[Mageia-dev] Freeze push: ffmpeg, mplayer

[FundaWang]

Hello,
Could ffmpeg 1.1.4 be pushed into both core and tainted? It fixed a lot of 
security vulnerabilities:
http://www.ffmpeg.org/security.html
Please note that mplayer is needed to be rebuilt against latest ffmpeg also, in 
both core and tainted.
Regards.  

Re: [Mageia-dev] Freeze push: ffmpeg, mplayer

[David Walser]

David Walser luigiwalser@... writes:
 Funda Wang fundawang@... writes:
  
  Could somebody push ffmpeg 0.10.3 into cauldron? It fixed security
  problems in the 4xm demuxer, avi demuxer, cook decoder, mm demuxer,
  mpegvideo decoder, vqavideo decoder (CVE-2012-0947) and xmv demuxer.
  
  Note that core and tainted should be pushed one by one.
 
 Please also push mplayer, to include the updated ffmpeg.
 
 I've built both locally and can confirm they build, install, and work.

Ping???

Upstream is conservative with fixes into stable branches, and this has been
tested.  I'd like to get this last security fix in before release.

Re: [Mageia-dev] Freeze push: ffmpeg, mplayer

[Anne Nicolas]

Le 09/05/2012 23:06, David Walser a écrit :

David Walserluigiwalser@...  writes:

Funda Wangfundawang@...  writes:


Could somebody push ffmpeg 0.10.3 into cauldron? It fixed security
problems in the 4xm demuxer, avi demuxer, cook decoder, mm demuxer,
mpegvideo decoder, vqavideo decoder (CVE-2012-0947) and xmv demuxer.

Note that core and tainted should be pushed one by one.


Please also push mplayer, to include the updated ffmpeg.

I've built both locally and can confirm they build, install, and work.


Ping???

Upstream is conservative with fixes into stable branches, and this has been
tested.  I'd like to get this last security fix in before release.



done

--
http://mageia.org

Re: [Mageia-dev] Freeze push: ffmpeg, mplayer

[David Walser]

Funda Wang fundawang@... writes:
 
 Could somebody push ffmpeg 0.10.3 into cauldron? It fixed security
 problems in the 4xm demuxer, avi demuxer, cook decoder, mm demuxer,
 mpegvideo decoder, vqavideo decoder (CVE-2012-0947) and xmv demuxer.
 
 Note that core and tainted should be pushed one by one.

Please also push mplayer, to include the updated ffmpeg.

I've built both locally and can confirm they build, install, and work.