From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 636334D19D for ; Wed, 12 Nov 2025 02:28:28 +0000 (UTC) Authentication-Results: ffbox; dkim=fail (body hash mismatch (got b'3gAHvkoXOExxwWDgCXwcH6OI+H/2cY0wUHCsKsGNDE8=', expected b'k3RsEcda+AAD5JEfk+4EePbqU+1Ac8ML2egnvmDTup8=')) header.d=niedermayer.cc header.a=rsa-sha256 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1762914502; h=date : to : message-id : references : mime-version : in-reply-to : reply-to : subject : list-id : list-archive : list-archive : list-help : list-owner : list-post : list-subscribe : list-unsubscribe : from : cc : content-type : from; bh=i2ZBBPkcDHAs4jI+aSUT/9leCaMd8ue1Tutg7K275Bw=; b=TsfgEniIkvZCsjsMW7ld00Vfs4BIXSxcgXebdwrCl045wv2EnnWAjlmHPruVNnsRcbsnT CU8rRa0U61AOtbz8bMXTHNb/G+f/RyZO99+O0I2kvMcga6y28UWAvPsfUfU24QHwr0CEqui ivsPGbtba1i9nySGS8N6yj9KErH7ishJZIOJUxvskfFgCfUK5ZK4MPiCyXK4kMHbq94ZdGF Cz0/htdF93UAkA1xiWbIjDzM55ZlSLVKdoahmVe0y9NtMb+egWnl8uosrb685cjXd1ISNQY E1hDayZ6arWpyxi/avtX+aU3vMWiJsCfMH/iV6htaUef6R+4ZfvJw+OdpJHw== Received: from [172.19.0.2] (unknown [172.19.0.2]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id B4C2E68FCE1; Wed, 12 Nov 2025 04:28:22 +0200 (EET) ARC-Seal: i=1; cv=none; a=rsa-sha256; d=ffmpeg.org; s=arc; t=1762914489; b=glJcJ2ueiLdnObJCVDamz33hbWSu0ThwXWmsBPcKqPS1km048UPyRR4y4OYeSbqJ1idqP MJpBQRElvP6aktRlMmNY/IYEaQw82OuKtG3lD0AaaRHqfO/JrceMNeje7j1DROqYwXcAlja wNKyoe3tx4MTQcYDUNtsLjJzX0CHjcYzjnc6xOGozQcMo7CVHVUgu/cohvLwKctXc6W3nOG 4D/WXYVvLqw5spHyCOu3xAQlSaht5nu91xTugxQudkc/0uQ+zef3oBXCLQfNhxYVA87GqT1 fTmO2b1R5c9HQ6ktQKOemUGeCNOZix4zpxDRF0+KNG2yF5sr0CyK8zdgg0/w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=ffmpeg.org; s=arc; t=1762914489; h=from : sender : reply-to : subject : date : message-id : to : cc : mime-version : content-type : content-transfer-encoding : content-id : content-description : resent-date : resent-from : resent-sender : resent-to : resent-cc : resent-message-id : in-reply-to : references : list-id : list-help : list-unsubscribe : list-subscribe : list-post : list-owner : list-archive; bh=3gAHvkoXOExxwWDgCXwcH6OI+H/2cY0wUHCsKsGNDE8=; b=mBXPWyPPii0L1QlHJHGy90zGQBClmj/wR7J5BfFwGZfXtlktmqMhdmgPZidrx+7IL5XWQ PrrIjEp0fqLoVtSYLll0kBWpWxGU61xNXapLXGU1NvA9HoDLFW5UY5zyp4t4pSYveRr/O43 ppxkqwO/Sh6/S8Ceu+8AxvYkw7wvKp+/xkPrcPsaXFkgfg++FSdwrbRL5otiiizex+Xf6UZ EmzACRQKo0PzIrPtU9/e6nzCjaU4kq7Ym9m72Kr36SweFW1fJvgH0eiu+MO46r9IecyDSV3 +CiRGB3dol4uUQxIv+rm0GF4+QcAzXK1c1M1wabQ5lNgyQsDuUht+shVI7Tg== ARC-Authentication-Results: i=1; ffmpeg.org; dkim=pass header.d=niedermayer.cc; arc=none; dmarc=none Authentication-Results: ffmpeg.org; dkim=pass header.d=niedermayer.cc; arc=none (Message is not ARC signed); dmarc=none Received: from relay7-d.mail.gandi.net (relay7-d.mail.gandi.net [217.70.183.200]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id 3795768FCD3 for ; Wed, 12 Nov 2025 04:27:56 +0200 (EET) Received: by mail.gandi.net (Postfix) with ESMTPSA id 1C06A41B4B for ; Wed, 12 Nov 2025 02:27:54 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1762914475; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=k3RsEcda+AAD5JEfk+4EePbqU+1Ac8ML2egnvmDTup8=; b=Ms2fx42ei6RjsYTPa+dxaZ3xBBwU8nfuHMiHWFLeGz6X6LF9TMJTg7edwdjyDZ5bvhVUw8 tj8DaxmieI7GQNN+qWmo78rKJ2DTVt7cdT7GI+SXionqO6KOWtlM0Cauo2qZ3SuP14AHAZ afoJMNLF/IRrUsBMvG484eHLw1jVlFK0oy7Fn5nvv7fBtWjRAhaEckysUysNW5VCqp3BLy L7wC/U8ryJAiMNMh+zt/JqMsO2ks9X/4zvmqIHneZNh43fRh0k7UHy6iBntiuTlsSrIfsz FnmikN8TjJVjw+9c6V61Sb/g9yedIbbT/DozV+xaZUlnrKq0daC0GvpzdgxXqw== Date: Wed, 12 Nov 2025 03:27:54 +0100 To: FFmpeg development discussions and patches Message-ID: References: <20251112014014.801600-1-michael@niedermayer.cc> MIME-Version: 1.0 In-Reply-To: X-GND-State: clean X-GND-Score: -85 X-GND-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtdeggddvtddvkeejucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuifetpfffkfdpucggtfgfnhhsuhgsshgtrhhisggvnecuuegrihhlohhuthemuceftddunecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenfghrlhcuvffnffculdduhedmnecujfgurhepfffhvffukfhfgggtuggjsehgtderredttddvnecuhfhrohhmpefoihgthhgrvghlucfpihgvuggvrhhmrgihvghruceomhhitghhrggvlhesnhhivgguvghrmhgrhigvrhdrtggtqeenucggtffrrghtthgvrhhnpeeigeektdejudffjefhteegjedtgeettefggedthfejgfevhfetgeekjedtvdfhveenucfkphepgedurdeiiedrieeirdehtdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeeguddrieeirdeiiedrhedtpdhhvghloheplhhotggrlhhhohhsthdpmhgrihhlfhhrohhmpehmihgthhgrvghlsehnihgvuggvrhhmrgihvghrrdgttgdpnhgspghrtghpthhtohepuddprhgtphhtthhopehffhhmphgvghdquggvvhgvlhesfhhfmhhpvghgrdhorhhg X-GND-Sasl: michael@niedermayer.cc Message-ID-Hash: ODME2YYIT7XOVWPH2EFX3VF25GYGCYKQ X-Message-ID-Hash: ODME2YYIT7XOVWPH2EFX3VF25GYGCYKQ X-MailFrom: SRS0=0qyz=5U=niedermayer.cc=michael@ffmpeg.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ffmpeg-devel.ffmpeg.org-0; header-match-ffmpeg-devel.ffmpeg.org-1; header-match-ffmpeg-devel.ffmpeg.org-2; header-match-ffmpeg-devel.ffmpeg.org-3; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list Reply-To: FFmpeg development discussions and patches Subject: [FFmpeg-devel] Re: [PATCH] web/security: what not to post to ffmpeg-security List-Id: FFmpeg development discussions and patches Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: From: Michael Niedermayer via ffmpeg-devel Cc: Michael Niedermayer Content-Type: multipart/mixed; boundary="===============3250168303941228430==" Archived-At: List-Archive: List-Post: --===============3250168303941228430== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="PZlAXF8uMoJp23IE" Content-Disposition: inline --PZlAXF8uMoJp23IE Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Nov 11, 2025 at 10:41:49PM -0300, James Almer via ffmpeg-devel wrot= e: > On 11/11/2025 10:40 PM, Michael Niedermayer via ffmpeg-devel wrote: > > Signed-off-by: Michael Niedermayer > > --- > > src/security | 2 +- > > 1 file changed, 1 insertion(+), 1 deletion(-) > >=20 > > diff --git a/src/security b/src/security > > index 0d5f8dd..65b25bc 100644 > > --- a/src/security > > +++ b/src/security > > @@ -1,4 +1,4 @@ > > -

Please report vulnerabilities to ffmpeg-security@ffmpeg.org

> > +

Please report vulnerabilities to ffmpeg-security@ffmpeg.org. Note, we have recently seen a s= pike in false positives. Make sure that what you report are real issues eit= her by providing a PoC or by carefull human verification.

>=20 > "careful". changed >=20 > LGTM otherwise. applied thx [...] --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB No human being will ever know the Truth, for even if they happen to say it by chance, they would not even known they had done so. -- Xenophanes --PZlAXF8uMoJp23IE Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEKAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCaRPwqgAKCRBhHseHBAsP qzxGAJ9macxTp47XEUCP/HoEb4FlaSWs3gCgm/oLjDuo7JhXzKFLRMBPeZIrbGQ= =eVeL -----END PGP SIGNATURE----- --PZlAXF8uMoJp23IE-- --===============3250168303941228430== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org --===============3250168303941228430==--