Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ffmpeg-4 for openSUSE:Factory checked in at 2024-08-01 22:03:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ffmpeg-4 (Old) and /work/SRC/openSUSE:Factory/.ffmpeg-4.new.7232 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "ffmpeg-4" Thu Aug 1 22:03:26 2024 rev:69 rq:1190554 version:4.4.4 Changes: -------- --- /work/SRC/openSUSE:Factory/ffmpeg-4/ffmpeg-4.changes 2024-07-30 11:53:32.563292910 +0200 +++ /work/SRC/openSUSE:Factory/.ffmpeg-4.new.7232/ffmpeg-4.changes 2024-08-01 22:03:38.990537460 +0200 @@ -7,0 +8,7 @@ +Tue Jul 2 12:26:28 UTC 2024 - Cliff Zhao <qzhao@suse.com> + +- Add ffmpeg-4-CVE-2024-32230.patch: + Backporting 96449cfe from upstream, Fix 1 line and one column images. + (CVE-2024-32230, bsc#1227296) + +------------------------------------------------------------------- New: ---- ffmpeg-4-CVE-2024-32230.patch BETA DEBUG BEGIN: New: - Add ffmpeg-4-CVE-2024-32230.patch: Backporting 96449cfe from upstream, Fix 1 line and one column images. BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ffmpeg-4.spec ++++++ --- /var/tmp/diff_new_pack.Oh7XwF/_old 2024-08-01 22:03:39.806571120 +0200 +++ /var/tmp/diff_new_pack.Oh7XwF/_new 2024-08-01 22:03:39.806571120 +0200 @@ -131,7 +131,8 @@ Patch18: ffmpeg-CVE-2023-51793.patch Patch19: 0001-avfilter-af_stereowiden-Check-length.patch Patch20: ffmpeg-CVE-2023-50010.patch -Patch21: ffmpeg-c99.patch +Patch21: ffmpeg-4-CVE-2024-32230.patch +Patch22: ffmpeg-c99.patch BuildRequires: ladspa-devel BuildRequires: libgsm-devel BuildRequires: libmp3lame-devel ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.Oh7XwF/_old 2024-08-01 22:03:39.862573430 +0200 +++ /var/tmp/diff_new_pack.Oh7XwF/_new 2024-08-01 22:03:39.866573595 +0200 @@ -1,5 +1,5 @@ -mtime: 1722057554 -commit: d4a851e48e2ef17c1f3c81416ee204973636088059021e1c36a028ddbb7991c7 +mtime: 1722363442 +commit: 32083452007930a19f6845ff9dabd64715f2bca36f8a20c936c161f6f8480517 url: https://src.opensuse.org/jengelh/ffmpeg-4 revision: master ++++++ build.specials.obscpio ++++++ diff: old/*: No such file or directory diff: new/*: No such file or directory ++++++ ffmpeg-4-CVE-2024-32230.patch ++++++ commit 96449cfeaeb95fcfd7a2b8d9ccf7719e97471ed1 Author: Michael Niedermayer <michael@niedermayer.cc> Date: Mon Apr 8 18:38:42 2024 +0200 avcodec/mpegvideo_enc: Fix 1 line and one column images Fixes: Ticket10952 Fixes: poc21ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> --- ffmpeg-4.4.4/libavcodec/mpegvideo_enc.c +++ ffmpeg-4.4.4_new/libavcodec/mpegvideo_enc.c @@ -1263,8 +1263,8 @@ int dst_stride = i ? s->uvlinesize : s->linesize; int h_shift = i ? h_chroma_shift : 0; int v_shift = i ? v_chroma_shift : 0; - int w = s->width >> h_shift; - int h = s->height >> v_shift; + int w = AV_CEIL_RSHIFT(s->width , h_shift); + int h = AV_CEIL_RSHIFT(s->height, v_shift); uint8_t *src = pic_arg->data[i]; uint8_t *dst = pic->f->data[i]; int vpad = 16;