From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 8DBBE4D70F for ; Sun, 23 Feb 2025 22:00:59 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 73DB268CA33; Mon, 24 Feb 2025 00:00:55 +0200 (EET) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 31BE968BDE1 for ; Mon, 24 Feb 2025 00:00:48 +0200 (EET) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-220f4dd756eso74441325ad.3 for ; Sun, 23 Feb 2025 14:00:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1740348045; x=1740952845; darn=ffmpeg.org; h=in-reply-to:from:content-language:references:to:subject:user-agent :mime-version:date:message-id:from:to:cc:subject:date:message-id :reply-to; bh=BF47m9aWLSjEZgLiCEbtCwxkvGJdDjW39lnJ/YWlysI=; b=EG20Y4+TOlz3uGldUxjVaO9X68NYDDYUDMnZfy0MQ+XFmS3D7lw4ziUQ53HeCcItvB lVnBDDO62qTL8ueaHZr1LlcRON6bPV3Zge3AXoi62S3rEf0RoblUlAj7f4CTjRN3xpI+ HqQE9CXcAUkgsemfgTdi5J0gSE4P108WGpYEBOfg7nDiZ1DkDEazxDTwLKR1N9ZtIMDG T7rL6qFl5w758qVNyAVIIv7OZIavjvS6eCL3nAu0y7eHcllragmFKsd2spfKuxRudKbh LKd5QynMTisBlTZYg2JYn4LidciHHjEubxFFuhmP7+FYICd8qZhXhaCCBDN1RJ/UwfT8 da6g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1740348045; x=1740952845; h=in-reply-to:from:content-language:references:to:subject:user-agent :mime-version:date:message-id:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=BF47m9aWLSjEZgLiCEbtCwxkvGJdDjW39lnJ/YWlysI=; b=n0kIGz3ojqsR9sEeRdb9ebe8Ld+nQXkaX91sYfoHIusPcQM4yokePJGm/Sh6WNG/aQ Hg8NG+KHecP3gJtaG7mDwAUdJZ0NASqqxY5KsZKOatsvXxBpvCMKzGjqXy70S0BTv/M9 0QX8soUgAAgQ3cFkuUQd9aRQtri35CHxpc4EPqlGZYzINVRhifgikDIp2Vb4qxvJyJMy P5H2LwCFm1PMTrth5gVmCOVm12ZRRRkKpM9H20SEMUqazvetT1vLgLZy/FXax9jpjSlb dObu/c1DP0g9VJNMygXDNyRMxM9hYxXjHprxuk1GAxIbpz/OQ7w0vw8g18ixtpyBZyGq H3eQ== X-Gm-Message-State: AOJu0YzkHH8W4rqQM8BeXL1xZx0E6n0ymxLrtlpP8tCRU+0I7VaIAJFT KZbs2sPwH2PCaBoGDvVO1Tuv0g/K7Le1webD0SLwzIqWGkNn7/5V0n5ZkJTG X-Gm-Gg: ASbGnctyRLKZ0HV3u/7QceoEaSpGGq1eMaQywhNrUKuKicICFouZqRWCHcNBqwzdj4b ojIm7Ud6zd3jklUnBD5q7rlb/HcXzM9G34nzNKz0Thb71LPh0xtyoa36HuCXgdiMSWyyBfgoWRR Zr/bYyiF1tknadS7ENxmOrc4lbjWQqZhQ8+lK01xC3fvGHiC70tdQ0cLqzBXefoLOoYbBTU0SY1 6wlwZ/BVhWnizXhan71r/KEs0d47pRxGr1glVoJ1bdTXNiK3K3dYS//26b4VY6A+/TIugb7DACZ 42qH0EHjRY7ChnjCe5mqGVENBCgORtbQltba7ks4HJ/RArw0+16nhojeQ7/LAUVTMg7xlBrv X-Google-Smtp-Source: AGHT+IFjJCXGNmPPhEmOl+uHaAhxFD0UK1T06bhFCcA+uJbqvF29wGzpeKCQRQZC4ErigT6cwxP7NQ== X-Received: by 2002:a05:6a20:c891:b0:1ee:d8c8:4b79 with SMTP id adf61e73a8af0-1eef3c56cddmr20904252637.2.1740348045581; Sun, 23 Feb 2025 14:00:45 -0800 (PST) Received: from ?IPV6:2800:2121:b040:c:b49d:85a5:a7d1:4da6? ([2800:2121:b040:c:b49d:85a5:a7d1:4da6]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-73265678abasm15383196b3a.27.2025.02.23.14.00.44 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 23 Feb 2025 14:00:44 -0800 (PST) Message-ID: <726eddd7-51c3-4a68-b1a2-3263da19e7b2@gmail.com> Date: Sun, 23 Feb 2025 19:00:47 -0300 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: ffmpeg-devel@ffmpeg.org References: <20250223085635.GO4991@pb2> <20250223091236.GP4991@pb2> <22ec2abf-bff5-4a89-b1cc-3bf73f726c22@gmail.com> <20250223201933.GQ4991@pb2> <7c37e800-9fec-4541-af8d-1b342a50e07c@gmail.com> <20250223215822.GT4991@pb2> Content-Language: en-US From: James Almer In-Reply-To: <20250223215822.GT4991@pb2> Subject: Re: [FFmpeg-devel] CVE #s security fixes and backports X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============4817543176443518369==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============4817543176443518369== Content-Language: en-US Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------rKwhHwcwX71NHYug3kAxYxAq" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------rKwhHwcwX71NHYug3kAxYxAq Content-Type: multipart/mixed; boundary="------------qDDxzu0hcY3waHAXj9ckXxpS"; protected-headers="v1" From: James Almer To: ffmpeg-devel@ffmpeg.org Message-ID: <726eddd7-51c3-4a68-b1a2-3263da19e7b2@gmail.com> Subject: Re: [FFmpeg-devel] CVE #s security fixes and backports References: <20250223085635.GO4991@pb2> <20250223091236.GP4991@pb2> <22ec2abf-bff5-4a89-b1cc-3bf73f726c22@gmail.com> <20250223201933.GQ4991@pb2> <7c37e800-9fec-4541-af8d-1b342a50e07c@gmail.com> <20250223215822.GT4991@pb2> In-Reply-To: <20250223215822.GT4991@pb2> --------------qDDxzu0hcY3waHAXj9ckXxpS Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMi8yMy8yMDI1IDY6NTggUE0sIE1pY2hhZWwgTmllZGVybWF5ZXIgd3JvdGU6DQo+IEhp DQo+IA0KPiBPbiBTdW4sIEZlYiAyMywgMjAyNSBhdCAwNjo0NTowN1BNIC0wMzAwLCBKYW1l cyBBbG1lciB3cm90ZToNCj4+IE9uIDIvMjMvMjAyNSA1OjE5IFBNLCBNaWNoYWVsIE5pZWRl cm1heWVyIHdyb3RlOg0KPj4+IEhpDQo+Pj4NCj4+PiBPbiBTdW4sIEZlYiAyMywgMjAyNSBh dCAxMjo0MToyM1BNIC0wMzAwLCBKYW1lcyBBbG1lciB3cm90ZToNCj4+Pj4gT24gMi8yMy8y MDI1IDY6MTIgQU0sIE1pY2hhZWwgTmllZGVybWF5ZXIgd3JvdGU6DQo+Pj4+PiBIaQ0KPj4+ Pj4NCj4+Pj4+IE9uIFN1biwgRmViIDIzLCAyMDI1IGF0IDA5OjU2OjM1QU0gKzAxMDAsIE1p Y2hhZWwgTmllZGVybWF5ZXIgd3JvdGU6DQo+Pj4+Pj4gSGkgYWxsDQo+Pj4+Pj4NCj4+Pj4+ PiBUb2RheSBmZm1wZWctc2VjdXJpdHkgd2FzIGFza2VkIHdoeSA1IHNlY3VyaXR5IGZpeGVz IGFyZSBtaXNzaW5nIGluIDYuMQ0KPj4+Pj4+IGFuZCBmcm9tIG91ciBzZWN1cml0eSBwYWdl Lg0KPj4+Pj4+DQo+Pj4+Pj4gVGhlc2UgaXNzdWVzIHdoZXJlIHBvc3RlZCBwdWJsaWNhbGx5 IG9uIHRyYWMsIGFuZCBmaXhlZCBieSBGRm1wZWcgZGV2ZWxvcGVycy4NCj4+Pj4+PiBUaGVu IHNvbWVvbmUgc2VlbXMgdG8gaGF2ZSByZWdpc3RlcmVkIENWRSAjcyBidXQgbm90IG1haWxl ZCBmZm1wZWctc2VjdXJpdHkNCj4+Pj4+Pg0KPj4+Pj4+IEkgc3VnZ2VzdA0KPj4+Pj4+IDEu IGlmIHlvdSBmaXggYSBzZWN1cml0eSBpc3N1ZSBvciBhcHBseSBhIHNlY3VyaXR5IGZpeCwg bWFrZSBzdXJlIGl0IGlzDQo+Pj4+Pj4gYmFja3BvcnRlZCB0byBhbGwgc3VwcG9ydGVkIHJl bGVhc2VzDQo+Pj4+Pj4gMi4gaWYgeW91IHNlZSBhIENWRSAjIHRoYXRzIG5vdCBvbiB0aGUg c2VjdXJpdHkgcGFnZSwgbWFpbCBmZm1wZWctc2VjdXJpdHkNCj4+Pj4+PiAzLiBJZiB5b3Ug c2VlIGlzc3VlcyBvbiB0cmFjIHRoYXQgc2VlbSBpbXBvcnRhbnQsIHBsZWFzZSBtYWtlIHN1 cmUgdGhleQ0KPj4+Pj4+IGFyZSBmaXhlZCBhbmQgYmFja3BvcnRlZCwgaGF2aW5nIHNvbWVv bmUgbGlrZSBjYXJsIHdobyBrbmV3IGFuZCBtYWludGFpbmVkDQo+Pj4+Pj4gYWxsIGlzc3Vl cyB3b3VsZCBiZSBxdWl0ZSB1c2VmdWxsDQo+Pj4+Pg0KPj4+Pj4gNC4gU29tZW9uZSBzaG91 bGQgY3Jvc3MgY2hlY2sNCj4+Pj4+IGh0dHBzOi8vY3ZlLm1pdHJlLm9yZy9jZ2ktYmluL2N2 ZWtleS5jZ2k/a2V5d29yZD1mZm1wZWcgYW5kIG91ciBzZWN1cml0eSBwYWdlDQo+Pj4+PiBh bmQgYmFja3BvcnRlZCBmaXhlcyBhbmQgYmFja3BvcnQgbWlzc2luZyBmaXhlcyBhbmQgZml4 IHVuZml4ZWQgaXNzdWVzLg0KPj4+Pg0KPj4+PiBXaHkgYXJlIHRoZXJlIG1lbW9yeSBsZWFr cyB3aXRoIGEgQ1ZFPw0KPj4+DQo+Pj4gYSBtZW1vcnkgbGVhayBjYW4gYmUgYSBkZW5pYWwg b2Ygc2VydmljZQ0KPj4+DQo+Pj4NCj4+Pj4NCj4+Pj4gQWxzbywgQ1ZFLTIwMjUtMTM3MyBp cyB3cm9uZywgaXQgZG9lc24ndCBhcHBseSB0byBhbnkgcmVsZWFzZSwgb25seSBnaXQNCj4+ Pj4gbWFzdGVyLg0KPj4+DQo+Pj4gcGxlYXNlIGFkZCBhIGVudHJ5IHRvIG91ciBzZWN1cml0 eSBwYWdlIHN0YXRpbmcgdGhhdA0KPj4NCj4+IEhvdz8gSXQgZG9lc24ndCBhcHBseSB0byBh bnkgcmVsZWFzZS4gSXQncyBDVkUgd2hvIHNob3VsZCBmaXggdGhlaXINCj4+IGRlc2NyaXB0 aW9uLg0KPiANCj4geW91IGNhbiBhZGQgIm5ldmVyIGFmZmVjdGVkIGEgcmVsZWFzZSIgKHRo ZXJlcyBhbHJlYWR5IGEgc2ltaWxhciBvbmUpDQo+IA0KPiANCj4+DQo+PiBBbHNvLCBpIGNv bnNpZGVyIGl0IGEgYml0IHByZW1hdHVyZSB0byBtYWtlIGEgQ1ZFIGZvciBhbiBpc3N1ZSB0 aGF0J3Mgb25seQ0KPj4gcHJlc2VudCBpbiBnaXQgbWFzdGVyIGFuZCB3YXMgZml4ZWQgaW1t ZWRpYXRlbHkgYWZ0ZXIgaXQgd2FzIHJlcG9ydGVkIHRvIHVzLg0KPj4gSXQgd2Fzbid0IHJl YWxpc3RpY2FsbHkgZGVwbG95ZWQgYW55d2hlcmUgYW5kIG9ubHkgcGFkcyB0aGUgbGlzdC4N Cj4gDQo+IFRoZSB3b3JsZCBpcyB1bmxpa2VseSB0byBkZWxldGUgYSBDVkUjIGNvbXBsZXRl bHksIGJ1dCB5b3UgY2FuIHRyeS4NCj4gU29tZSBwYWdlcyB3aWxsIHJlZmVyIHRvIHRoZSBp c3N1ZSBhbmQgaWYgaXRzIG5vdCBvbiBvdXIgcGFnZSBwZW9wbGUNCj4gd2lsbCBiZSBjb25m dXNlZA0KDQpJIGRvbid0IHdhbnQgdG8gZGVsZXRlIGEgQ1ZFLCBpIHdhbnQgdGhlbSB0byBu b3QgYmUgY3JlYXRlZCBwcmVtYXR1cmVseSANCmZvciBubyBnYWluLi4uDQoNCj4gDQo+IElm IHRlaCBwYWdlIGNsZWFybHkgc2F5cyBDVkUtMjAyNS0xMzczIGRvZXNudCBhZmZlY3QgYW55 IGZmbXBlZyByZWxlYXNlDQo+IHRoYXRzIGNsZWFyIGFuZCB0aGF0cyB0aGUgY2xhcml0eSB0 aGUgcGFnZSBpcyBzdXBwb3NlZCB0byBwcm92aWRlLg0KDQpTdXJlLCBidXQgaXQgZG9lc24n dCwgYW5kIHRoYXQncyB0aGUgcHJvYmxlbS4gVGhlIGRlc2NyaXB0aW9uIGlzIA0KY29tcGxl dGVseSBtYWRlIHVwLg0KDQo= --------------qDDxzu0hcY3waHAXj9ckXxpS-- --------------rKwhHwcwX71NHYug3kAxYxAq Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEEd1EujP2UoWlX5pp6FGMBrXN2WeAFAme7mo8FAwAAAAAACgkQFGMBrXN2WeCO fAf+MyNGoEfjRPLeNx4zSj8XcISIo3EaF5up5v5sCt46Z48T7UitG4wrjS8gV/e8jwkd2n5Igewy kxba/DjYcGPV3k+IjLbONdoTlb2DUcTy04eI0Vo2LUha5/gEi2hggfmt58idn24DCoX+UzF2jCsf g+5eDOYwF2/Cfvp1sIA9inGzqJr8y7Jrk2dbKX1opkdkvRBMMZEz5Puu6hcuwc8ZAqOzrsRSqeAf pd3T4U4orRuIux+uDZSfAqlAhrPWQ+xJeEktR8e6Etj4EmoS16WGAXi7dY6+MEiwSPlgt5V1onE5 +VS55SIDbQw+6h9zrs95EfKXSu6qZPqKgasSBdMUPA== =FVCd -----END PGP SIGNATURE----- --------------rKwhHwcwX71NHYug3kAxYxAq-- --===============4817543176443518369== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============4817543176443518369==--