- Add ffmpeg-5-CVE-2024-7055.patch:
  Backporting 3faadbe2 from upstream, Use 64bit for input size check,
  Fixes: out of array read, Fixes: poc3.
  (CVE-2024-7055, bsc#1229026)

- Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch
  [boo#1229338]
- Add 0001-avutil-hwcontext_vaapi-use-the-correct-type-for-VASu.patch
  (resolve FTBFS on i586)

- Add ffmpeg-5-CVE-2024-7272.patch:
  Backporting 9903ba28 from upstream, error out on invalid layouts,
  * If it's unsupported or invalid, then there's no point trying to
  rebuild it using a value that may have been derived from the same
  layout to begin with.
  * Move the checks before the attempts at copying the layout while
  at it.
  (CVE-2024-7272, bsc#1229261)

- Remove ffmpeg-5-CVE-2024-32228.patch as it adds/modifies code
  which fails to build with BUILD_ORIG=1. (`HEVCSEI` has no
  member named `common`; implicit declaration of function
  `ff_h274_film_grain_params_supported`,
  `av_film_grain_params_select`; `HEVCContext` has no member
  named `film_grain_warning_shown`)
  (CVE-2023-50010, bsc#1223256)
  (CVE-2023-50009, bsc#1223255)
  (CVE-2023-50009, bsc#1223255)
  (CVE-2023-51793, bsc#1223272)
  (CVE-2023-49502, bsc#1223235)

• Files Changed
• Browse Source