From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 91CF74D784 for ; Sun, 23 Feb 2025 22:13:07 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 3170C68CE0A; Mon, 24 Feb 2025 00:08:22 +0200 (EET) Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id B890F68CE20 for ; Mon, 24 Feb 2025 00:08:20 +0200 (EET) Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-220dc3831e3so73875305ad.0 for ; Sun, 23 Feb 2025 14:08:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1740348498; x=1740953298; darn=ffmpeg.org; h=in-reply-to:from:content-language:references:to:subject:user-agent :mime-version:date:message-id:from:to:cc:subject:date:message-id :reply-to; bh=xyf2kEdqElRKzHqjZkPQVhYNOtPn1DTEhosRCrMmAGk=; b=BRHayfZhQyf7eyJGbV/WXhF+19Yk9X5Oovr9IWux1X7BW7OXTa81Za7xompqSWx9/5 55ZrIckv6M2EQ7i7LhacKlDBIXMwNDgSV5kRDfbgYAVC/byQtytkVKrLiqouf2NkMNu0 GLo5Z5KtOWWnQhfewAPIwcB6EGioVhtPaeSk57D3g87r2ysZYdlbudEXd12E8KcL8WyJ vL9y724BEWnprrsxeIr5Qji7qC8JQi2tTxvEZL/rk7d+KdBNR8dg1NF3pxBZvcPEV6LD 1zVSjGqyWnd4Yj05xiYPoFnmxTEv4Vk6tZg7SwjXGXOryuPlJ7qNDlDGY7uNLnYIv9Ub yHBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1740348498; x=1740953298; h=in-reply-to:from:content-language:references:to:subject:user-agent :mime-version:date:message-id:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=xyf2kEdqElRKzHqjZkPQVhYNOtPn1DTEhosRCrMmAGk=; b=ghGaNddxkDutD8i3/wxX19KDuO3eXQEELlhoRpUUvbyM4O+GagDw3HiAkvKHthbtod qXzt2Nl5Whdmu3PqdFxlyrwyPckP4z5Xjoq0abOKVkKp4U2WCFPOMQ2aHloC0IRy0A0H ct+y30KJnmY/twYxKefIMkgS5HsnxTfhvrzcJzLOA8Qw5yiwMAX6VQD7yzQSaPlUaXyu q/fHvgtbCEAmHaiLyaHJM2679x10XYAWFWvP8/yEuQKImhBRfWJaIc+E5DqvgABf6UZK TreQxdp6bsKdQwZkjALYyaks5IwQ/MCR8f3vUq+PKKiGjYYQyT9wju2grvX/VCfgwEgp gb2Q== X-Gm-Message-State: AOJu0YyvQE+lm4B3nnIP930UCo1uQZJgcm1Q9RSKkPXutWLjkD4/JjEu SNA8eOHaoS2kH+LbDi+ZCT+HE/+lygoe4T94j/kYgeaLYSgLU+d1+eqkoXHb X-Gm-Gg: ASbGncsZwklGjUCcK6BbwMu+mTvf0oKmDl/agUOqpP2/8mlZ9qtBXGSp7Kdp8JYW0St KXbHZ53M2KxOXkA+J4g2TA/gViTn+SBiQFP/KjCL+FFT4aZhW2mPBev+Lxt4ZZ0d1WY7XIi74W8 iY3dbLfWf3xFKLF2HAW1m1zsmCC1VO2pbNFnkYQDsPirsESHAigB1J3x1aMfGES76OH3eoQXeEw rMr8T2bMnxem5g6WE64rBn4gFffrq1jBheWo0zDNN0E/vLs24NmfX0gSjah3RwkDA+weVJZRxg8 t5y8SdWhdaZBzcM8rR4Auh5G73aRQHC4VDkKLnc9I1cKdIYWf49Y2xXGYxus97MmzxUDh2hV X-Google-Smtp-Source: AGHT+IECrnEABtbM/VLmiPpTAJbqCNt81EmiMt0k13KpkTL0EajCLXD8OltTsBFEraXWfxaOrY6qiw== X-Received: by 2002:a05:6a21:6d88:b0:1e1:a789:1b4d with SMTP id adf61e73a8af0-1eef3d9f0cfmr18116178637.15.1740348498161; Sun, 23 Feb 2025 14:08:18 -0800 (PST) Received: from ?IPV6:2800:2121:b040:c:b49d:85a5:a7d1:4da6? ([2800:2121:b040:c:b49d:85a5:a7d1:4da6]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-add0e439774sm15672502a12.0.2025.02.23.14.08.16 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 23 Feb 2025 14:08:17 -0800 (PST) Message-ID: <2434b084-03eb-4f69-975e-cc1b19522900@gmail.com> Date: Sun, 23 Feb 2025 19:08:19 -0300 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: ffmpeg-devel@ffmpeg.org References: <20250223085635.GO4991@pb2> <20250223091236.GP4991@pb2> <22ec2abf-bff5-4a89-b1cc-3bf73f726c22@gmail.com> <20250223201933.GQ4991@pb2> <7c37e800-9fec-4541-af8d-1b342a50e07c@gmail.com> <20250223215822.GT4991@pb2> Content-Language: en-US From: James Almer In-Reply-To: <20250223215822.GT4991@pb2> Subject: Re: [FFmpeg-devel] CVE #s security fixes and backports X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============2832886446254145091==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============2832886446254145091== Content-Language: en-US Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------EOAs00rkBvjFcedB8ibkb7Jc" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------EOAs00rkBvjFcedB8ibkb7Jc Content-Type: multipart/mixed; boundary="------------tn4m0t35kvtfl6Q8jS0k37Xh"; protected-headers="v1" From: James Almer To: ffmpeg-devel@ffmpeg.org Message-ID: <2434b084-03eb-4f69-975e-cc1b19522900@gmail.com> Subject: Re: [FFmpeg-devel] CVE #s security fixes and backports References: <20250223085635.GO4991@pb2> <20250223091236.GP4991@pb2> <22ec2abf-bff5-4a89-b1cc-3bf73f726c22@gmail.com> <20250223201933.GQ4991@pb2> <7c37e800-9fec-4541-af8d-1b342a50e07c@gmail.com> <20250223215822.GT4991@pb2> In-Reply-To: <20250223215822.GT4991@pb2> --------------tn4m0t35kvtfl6Q8jS0k37Xh Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMi8yMy8yMDI1IDY6NTggUE0sIE1pY2hhZWwgTmllZGVybWF5ZXIgd3JvdGU6DQo+IEhp DQo+IA0KPiBPbiBTdW4sIEZlYiAyMywgMjAyNSBhdCAwNjo0NTowN1BNIC0wMzAwLCBKYW1l cyBBbG1lciB3cm90ZToNCj4+IE9uIDIvMjMvMjAyNSA1OjE5IFBNLCBNaWNoYWVsIE5pZWRl cm1heWVyIHdyb3RlOg0KPj4+IEhpDQo+Pj4NCj4+PiBPbiBTdW4sIEZlYiAyMywgMjAyNSBh dCAxMjo0MToyM1BNIC0wMzAwLCBKYW1lcyBBbG1lciB3cm90ZToNCj4+Pj4gT24gMi8yMy8y MDI1IDY6MTIgQU0sIE1pY2hhZWwgTmllZGVybWF5ZXIgd3JvdGU6DQo+Pj4+PiBIaQ0KPj4+ Pj4NCj4+Pj4+IE9uIFN1biwgRmViIDIzLCAyMDI1IGF0IDA5OjU2OjM1QU0gKzAxMDAsIE1p Y2hhZWwgTmllZGVybWF5ZXIgd3JvdGU6DQo+Pj4+Pj4gSGkgYWxsDQo+Pj4+Pj4NCj4+Pj4+ PiBUb2RheSBmZm1wZWctc2VjdXJpdHkgd2FzIGFza2VkIHdoeSA1IHNlY3VyaXR5IGZpeGVz IGFyZSBtaXNzaW5nIGluIDYuMQ0KPj4+Pj4+IGFuZCBmcm9tIG91ciBzZWN1cml0eSBwYWdl Lg0KPj4+Pj4+DQo+Pj4+Pj4gVGhlc2UgaXNzdWVzIHdoZXJlIHBvc3RlZCBwdWJsaWNhbGx5 IG9uIHRyYWMsIGFuZCBmaXhlZCBieSBGRm1wZWcgZGV2ZWxvcGVycy4NCj4+Pj4+PiBUaGVu IHNvbWVvbmUgc2VlbXMgdG8gaGF2ZSByZWdpc3RlcmVkIENWRSAjcyBidXQgbm90IG1haWxl ZCBmZm1wZWctc2VjdXJpdHkNCj4+Pj4+Pg0KPj4+Pj4+IEkgc3VnZ2VzdA0KPj4+Pj4+IDEu IGlmIHlvdSBmaXggYSBzZWN1cml0eSBpc3N1ZSBvciBhcHBseSBhIHNlY3VyaXR5IGZpeCwg bWFrZSBzdXJlIGl0IGlzDQo+Pj4+Pj4gYmFja3BvcnRlZCB0byBhbGwgc3VwcG9ydGVkIHJl bGVhc2VzDQo+Pj4+Pj4gMi4gaWYgeW91IHNlZSBhIENWRSAjIHRoYXRzIG5vdCBvbiB0aGUg c2VjdXJpdHkgcGFnZSwgbWFpbCBmZm1wZWctc2VjdXJpdHkNCj4+Pj4+PiAzLiBJZiB5b3Ug c2VlIGlzc3VlcyBvbiB0cmFjIHRoYXQgc2VlbSBpbXBvcnRhbnQsIHBsZWFzZSBtYWtlIHN1 cmUgdGhleQ0KPj4+Pj4+IGFyZSBmaXhlZCBhbmQgYmFja3BvcnRlZCwgaGF2aW5nIHNvbWVv bmUgbGlrZSBjYXJsIHdobyBrbmV3IGFuZCBtYWludGFpbmVkDQo+Pj4+Pj4gYWxsIGlzc3Vl cyB3b3VsZCBiZSBxdWl0ZSB1c2VmdWxsDQo+Pj4+Pg0KPj4+Pj4gNC4gU29tZW9uZSBzaG91 bGQgY3Jvc3MgY2hlY2sNCj4+Pj4+IGh0dHBzOi8vY3ZlLm1pdHJlLm9yZy9jZ2ktYmluL2N2 ZWtleS5jZ2k/a2V5d29yZD1mZm1wZWcgYW5kIG91ciBzZWN1cml0eSBwYWdlDQo+Pj4+PiBh bmQgYmFja3BvcnRlZCBmaXhlcyBhbmQgYmFja3BvcnQgbWlzc2luZyBmaXhlcyBhbmQgZml4 IHVuZml4ZWQgaXNzdWVzLg0KPj4+Pg0KPj4+PiBXaHkgYXJlIHRoZXJlIG1lbW9yeSBsZWFr cyB3aXRoIGEgQ1ZFPw0KPj4+DQo+Pj4gYSBtZW1vcnkgbGVhayBjYW4gYmUgYSBkZW5pYWwg b2Ygc2VydmljZQ0KPj4+DQo+Pj4NCj4+Pj4NCj4+Pj4gQWxzbywgQ1ZFLTIwMjUtMTM3MyBp cyB3cm9uZywgaXQgZG9lc24ndCBhcHBseSB0byBhbnkgcmVsZWFzZSwgb25seSBnaXQNCj4+ Pj4gbWFzdGVyLg0KPj4+DQo+Pj4gcGxlYXNlIGFkZCBhIGVudHJ5IHRvIG91ciBzZWN1cml0 eSBwYWdlIHN0YXRpbmcgdGhhdA0KPj4NCj4+IEhvdz8gSXQgZG9lc24ndCBhcHBseSB0byBh bnkgcmVsZWFzZS4gSXQncyBDVkUgd2hvIHNob3VsZCBmaXggdGhlaXINCj4+IGRlc2NyaXB0 aW9uLg0KPiANCj4geW91IGNhbiBhZGQgIm5ldmVyIGFmZmVjdGVkIGEgcmVsZWFzZSIgKHRo ZXJlcyBhbHJlYWR5IGEgc2ltaWxhciBvbmUpDQoNCkkgc2VlIHdoYXQgeW91IG1lYW4sIGxp a2UgaW4gNC40LiBJbiB0aGF0IGNhc2UgaSB0aGluayB0aGUgcHJvcGVyIHdheSB0byANCmRv IHRoaXMgaXMgdG8gYWRkIGl0IHRvIHRoZSA4LjAgZW50cnkgb25jZSB0aGF0J3MgZG9uZS4N Cg0KPiANCj4gDQo+Pg0KPj4gQWxzbywgaSBjb25zaWRlciBpdCBhIGJpdCBwcmVtYXR1cmUg dG8gbWFrZSBhIENWRSBmb3IgYW4gaXNzdWUgdGhhdCdzIG9ubHkNCj4+IHByZXNlbnQgaW4g Z2l0IG1hc3RlciBhbmQgd2FzIGZpeGVkIGltbWVkaWF0ZWx5IGFmdGVyIGl0IHdhcyByZXBv cnRlZCB0byB1cy4NCj4+IEl0IHdhc24ndCByZWFsaXN0aWNhbGx5IGRlcGxveWVkIGFueXdo ZXJlIGFuZCBvbmx5IHBhZHMgdGhlIGxpc3QuDQo+IA0KPiBUaGUgd29ybGQgaXMgdW5saWtl bHkgdG8gZGVsZXRlIGEgQ1ZFIyBjb21wbGV0ZWx5LCBidXQgeW91IGNhbiB0cnkuDQo+IFNv bWUgcGFnZXMgd2lsbCByZWZlciB0byB0aGUgaXNzdWUgYW5kIGlmIGl0cyBub3Qgb24gb3Vy IHBhZ2UgcGVvcGxlDQo+IHdpbGwgYmUgY29uZnVzZWQNCj4gDQo+IElmIHRlaCBwYWdlIGNs ZWFybHkgc2F5cyBDVkUtMjAyNS0xMzczIGRvZXNudCBhZmZlY3QgYW55IGZmbXBlZyByZWxl YXNlDQo+IHRoYXRzIGNsZWFyIGFuZCB0aGF0cyB0aGUgY2xhcml0eSB0aGUgcGFnZSBpcyBz dXBwb3NlZCB0byBwcm92aWRlLg0KPiANCj4gdGh4DQo+IA0KPiBbLi4uXQ0KPiANCj4gDQo+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IGZm bXBlZy1kZXZlbCBtYWlsaW5nIGxpc3QNCj4gZmZtcGVnLWRldmVsQGZmbXBlZy5vcmcNCj4g aHR0cHM6Ly9mZm1wZWcub3JnL21haWxtYW4vbGlzdGluZm8vZmZtcGVnLWRldmVsDQo+IA0K PiBUbyB1bnN1YnNjcmliZSwgdmlzaXQgbGluayBhYm92ZSwgb3IgZW1haWwNCj4gZmZtcGVn LWRldmVsLXJlcXVlc3RAZmZtcGVnLm9yZyB3aXRoIHN1YmplY3QgInVuc3Vic2NyaWJlIi4N Cg0K --------------tn4m0t35kvtfl6Q8jS0k37Xh-- --------------EOAs00rkBvjFcedB8ibkb7Jc Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEEd1EujP2UoWlX5pp6FGMBrXN2WeAFAme7nFMFAwAAAAAACgkQFGMBrXN2WeAa RAf/XjRVT97nNIFJprM8+t8j1X9IiV7ef/AGGyifrJnMWEyK/fB7A5YpOIJ+VDYN2H/+vfUWp6xr BwvWmKPU/TEqkaccB6q1luEITC/VBvWt7HYo7QmaSglLOK7oXOrgYWozvo8vaEuP5QBrwvsGP7xV fOFBxw9+MR7acRaAI7YWCf5JPNroFcjaXoIXXFNWEU8IZ/1Grndomb0C8PYJYF73dAVGsPjAYOoo 5+4j2lgXtXD758SHPHyAfbeiuBUU3EdmcLi9En9JfmPt+qZHrmWXmKsrhkIr/FEBp62dvuqIpmZ6 KwMKU/WEtntY3Kpf2/E4xBWbUpFhjuM2k1BCL6hSfw== =Inle -----END PGP SIGNATURE----- --------------EOAs00rkBvjFcedB8ibkb7Jc-- --===============2832886446254145091== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============2832886446254145091==--