Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ffmpeg-9 for openSUSE:Factory checked in at 2026-11-04 19:42:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ffmpeg-9 (Old) and /work/SRC/openSUSE:Factory/.ffmpeg-9.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ffmpeg-9" Wed Nov 4 19:42:37 2026 rev:11 rq:1394572 version:9.0.2 Changes: -------- --- /work/SRC/openSUSE:Factory/ffmpeg-9/ffmpeg-9.changes 2026-10-13 17:43:26.209516470 +0200 +++ /work/SRC/openSUSE:Factory/.ffmpeg-9.new.3759290/ffmpeg-9.changes 2026-11-04 19:42:43.801555208 +0100 @@ -92,0 +93,9 @@ +- CVE-2026-96611: avformat/mov: reject out of range ispe dimensions, avoid + overflow summing HEIF tile dimensions + (bsc#1282608) +- CVE-2026-52295: avformat: Fix various extradata padding issues + (bsc#1278274) +- CVE-2026-52297: avformat: Fix various extradata padding issues + (bsc#1280753) +- CVE-2026-52296: avcodec/wmaenc: Fix missing padding in extradata + (bsc#1280752) @@ -110 +119 @@ - * avformat/rtpdec_asf: reject ASF objects smaller than their header + * avformat/rtpdec_asf: reject ASF objects smaller than their header. @@ -114 +123 @@ - * avformat/ty: don't let the Series2 AC3 trim underflow the packet size + * avformat/ty: don't let the Series2 AC3 trim underflow the packet size. @@ -116 +125 @@ - * avfilter/vf_floodfill: remove unneeded variables + * avfilter/vf_floodfill: remove unneeded variables. @@ -119,0 +129,2 @@ + * avfilter/vf_hqdn3d: reject unsupported frame parameter changes. + (CVE-2026-66036, bsc#1272763) @@ -122 +133 @@ - * avformat/iamf_parse: check count_label against the available bytes + * avformat/iamf_parse: check count_label against the available bytes. @@ -188,0 +200,20 @@ +- CVE-2026-38349: swscale/output: Fix integer overflow in alpha in + yuv2rgba64_1_c_template(). + (bsc#1277369) +- CVE-2026-38348: swscale/utils: Check *Inc. + (bsc#1277368) +- CVE-2026-38346: swscale/output: Fixes integer overflow in yuv2planeX_8_c. + (bsc#1277375) +- CVE-2026-38344: swscale/utils: initialize chroma when luma switched to + cascade. + (bsc#1277309) +- CVE-2026-90815: avfilter/vf_convolution: Handle corner cases with small + frames. + (bsc#1280754) +- CVE-2026-90815: avfilter/vf_convolution: Use avpriv_mirror. + (bsc#1280754) +- CVE-2026-38345: libswscale/utils: prevent division by zero for chroma + width 8. + (bsc#1277376) +- CVE-2026-90816: avformat: remove HLS protocol. + (bsc#1280755) @@ -238,0 +270,9 @@ +- CVE-2026-38350: swscale/output: Fix all bilinear integer overflows. + (bsc#1277370) +- CVE-2026-38347: swscale/alphablend: don't overread alpha plane on subsampled + odd size. + (bsc#1277373) +- CVE-2023-6602: avformat/hls: Be more picky on extensions. + (bsc#1220546) +- CVE-2023-6604: avformat/hls: Be more picky on extensions. + (bsc#1220549) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.y5eUXT/_old 2026-11-04 19:42:45.894642822 +0100 +++ /var/tmp/diff_new_pack.y5eUXT/_new 2026-11-04 19:42:45.912643576 +0100 @@ -1,5 +1,5 @@ -mtime: 1791810992 -commit: 753e5d7a56c7b3ea96c11aa40c65fcfd2ff47458fe6c2a025004e32ca5926480 +mtime: 1793658767 +commit: eb2c181544e7443196a9ed548b9b7a704411b53dcc6a78a56c42d1c40b05f8ad url: https://src.opensuse.org/jengelh/ffmpeg revision: master ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-11-02 23:32:47.000000000 +0100 @@ -0,0 +1 @@ +.osc ++++++ enable_decoders ++++++ --- /var/tmp/diff_new_pack.y5eUXT/_old 2026-11-04 19:42:46.510668608 +0100 +++ /var/tmp/diff_new_pack.y5eUXT/_new 2026-11-04 19:42:46.527669320 +0100 @@ -68,7 +68,7 @@ apac ape apng # animated png -apv +apv # openapv arbc argo aptx ++++++ enable_encoders ++++++ --- /var/tmp/diff_new_pack.y5eUXT/_old 2026-11-04 19:42:46.629673589 +0100 +++ /var/tmp/diff_new_pack.y5eUXT/_new 2026-11-04 19:42:46.644674217 +0100 @@ -73,7 +73,7 @@ libjxl # libjxl liblc3 # liblc3 libmp3lame # lame -liboapv # apv +liboapv # openapv libopencore_amrnb # opencore-amr libopenh264 # passthrough/dlopen libopenjpeg # openjpeg
