From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 9B1F74C520 for ; Sun, 23 Feb 2025 08:56:47 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id E466368C873; Sun, 23 Feb 2025 10:56:42 +0200 (EET) Received: from relay4-d.mail.gandi.net (relay4-d.mail.gandi.net [217.70.183.196]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id E2E6068C43F for ; Sun, 23 Feb 2025 10:56:36 +0200 (EET) Received: by mail.gandi.net (Postfix) with ESMTPSA id EE985433C9 for ; Sun, 23 Feb 2025 08:56:35 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1740300996; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=+maGiBvw6cB9jcV67QksjbmBnjbHnnWtVfgm/A4eDxA=; b=g0Xyn4EdIJY65X9ZwAP6ZzWswEC94ZeKdIFl6lR4jbfpuMC15jUDFYpLYfp2KU8K1/Sk5i vPjMShZ9qP625solr7xM1zi9FlRYkrpfgj2xrwHW5zN/7dZAK2jFqL2lujqq8UG9XFY/f9 6n7sb4L40FDrqB1D3MDxVLLIiAtGMDR4viCNxVtkg6HyM8hg/Qcep+i/odCD0sSMFVVuyB c3FvvyifFMcZs+WTALTttszvNmSMrh5ddbW8IdfQ84mphS6WrQvmiCISgoZseryhVHYcck onTpg8ccKTtUAHyCrFyFu0Lym+7EFvXWMW36OInlT/9sN9UmAHZL7Q1zo7czKQ== Date: Sun, 23 Feb 2025 09:56:35 +0100 From: Michael Niedermayer To: FFmpeg development discussions and patches Message-ID: <20250223085635.GO4991@pb2> MIME-Version: 1.0 X-GND-State: clean X-GND-Score: -70 X-GND-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdejheeflecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfitefpfffkpdcuggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucesvcftvggtihhpihgvnhhtshculddquddttddmnegfrhhlucfvnfffucdlfedtmdenucfjughrpeffhffvuffkgggtugesghdtreertddtvdenucfhrhhomhepofhitghhrggvlhcupfhivgguvghrmhgrhigvrhcuoehmihgthhgrvghlsehnihgvuggvrhhmrgihvghrrdgttgeqnecuggftrfgrthhtvghrnhepieefgeevgfdvgeeludegheelhfegffdvgefgtdegveegudelveeiueelieetveffnecukfhppeeguddrieeirdeijedruddufeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeeguddrieeirdeijedruddufedphhgvlhhopehlohgtrghlhhhoshhtpdhmrghilhhfrhhomhepmhhitghhrggvlhesnhhivgguvghrmhgrhigvrhdrtggtpdhnsggprhgtphhtthhopedupdhrtghpthhtohepfhhfmhhpvghgqdguvghvvghlsehffhhmphgvghdrohhrgh X-GND-Sasl: michael@niedermayer.cc Subject: [FFmpeg-devel] CVE #s security fixes and backports X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============9021076163012863592==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --===============9021076163012863592== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="vk4+XT+SbU46YApi" Content-Disposition: inline --vk4+XT+SbU46YApi Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi all Today ffmpeg-security was asked why 5 security fixes are missing in 6.1 and from our security page. These issues where posted publically on trac, and fixed by FFmpeg developer= s. Then someone seems to have registered CVE #s but not mailed ffmpeg-security I suggest 1. if you fix a security issue or apply a security fix, make sure it is backported to all supported releases 2. if you see a CVE # thats not on the security page, mail ffmpeg-security 3. If you see issues on trac that seem important, please make sure they are fixed and backported, having someone like carl who knew and maintained all issues would be quite usefull thx --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB I have never wished to cater to the crowd; for what I know they do not approve, and what they approve I do not know. -- Epicurus --vk4+XT+SbU46YApi Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEKAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCZ7rivAAKCRBhHseHBAsP q6jAAJ9vbD/DFD+E+JowEBVZcGU3AT9jKwCaA+3n7fpTlL+aKnp+BKGLL2a4qrA= =wvii -----END PGP SIGNATURE----- --vk4+XT+SbU46YApi-- --===============9021076163012863592== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============9021076163012863592==--