From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Dominik 'Rathann' Mierzejewski To: git-commits@fedoraproject.org Subject: [rpms/ffmpeg] epel9: Backport fix for CVE-2023-49528 Date: Fri, 18 Sep 2026 18:45:31 GMT Message-ID: <178975713163.1.221880912704432821.rpms-ffmpeg-0179ea000601@fedoraproject.org> List-ID: X-Git-Repo: rpms/ffmpeg X-Git-Branch: epel9 X-Git-Rev: 0179ea0006014b5e92caa0111db55938176e16af QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZmZtcGVnCkJyYW5j aCA6IGVwZWw5CkNvbW1pdCA6IDAxNzllYTAwMDYwMTRiNWU5MmNhYTAxMTFkYjU1OTM4MTc2ZTE2 YWYKQXV0aG9yIDogRG9taW5payAnUmF0aGFubicgTWllcnplamV3c2tpIDxkb21pbmlrQGdyZXlz ZWN0b3IubmV0PgpEYXRlICAgOiAyMDI0LTA2LTE5VDE5OjI3OjIwKzAyOjAwClN0YXRzICA6ICs2 MC8tMSBpbiAyIGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcv cnBtcy9mZm1wZWcvYy8wMTc5ZWEwMDA2MDE0YjVlOTJjYWEwMTExZGI1NTkzODE3NmUxNmFmP2Jy YW5jaD1lcGVsOQoKTG9nOgpCYWNrcG9ydCBmaXggZm9yIENWRS0yMDIzLTQ5NTI4CgotLS0KZGlm ZiAtLWdpdCBhL2ZmbXBlZy1DVkUtMjAyMy00OTUyOC5wYXRjaCBiL2ZmbXBlZy1DVkUtMjAyMy00 OTUyOC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5jNDIyNzVjCi0t LSAvZGV2L251bGwKKysrIGIvZmZtcGVnLUNWRS0yMDIzLTQ5NTI4LnBhdGNoCkBAIC0wLDAgKzEs NTQgQEAKK0Zyb20gMmQ5ZWQ2NDg1OWM5ODg3ZDA1MDRjZDcxZGJkNWIyYzE1ZTE0MjUxYSBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFBhdWwgQiBNYWhvbCA8b25lbWRhQGdtYWlsLmNv bT4KK0RhdGU6IFNhdCwgMjUgTm92IDIwMjMgMTI6NTQ6MjggKzAxMDAKK1N1YmplY3Q6IFtQQVRD SF0gYXZmaWx0ZXIvYWZfZGlhbG9ndWVuaGFuY2U6IGZpeCBvdmVycmVhZHMKKworLS0tCisgbGli YXZmaWx0ZXIvYWZfZGlhbG9ndWVuaGFuY2UuYyB8IDE3ICsrKysrKysrKy0tLS0tLS0tCisgMSBm aWxlIGNoYW5nZWQsIDkgaW5zZXJ0aW9ucygrKSwgOCBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdp dCBhL2xpYmF2ZmlsdGVyL2FmX2RpYWxvZ3VlbmhhbmNlLmMgYi9saWJhdmZpbHRlci9hZl9kaWFs b2d1ZW5oYW5jZS5jCitpbmRleCAxNzYyZWE3Y2RlLi4yOWM4YWIxMGE3IDEwMDY0NAorLS0tIGEv bGliYXZmaWx0ZXIvYWZfZGlhbG9ndWVuaGFuY2UuYworKysrIGIvbGliYXZmaWx0ZXIvYWZfZGlh bG9ndWVuaGFuY2UuYworQEAgLTk2LDEyICs5NiwxMiBAQCBzdGF0aWMgaW50IGNvbmZpZ19pbnB1 dChBVkZpbHRlckxpbmsgKmlubGluaykKKyAgICAgaWYgKCFzLT53aW5kb3cpCisgICAgICAgICBy ZXR1cm4gQVZFUlJPUihFTk9NRU0pOworIAorLSAgICBzLT5pbl9mcmFtZSAgICAgICA9IGZmX2dl dF9hdWRpb19idWZmZXIoaW5saW5rLCBzLT5mZnRfc2l6ZSAqIDQpOworLSAgICBzLT5jZW50ZXJf ZnJhbWUgICA9IGZmX2dldF9hdWRpb19idWZmZXIoaW5saW5rLCBzLT5mZnRfc2l6ZSAqIDQpOwor LSAgICBzLT5vdXRfZGlzdF9mcmFtZSA9IGZmX2dldF9hdWRpb19idWZmZXIoaW5saW5rLCBzLT5m ZnRfc2l6ZSAqIDQpOworLSAgICBzLT53aW5kb3dlZF9mcmFtZSA9IGZmX2dldF9hdWRpb19idWZm ZXIoaW5saW5rLCBzLT5mZnRfc2l6ZSAqIDQpOworLSAgICBzLT53aW5kb3dlZF9vdXQgICA9IGZm X2dldF9hdWRpb19idWZmZXIoaW5saW5rLCBzLT5mZnRfc2l6ZSAqIDQpOworLSAgICBzLT53aW5k b3dlZF9wcmV2ICA9IGZmX2dldF9hdWRpb19idWZmZXIoaW5saW5rLCBzLT5mZnRfc2l6ZSAqIDQp OworKyAgICBzLT5pbl9mcmFtZSAgICAgICA9IGZmX2dldF9hdWRpb19idWZmZXIoaW5saW5rLCAo cy0+ZmZ0X3NpemUgKyAyKSAqIDIpOworKyAgICBzLT5jZW50ZXJfZnJhbWUgICA9IGZmX2dldF9h dWRpb19idWZmZXIoaW5saW5rLCAocy0+ZmZ0X3NpemUgKyAyKSAqIDIpOworKyAgICBzLT5vdXRf ZGlzdF9mcmFtZSA9IGZmX2dldF9hdWRpb19idWZmZXIoaW5saW5rLCAocy0+ZmZ0X3NpemUgKyAy KSAqIDIpOworKyAgICBzLT53aW5kb3dlZF9mcmFtZSA9IGZmX2dldF9hdWRpb19idWZmZXIoaW5s aW5rLCAocy0+ZmZ0X3NpemUgKyAyKSAqIDIpOworKyAgICBzLT53aW5kb3dlZF9vdXQgICA9IGZm X2dldF9hdWRpb19idWZmZXIoaW5saW5rLCAocy0+ZmZ0X3NpemUgKyAyKSAqIDIpOworKyAgICBz LT53aW5kb3dlZF9wcmV2ICA9IGZmX2dldF9hdWRpb19idWZmZXIoaW5saW5rLCAocy0+ZmZ0X3Np emUgKyAyKSAqIDIpOworICAgICBpZiAoIXMtPmluX2ZyYW1lIHx8ICFzLT53aW5kb3dlZF9vdXQg fHwgIXMtPndpbmRvd2VkX3ByZXYgfHwKKyAgICAgICAgICFzLT5vdXRfZGlzdF9mcmFtZSB8fCAh cy0+d2luZG93ZWRfZnJhbWUgfHwgIXMtPmNlbnRlcl9mcmFtZSkKKyAgICAgICAgIHJldHVybiBB VkVSUk9SKEVOT01FTSk7CitAQCAtMjUwLDYgKzI1MCw3IEBAIHN0YXRpYyBpbnQgZGVfc3RlcmVv KEFWRmlsdGVyQ29udGV4dCAqY3R4LCBBVkZyYW1lICpvdXQpCisgICAgIGZsb2F0ICpyaWdodF9v c2FtcGxlcyAgPSAoZmxvYXQgKilvdXQtPmV4dGVuZGVkX2RhdGFbMV07CisgICAgIGZsb2F0ICpj ZW50ZXJfb3NhbXBsZXMgPSAoZmxvYXQgKilvdXQtPmV4dGVuZGVkX2RhdGFbMl07CisgICAgIGNv bnN0IGludCBvZmZzZXQgPSBzLT5mZnRfc2l6ZSAtIHMtPm92ZXJsYXA7CisrICAgIGNvbnN0IGlu dCBuYl9zYW1wbGVzID0gRkZNSU4ocy0+b3ZlcmxhcCwgcy0+aW4tPm5iX3NhbXBsZXMpOworICAg ICBmbG9hdCB2YWQ7CisgCisgICAgIC8vIHNoaWZ0IGluL291dCBidWZmZXJzCitAQCAtMjU4LDgg KzI1OSw4IEBAIHN0YXRpYyBpbnQgZGVfc3RlcmVvKEFWRmlsdGVyQ29udGV4dCAqY3R4LCBBVkZy YW1lICpvdXQpCisgICAgIG1lbW1vdmUobGVmdF9vdXQsICZsZWZ0X291dFtzLT5vdmVybGFwXSwg b2Zmc2V0ICogc2l6ZW9mKGZsb2F0KSk7CisgICAgIG1lbW1vdmUocmlnaHRfb3V0LCAmcmlnaHRf b3V0W3MtPm92ZXJsYXBdLCBvZmZzZXQgKiBzaXplb2YoZmxvYXQpKTsKKyAKKy0gICAgbWVtY3B5 KCZsZWZ0X2luW29mZnNldF0sIGxlZnRfc2FtcGxlcywgcy0+b3ZlcmxhcCAqIHNpemVvZihmbG9h dCkpOworLSAgICBtZW1jcHkoJnJpZ2h0X2luW29mZnNldF0sIHJpZ2h0X3NhbXBsZXMsIHMtPm92 ZXJsYXAgKiBzaXplb2YoZmxvYXQpKTsKKysgICAgbWVtY3B5KCZsZWZ0X2luW29mZnNldF0sIGxl ZnRfc2FtcGxlcywgbmJfc2FtcGxlcyAqIHNpemVvZihmbG9hdCkpOworKyAgICBtZW1jcHkoJnJp Z2h0X2luW29mZnNldF0sIHJpZ2h0X3NhbXBsZXMsIG5iX3NhbXBsZXMgKiBzaXplb2YoZmxvYXQp KTsKKyAgICAgbWVtc2V0KCZsZWZ0X291dFtvZmZzZXRdLCAwLCBzLT5vdmVybGFwICogc2l6ZW9m KGZsb2F0KSk7CisgICAgIG1lbXNldCgmcmlnaHRfb3V0W29mZnNldF0sIDAsIHMtPm92ZXJsYXAg KiBzaXplb2YoZmxvYXQpKTsKKyAKKy0tIAorMi4yNS4xCisKCmRpZmYgLS1naXQgYS9mZm1wZWcu c3BlYyBiL2ZmbXBlZy5zcGVjCmluZGV4IGIxMTczYWIuLjI2ZjM4OWMgMTAwNjQ0Ci0tLSBhL2Zm bXBlZy5zcGVjCisrKyBiL2ZmbXBlZy5zcGVjCkBAIC0xMDAsNyArMTAwLDcgQEAgTmFtZTogICAg ICAgICAgIGZmbXBlZwogJWdsb2JhbCBwa2dfbmFtZSAle25hbWV9JXs/cGtnX3N1ZmZpeH0KIAog VmVyc2lvbjogICAgICAgIDYuMS4xCi1SZWxlYXNlOiAgICAgICAgMTUlez9kaXN0fQorUmVsZWFz ZTogICAgICAgIDE2JXs/ZGlzdH0KIFN1bW1hcnk6ICAgICAgICBBIGNvbXBsZXRlIHNvbHV0aW9u IHRvIHJlY29yZCwgY29udmVydCBhbmQgc3RyZWFtIGF1ZGlvIGFuZCB2aWRlbwogTGljZW5zZTog ICAgICAgIEdQTC0zLjAtb3ItbGF0ZXIKIFVSTDogICAgICAgICAgICBodHRwczovL2ZmbXBlZy5v cmcvCkBAIC0xMzIsNiArMTMyLDggQEAgUGF0Y2g1OiAgICAgICAgIGZmbXBlZy1jOTkucGF0Y2gK IFBhdGNoNjogICAgICAgICBmZm1wZWctZ2NjMTQucGF0Y2gKICMgRml4IGJ1aWxkIHdpdGggVnVs a2FuIGhlYWRlcnMgPj0gMS4zLjI4MC4wCiBQYXRjaDc6ICAgICAgICAgZmZtcGVnLXZ1bGthbi5w YXRjaAorIyBCYWNrcG9ydCBmaXggZm9yIENWRS0yMDIzLTQ5NTI4CitQYXRjaDg6ICAgICAgICAg aHR0cHM6Ly9naXQuZmZtcGVnLm9yZy9naXR3ZWIvZmZtcGVnLmdpdC9wYXRjaC8yZDllZDY0ODU5 Yzk4ODdkMDUwNGNkNzFkYmQ1YjJjMTVlMTQyNTFhIy9mZm1wZWctQ1ZFLTIwMjMtNDk1MjgucGF0 Y2gKIAogIyBTZXQgdXAgZGxvcGVuIGZvciBvcGVuaDI2NAogUGF0Y2gxMDAxOiAgICAgIGZmbXBl Zy1kbG9wZW4tb3BlbmgyNjQucGF0Y2gKQEAgLTg3OCw2ICs4ODAsOSBAQCBybSAtcmYgJXtidWls ZHJvb3R9JXtfZGF0YWRpcn0vJXtuYW1lfS9leGFtcGxlcwogJXtfbWFuZGlyfS9tYW4zL2xpYnN3 c2NhbGUuMyoKIAogJWNoYW5nZWxvZworKiBXZWQgSnVuIDE5IDIwMjQgRG9taW5payBNaWVyemVq ZXdza2kgPGRvbWluaWtAZ3JleXNlY3Rvci5uZXQ+IC0gNi4xLjEtMTYKKy0gQmFja3BvcnQgZml4 IGZvciBDVkUtMjAyMy00OTUyOAorCiAqIFRodSBKdW4gMTMgMjAyNCBTYW5kcm8gTWFuaSA8bWFu aXNhbmRyb0BnbWFpbC5jb20+IC0gNi4xLjEtMTUKIC0gUmVidWlsZCBmb3IgdGVzc2VyYWN0LTUu NC4xCiAK