ffmpeg-7.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Sun Sep 29 07:36:13 UTC 2024 - Cliff Zhao <qzhao@suse.com>
+
+- Update ffmpeg-7.spec:
+  Disable xvid plugin build and dependence, since legal reviewers
+  are concerned xvid patents have not expired in Brazil, which should
+  not be used in a commercial context.
+  https://en.wikipedia.org/wiki/Xvid
+
 -------------------------------------------------------------------
 Wed Aug 21 09:58:42 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
 
@@ -29,6 +38,7 @@ Wed Aug  7 07:37:24 UTC 2024 - Cliff Zhao <qzhao@suse.com>
   * avcodec/hevcdec: fix segfault on invalid film grain metadata (CVE-2024-32228, bsc#1227277)
   * avfilter/vf_tiltandshift: fix buffer offset for yuv422p input (CVE-2024-32229, bsc#1227295)
   * avcodec/mpegvideo_enc: Fix 1 line and one column images (CVE-2024-32230, bsc#1227296)
+  * avcodec/pnmdec: Use 64bit for input size check (CVE-2024-7055, bsc#1229026)
 - Drop ffmpeg-7-CVE-2024-32228.patch:
   The fix has been merged.
 - Drop ffmpeg-7-CVE-2024-32229.patch:

ffmpeg-7.spec

@@ -62,7 +62,13 @@
 %bcond_with    smbclient
 %bcond_with    x264
 %bcond_with    x265
+
+# openSUSE legal reviewers are concerned xvid patents and should not be used in commercial context.
+%if !0%{?is_opensuse}
 %bcond_with    xvid
+%else
+%bcond_without xvid
+%endif
 
 %if 0%{?suse_version} > 1500
 %bcond_without mysofa
@@ -72,7 +78,6 @@
 %bcond_without vulkan
 %bcond_without amrwb
 %bcond_without opencore
-%bcond_without xvid
 %else
 %bcond_with mysofa
 %bcond_with vidstab
@@ -91,7 +96,6 @@ Release:        0
 Summary:        Set of libraries for working with various multimedia formats
 License:        GPL-3.0-or-later
 Group:          Productivity/Multimedia/Video/Editors and Convertors
-#Git-Clone:     git://source.ffmpeg.org/ffmpeg
 URL:            https://ffmpeg.org/
 Source:         https://www.ffmpeg.org/releases/%_name-%version.tar.xz
 Source2:        https://www.ffmpeg.org/releases/%_name-%version.tar.xz.asc
@@ -662,6 +666,8 @@ LDFLAGS="%_lto_cflags" \
 %endif
 %if %{with xvid}
 	--enable-libxvid \
+%else
+	--disable-libxvid \
 %endif
 %if !0%{?BUILD_ORIG}
 	--enable-muxers \