------------------------------------
Fri Mar 20 01:01:03 UTC 2026 - Federico Mena Quintero <federico@suse.com>

- Update suse_version macro for 1610 (jsc#PED-15827)

-------------------------------------------------------------------
Sat Jan 10 19:44:19 UTC 2026 - Jan Engelhardt <jengelh@inai.de>

- Update to release 7.1.3
  * No release notes were provided
  * lavc/aarch64: Fix addp overflow in ff_pred16x16_plane_neon_10
  * swscale/output: Fix integer overflow in yuv2ya16_X_c_template()
  * avformat/avformat: clear FFFormatContext packet queue when
    closing a muxer
- Delete ffmpeg-7-CVE-2025-25473.patch (merged)

-------------------------------------------------------------------
Fri Sep 19 18:44:35 UTC 2025 - Bjørn Lie <bjorn.lie@gmail.com>

- Update to version 7.1.2:
  * avcodec/librsvgdec: fix compilation with librsvg 2.50.3
  * libavfilter/af_firequalizer: Add check for av_malloc_array()
  * avcodec/libsvtav1: unbreak build with latest svtav1
  * avformat/hls: Fix Youtube AAC
  * Various bugfixes.
  * aacenc_tns: clamp filter direction energy measurement
    (CVE-2025-1594, bsc#1237561)
  * avcodec/jpeg2000dec: implement cdef remapping during pixel format matching
    (CVE-2025-9951, bsc#1249393)
  * libavfilter/af_firequalizer: Add check for av_malloc_array()
    (CVE-2025-10256, bsc#1249431)
- Drop patches fixed upstream:
  * 0001-avcodec-libsvtav1-unbreak-build-with-latest-svtav1.patch
  * ffmpeg-CVE-2025-7700.patch

-------------------------------------------------------------------
Wed Jul 23 13:28:49 UTC 2025 - Hans-Peter Jansen <hp@urpla.net>

- Add vvenc build conditional

-------------------------------------------------------------------
Wed Jul 23 07:01:22 UTC 2025 - SongChuan Kang <sckang@suse.com>

- Add ffmpeg-CVE-2025-7700.patch: Add check for the return value
  of av_malloc_array() and av_calloc() to avoid potential NULL
  pointer dereference(CVE-2025-7700, bsc#1246790).

-------------------------------------------------------------------
Wed Jun 25 08:40:15 UTC 2025 - Yifan Jiang <yfjiang@suse.com>

- Built with noopenh264, drop ffmpeg-dlopen-openh264.patch
  (jsc#PED-12607)

-------------------------------------------------------------------
Thu Jun 12 17:48:49 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

- Enable libiec61883 integration [boo#1244453]

-------------------------------------------------------------------
Fri Apr  4 09:34:14 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

- Disable OpenVINO, too many dependencies for Factory ring1.

-------------------------------------------------------------------
Tue Apr  1 23:38:08 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

- Update to release 7.1.1
  * avformat/wavdec: Fix overflow of intermediate in
    block_align check
  * avformat/dvdvideodec: drop packets with unset PTS or DTS
  * avutil/timecode: Avoid fps overflow in
    av_timecode_get_smpte_from_framenum()
  * avcodec/mjpegdec: Disallow progressive bayer images
  * avformat/mov: don't unconditionally set all audio packets
    in fragments as key frames
  * avcodec/libx265: resolve build failure for
    libx265.so.n, n >= 213
  * avfilter/buffersrc: check for valid sample rate.
    (CVE-2025-22919, bsc#1237371)
  * avfilter/af_pan: Fix sscanf() use.
    (CVE-2025-0518, bsc#1236007)   
  * avformat/iamf_parse: add missing constrains for num_parameters
    in audio_element_oub().
    (CVE-2025-1816, bsc#1238728)
- Delete ffmpeg-7-CVE-2025-22919.patch,
  ffmpeg-7-CVE-2025-0518.patch, ffmpeg-7-CVE-2025-1816.patch
  (merged)

-------------------------------------------------------------------
Tue Mar 25 11:48:21 UTC 2025 - Adrian Schröter <adrian@suse.de>

- Move BcntSync tag to the %else part where the mini package gets defined

-------------------------------------------------------------------
Sun Mar 23 23:21:26 UTC 2025 - Mia Herkt <mia@0x0.st>

- Build with OpenVINO support in libavfilter

-------------------------------------------------------------------
Sun Mar 23 15:33:59 UTC 2025 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2025-1816.patch:
  Backport 0526535c from upstream, add missing constrains for
  num_parameters in audio_element_oub().
  (CVE-2025-1816, bsc#1238728)

-------------------------------------------------------------------
Wed Mar  5 09:46:09 UTC 2025 - Jan Engelhardt <jengelh@inai.de>

- Add 0001-avcodec-libsvtav1-unbreak-build-with-latest-svtav1.patch
  to build with SVT-AV1 3.0.0.

-------------------------------------------------------------------
Fri Feb 19 05:17:22 UTC 2025 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2025-22921.patch:
  Backport 7f9c7f98 from upstream, clear array length when
  freeing it.
  (CVE-2025-22921, bsc#1237382)

-------------------------------------------------------------------
Fri Feb 19 04:27:06 UTC 2025 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2025-25473.patch:
  Backport c08d3004 from upstream, clear FFFormatContext packet.
  When packet_buffer is used in mux.c, and if a muxing process fails
  at a point where packets remained in said queue.
  (CVE-2025-25473, bsc#1237351)

-------------------------------------------------------------------
Fri Feb 19 03:18:02 UTC 2025 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2025-0518.patch:
  Backport b5b6391d from upstream, fixes memory data leak when
  use sscanf().
  (CVE-2025-0518, bsc#1236007)

-------------------------------------------------------------------
Fri Feb 19 02:58:01 UTC 2025 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2025-22919.patch:
  Backport 1446e37d from upstream, check for valid sample rate
  As the sample rate <= 0 is invalid.
  (CVE-2025-22919, bsc#1237371)

-------------------------------------------------------------------
Tue Oct 15 08:18:54 UTC 2024 - Antonio Larrosa <alarrosa@suse.com>

- Adjust bconds to build the package in SLFO without xvidcore.

-------------------------------------------------------------------
Wed Oct  2 08:20:18 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

- Update to release 7.1
  * ffmpeg CLI filtergraph chaining
  * pad_vaapi, drawbox_vaapi filters
  * vf_scale supports secondary ref input and framesync options
  * vf_scale2ref deprecated
  * removed DEC Alpha DSP and support code
  * perlin video source
  * Cropping metadata parsing and writing in Matroska and MP4/MOV
    de/muxers
  * YUV colorspace negotiation for codecs and filters, obsoleting
    the YUVJ pixel format
  * Vulkan H.264 and H.265 encoders
  * stream specifiers in fftools can now match by stream
    disposition
  * LCEVC enhancement data exporting in H.26x and MP4/ISOBMFF
  * LCEVC filter
  * avcodec/mpegvideo_enc: Add check for av_packet_new_side_data (CVE-2024-12361, bsc#1237358)
  * avformat/dump: print only the actual streams in a tile grid group (CVE-2025-22920, bsc#1237380)
  * avcodec/rkmppdec: Fix double-free on error (CVE-2024-35368, bsc#1234028)
  * avcodec/wavarc: fix signed integer overflow in block type 6/19 (CVE-2024-36619, bsc#1234023)
  * avcodec/vp9: Fix race when attaching side-data for show-existing frame (CVE-2024-36615, bsc#1234017)
- Delete patches/ffmpeg-7-fix-crashes.patch,
  0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch (merged)

-------------------------------------------------------------------
Mon Sep 30 12:34:56 UTC 2024 - olaf@aepfle.de

- Fix assertion due to missing priv_data cleanup on failed VAAPI
  acceleration with 11013-avcodec-decode-clean-up-if-get_hw_frames_parameters-.patch
  (ffmpeg#11013, vlc#28811)

-------------------------------------------------------------------
Thu Sep 26 10:02:20 UTC 2024 - Stefan Dirsch <sndirsch@suse.com>

- no longer build against libmfx; build also 15.5 against libvpl
 (boo#1230983, boo#1219494)

- dropping support for libmfx below covers:
  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)
  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)
  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)
  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)
  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)
  * Multiple vulnerabilities in the Intel Media SDK (libmfx1) (bsc#1226892)
  * Drop libmfx dependency from our product (jira #PED-10024)

-------------------------------------------------------------------
Wed Aug 21 09:58:42 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

- Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch
  to resolve build failure on armv7 [boo#1229338]

-------------------------------------------------------------------
Wed Aug  7 07:37:24 UTC 2024 - Cliff Zhao <qzhao@suse.com>

- Update to version 7.0.2:
  * avcodec/snow: Fix off by 1 error in run_buffer
  * avcodec/utils: apply the same alignment to YUV410 as we do to YUV420 for snow
  * avformat/iamf_parse: Check for 0 samples
  * swscale: [loongarch] Fix checkasm-sw_yuv2rgb failure.
  * avcodec/aacps_tablegen_template: don't redefine CONFIG_HARDCODED_TABLES
  * avutil/hwcontext_vaapi: use the correct type for VASurfaceAttribExternalBuffers.buffers
  * avcodec/pcm-bluray/dvd: Use correct pointer types on BE
  * avcodec/pngenc: fix sBIT writing for indexed-color PNGs
  * avcodec/pngdec: use 8-bit sBIT cap for indexed PNGs per spec
  * avformat/mov: check that child boxes of trak are only present inside it
  * avformat/mov: check that sample and chunk count is 1 for HEIF
  * avcodec/videotoolboxenc: Fix bitrate doesn't work as expected
  * avdevice/dshow: Don't skip audio devices if no video device is present
  * avcodec/hdrenc: Allocate more space
  * avcodec/cfhdenc: Height of 16 is not supported
  * avcodec/cfhdenc: Allocate more space
  * avcodec/osq: fix integer overflow when applying factor
  * avcodec/osq: avoid using too large numbers for shifts and integers in update_residue_parameter()
  * avcodec/hevcdec: fix segfault on invalid film grain metadata (CVE-2024-32228, bsc#1227277)
  * avfilter/vf_tiltandshift: fix buffer offset for yuv422p input (CVE-2024-32229, bsc#1227295)
  * avcodec/mpegvideo_enc: Fix 1 line and one column images (CVE-2024-32230, bsc#1227296)
  * avcodec/pnmdec: Use 64bit for input size check (CVE-2024-7055, bsc#1229026)
  * fftools/ffmpeg_mux_init: Fix double-free on error (CVE-2024-35365, bsc#1235091)
  * avformat/dxa: Adjust order of operations around block align (CVE-2024-36613, bsc#1235092)
  * avfilter/vf_minterpolate: Check pts before division (CVE-2023-51798, bsc#1223304)
  * avfilter/vf_weave: Fix odd height handling (CVE-2023-51793, bsc#1223272)
  * avfilter/vf_gradfun: Do not overread last line (CVE-2023-50010, bsc#1223256)
  * avfilter/af_stereowiden: Check length (CVE-2023-51794, bsc#1223437)
  * avutil/hwcontext: Don't assume frames_uninit is reentrant (CVE-2024-31578, bsc#1223070)
  * avformat/avidec: Fix integer overflow iff ULONG_MAX < INT64_MAX (CVE-2024-36618, bsc#1234020)
  * avformat/cafdec: dont seek beyond 64bit (CVE-2024-36617, bsc#1234019)
  * avformat/westwood_vqa: Fix 2g packets (CVE-2024-36616, bsc#1234018)
  * avformat/sbgdec: Check for negative duration (CVE-2024-35366, bsc#1234030)
- Drop ffmpeg-7-CVE-2024-32228.patch:
  The fix has been merged.
- Drop ffmpeg-7-CVE-2024-32229.patch:
  The fix has been merged.
- Drop ffmpeg-7-CVE-2024-32230.patch:
  The fix has been merged.

-------------------------------------------------------------------
Sat Aug  3 08:52:26 UTC 2024 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-fix-crashes.patch:
  Backport 5b87869c from upstream, fix track handling when mixing
  IAMF and video tracks, Fixes crashes when muxing the two together.

-------------------------------------------------------------------
Tue Jul  5 14:18:52 UTC 2024 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2024-32229.patch:
  Backport a528a54e from upstream, Fix buffer offset for yuv422p
  input.
  (CVE-2024-32229, bsc#1227295)

-------------------------------------------------------------------
Tue Jul  2 12:26:28 UTC 2024 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2024-32230.patch:
  Backport 96449cfe from upstream, Fix 1 line and one column images.
  (CVE-2024-32230, bsc#1227296)

-------------------------------------------------------------------
Tue Jul  2 11:57:01 UTC 2024 - Cliff Zhao <qzhao@suse.com>

- Add ffmpeg-7-CVE-2024-32228.patch:
  Backport 45964876 from upstream, Fix segfault on invalid film
  grain metadata.
  (CVE-2024-32228, bsc#1227277)

-------------------------------------------------------------------
Sun Apr  7 11:39:41 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

- Copy package ffmpeg-6 to ffmpeg-7 and adjust
- Update to release 7.0.0
  * Made the CLI tool support multithreading
- Delete 0001-avcodec-tests-rename-the-bundled-Mesa-AV1-vulkan-vid.patch
  (merged)

-------------------------------------------------------------------
Fri Mar 22 09:25:28 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

- Add 0001-avcodec-tests-rename-the-bundled-Mesa-AV1-vulkan-vid.patch

-------------------------------------------------------------------
Thu Mar 14 18:58:31 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

- Let the ffmpeg-6 main program be combinable with ffmpeg-6-mini-libs

-------------------------------------------------------------------
Mon Jan 15 11:11:08 UTC 2024 - Enrico Belleri <kilgore.trout@idesmi.eu>

- Update to version 6.1.1:
  * libaribcaption decoder
  * Playdate video decoder and demuxer
  * Extend VAAPI support for libva-win32 on Windows
  * afireqsrc audio source filter
  * arls filter
  * ffmpeg CLI new option: -readrate_initial_burst
  * zoneplate video source filter
  * command support in the setpts and asetpts filters
  * Vulkan decode hwaccel, supporting H264, HEVC and AV1
  * color_vulkan filter
  * bwdif_vulkan filter
  * nlmeans_vulkan filter
  * RivaTuner video decoder
  * xfade_vulkan filter
  * vMix video decoder
  * Essential Video Coding parser, muxer and demuxer
  * Essential Video Coding frame merge bsf
  * bwdif_cuda filter
  * Microsoft RLE video encoder
  * Raw AC-4 muxer and demuxer
  * Raw VVC bitstream parser, muxer and demuxer
  * Bitstream filter for editing metadata in VVC streams
  * Bitstream filter for converting VVC from MP4 to Annex B
  * scale_vt filter for videotoolbox
  * transpose_vt filter for videotoolbox
  * support for the P_SKIP hinting to speed up libx264 encoding
  * Support HEVC,VP9,AV1 codec in enhanced flv format
  * apsnr and asisdr audio filters
  * OSQ demuxer and decoder
  * Support HEVC,VP9,AV1 codec fourcclist in enhanced rtmp protocol
  * CRI USM demuxer
  * ffmpeg CLI '-top' option deprecated in favor of the setfield filter
  * VAAPI AV1 encoder
  * ffprobe XML output schema changed to account for multiple variable-fields elements within the same parent element
  * ffprobe -output_format option added as an alias of -of
  * avformat/hls: remove non standard hls extension. (CVE-2023-6601, bsc#1220545)
- Remove patch6 0001-avfilter-vf_libplacebo-remove-deprecated-field.diff
- Prefer libvpl to libmfx: the latter is deprecated
- Delete ffmpeg-6-private-devel package as it is only needed to build libav-tools

-------------------------------------------------------------------
Wed Nov 22 15:23:54 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>

- Enable more decoders and encoders explicitly:
  * amrwb via bcond_without for TW only (and in
    enable_decoder/encoder)
  * opencore via bcond_without for TW only (and in
    enable_decoder/encoder)
  * xvid via bcond_without for TW only (and in
    enable_decoder/encoder)
  * h.263 via enable_decoder/encoder and no longer explicitly
    disabling in call to configure
  * MPEG4 Visual via enable_decoder/encoder and no longer
    explicitly disabling in call to configure
  * MPEG2 Hardware decoders via enable_decoder/encoder
  * And many many more via enable_decoder/encoder.

-------------------------------------------------------------------
Fri Nov 10 10:09:46 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>

- Update to version 6.0.1:
  * Updates and bugfixes to avcodecs, avformat and avfilters
    mainly.
- Drop patch fixed upstream:
  * 0001-avcodec-x86-mathops-clip-constants-used-with-shift-i.patch

-------------------------------------------------------------------
Wed Oct  4 07:59:01 UTC 2023 - Manfred Hollstein <manfred.h@gmx.net>

- Add 0001-avcodec-x86-mathops-clip-constants-used-with-shift-i.patch
  to resolve a build failure on 15.4/15.5.

-------------------------------------------------------------------
Mon Jul 31 09:05:39 UTC 2023 - llyyr <llyyr.public@gmail.com>

- Bump required libplacebo version to v6.292.0 or newer for TW
- Temporarily demote deprecation errors to deprecation warnings
  for vf_libplacebo
- Add upstream patches to fix build with libplacebo v6:
  * 0001-avfilter-vf_libplacebo-remove-deprecated-field.diff

-------------------------------------------------------------------
Mon Apr 10 09:08:08 UTC 2023 - Jan Engelhardt <jengelh@inai.de>

- Reset fixed leftover value for BUILD_ORIG

-------------------------------------------------------------------
Thu Mar 16 17:56:04 UTC 2023 - Jan Engelhardt <jengelh@inai.de>

- Conflict with otherproviders(ffmpeg-tools).

-------------------------------------------------------------------
Thu Mar  9 09:02:01 UTC 2023 - Enrico Belleri <idesmi@protonmail.com>

- enable libplacebo filter
- clean old BuildRequires conditions
- add libjxl to enable_encoders

-------------------------------------------------------------------
Tue Feb 28 13:23:08 UTC 2023 - Jan Engelhardt <jengelh@inai.de>

- Branch from ffmpeg-5.spec
- Remove ffmpeg-4.4-CVE-2020-22046.patch (inapplicable),
  no-vk-video-decoding.patch (obsolete),
  ffmpeg-CVE-2022-3964.patch (appears merged)
- Update to release 6.0
  * FFmpeg now runs every muxer in a separate thread and requires
    threading to be enabled for compilation
  * VA-API encoding and decoding support for 10/12-bit 422,
    10/12-bit 444 VP9 support
  * RISC-V optimizations