Changelog for libavcodec59-5.1.5-136.1.x86_64.rpm :

* Fri Sep 06 2024 Cliff Zhao - Add ffmpeg-5-CVE-2024-7055.patch: Backporting 3faadbe2 from upstream, Use 64bit for input size check, Fixes: out of array read, Fixes: poc3. (CVE-2024-7055, bsc#1229026)
* Sun Sep 01 2024 Jan Engelhardt - Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch [boo#1229338]- Add 0001-avutil-hwcontext_vaapi-use-the-correct-type-for-VASu.patch (resolve FTBFS on i586)
* Sun Aug 18 2024 Cliff Zhao - Add ffmpeg-5-CVE-2024-7272.patch: Backporting 9903ba28 from upstream, error out on invalid layouts,
* If it\'s unsupported or invalid, then there\'s no point trying to rebuild it using a value that may have been derived from the same layout to begin with.
* Move the checks before the attempts at copying the layout while at it. (CVE-2024-7272, bsc#1229261)
* Thu Aug 15 2024 Manfred Hollstein - Remove ffmpeg-5-CVE-2024-32228.patch as it adds/modifies code which fails to build with BUILD_ORIG=1. (`HEVCSEI` has no member named `common`; implicit declaration of function `ff_h274_film_grain_params_supported`, `av_film_grain_params_select`; `HEVCContext` has no member named `film_grain_warning_shown`)
* Tue Jul 02 2024 Cliff Zhao - Add ffmpeg-5-CVE-2024-32230.patch: Backporting 96449cfe from upstream, Fix 1 line and one column images. (CVE-2024-32230, bsc#1227296)
* Tue Jul 02 2024 Cliff Zhao - Add ffmpeg-5-CVE-2024-32228.patch: Backporting 45964876 from upstream, Fix segfault on invalid film grain metadata. (CVE-2024-32228, bsc#1227277)
* Sat Apr 27 2024 Cliff Zhao - Add ffmpeg-CVE-2023-50010.patch: Backporting e4d2666b from upstream, fixes the out of array access. (CVE-2023-50010, bsc#1223256)
* Fri Apr 26 2024 Jan Engelhardt - Add 0001-avfilter-af_stereowiden-Check-length.patch [boo#1223437, CVE-2023-51794]
* Fri Apr 26 2024 Cliff Zhao - Add ffmpeg-CVE-2023-50009.patch: Backporting c443658d from upstream, Fix small inputs with gaussian_blur(). (CVE-2023-50009, bsc#1223255)
* Wed Apr 24 2024 Cliff Zhao - Add ffmpeg-Templatify-ff_gaussian_blur-and-ff-function.patch: Backporting cf1f5744 from upstream, Templatify function ff_gaussian_blur and ff_sobel to prepare fix support for CVE-2023-50009. (CVE-2023-50009, bsc#1223255)
* Tue Apr 23 2024 Cliff Zhao - Add ffmpeg-CVE-2023-51793.patch: Backporting 0ecc1f0e from upstream, Fix odd height handling. (CVE-2023-51793, bsc#1223272)
* Tue Apr 23 2024 Cliff Zhao - Add ffmpeg-CVE-2023-49502.patch: Backporting 737ede40 from upstream, account for chroma sub-sampling in min size calculation. (CVE-2023-49502, bsc#1223235)
* Tue Apr 23 2024 Cliff Zhao - Add ffmpeg-CVE-2023-50008.patch: Backporting 5f87a68c from upstream, Fix memory leaks. (CVE-2023-50008, bsc#1223254)
* Tue Apr 23 2024 Cliff Zhao - Add ffmpeg-CVE-2023-50007.patch: Backporting b1942734 from upstream, Fix crash with EOF handling. (CVE-2023-50007, bsc#1223253)
* Mon Apr 22 2024 Jan Engelhardt - Address boo#1223274/CVE-2023-51796: add patch 0001-avfilter-f_reverse-Apply-PTS-compensation-only-when-.patch
* Mon Apr 22 2024 Jan Engelhardt - Address boo#1222730/CVE-2023-49528: add patches 0001-avfilter-af_dialoguenhance-fix-overreads.patch, 0001-avfilter-af_dialoguenhance-simplify-channels-copy.patch, 0001-avfilter-af_dialoguenhance-do-output-scaling-once.patch- Address boo#1223070/CVE-2024-31578: add patch 0001-avutil-hwcontext-Don-t-assume-frames_uninit-is-reent.patch- Address boo#1223085/CVE-2024-31582: add patch 0001-avfilter-vf_codecview-fix-heap-buffer-overflow.patch- Address boo#1223087/CVE-2024-31585, boo#1223273/CVE-2023-51795: add patch 0001-avfilter-avf_showspectrum-fix-off-by-1-error.patch
* Fri Feb 02 2024 Stefan Dirsch - drop support for libmfx, which is no longer supported upstream at all (boo#1219494)
* Fri Jan 19 2024 Jan Engelhardt - Disable libjxl integration as ffmpeg-5 cannot handle libjxl>=0.9.
* Wed Dec 06 2023 Jan Engelhardt - Copy codec list from ffmpeg-6
* Fri Nov 10 2023 Bjørn Lie - Update to version 5.1.4:
* Updates and bugfixes to avcodecs, avformat and avfilters mainly.- Drop patches fixed upstream:
* 0001-avcodec-libsvtav1-replace-vbv_bufsize-with-maximum_b.patch
* 0002-avcodec-libsvtav1-remove-compressed_ten_bit_format-a.patch
* 0003-avcodec-libsvtav1-only-set-max_buf_sz-if-both-bitrat.patch
* 0004-avcodec-libsvtav1-use-larger-of-bit-rate-and-max-rat.patch
* 0001-avcodec-x86-mathops-clip-constants-used-with-shift-i.patch
* Wed Oct 04 2023 Manfred Hollstein - Add 0001-avcodec-x86-mathops-clip-constants-used-with-shift-i.patch to resolve a build failure on 15.4/15.5.
* Thu Jun 29 2023 Jan Engelhardt - Add 0001-avcodec-libsvtav1-replace-vbv_bufsize-with-maximum_b.patch, 0002-avcodec-libsvtav1-remove-compressed_ten_bit_format-a.patch, 0003-avcodec-libsvtav1-only-set-max_buf_sz-if-both-bitrat.patch, 0004-avcodec-libsvtav1-use-larger-of-bit-rate-and-max-rat.patch
* Wed Apr 19 2023 Bjørn Lie - Update to version 5.1.3:
* avcodec/012v: Order operations for odd size handling
* avcodec/alsdec: - Check bits left before block decoding in non multi channel coding loop - The minimal block is at least 7 bits
* avcodec/atrac3plus: reorder channels to match the output layout
* avcodec/audiotoolboxenc: return AVERROR_EXTERNAL immediately when encode error
* avcodec/bink: - Avoid undefined out of array end pointers in binkb_decode_plane() - Fix off by 1 error in ref end
* avcodec/eac3dec: avoid float noise in fixed mode addition to overflow
* avcodec/eatgq: : Check index increments in tgq_decode_block()
* avcodec/escape124: - Fix signdness of end of input check - Fix some return codes
* avcodec/ffv1dec: - Check that num h/v slices is supported - Fail earlier if prior context is corrupted
* avcodec/ffv1dec: restructure slice coordinate reading a bit
* avcodec/h274: fix include
* avcodec/libjxldec: - Fix gamma22 and gamma28 recognition - Avoid hard failure with unspecified primaries
* avcodec/mjpegenc: take into account component count when writing the SOF header size
* avcodec/mlpdec: Check max matrix instead of max channel in noise check
* avcodec/motionpixels: Mask pixels to valid values
* avcodec/mpeg12dec: - Check input size - Use init_get_bits8 and check the return value
* avcodec/nvenc: fix vbv buffer size in cq mode
* avcodec/pictordec: Remove mid exit branch
* avcodec/pngdec: - Check deloco index more exactly - Dont skip/read chunk twice
* avcodec/rpzaenc: stop accessing out of bounds frame
* avcodec/scpr3: Check bx
* avcodec/scpr: Test bx before use
* avcodec/smcenc: stop accessing out of bounds frame
* avcodec/snowenc: Fix visual weight calculation
* avcodec/speedhq: Check buf_size to be big enough for DC
* avcodec/speexdec: Check channels > 2
* avcodec/sunrast: Fix maplength check
* avcodec/tests/snowenc: - Fix 2nd test - Return a failure if DWT/IDWT mismatches - Unbreak DWT tests
* avcodec/tiff: Ignore tile_count
* avcodec/utils: - Allocate a line more for VC1 and WMV3 - Ensure linesize for SVQ3 - Use 32pixel alignment for bink
* avcodec/videodsp_template: Adjust pointers to avoid undefined pointer things
* avcodec/wavpack: - Avoid undefined shift in get_tail() - Check for end of input in wv_unpack_dsd_high()
* avcodec/xpmdec: Check size before allocation to avoid truncation
* avcodec/aacdec: fix parsing streams with channel configuration 11
* avformat/id3v2: Check taglen in read_uslt()
* avformat/mov: Check samplesize and offset to avoid integer overflow
* avformat/mxfdec: Use 64bit in remainder
* avformat/replaygain: avoid undefined / negative abs
* avformat/vividas: Check packet size
* avutil/tx: Use unsigned in ff_tx_fft_sr_combine() to avoid undefined behavior
* hwcontext_vulkan: remove optional encode/decode extensions from the list
* lavf/async: Fix ring_write return value
* lavu/vulkan: fix handle type for 32-bit targets
* libswscale: force a minimum size of the slide for bayer sources
* swscale/input: Use more unsigned intermediates
* swscale/output: - Bias 16bps output calculations to improve non overflowing range - Bias 16bps output calculations to improve non overflowing range for GBRP16/GBRPF32
* swscale: aarch64: Fix yuv2rgb with negative strides
* Use https for repository links
* vulkan: Fix win/i386 calling convention- Rebase patches with quilt.- Drop ffmpeg-CVE-2022-3964.patch: Fixed upstream.- Drop no-vk-video-decoding.patch: Upstream removed this optional code.- Use ldconfig_scriptlets macro.
* Thu Mar 16 2023 Callum Farmer - Obsolete old FFmpeg 5 libswresample4, otherwise they\'ll conflict
* Thu Mar 16 2023 Jan Engelhardt - Conflict with otherproviders(ffmpeg-tools).
* Mon Mar 13 2023 Jan Engelhardt - Add soname.diff to get libswresample4 nonconflicting with ffmpeg-6.
* Thu Mar 09 2023 Jan Engelhardt - Actually enable libjxl backend
* Mon Feb 27 2023 Jan Engelhardt - Add ``Requires: this-is-only-for-build-envs`` [boo#1208652]
* Tue Jan 31 2023 Jan Engelhardt - Add no-vk-video-decoding.patch to resolve build failure with Vulkan 1.3.239
* Tue Jan 17 2023 Manfred Hollstein - Merge ffmpeg-5-mini.spec with the main .spec file in order to make building the _multibuild packages easier for the case the package is named to be built for a specific distribution; an example would be \"A_tw-ffmpeg-5\" in Packman.
* Thu Jan 05 2023 Jan Engelhardt - Provide a ffmpeg-5-mini-devel build recipe to help split anticipated build cycles.- Reenable SDL2 for ffmpeg-5.spec. ffplay and -vf sdl should be back. [boo#1206505]
* Mon Dec 12 2022 Dirk Müller - build for x86_64 subarchs the same way like for baseline
* Thu Dec 08 2022 Callum Farmer - Enable librist support on TW: enables usage of RIST encoded MPEG-TS streams and is used by OBS Studio
* Tue Dec 06 2022 Jan Engelhardt - Drop BuildRequire on SDL2 to break a dependency loop; with this, /usr/bin/ffplay is no longer built.
* Wed Nov 16 2022 Alynx Zhou - Add ffmpeg-CVE-2022-3964.patch: Backport from upstream to fix out of bounds read in update_block_in_prev_frame() (bsc#1205388).
* Sat Oct 15 2022 Neal Gompa - Refresh Fedora OpenH264 dlopen patch and sources for OpenH264 2.3.1
* Patch: ffmpeg-dlopen-openh264.patch
* Source: ffmpeg-dlopen-headers.tar.xz
* Source: ffmpeg_get_dlopen_headers.sh
* Wed Oct 05 2022 Luigi Baldoni - Enable AMF conditionally
* Mon Sep 26 2022 C J - Update to release 5.1.2
* Add more field checks, add checks against overflows, or outright use larger integer types.
* avformat/dashdec: Fix crash on invalid input/ENOMEM, fix leak
* lavc/videotoolbox: do not pass AVCodecContext to decoder output callback
* lavc/pthread_frame: always transfer stashed hwaccel state
* avcodec/arm/sbcenc: avoid callee preserved vfp registers
* avformat/riffdec: don\'t unconditionally overwrite WAVEFORMATEXTENSIBLE layout
* avfilter/vf_scale: overwrite the width and height expressions with the original values
* lavc/pthread_frame: avoid leaving stale hwaccel state in worker threads