Change History (12)
comment:1 by , 12 months ago
comment:2 by , 12 months ago
I removed svt-av1/dav1d from the latest ffmpeg7 page, but left them as optional dependencies.
comment:3 by , 12 months ago
I put them back in, as it disables all of the work done in #22065. Upgrading to ffmpeg-7.1.2 is an easy fix since it's just a standard bugfix release
comment:4 by , 12 months ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:5 by , 12 months ago
| Priority: | normal → elevated |
|---|
Elevating because of https://ffmpeg.org/security.html
FFmpeg 7.1 7.1.2 Fixes following vulnerabilities: CVE-2025-1594, c2184b65d214d60f2d3df86a11ca502567a3d134, ticket/11418 CVE-2025-59728, 342ea86330ae388baf686fa220892833d55a1c3f / ce0a655f85c1144d19a4acad59afbb92e4997e30, BIGSLEEP-433502298, CVE-2025-59731, d7e188f33f638d85a1ab70943bde70359454b05c / 0d9c003d76383e82b57b6d5aa33776709d0cda2c, BIGSLEEP-436510153, CVE-2025-59732, 97932677dbc29c1173f3361886022426ac74197e / f45da79b2c336c5f8f3e563d72b8a22fecdcde0c, BIGSLEEP-436510316, CVE-2025-59733, a9ec8317498b62192cc3df95ef2523eae8ec0294 / 0469d68acb52081ca8385b844b9650398242be0f, BIGSLEEP-436511754,
Only CVE-2025-1594 has been made public so far and rated as medium.
comment:6 by , 12 months ago
Complete changelog:
version 7.1.2: doc/examples/vaapi_encode: fix invalid check on fwrite avcodec/librsvgdec: fix compilation with librsvg 2.50.3 fftools/ffmpeg: fix gracefully shutdown fftools/ffmpeg_demux: ensure the display_rotation option is honored avcodec/mjpegdec: use ff_frame_new_side_data() to export display matrix aacdec_usac: use RefStruct to track unfinished extension buffers avcode: Use av_fast_realloc() in ff_lzf_uncompress() avcodec/dxv: Check coded_height, to avoid invalid av_clip() avcodec/aac/aacdec: dont allow ff_aac_output_configure() allocating a new frame if it has no frame avformat/lrcdec: Fix fate-sub-lrc-ms-remux on x86-32 avcodec/sanm: Check w,h,left,top avcodec/utvideodec: Clear plane_start array fftools/ffmpeg_mux_init: Use 64bit for score computation in map_auto_video() libavfilter/dnn/dnn_backend_tf: Remove redundant av_freep() to avoid double free avcodec/dxv: Use av_fast_realloc() for op_data avcodec/dxv: Use av_fast_realloc() and clear all new space avcodec/dxv: Clear ctex avcodec/dxv: Check that we initialize op_data avcodec/exr: Check for pixel type consistency in DWA avcodec/d3d12va_encode: fix label followed by a declaration warning avcodec/libvorbisdec: avoid overflow when assinging sample rate from long to int avcodec/g726: init missing sample rate avformat/lrcdec: limit input timestamp range to avoid overflows avcodec/scpr3: Clear clr avcodec/ilbcdec: Clear cbvec when used with create_augmented_vector() avcodec/jpeg2000dec: Make sure the 4 extra bytes allocated are initialized avfilter/avf_showcqt: fix unbounded index when copying to fft_data avcodec/aac/aacdec_usac: Limit sfo from noise offset to be above -200 avcodec/aacsbr_template: Check ilb avcodec/utvideodec: Set B for the width= 1 case avcodec/ffv1: Clear state on alloc avcodec/jpeg2000dec: implement cdef remapping during pixel format matching avcodec/jpeg2000dec: move cdef default check into get_siz() avcodec/exr: Check rle_raw_data and surroundings avcodec/exr: Dont access outside xsize/ysize examples: Add check and replace av_free() to avoid potential memory errors libavcodec/tests/snowenc: Add av_free() to avoid memory leak libavfilter/af_firequalizer: Add check for av_malloc_array() libavcodec/videotoolbox_vp9: Move av_malloc() to avoid memory leak avcodec/mpc8: init avctx->sample_rate avcodec/cbs_h266_syntax_template: fix out of bounds access avformat/libopenmpt: fix seeking weirdness avformat/hls: add cmfv/cmfa exceptions avformat/lrcdec: support arbitrary precision timestamp libavcodec/tests/motion: Add check for avcodec_alloc_context3() avcodec/tests/avpacket: Add av_free() to avoid memory leak examples: Add av_freep to avoid potential memory leak avcodec/tests/avpacket: Add av_packet_free() to avoid memory leak avcodec/fits: Clear naxis avcodec/vqavideo; Check bytestream2_get_buffer() reading next_codebook_buffer avcodec/lzf: Check for input space avcodec/imc: Clear padding of buf16 avcodec/iff: Clear ham_buf avcodec/cri: Check bytestream2_get_buffer() for end avcodec/cri: Factor read_len out avformat/dashdec: Allocate space for appended "/" avcodec/mpegvideo_dec: Fix lowres=3 field select interlaced mpeg4 frame avformat/mxg: clear AV_INPUT_BUFFER_PADDING_SIZE avcodec/shorten: Clear the additionally allocated space on realloc avformat/vqf: Ensure that comm_chunk is fully read avformat/mov: make sure file_checksum is fully initialized avcodec/hevc/hevcdec: Clean sao_pixel_buffer_v on allocation avformat/asfdec_f: Check amount of value read avcodec/jpegxl_parser: add sanity check for frame size avcodec/ffv1dec: don't check chroma_planes for f->colorspace > 0 avcodec/ffv1dec: don't add offsets to more NULL pointers avformat/concatdec: Clip duration in one more case in get_best_effort_duration() avcodec/ffv1dec: Check k in get_vlc_symbol() avcodec/cfhd: Check idwt_buf size before allocation avcodec/ivi: Check luma/chroma mb_size avfilter/vaf_spectrumsynth: don't use uninitialized variable as scale avcodec/motion_est: don't add offsets to NULL pointers swscale/swscale_unscaled: don't add offsets to NULL pointers avcodec/ffv1dec: don't add offsets to NULL pointers libavcodec/alsdec.c: Add check for av_malloc_array() and av_calloc() avcodec/psd: Move frame allocation after RLE processing avcodec/smacker: Move buffer allocation to later fftools/cmdutils: don't try to load arguments from file if not needed avcodec/opus: don't materialize buf pointer from null avfilter/avfilter: fix forwarding EOF for simple API filters in filter_activate_default avcodec/speexdec: consider differing frame sizes in remaining space check lavc/vvc: Fix condition for using default scaling factor avformat/mov: Check that sample_count is allocated in mov_parse_heif_items() avformat/iff: Check nb_channels == 0 in CHNL avcodec/osq: Request a coding mode 2 sample avcodec/osq: Switch back to av_ceil_log2() avcodec/osq: Add note about update_stats() count avcodec/osq: Fix signed integer overflow in update_stats() avcodec/mss2dsp: use FF_PTR_ADD to add offsets to a pointer avformat/movenc: fix writing reserved bits in EC3SpecificBox avcodec/hevc/hevcdec: Check num_entry_point_offsets avcodec/speexdec: Pass and check remaining packets to decode functions swscale/swscale_unscaled: use 8 line alignment for planarCopyWrapper with dithering aacenc_tns: clamp filter direction energy measurement fftools/ffmpeg_demux: don't flag timestamps as unreliable if they are generated avformat/iamf_parse: prevent overreads in update_extradata avformat/iamf_parse: increase PutBytes buffer when writing AAC extradata avformat/matroskadec: check that channels fit in signed 32bit int avcodec/takdec: Check remaining space for first predictors avcodec/svq3: Check there are bits left before decompression avcodec/sonic: Check num_taps avformat/imf_cpl: fix indention after previous commit avformat/imf_cpl: do not continue looping forever avformat/mov: reject negative ELST durations avformat/avidec: Ignore duplicate GAB2 MAINTAINERS: Add entry for samples-request avcodec/h264_mb: Fix tmp_cr for arm avcodec/vorbisdec: Dont treat overread as error avcodec/hevc/ps: Fix dependant layer id check avformat/iff: Check nb_channels == 0 in MHDR tests/fate/filter-video: Fix dependancy for codecview postproc/postprocess_template: fix dering with a 16x16 image libpostproc: check minimum size avformat/hls: Fix flash1.bogulus.cfd support avformat/hls: Split allowed_segment_extensions off allowed_extensions avformat/hls: Fix Youtube AAC avformat/hls: add fmp4 to allowed_extensions avformat/hls: Add ec3 to allowed_extensions avformat/hls: Add cmfv and cmfa to allowed_extensions postproc/postprocess_template: fix handling of first row of dering_C postproc/postprocess_template: Fix reading uninitialized pixels in dering_C() configure: Clearer documentation for "disable-safe-bitstream-reader" avcodec/osq: avoid undefined negation swscale/output: Fix integer overflow in yuv2gbrp_full_X_c() avcodec/libtheora: fix setting keyframe_mask doc: replace http/git by https urls Revert "avformat/mpegts: update stream info when PMT ES stream_type changes" avformat/matroska: Support JPEG2000 for demuxing avformat/matroskadec: Fix VfW extradata size configure: Use MSYSTEM_CARCH for default arch on msys2 avcodec/lcevcdec: don't try to write to output frames directly avfilter/avfiltergraph: fix regression in picking channel layout avformat/mpegts: update stream info when PMT ES stream_type changes avcodec/libzvbi-teletextdec: change new lines to \n in ASS header avformat/wavdec: increase requested probe score for codec probe avcodec/h264_slice: insert LCEVC side data before get_buffer() call avformat/hls: Fix get key file error avcodec/bsf/h264_mp4toannexb: Fix mixed bitstream format avformat/mov: Reduce seek when interleaved_read is disabled avfilter/vf_setparams: Fix chroma_location being cleared configure: Enable -fno-common for Darwin targets, avoid linker warnings configure: Only try to use the -no_warn_duplicate_libraries flag on Darwin configure: Silence Xcode warnings about duplicate libraries avcodec/mediacodecdec_common: Workaround MTK broken crop implementation avcodec/Makefile: include aom_film_grain.o file for h264_sei component lsws/ppc/yuv2rgb_altivec: Fix build in non-VSX environments with Clang v2 lsws/ppc/yuv2rgb_altivec: Fix build in non-VSX environments with Clang avcodec/libsvtav1: unbreak build with latest svtav1 fftools/ffmpeg_filter: also remove display matrix side data from buffered frames
comment:7 by , 12 months ago
Fixed at 221630d4446f94894d596561cb5f6d9817b77915. Leaving open for SA issuing.
comment:8 by , 12 months ago
I'm going to wait for the CVEs to have more information before issuing an SA. At the very least, we have a more secure and stable version in the book now.
comment:9 by , 12 months ago
At the moment I still can't find any details on those other CVEs, other than it was Google's BigSleep infrastructure that discovered it.
Note:
See TracTickets
for help on using tickets.
This update will need to be done soon, as ffmpeg-7.1.1 is broken with svt-av1/dav1d as put into the book. This version of ffmpeg contains a build fix for it.