Kiran Surendran
e6ba9f34ef
ffmpeg: fix CVE-2021-38114
...
backport from upstream
(From OE-Core rev: 437f5e04c92158d3c9e27fe6252260a02a108391)
Signed-off-by: Kiran Surendran <kiran.surendran@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-24 10:17:32 +01:00
Kiran Surendran
01009831ed
ffmpeg: fix CVE-2021-38171
...
backport from upstream
(From OE-Core rev: 130af0502d1ae6fe3721b83ff5218e3aa48dbf0d)
Signed-off-by: Kiran Surendran <Kiran.Surendran@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-17 21:31:37 +01:00
Kiran Surendran
97bcb75926
ffmpeg: fix CVE-2021-38291
...
backport from upstream
(From OE-Core rev: cbb7b8cfbd4cfe6115e858e14f415d89d182f550)
Signed-off-by: Kiran Surendran <kiran.surendran@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-17 21:31:37 +01:00
Tony Tascioglu
82c08662c3
ffmpeg: fix CVE-2020-22019 and CVE-2020-22033
...
avfilter/vf_vmafmotion: Check dimensions
Fixes: out of array access
Fixes: Ticket8241
Fixes: Ticket8246
Fixes: CVE-2020-22019
Fixes: CVE-2020-22033
(From OE-Core rev: 7423421005816ab75ff0a08813054f7e03075cd2)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
CVE: CVE-2020-22033
CVE: CVE-2020-22019
Upstream-Status: Backport [82ad1b76751bcfad5005440db48c46a4de5d6f02]
Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-26 08:32:13 +01:00
Tony Tascioglu
ba76476cae
ffmpeg: fix CVE-2020-22021
...
avfilter/vf_yadif: Fix handing of tiny images
Fixes: out of array access
Fixes: Ticket8240
Fixes: CVE-2020-22021
(From OE-Core rev: debc96860ce50f08451bc453d41a005b9d62a601)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
CVE: CVE-2020-22021
Upstream-Status: Backport [7971f62120a55c141ec437aa3f0bacc1c1a3526b]
Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-26 08:32:13 +01:00
Tony Tascioglu
22b32a4ed1
ffmpeg: fix CVE-2020-22015
...
avformat/movenc: Check pal_size before use
Fixes: assertion failure
Fixes: out of array read
Fixes: Ticket8190
Fixes: CVE-2020-22015
(From OE-Core rev: c10b49e2e8de02c1c6e6a57eab526ac9ebec066f)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
CVE: CVE-2020-22015
Upstream-Status: Backport [4c1afa292520329eecd1cc7631bc59a8cca95c46]
Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-26 08:32:13 +01:00
Tony Tascioglu
2bb72f8551
ffmpeg: fix CVE-2020-20453
...
avcodec/aacenc: Avoid 0 lambda
Fixes: Ticket8003
Fixes: CVE-2020-20453
(From OE-Core rev: 5e460d2c5d9d4d62cb3fcf090040f4bd1fe30e1f)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
CVE: CVE-2020-20453
Upstream-Status: Backport [a7a7f32c8ad0179a1a85d0a8cff35924e6d90be8]
Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-26 08:32:13 +01:00
Tony Tascioglu
5dffafd6c9
ffmpeg: fix CVE-2020-20446
...
avcodec/aacpsy: Avoid floating point division by 0 of norm_fac
Fixes: Ticket7995
Fixes: CVE-2020-20446
(From OE-Core rev: f95b512e0bd506339c83081071c83000604dd105)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
CVE: CVE-2020-20446
Upstream-Status: Backport [223b5e8ac9f6461bb13ed365419ec485c5b2b002]
Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-26 08:32:13 +01:00
Yann Dirson
e9929301d4
ffmpeg: disable GPL features by default
...
--disable-gpl is the upstream default, and using GPL features violates
the license when linking into non-GPL programs.
Enabling it by default breaks user expectations, may cause people to
violate the GPL by mistake.
(From OE-Core rev: ae9273f7e3b6bbf6cbdbdfbd32634cebe5c1b0ce)
Signed-off-by: Yann Dirson <yann@blade-group.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-28 22:28:26 +01:00
Randy MacLeod
7bf522c752
ffmpeg: upgrade 4.3.1 -> 4.3.2
...
Remove 2 patches that are included in the n4.3.2 tag.
The commits were cherry-picked back to the 4.3 branch so they
have different commit ids than in the patches:
6d886b6586 lavf/srt: fix build fail when used the libsrt 1.4.1
a53ffb15d8 avcodec/exr: Check ymin vs. h
4f0bdff292 avformat/vividas: improve extradata packing checks in track_header()
(From OE-Core rev: ffdce193f3ab5b8cb16979ee9ae29322b7294c38)
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-11 14:00:36 +00:00
