several CVE fixes

Fixup Version line
Update to version 7.1.2
2025-10-14 11:00:23 +08:00 · 2025-10-07 16:06:13 +02:00 · 2025-10-07 16:04:01 +02:00 · 2025-07-23 15:33:52 +02:00 · 2025-07-23 15:29:16 +02:00 · 2025-07-23 15:28:08 +02:00
16 changed files with 647 additions and 411 deletions
--- a/11013-avcodec-decode-clean-up-if-get_hw_frames_parameters-.patch
+++ b/11013-avcodec-decode-clean-up-if-get_hw_frames_parameters-.patch
@@ -0,0 +1,27 @@
+From: François Cartegnie <fcvlcdev@free.fr>
+Date: Mon, 13 May 2024 11:37:27 +0000
+Subject: avcodec/decode: clean-up if get_hw_frames_parameters fails
+
+https://trac.ffmpeg.org/ticket/11013
+https://code.videolan.org/videolan/vlc/-/issues/28811
+
+Fixes the following assert:
+
+[00007f1df83d17e0] vaapi generic error: avcodec_get_hw_frames_parameters failed: -22
+Assertion p_dst->hwaccel_threadsafe || (!dst->hwaccel && !dst->internal->hwaccel_priv_data) failed at libavcodec/pthread_frame.c:349
+
+Reproduced from VLC with VAAPI, when fallbacking from hw to sw.
+
+--- a/libavcodec/pthread_frame.c
+++ b/libavcodec/pthread_frame.c
+@@ -344,6 +344,10 @@ FF_ENABLE_DEPRECATION_WARNINGS
+                 return err;
+         }
+ 
+       // hwaccel could have failed init due to some params
+       if(!dst->hwaccel && dst->internal->hwaccel_priv_data)
+           ff_hwaccel_uninit(dst);
+
+         // reset dst hwaccel state if needed
+         av_assert0(p_dst->hwaccel_threadsafe ||
+                    (!dst->hwaccel && !dst->internal->hwaccel_priv_data));
--- a/ffmpeg-7-CVE-2025-22921.patch
+++ b/ffmpeg-7-CVE-2025-22921.patch
@@ -0,0 +1,29 @@
+From 7f9c7f9849a2155224711f0ff57ecdac6e4bfb57 Mon Sep 17 00:00:00 2001
+From: James Almer <jamrial@gmail.com>
+Date: Wed, 1 Jan 2025 23:58:39 -0300
+Subject: [PATCH] avcodec/jpeg2000dec: clear array length when freeing it
+
+Fixes NULL pointer dereferences.
+Fixes ticket #11393.
+
+Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
+Signed-off-by: James Almer <jamrial@gmail.com>
+---
+ libavcodec/jpeg2000dec.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/libavcodec/jpeg2000dec.c b/libavcodec/jpeg2000dec.c
+index e5e897a29f..b82d85d5ee 100644
+--- a/libavcodec/jpeg2000dec.c
+++ b/libavcodec/jpeg2000dec.c
+@@ -1521,6 +1521,7 @@ static int jpeg2000_decode_packet(Jpeg2000DecoderContext *s, Jpeg2000Tile *tile,
+                 }
+             }
+             av_freep(&cblk->lengthinc);
+            cblk->nb_lengthinc = 0;
+         }
+     }
+     // Save state of stream
+-- 
+2.44.0
+
--- a/ffmpeg-7-CVE-2025-25473.patch
+++ b/ffmpeg-7-CVE-2025-25473.patch
@@ -0,0 +1,26 @@
+From c08d300481b8ebb846cd43a473988fdbc6793d1b Mon Sep 17 00:00:00 2001
+From: James Almer <jamrial@gmail.com>
+Date: Fri, 17 Jan 2025 00:05:31 -0300
+Subject: [PATCH] avformat/avformat: also clear FFFormatContext packet queue
+ when closing a muxer
+
+packet_buffer is used in mux.c, and if a muxing process fails at a point where
+packets remained in said queue, they will leak.
+
+Fixes ticket #11419
+
+Signed-off-by: James Almer <jamrial@gmail.com>
+---
+ libavformat/avformat.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/libavformat/avformat.c
+++ b/libavformat/avformat.c
+@@ -184,6 +184,7 @@
+     av_dict_free(&si->id3v2_meta);
+     av_packet_free(&si->pkt);
+     av_packet_free(&si->parse_pkt);
+    avpriv_packet_list_free(&si->packet_buffer);
+     av_freep(&s->streams);
+     av_freep(&s->stream_groups);
+     ff_flush_packet_queue(s);
--- a/ffmpeg-7.0.tar.xz
+++ b/ffmpeg-7.0.tar.xz
--- a/ffmpeg-7.0.tar.xz.asc
+++ b/ffmpeg-7.0.tar.xz.asc
@@ -1,11 +0,0 @@
-----BEGIN PGP SIGNATURE-----
-
-iQFMBAABCAA2FiEE/PmG6hXm4pOlZE8QtDIvBNZ2WNgFAmYPNtMYHGZmbXBlZy1k
-ZXZlbEBmZm1wZWcub3JnAAoJELQyLwTWdljYFdUIAIOFgLplbe7CHY0G3bQuCK8N
-Q+js2eLPxKNbeBhshcHDyNResAT+uHE7fQYRFUcETf5qqoPHyDptbG/o+onlGW8M
-vNwu6wTC3XiFjKjJKBRwyXYS31J+R/re2w+LiEI+OnekRhaQ/vbj1bbjREEQLtOv
-7086Oc6ZzMAsxjc6wGde4eJkhTQT8HYF6lU0Bsm4yeqCAcppfGv6OwZn8fyQ/L9i
-PaqFJFzs4C8PdRRdSQ7VifAcAAmyHNoRY611ZCbnJvoc7oEU44SVIKsryqRBunoX
-aAZ1eNwoI/Oz/uC/yK+S3oaAauZuUZFxgc0hqCxYLZF5TeRvF4Y8cPTTymTuVDM=
-=Hz9R
-----END PGP SIGNATURE-----
--- a/ffmpeg-7.1.2.tar.xz
+++ b/ffmpeg-7.1.2.tar.xz
--- a/ffmpeg-7.1.2.tar.xz.asc
+++ b/ffmpeg-7.1.2.tar.xz.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQFMBAABCgA2FiEE/PmG6hXm4pOlZE8QtDIvBNZ2WNgFAmjHGF0YHGZmbXBlZy1k
+ZXZlbEBmZm1wZWcub3JnAAoJELQyLwTWdljYY+0IAI4Haqz3h9AMEPwppJTY/R+A
+3FKY3HqPZXfCiF5V7q6R76ejk4ZheiEmNWw/FGq9mrvhEBDBmfYWHastaizo2ER6
+8ckOv+u/cA7YUYYdxvw7RQZqSGTrnpO9g3A/z84bjmCKW4DvSsM0Epg50E8oJsQo
+xojOwk5EVmEOnyNbroUHAOKXDux2C8QpxFkKP6HLHme1SlTQTfVZn2G38tN4KmaN
+T/p7HaR/nnLMnWC6IYWd0ss70AbRBNaIOdjPu7scA67HSS8Vb6WLOmcMjA9umrbI
+MftDxyx771uKc/pLMfEFFc6Pq1Ajy/qhrVesjTzXVyp9IUwP6wbjCDW7aKvkGKQ=
+=ew1G
+-----END PGP SIGNATURE-----
--- a/ffmpeg-7.changes
+++ b/ffmpeg-7.changes
@@ -1,3 +1,259 @@
+-------------------------------------------------------------------
+Fri Sep 19 18:44:35 UTC 2025 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 7.1.2:
+  * avcodec/librsvgdec: fix compilation with librsvg 2.50.3
+  * libavfilter/af_firequalizer: Add check for av_malloc_array()
+  * avcodec/libsvtav1: unbreak build with latest svtav1
+  * avformat/hls: Fix Youtube AAC
+  * Various bugfixes.
+- Drop patches fixed upstream:
+  * 0001-avcodec-libsvtav1-unbreak-build-with-latest-svtav1.patch
+  * ffmpeg-CVE-2025-7700.patch
+
+-------------------------------------------------------------------
+Wed Jul 23 13:28:49 UTC 2025 - Hans-Peter Jansen <hp@urpla.net>
+
+- Add vvenc build conditional
+
+-------------------------------------------------------------------
+Wed Jul 23 07:01:22 UTC 2025 - SongChuan Kang <sckang@suse.com>
+
+- Add ffmpeg-CVE-2025-7700.patch: Add check for the return value
+  of av_malloc_array() and av_calloc() to avoid potential NULL
+  pointer dereference(CVE-2025-7700, bsc#1246790).
+
+-------------------------------------------------------------------
+Wed Jun 25 08:40:15 UTC 2025 - Yifan Jiang <yfjiang@suse.com>
+
+- Built with noopenh264, drop ffmpeg-dlopen-openh264.patch
+  (jsc#PED-12607)
+
+-------------------------------------------------------------------
+Thu Jun 12 17:48:49 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Enable libiec61883 integration [boo#1244453]
+
+-------------------------------------------------------------------
+Fri Apr  4 09:34:14 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Disable OpenVINO, too many dependencies for Factory ring1.
+
+-------------------------------------------------------------------
+Tue Apr  1 23:38:08 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 7.1.1
+  * avformat/wavdec: Fix overflow of intermediate in
+    block_align check
+  * avformat/dvdvideodec: drop packets with unset PTS or DTS
+  * avutil/timecode: Avoid fps overflow in
+    av_timecode_get_smpte_from_framenum()
+  * avcodec/mjpegdec: Disallow progressive bayer images
+  * avformat/mov: don't unconditionally set all audio packets
+    in fragments as key frames
+  * avcodec/libx265: resolve build failure for
+    libx265.so.n, n >= 213
+  * avfilter/buffersrc: check for valid sample rate.
+    (CVE-2025-22919, bsc#1237371)
+  * avfilter/af_pan: Fix sscanf() use.
+    (CVE-2025-0518, bsc#1236007)   
+  * avformat/iamf_parse: add missing constrains for num_parameters
+    in audio_element_oub().
+    (CVE-2025-1816, bsc#1238728)
+- Delete ffmpeg-7-CVE-2025-22919.patch,
+  ffmpeg-7-CVE-2025-0518.patch, ffmpeg-7-CVE-2025-1816.patch
+  (merged)
+
+-------------------------------------------------------------------
+Tue Mar 25 11:48:21 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- Move BcntSync tag to the %else part where the mini package gets defined
+
+-------------------------------------------------------------------
+Sun Mar 23 23:21:26 UTC 2025 - Mia Herkt <mia@0x0.st>
+
+- Build with OpenVINO support in libavfilter
+
+-------------------------------------------------------------------
+Sun Mar 23 15:33:59 UTC 2025 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2025-1816.patch:
+  Backport 0526535c from upstream, add missing constrains for
+  num_parameters in audio_element_oub().
+  (CVE-2025-1816, bsc#1238728)
+
+-------------------------------------------------------------------
+Wed Mar  5 09:46:09 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Add 0001-avcodec-libsvtav1-unbreak-build-with-latest-svtav1.patch
+  to build with SVT-AV1 3.0.0.
+
+-------------------------------------------------------------------
+Fri Feb 19 05:17:22 UTC 2025 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2025-22921.patch:
+  Backport 7f9c7f98 from upstream, clear array length when
+  freeing it.
+  (CVE-2025-22921, bsc#1237382)
+
+-------------------------------------------------------------------
+Fri Feb 19 04:27:06 UTC 2025 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2025-25473.patch:
+  Backport c08d3004 from upstream, clear FFFormatContext packet.
+  When packet_buffer is used in mux.c, and if a muxing process fails
+  at a point where packets remained in said queue.
+  (CVE-2025-25473, bsc#1237351)
+
+-------------------------------------------------------------------
+Fri Feb 19 03:18:02 UTC 2025 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2025-0518.patch:
+  Backport b5b6391d from upstream, fixes memory data leak when
+  use sscanf().
+  (CVE-2025-0518, bsc#1236007)
+
+-------------------------------------------------------------------
+Fri Feb 19 02:58:01 UTC 2025 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2025-22919.patch:
+  Backport 1446e37d from upstream, check for valid sample rate
+  As the sample rate <= 0 is invalid.
+  (CVE-2025-22919, bsc#1237371)
+
+-------------------------------------------------------------------
+Tue Oct 15 08:18:54 UTC 2024 - Antonio Larrosa <alarrosa@suse.com>
+
+- Adjust bconds to build the package in SLFO without xvidcore.
+
+-------------------------------------------------------------------
+Wed Oct  2 08:20:18 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 7.1
+  * ffmpeg CLI filtergraph chaining
+  * pad_vaapi, drawbox_vaapi filters
+  * vf_scale supports secondary ref input and framesync options
+  * vf_scale2ref deprecated
+  * removed DEC Alpha DSP and support code
+  * perlin video source
+  * Cropping metadata parsing and writing in Matroska and MP4/MOV
+    de/muxers
+  * YUV colorspace negotiation for codecs and filters, obsoleting
+    the YUVJ pixel format
+  * Vulkan H.264 and H.265 encoders
+  * stream specifiers in fftools can now match by stream
+    disposition
+  * LCEVC enhancement data exporting in H.26x and MP4/ISOBMFF
+  * LCEVC filter
+  * avcodec/mpegvideo_enc: Add check for av_packet_new_side_data (CVE-2024-12361, bsc#1237358)
+  * avformat/dump: print only the actual streams in a tile grid group (CVE-2025-22920, bsc#1237380)
+  * avcodec/rkmppdec: Fix double-free on error (CVE-2024-35368, bsc#1234028)
+  * avcodec/wavarc: fix signed integer overflow in block type 6/19 (CVE-2024-36619, bsc#1234023)
+  * avcodec/vp9: Fix race when attaching side-data for show-existing frame (CVE-2024-36615, bsc#1234017)
+- Delete patches/ffmpeg-7-fix-crashes.patch,
+  0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch (merged)
+
+-------------------------------------------------------------------
+Mon Sep 30 12:34:56 UTC 2024 - olaf@aepfle.de
+
+- Fix assertion due to missing priv_data cleanup on failed VAAPI
+  acceleration with 11013-avcodec-decode-clean-up-if-get_hw_frames_parameters-.patch
+  (ffmpeg#11013, vlc#28811)
+
+-------------------------------------------------------------------
+Thu Sep 26 10:02:20 UTC 2024 - Stefan Dirsch <sndirsch@suse.com>
+
+- no longer build against libmfx; build also 15.5 against libvpl
+ (boo#1230983, boo#1219494)
+
+- dropping support for libmfx below covers:
+  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)
+  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)
+  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)
+  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)
+  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)
+  * Multiple vulnerabilities in the Intel Media SDK (libmfx1) (bsc#1226892)
+  * Drop libmfx dependency from our product (jira #PED-10024)
+
+-------------------------------------------------------------------
+Wed Aug 21 09:58:42 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
+
+- Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch
+  to resolve build failure on armv7 [boo#1229338]
+
+-------------------------------------------------------------------
+Wed Aug  7 07:37:24 UTC 2024 - Cliff Zhao <qzhao@suse.com>
+
+- Update to version 7.0.2:
+  * avcodec/snow: Fix off by 1 error in run_buffer
+  * avcodec/utils: apply the same alignment to YUV410 as we do to YUV420 for snow
+  * avformat/iamf_parse: Check for 0 samples
+  * swscale: [loongarch] Fix checkasm-sw_yuv2rgb failure.
+  * avcodec/aacps_tablegen_template: don't redefine CONFIG_HARDCODED_TABLES
+  * avutil/hwcontext_vaapi: use the correct type for VASurfaceAttribExternalBuffers.buffers
+  * avcodec/pcm-bluray/dvd: Use correct pointer types on BE
+  * avcodec/pngenc: fix sBIT writing for indexed-color PNGs
+  * avcodec/pngdec: use 8-bit sBIT cap for indexed PNGs per spec
+  * avformat/mov: check that child boxes of trak are only present inside it
+  * avformat/mov: check that sample and chunk count is 1 for HEIF
+  * avcodec/videotoolboxenc: Fix bitrate doesn't work as expected
+  * avdevice/dshow: Don't skip audio devices if no video device is present
+  * avcodec/hdrenc: Allocate more space
+  * avcodec/cfhdenc: Height of 16 is not supported
+  * avcodec/cfhdenc: Allocate more space
+  * avcodec/osq: fix integer overflow when applying factor
+  * avcodec/osq: avoid using too large numbers for shifts and integers in update_residue_parameter()
+  * avcodec/hevcdec: fix segfault on invalid film grain metadata (CVE-2024-32228, bsc#1227277)
+  * avfilter/vf_tiltandshift: fix buffer offset for yuv422p input (CVE-2024-32229, bsc#1227295)
+  * avcodec/mpegvideo_enc: Fix 1 line and one column images (CVE-2024-32230, bsc#1227296)
+  * avcodec/pnmdec: Use 64bit for input size check (CVE-2024-7055, bsc#1229026)
+  * fftools/ffmpeg_mux_init: Fix double-free on error (CVE-2024-35365, bsc#1235091)
+  * avformat/dxa: Adjust order of operations around block align (CVE-2024-36613, bsc#1235092)
+  * avfilter/vf_minterpolate: Check pts before division (CVE-2023-51798, bsc#1223304)
+  * avfilter/vf_weave: Fix odd height handling (CVE-2023-51793, bsc#1223272)
+  * avfilter/vf_gradfun: Do not overread last line (CVE-2023-50010, bsc#1223256)
+  * avfilter/af_stereowiden: Check length (CVE-2023-51794, bsc#1223437)
+  * avutil/hwcontext: Don't assume frames_uninit is reentrant (CVE-2024-31578, bsc#1223070)
+  * avformat/avidec: Fix integer overflow iff ULONG_MAX < INT64_MAX (CVE-2024-36618, bsc#1234020)
+  * avformat/cafdec: dont seek beyond 64bit (CVE-2024-36617, bsc#1234019)
+  * avformat/westwood_vqa: Fix 2g packets (CVE-2024-36616, bsc#1234018)
+- Drop ffmpeg-7-CVE-2024-32228.patch:
+  The fix has been merged.
+- Drop ffmpeg-7-CVE-2024-32229.patch:
+  The fix has been merged.
+- Drop ffmpeg-7-CVE-2024-32230.patch:
+  The fix has been merged.
+
+-------------------------------------------------------------------
+Sat Aug  3 08:52:26 UTC 2024 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-fix-crashes.patch:
+  Backport 5b87869c from upstream, fix track handling when mixing
+  IAMF and video tracks, Fixes crashes when muxing the two together.
+
+-------------------------------------------------------------------
+Tue Jul  5 14:18:52 UTC 2024 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2024-32229.patch:
+  Backport a528a54e from upstream, Fix buffer offset for yuv422p
+  input.
+  (CVE-2024-32229, bsc#1227295)
+
+-------------------------------------------------------------------
+Tue Jul  2 12:26:28 UTC 2024 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2024-32230.patch:
+  Backport 96449cfe from upstream, Fix 1 line and one column images.
+  (CVE-2024-32230, bsc#1227296)
+
+-------------------------------------------------------------------
+Tue Jul  2 11:57:01 UTC 2024 - Cliff Zhao <qzhao@suse.com>
+
+- Add ffmpeg-7-CVE-2024-32228.patch:
+  Backport 45964876 from upstream, Fix segfault on invalid film
+  grain metadata.
+  (CVE-2024-32228, bsc#1227277)
+
 -------------------------------------------------------------------
 Sun Apr  7 11:39:41 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

--- a/ffmpeg-7.spec
+++ b/ffmpeg-7.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package ffmpeg-7
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -60,11 +60,12 @@
 %bcond_with    fdk_aac_dlopen
 %bcond_with    opencore
 %bcond_with    smbclient
+%bcond_with    vvenc
 %bcond_with    x264
 %bcond_with    x265
 %bcond_with    xvid

-%if 0%{?suse_version} > 1500
+%if 0%{?suse_version} > 1600
 %bcond_without mysofa
 %bcond_without vidstab
 %bcond_without codec2
@@ -74,27 +75,35 @@
 %bcond_without opencore
 %bcond_without xvid
 %else
+%if 0%{?suse_version} > 1500
+%bcond_without mysofa
+%bcond_without vidstab
+%bcond_without codec2
+%bcond_without rubberband
+%bcond_without vulkan
+%bcond_without amrwb
+%bcond_without opencore
+%else
 %bcond_with mysofa
 %bcond_with vidstab
 %bcond_with codec2
 %bcond_with rubberband
 %bcond_with vulkan
 %endif
+%endif

 %define _name ffmpeg
 %define _major_version 7
 %define _major_expected 8

 Name:           ffmpeg-7
-Version:        7.0
+Version:        7.1.2
 Release:        0
 Summary:        Set of libraries for working with various multimedia formats
 License:        GPL-3.0-or-later
 Group:          Productivity/Multimedia/Video/Editors and Convertors
-URL:            https://ffmpeg.org/
-
-#Freshcode-URL:    http://freshcode.club/projects/ffmpeg
 #Git-Clone:     git://source.ffmpeg.org/ffmpeg
+URL:            https://ffmpeg.org/
 Source:         https://www.ffmpeg.org/releases/%_name-%version.tar.xz
 Source2:        https://www.ffmpeg.org/releases/%_name-%version.tar.xz.asc
 Source3:        ffmpeg-7-rpmlintrc
@@ -104,20 +113,23 @@ Source6:        ffmpeg-dlopen-headers.tar.xz
 Source92:       ffmpeg_get_dlopen_headers.sh
 Source98:       http://ffmpeg.org/ffmpeg-devel.asc#/ffmpeg-7.keyring
 Source99:       baselibs.conf
-
 Patch1:         ffmpeg-arm6l.diff
 Patch2:         ffmpeg-new-coder-errors.diff
 Patch3:         ffmpeg-codec-choice.diff
 Patch4:         ffmpeg-4.2-dlopen-fdk_aac.patch
 Patch5:         work-around-abi-break.patch
 Patch10:        ffmpeg-chromium.patch
-Patch91:        ffmpeg-dlopen-openh264.patch
-
+Patch15:        11013-avcodec-decode-clean-up-if-get_hw_frames_parameters-.patch
+Patch18:        ffmpeg-7-CVE-2025-25473.patch
+Patch19:        ffmpeg-7-CVE-2025-22921.patch
+Patch20:	ffmpeg-CVE-2025-59728.patch
+Patch21:	ffmpeg-CVE-2025-59731.patch
+Patch22:	ffmpeg-CVE-2025-59732.patch
+Patch23:	ffmpeg-CVE-2025-59733.patch
 BuildRequires:  ladspa-devel
 BuildRequires:  libgsm-devel
-BuildRequires:  libmp3lame-devel >= 3.98.3
 BuildRequires:  nasm
-BuildRequires:  pkgconfig
+BuildRequires:  pkg-config
 BuildRequires:  pkgconfig(alsa)
 BuildRequires:  pkgconfig(aom) >= 1.0.0
 BuildRequires:  pkgconfig(dav1d) >= 0.5.0
@@ -128,6 +140,7 @@ BuildRequires:  pkgconfig(fribidi) >= 0.19.0
 BuildRequires:  pkgconfig(gnutls)
 BuildRequires:  pkgconfig(jack)
 BuildRequires:  pkgconfig(libass) >= 0.11.0
+BuildRequires:  pkgconfig(libavc1394)
 BuildRequires:  pkgconfig(libbluray)
 BuildRequires:  pkgconfig(libbs2b)
 BuildRequires:  pkgconfig(libcdio)
@@ -135,6 +148,8 @@ BuildRequires:  pkgconfig(libcdio_paranoia)
 BuildRequires:  pkgconfig(libdc1394-2)
 BuildRequires:  pkgconfig(libdrm)
 BuildRequires:  pkgconfig(libgme)
+BuildRequires:  pkgconfig(libiec61883)
+BuildRequires:  pkgconfig(libmp3lame) >= 3.98.3
 BuildRequires:  pkgconfig(libopenjp2) >= 2.1.0
 BuildRequires:  pkgconfig(libopenmpt) >= 0.2.6557
 BuildRequires:  pkgconfig(libpng)
@@ -151,6 +166,7 @@ BuildRequires:  pkgconfig(libxml-2.0)
 BuildRequires:  pkgconfig(libzmq) >= 4.2.1
 BuildRequires:  pkgconfig(lilv-0)
 BuildRequires:  pkgconfig(ogg)
+BuildRequires:  pkgconfig(openh264)
 BuildRequires:  pkgconfig(opus)
 BuildRequires:  pkgconfig(sdl2) >= 2.0.1
 BuildRequires:  pkgconfig(soxr)
@@ -175,7 +191,7 @@ BuildRequires:  pkgconfig(zvbi-0.2) >= 0.2.28
 BuildRequires:  AMF-devel
 %endif
 %if %{with mysofa}
-BuildRequires:  libmysofa-devel
+BuildRequires:  pkgconfig(libmysofa)
 %endif
 %if %{with codec2}
 BuildRequires:  pkgconfig(codec2)
@@ -209,6 +225,9 @@ BuildRequires:  pkgconfig(opencore-amrnb)
 %if %{with amrwb}
 BuildRequires:  pkgconfig(vo-amrwbenc)
 %endif
+%if %{with vvenc}
+BuildRequires:  vvenc-devel
+%endif
 %if %{with x264}
 BuildRequires:  pkgconfig(x264)
 %endif
@@ -226,17 +245,13 @@ BuildRequires:  pkgconfig(SvtAv1Enc) >= 0.9.0
 %if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150600
 BuildRequires:  pkgconfig(libplacebo) >= 6.292.0
 %else
-BuildRequires:  (pkgconfig(libplacebo) >= 4.192.0 with pkgconfig (libplacebo) < 6.292.0)
+BuildRequires:  (pkgconfig(libplacebo) >= 4.192.0 with pkgconfig(libplacebo) < 6.292.0)
 %endif
 BuildRequires:  pkgconfig(shaderc) >= 2019.1
 BuildRequires:  pkgconfig(vulkan) >= 1.3.255
 %endif

-%if 0%{?suse_version} < 1550 && 0%{?sle_version} >= 150200 && 0%{?sle_version} < 150600
-%ifarch x86_64 %x86_64
-BuildRequires:  pkgconfig(libmfx)
-%endif
-%else
+%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150500
 %ifarch x86_64 %x86_64
 BuildRequires:  pkgconfig(vpl) >= 2.6
 %endif
@@ -584,6 +599,7 @@ LDFLAGS="%_lto_cflags" \
 	--enable-libfreetype \
 	--enable-libfribidi \
 	--enable-libgsm \
+	--enable-libiec61883 \
 	--enable-libjack \
 %if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150700
 	--enable-libjxl \
@@ -595,7 +611,7 @@ LDFLAGS="%_lto_cflags" \
 %endif
 	--enable-libopenjpeg \
 	--enable-libopenmpt \
-	--enable-libopenh264-dlopen \
+	--enable-libopenh264 \
 	--enable-libopus \
 	--enable-libpulse \
 %if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150400
@@ -633,11 +649,7 @@ LDFLAGS="%_lto_cflags" \
 %endif
 %endif
 	--enable-lv2 \
-%if 0%{?suse_version} < 1550 && 0%{?sle_version} >= 150200 && 0%{?sle_version} < 150600
-%ifarch x86_64 %x86_64
-	--enable-libmfx \
-%endif
-%else
+%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150500
 %ifarch x86_64 %x86_64
 	--enable-libvpl \
 %endif
@@ -656,6 +668,9 @@ LDFLAGS="%_lto_cflags" \
 %if %{with amrwb}
 	--enable-libvo-amrwbenc \
 %endif
+%if %{with vvenc}
+	--enable-libvvenc \
+%endif
 %if %{with x264}
 	--enable-libx264 \
 %endif
@@ -808,8 +823,14 @@ done

 %else
 %define _name ffmpeg
+# Patches may subtly change internal APIs, so we're sticking %%release in
+# Requires lines. It also conveniently blocks openSUSE libav* being combined
+# with Packman libav*, due to PM's unique %%release numbers.
+# This use of %%release with %flavor however requires bcnt synchro:
+#
+#!BcntSyncTag:  ffmpeg-7
 Name:           ffmpeg-7-mini
-Version:        7.0
+Version:        7.1.2
 Release:        0
 Summary:        Set of libraries for working with various multimedia formats
 License:        GPL-3.0-or-later
@@ -824,8 +845,9 @@ Patch3:         ffmpeg-codec-choice.diff
 Patch4:         ffmpeg-4.2-dlopen-fdk_aac.patch
 Patch5:         work-around-abi-break.patch
 Patch10:        ffmpeg-chromium.patch
-Patch91:        ffmpeg-dlopen-openh264.patch
+Patch15:        11013-avcodec-decode-clean-up-if-get_hw_frames_parameters-.patch
 BuildRequires:  c_compiler
+BuildRequires:  pkgconfig(openh264)
 Requires:       this-is-only-for-build-envs

 %description
--- a/ffmpeg-CVE-2025-59728.patch
+++ b/ffmpeg-CVE-2025-59728.patch
@@ -0,0 +1,59 @@
+From ce0a655f85c1144d19a4acad59afbb92e4997e30 Mon Sep 17 00:00:00 2001
+From: Michael Niedermayer <michael@niedermayer.cc>
+Date: Mon, 28 Jul 2025 23:41:56 +0200
+Subject: [PATCH] avformat/dashdec: Allocate space for appended "/"
+
+Fixes: writing 1 byte over the end of the array
+Fixes: BIGSLEEP-433502298/test.xml
+
+Found-by: Google Big Sleep
+
+A prettier solution is welcome!
+A testcase exists only for the baseurl case
+
+Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
+---
+ libavformat/dashdec.c | 13 +++++++++++--
+ 1 file changed, 11 insertions(+), 2 deletions(-)
+
+diff --git a/libavformat/dashdec.c b/libavformat/dashdec.c
+index c3f3d7f3f8..278c70315d 100644
+--- a/libavformat/dashdec.c
+++ b/libavformat/dashdec.c
+@@ -735,7 +735,7 @@ static int resolve_content_path(AVFormatContext *s, const char *url, int *max_ur
+     }
+ 
+     tmp_max_url_size = aligned(tmp_max_url_size);
+-    text = av_mallocz(tmp_max_url_size);
+    text = av_mallocz(tmp_max_url_size + 1);
+     if (!text) {
+         updated = AVERROR(ENOMEM);
+         goto end;
+@@ -747,7 +747,7 @@ static int resolve_content_path(AVFormatContext *s, const char *url, int *max_ur
+     }
+     av_free(text);
+ 
+-    path = av_mallocz(tmp_max_url_size);
+    path = av_mallocz(tmp_max_url_size + 2);
+     tmp_str = av_mallocz(tmp_max_url_size);
+     if (!tmp_str || !path) {
+         updated = AVERROR(ENOMEM);
+@@ -769,6 +769,15 @@ static int resolve_content_path(AVFormatContext *s, const char *url, int *max_ur
+ 
+     node = baseurl_nodes[rootId];
+     baseurl = xmlNodeGetContent(node);
+    if (baseurl) {
+        size_t len = xmlStrlen(baseurl)+2;
+        char *tmp = xmlRealloc(baseurl, len);
+        if (!tmp) {
+            updated = AVERROR(ENOMEM);
+            goto end;
+        }
+        baseurl = tmp;
+    }
+     root_url = (av_strcasecmp(baseurl, "")) ? baseurl : path;
+     if (node) {
+         xmlNodeSetContent(node, root_url);
+-- 
+2.51.0
+
--- a/ffmpeg-CVE-2025-59731.patch
+++ b/ffmpeg-CVE-2025-59731.patch
@@ -0,0 +1,79 @@
+From 0d9c003d76383e82b57b6d5aa33776709d0cda2c Mon Sep 17 00:00:00 2001
+From: Michael Niedermayer <michael@niedermayer.cc>
+Date: Wed, 6 Aug 2025 10:08:14 +0200
+Subject: [PATCH] avcodec/exr: Check rle_raw_data and surroundings
+
+Fixes: out of array read
+
+Fixes: BIGSLEEP-436510153/dwa_uncompress_read.exr
+
+Found-by: Google Big Sleep
+Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
+---
+ libavcodec/exr.c | 15 +++++++++++++--
+ 1 file changed, 13 insertions(+), 2 deletions(-)
+
+diff --git a/libavcodec/exr.c b/libavcodec/exr.c
+index 0a6aab662e..504fea0aac 100644
+--- a/libavcodec/exr.c
+++ b/libavcodec/exr.c
+@@ -996,6 +996,7 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+     const int dc_h = td->ysize >> 3;
+     GetByteContext gb, agb;
+     int skip, ret;
+    int have_rle = 0;
+ 
+     if (compressed_size <= 88)
+         return AVERROR_INVALIDDATA;
+@@ -1020,6 +1021,11 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+     )
+         return AVERROR_INVALIDDATA;
+ 
+    if ((uint64_t)rle_raw_size > INT_MAX) {
+        avpriv_request_sample(s->avctx, "Too big rle_raw_size");
+        return AVERROR_INVALIDDATA;
+    }
+
+     bytestream2_init(&gb, src + 88, compressed_size - 88);
+     skip = bytestream2_get_le16(&gb);
+     if (skip < 2)
+@@ -1090,6 +1096,9 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+     if (rle_raw_size > 0 && rle_csize > 0 && rle_usize > 0) {
+         unsigned long dest_len = rle_usize;
+ 
+        if (2LL * td->xsize * td->ysize > rle_raw_size)
+            return AVERROR_INVALIDDATA;
+
+         av_fast_padded_malloc(&td->rle_data, &td->rle_size, rle_usize);
+         if (!td->rle_data)
+             return AVERROR(ENOMEM);
+@@ -1106,6 +1115,8 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+         if (ret < 0)
+             return ret;
+         bytestream2_skip(&gb, rle_csize);
+
+        have_rle = 1;
+     }
+ 
+     bytestream2_init(&agb, td->ac_data, ac_count * 2);
+@@ -1187,7 +1198,7 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+         return 0;
+ 
+     if (s->pixel_type == EXR_HALF) {
+-        for (int y = 0; y < td->ysize && td->rle_raw_data; y++) {
+        for (int y = 0; y < td->ysize && have_rle; y++) {
+             uint16_t *ao = ((uint16_t *)td->uncompressed_data) + y * td->xsize * s->nb_channels;
+             uint8_t *ai0 = td->rle_raw_data + y * td->xsize;
+             uint8_t *ai1 = td->rle_raw_data + y * td->xsize + rle_raw_size / 2;
+@@ -1196,7 +1207,7 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+                 ao[x] = ai0[x] | (ai1[x] << 8);
+         }
+     } else {
+-        for (int y = 0; y < td->ysize && td->rle_raw_data; y++) {
+        for (int y = 0; y < td->ysize && have_rle; y++) {
+             uint32_t *ao = ((uint32_t *)td->uncompressed_data) + y * td->xsize * s->nb_channels;
+             uint8_t *ai0 = td->rle_raw_data + y * td->xsize;
+             uint8_t *ai1 = td->rle_raw_data + y * td->xsize + rle_raw_size / 2;
+-- 
+2.51.0
+
--- a/ffmpeg-CVE-2025-59732.patch
+++ b/ffmpeg-CVE-2025-59732.patch
@@ -0,0 +1,52 @@
+From f45da79b2c336c5f8f3e563d72b8a22fecdcde0c Mon Sep 17 00:00:00 2001
+From: Michael Niedermayer <michael@niedermayer.cc>
+Date: Wed, 6 Aug 2025 10:35:15 +0200
+Subject: [PATCH] avcodec/exr: Dont access outside xsize/ysize
+
+Fixes: out of array access
+Fixes: BIGSLEEP-436510316/dwa_uncompress_write.exr
+
+Found-by: Google Big Sleep
+Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
+---
+ libavcodec/exr.c | 10 ++++++----
+ 1 file changed, 6 insertions(+), 4 deletions(-)
+
+diff --git a/libavcodec/exr.c b/libavcodec/exr.c
+index 504fea0aac..dea612a42b 100644
+--- a/libavcodec/exr.c
+++ b/libavcodec/exr.c
+@@ -1127,6 +1127,8 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+             float *yb = td->block[0];
+             float *ub = td->block[1];
+             float *vb = td->block[2];
+            int bw = FFMIN(8, td->xsize - x);
+            int bh = FFMIN(8, td->ysize - y);
+ 
+             memset(td->block, 0, sizeof(td->block));
+ 
+@@ -1151,8 +1153,8 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+                 uint16_t *ro = ((uint16_t *)td->uncompressed_data) +
+                     y * td->xsize * s->nb_channels + td->xsize * (o + 2) + x;
+ 
+-                for (int yy = 0; yy < 8; yy++) {
+-                    for (int xx = 0; xx < 8; xx++) {
+                for (int yy = 0; yy < bh; yy++) {
+                    for (int xx = 0; xx < bw; xx++) {
+                         const int idx = xx + yy * 8;
+                         float b, g, r;
+ 
+@@ -1175,8 +1177,8 @@ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compresse
+                 float *ro = ((float *)td->uncompressed_data) +
+                     y * td->xsize * s->nb_channels + td->xsize * (o + 2) + x;
+ 
+-                for (int yy = 0; yy < 8; yy++) {
+-                    for (int xx = 0; xx < 8; xx++) {
+                for (int yy = 0; yy < bh; yy++) {
+                    for (int xx = 0; xx < bw; xx++) {
+                         const int idx = xx + yy * 8;
+ 
+                         convert(yb[idx], ub[idx], vb[idx], &bo[xx], &go[xx], &ro[xx]);
+-- 
+2.51.0
+
--- a/ffmpeg-CVE-2025-59733.patch
+++ b/ffmpeg-CVE-2025-59733.patch
@@ -0,0 +1,39 @@
+From 0469d68acb52081ca8385b844b9650398242be0f Mon Sep 17 00:00:00 2001
+From: Michael Niedermayer <michael@niedermayer.cc>
+Date: Sat, 9 Aug 2025 14:05:19 +0200
+Subject: [PATCH] avcodec/exr: Check for pixel type consistency in DWA
+
+Fixes: out of array access
+Fixes: BIGSLEEP-436511754/testcase.exr
+
+Found-by: Google Big Sleep
+Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
+---
+ libavcodec/exr.c | 11 +++++++++++
+ 1 file changed, 11 insertions(+)
+
+diff --git a/libavcodec/exr.c b/libavcodec/exr.c
+index dea612a42b..67f971ff35 100644
+--- a/libavcodec/exr.c
+++ b/libavcodec/exr.c
+@@ -2086,6 +2086,17 @@ static int decode_frame(AVCodecContext *avctx, AVFrame *picture,
+     if ((ret = decode_header(s, picture)) < 0)
+         return ret;
+ 
+    if (s->compression == EXR_DWAA ||
+        s->compression == EXR_DWAB) {
+        for (int i = 0; i<s->nb_channels; i++) {
+            EXRChannel *channel = &s->channels[i];
+            if (channel->pixel_type != s->pixel_type) {
+                avpriv_request_sample(s->avctx, "mixed pixel type DWA");
+                return AVERROR_PATCHWELCOME;
+            }
+        }
+    }
+
+     switch (s->pixel_type) {
+     case EXR_HALF:
+         if (s->channel_offsets[3] >= 0) {
+-- 
+2.51.0
+
--- a/ffmpeg-chromium.patch
+++ b/ffmpeg-chromium.patch
@@ -11,11 +11,11 @@ Add av_stream_get_first_dts for Chromium
 libavformat/utils.c    |    7 +++++++
 2 files changed, 11 insertions(+)

-Index: ffmpeg-7.0/libavformat/avformat.h
+Index: ffmpeg-7.1/libavformat/avformat.h
 ===================================================================
--- ffmpeg-7.0.orig/libavformat/avformat.h
-+++ ffmpeg-7.0/libavformat/avformat.h
-@@ -1170,6 +1170,10 @@ typedef struct AVStreamGroup {
+--- ffmpeg-7.1.orig/libavformat/avformat.h
+++ ffmpeg-7.1/libavformat/avformat.h
+@@ -1202,6 +1202,10 @@ typedef struct AVStreamGroup {
 
 struct AVCodecParserContext *av_stream_get_parser(const AVStream *s);
 
@@ -26,13 +26,13 @@ Index: ffmpeg-7.0/libavformat/avformat.h
 #define AV_PROGRAM_RUNNING 1
 
 /**
-Index: ffmpeg-7.0/libavformat/utils.c
+Index: ffmpeg-7.1/libavformat/utils.c
 ===================================================================
--- ffmpeg-7.0.orig/libavformat/utils.c
-+++ ffmpeg-7.0/libavformat/utils.c
-@@ -56,6 +56,13 @@ int ff_unlock_avformat(void)
-     return ff_mutex_unlock(&avformat_mutex) ? -1 : 0;
- }
+--- ffmpeg-7.1.orig/libavformat/utils.c
+++ ffmpeg-7.1/libavformat/utils.c
+@@ -44,6 +44,13 @@
+  * various utility functions for use within FFmpeg
+  */
 
 +// Chromium: We use the internal field first_dts vvv
 +int64_t av_stream_get_first_dts(const AVStream *st)
--- a/ffmpeg-dlopen-openh264.patch
+++ b/ffmpeg-dlopen-openh264.patch
@@ -1,354 +0,0 @@
-From 4739b0c97b3378bdaf737171777fe9a71a53eff1 Mon Sep 17 00:00:00 2001
-From: Neal Gompa <ngompa@fedoraproject.org>
-Date: Wed, 12 Oct 2022 09:41:27 -0400
-Subject: [PATCH] avcodec/openh264: Add the ability to dlopen() OpenH264
-
-We can't directly depend on OpenH264, but we can weakly link to it
-and gracefully expose the capability.
-
-Co-authored-by: Andreas Schneider <asn@cryptomilk.org>
-Co-authored-by: Neal Gompa <ngompa@fedoraproject.org>
-
-Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
-Signed-off-by: Neal Gompa <ngompa@fedoraproject.org>
---
- configure                       |    3 
- libavcodec/Makefile             |    1 
- libavcodec/libopenh264.c        |    5 +
- libavcodec/libopenh264_dlopen.c |  147 ++++++++++++++++++++++++++++++++++++++++
- libavcodec/libopenh264_dlopen.h |   58 +++++++++++++++
- libavcodec/libopenh264dec.c     |    8 ++
- libavcodec/libopenh264enc.c     |    8 ++
- 7 files changed, 230 insertions(+)
- create mode 100644 libavcodec/libopenh264_dlopen.c
- create mode 100644 libavcodec/libopenh264_dlopen.h
-
-Index: ffmpeg-7.0/configure
-===================================================================
--- ffmpeg-7.0.orig/configure
-+++ ffmpeg-7.0/configure
-@@ -252,6 +252,7 @@ External library support:
-   --enable-libopencore-amrwb enable AMR-WB decoding via libopencore-amrwb [no]
-   --enable-libopencv       enable video filtering via libopencv [no]
-   --enable-libopenh264     enable H.264 encoding via OpenH264 [no]
-+  --enable-libopenh264-dlopen  enable H.264 encoding via dlopen()'ed OpenH264 [no]
-   --enable-libopenjpeg     enable JPEG 2000 de/encoding via OpenJPEG [no]
-   --enable-libopenmpt      enable decoding tracked files via libopenmpt [no]
-   --enable-libopenvino     enable OpenVINO as a DNN module backend
-@@ -1933,6 +1934,7 @@ EXTERNAL_LIBRARY_LIST="
-     libmysofa
-     libopencv
-     libopenh264
-+    libopenh264_dlopen
-     libopenjpeg
-     libopenmpt
-     libopenvino
-@@ -6921,6 +6923,7 @@ enabled libopencv         && { check_hea
-                                  require libopencv opencv2/core/core_c.h cvCreateImageHeader -lopencv_core -lopencv_imgproc; } ||
-                                require_pkg_config libopencv opencv opencv/cxcore.h cvCreateImageHeader; }
- enabled libopenh264       && require_pkg_config libopenh264 "openh264 >= 1.3.0" wels/codec_api.h WelsGetCodecVersion
-+enabled libopenh264_dlopen && enable libopenh264 && add_cppflags "-I$(dirname $(readlink -f "$0"))/ffdlopenhdrs/include -DCONFIG_LIBOPENH264_DLOPEN=1"
- enabled libopenjpeg       && { check_pkg_config libopenjpeg "libopenjp2 >= 2.1.0" openjpeg.h opj_version ||
-                                { require_pkg_config libopenjpeg "libopenjp2 >= 2.1.0" openjpeg.h opj_version -DOPJ_STATIC && add_cppflags -DOPJ_STATIC; } }
- enabled libopenmpt        && require_pkg_config libopenmpt "libopenmpt >= 0.2.6557" libopenmpt/libopenmpt.h openmpt_module_create -lstdc++ && append libopenmpt_extralibs "-lstdc++"
-Index: ffmpeg-7.0/libavcodec/Makefile
-===================================================================
--- ffmpeg-7.0.orig/libavcodec/Makefile
-+++ ffmpeg-7.0/libavcodec/Makefile
-@@ -1128,6 +1128,7 @@ OBJS-$(CONFIG_LIBMP3LAME_ENCODER)
- OBJS-$(CONFIG_LIBOPENCORE_AMRNB_DECODER)  += libopencore-amr.o
- OBJS-$(CONFIG_LIBOPENCORE_AMRNB_ENCODER)  += libopencore-amr.o
- OBJS-$(CONFIG_LIBOPENCORE_AMRWB_DECODER)  += libopencore-amr.o
-+OBJS-$(CONFIG_LIBOPENH264_DLOPEN)         += libopenh264_dlopen.o
- OBJS-$(CONFIG_LIBOPENH264_DECODER)        += libopenh264dec.o libopenh264.o
- OBJS-$(CONFIG_LIBOPENH264_ENCODER)        += libopenh264enc.o libopenh264.o
- OBJS-$(CONFIG_LIBOPENJPEG_ENCODER)        += libopenjpegenc.o
-Index: ffmpeg-7.0/libavcodec/libopenh264.c
-===================================================================
--- ffmpeg-7.0.orig/libavcodec/libopenh264.c
-+++ ffmpeg-7.0/libavcodec/libopenh264.c
-@@ -20,8 +20,13 @@
-  */
- 
- #include <string.h>
-+
-+#ifdef CONFIG_LIBOPENH264_DLOPEN
-+#include "libopenh264_dlopen.h"
-+#else
- #include <wels/codec_api.h>
- #include <wels/codec_ver.h>
-+#endif
- 
- #include "libavutil/error.h"
- #include "libavutil/log.h"
-Index: ffmpeg-7.0/libavcodec/libopenh264_dlopen.c
-===================================================================
--- /dev/null
-+++ ffmpeg-7.0/libavcodec/libopenh264_dlopen.c
-@@ -0,0 +1,147 @@
-+/*
-+ * OpenH264 dlopen code
-+ *
-+ * Copyright (C) 2022 Andreas Schneider <asn@cryptomilk.org>
-+ *
-+ * This file is part of FFmpeg.
-+ *
-+ * FFmpeg is free software; you can redistribute it and/or
-+ * modify it under the terms of the GNU Lesser General Public
-+ * License as published by the Free Software Foundation; either
-+ * version 2.1 of the License, or (at your option) any later version.
-+ *
-+ * FFmpeg is distributed in the hope that it will be useful,
-+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
-+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-+ * Lesser General Public License for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public
-+ * License along with FFmpeg; if not, write to the Free Software
-+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
-+ */
-+
-+#include <dlfcn.h>
-+
-+#include "libopenh264_dlopen.h"
-+
-+/*
-+ * The symbol binding makes sure we do not run into strict aliasing issues which
-+ * can lead into segfaults.
-+ */
-+typedef int (*__oh264_WelsCreateSVCEncoder)(ISVCEncoder **);
-+typedef void (*__oh264_WelsDestroySVCEncoder)(ISVCEncoder *);
-+typedef int (*__oh264_WelsGetDecoderCapability)(SDecoderCapability *);
-+typedef long (*__oh264_WelsCreateDecoder)(ISVCDecoder **);
-+typedef void (*__oh264_WelsDestroyDecoder)(ISVCDecoder *);
-+typedef OpenH264Version (*__oh264_WelsGetCodecVersion)(void);
-+typedef void (*__oh264_WelsGetCodecVersionEx)(OpenH264Version *);
-+
-+#define OH264_SYMBOL_ENTRY(i)                                                  \
-+  union {                                                                      \
-+    __oh264_##i f;                                                             \
-+    void *obj;                                                                 \
-+  } _oh264_##i
-+
-+struct oh264_symbols {
-+  OH264_SYMBOL_ENTRY(WelsCreateSVCEncoder);
-+  OH264_SYMBOL_ENTRY(WelsDestroySVCEncoder);
-+  OH264_SYMBOL_ENTRY(WelsGetDecoderCapability);
-+  OH264_SYMBOL_ENTRY(WelsCreateDecoder);
-+  OH264_SYMBOL_ENTRY(WelsDestroyDecoder);
-+  OH264_SYMBOL_ENTRY(WelsGetCodecVersion);
-+  OH264_SYMBOL_ENTRY(WelsGetCodecVersionEx);
-+};
-+
-+/* Symbols are bound by loadLibOpenH264() */
-+static struct oh264_symbols openh264_symbols;
-+
-+int oh264_WelsCreateSVCEncoder(ISVCEncoder **ppEncoder) {
-+  return openh264_symbols._oh264_WelsCreateSVCEncoder.f(ppEncoder);
-+}
-+
-+void oh264_WelsDestroySVCEncoder(ISVCEncoder *pEncoder) {
-+  return openh264_symbols._oh264_WelsDestroySVCEncoder.f(pEncoder);
-+}
-+
-+int oh264_WelsGetDecoderCapability(SDecoderCapability *pDecCapability) {
-+  return openh264_symbols._oh264_WelsGetDecoderCapability.f(pDecCapability);
-+}
-+
-+long oh264_WelsCreateDecoder(ISVCDecoder **ppDecoder) {
-+  return openh264_symbols._oh264_WelsCreateDecoder.f(ppDecoder);
-+}
-+
-+void oh264_WelsDestroyDecoder(ISVCDecoder *pDecoder) {
-+  return openh264_symbols._oh264_WelsDestroyDecoder.f(pDecoder);
-+}
-+
-+OpenH264Version oh264_WelsGetCodecVersion(void) {
-+  return openh264_symbols._oh264_WelsGetCodecVersion.f();
-+}
-+
-+void oh264_WelsGetCodecVersionEx(OpenH264Version *pVersion) {
-+  openh264_symbols._oh264_WelsGetCodecVersionEx.f(pVersion);
-+}
-+
-+static void *_oh264_bind_symbol(AVCodecContext *avctx,
-+                                void *handle,
-+                                const char *sym_name) {
-+    void *sym = NULL;
-+
-+    sym = dlsym(handle, sym_name);
-+    if (sym == NULL) {
-+        const char *err = dlerror();
-+        av_log(avctx,
-+               AV_LOG_WARNING,
-+               "%s: Failed to bind %s\n",
-+               err,
-+               sym_name);
-+        return NULL;
-+    }
-+
-+    return sym;
-+}
-+
-+#define oh264_bind_symbol(avctx, handle, sym_name)                           \
-+  if (openh264_symbols._oh264_##sym_name.obj == NULL) {                      \
-+    openh264_symbols._oh264_##sym_name.obj = _oh264_bind_symbol(avctx, handle, #sym_name); \
-+    if (openh264_symbols._oh264_##sym_name.obj == NULL) {                    \
-+      return 1;                                                              \
-+    }                                                                        \
-+  }
-+
-+int loadLibOpenH264(AVCodecContext *avctx) {
-+  static bool initialized = false;
-+  void *libopenh264 = NULL;
-+  const char *err = NULL;
-+
-+  if (initialized) {
-+      return 0;
-+  }
-+
-+#define OPENH264_LIB "libopenh264.so.7"
-+  libopenh264 = dlopen(OPENH264_LIB, RTLD_LAZY);
-+  err = dlerror();
-+  if (err != NULL) {
-+    av_log(avctx, AV_LOG_WARNING,
-+           "%s: %s is missing, openh264 support will be disabled\n", err,
-+           OPENH264_LIB);
-+
-+    if (libopenh264 != NULL) {
-+      dlclose(libopenh264);
-+    }
-+    return 1;
-+  }
-+
-+  oh264_bind_symbol(avctx, libopenh264, WelsCreateSVCEncoder);
-+  oh264_bind_symbol(avctx, libopenh264, WelsDestroySVCEncoder);
-+  oh264_bind_symbol(avctx, libopenh264, WelsGetDecoderCapability);
-+  oh264_bind_symbol(avctx, libopenh264, WelsCreateDecoder);
-+  oh264_bind_symbol(avctx, libopenh264, WelsDestroyDecoder);
-+  oh264_bind_symbol(avctx, libopenh264, WelsGetCodecVersion);
-+  oh264_bind_symbol(avctx, libopenh264, WelsGetCodecVersionEx);
-+
-+  initialized = true;
-+
-+  return 0;
-+}
-Index: ffmpeg-7.0/libavcodec/libopenh264_dlopen.h
-===================================================================
--- /dev/null
-+++ ffmpeg-7.0/libavcodec/libopenh264_dlopen.h
-@@ -0,0 +1,58 @@
-+/*
-+ * OpenH264 dlopen code
-+ *
-+ * Copyright (C) 2022 Andreas Schneider <asn@cryptomilk.org>
-+ *
-+ * This file is part of FFmpeg.
-+ *
-+ * FFmpeg is free software; you can redistribute it and/or
-+ * modify it under the terms of the GNU Lesser General Public
-+ * License as published by the Free Software Foundation; either
-+ * version 2.1 of the License, or (at your option) any later version.
-+ *
-+ * FFmpeg is distributed in the hope that it will be useful,
-+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
-+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-+ * Lesser General Public License for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public
-+ * License along with FFmpeg; if not, write to the Free Software
-+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
-+ */
-+
-+#ifndef HAVE_LIBOPENH264_DLOPEN_H
-+#define HAVE_LIBOPENH264_DLOPEN_H
-+
-+#ifdef CONFIG_LIBOPENH264_DLOPEN
-+
-+#include <wels/codec_api.h>
-+#include <wels/codec_ver.h>
-+
-+#include "avcodec.h"
-+
-+int oh264_WelsCreateSVCEncoder(ISVCEncoder **ppEncoder);
-+#define WelsCreateSVCEncoder oh264_WelsCreateSVCEncoder
-+
-+void oh264_WelsDestroySVCEncoder(ISVCEncoder *pEncoder);
-+#define WelsDestroySVCEncoder oh264_WelsDestroySVCEncoder
-+
-+int oh264_WelsGetDecoderCapability(SDecoderCapability *pDecCapability);
-+#define WelsGetDecoderCapability oh264_WelsGetDecoderCapability
-+
-+long oh264_WelsCreateDecoder(ISVCDecoder **ppDecoder);
-+#define WelsCreateDecoder oh264_WelsCreateDecoder
-+
-+void oh264_WelsDestroyDecoder(ISVCDecoder *pDecoder);
-+#define WelsDestroyDecoder oh264_WelsDestroyDecoder
-+
-+OpenH264Version oh264_WelsGetCodecVersion(void);
-+#define WelsGetCodecVersion oh264_WelsGetCodecVersion
-+
-+void oh264_WelsGetCodecVersionEx(OpenH264Version *pVersion);
-+#define WelsGetCodecVersionEx oh264_WelsGetCodecVersionEx
-+
-+int loadLibOpenH264(AVCodecContext *avctx);
-+
-+#endif /* CONFIG_LIBOPENH264_DLOPEN */
-+
-+#endif /* HAVE_LIBOPENH264_DLOPEN_H */
-Index: ffmpeg-7.0/libavcodec/libopenh264dec.c
-===================================================================
--- ffmpeg-7.0.orig/libavcodec/libopenh264dec.c
-+++ ffmpeg-7.0/libavcodec/libopenh264dec.c
-@@ -19,8 +19,12 @@
-  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
-  */
- 
-+#ifdef CONFIG_LIBOPENH264_DLOPEN
-+#include "libopenh264_dlopen.h"
-+#else
- #include <wels/codec_api.h>
- #include <wels/codec_ver.h>
-+#endif
- 
- #include "libavutil/common.h"
- #include "libavutil/fifo.h"
-@@ -55,6 +59,10 @@ static av_cold int svc_decode_init(AVCod
-     int log_level;
-     WelsTraceCallback callback_function;
- 
-+#ifdef CONFIG_LIBOPENH264_DLOPEN
-+    if (loadLibOpenH264(avctx))
-+         return AVERROR_DECODER_NOT_FOUND;
-+#endif
-     if (WelsCreateDecoder(&s->decoder)) {
-         av_log(avctx, AV_LOG_ERROR, "Unable to create decoder\n");
-         return AVERROR_UNKNOWN;
-Index: ffmpeg-7.0/libavcodec/libopenh264enc.c
-===================================================================
--- ffmpeg-7.0.orig/libavcodec/libopenh264enc.c
-+++ ffmpeg-7.0/libavcodec/libopenh264enc.c
-@@ -19,8 +19,12 @@
-  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
-  */
- 
-+#ifdef CONFIG_LIBOPENH264_DLOPEN
-+#include "libopenh264_dlopen.h"
-+#else
- #include <wels/codec_api.h>
- #include <wels/codec_ver.h>
-+#endif
- 
- #include "libavutil/attributes.h"
- #include "libavutil/common.h"
-@@ -114,6 +118,10 @@ static av_cold int svc_encode_init(AVCod
-     WelsTraceCallback callback_function;
-     AVCPBProperties *props;
- 
-+#ifdef CONFIG_LIBOPENH264_DLOPEN
-+    if (loadLibOpenH264(avctx))
-+         return AVERROR_ENCODER_NOT_FOUND;
-+#endif
-     if (WelsCreateSVCEncoder(&s->encoder)) {
-         av_log(avctx, AV_LOG_ERROR, "Unable to create encoder\n");
-         return AVERROR_UNKNOWN;
--- a/work-around-abi-break.patch
+++ b/work-around-abi-break.patch
@@ -13,11 +13,12 @@ ffmpeg, which can cause inadvertent mixing of library versions on
 openSUSE, and precompiled Linux distributions in general.

 Upstream says "we only add new functions" - which is ok in its own
-right. verdefs, if you have them, *must*not* change under any
-circumstances, but that is what they broke: the set of symbols
-included in the "LIBAVFORMAT_59" verdef changed between 5.0 and 5.1.
+right. New symbols must be in a new verdef section though, existing
+sections *must*not* change under *any* circumstances, but that is
+what they broke: the set of symbols included in the "LIBAVFORMAT_59"
+verdef changed between 5.0 and 5.1.

-$ abidiff abidiff /usr/lib64/libavformat.so.59.16.100 usr/lib64/libavformat.so.59.27.100
+$ abidiff /usr/lib64/libavformat.so.59.16.100 usr/lib64/libavformat.so.59.27.100
 Functions changes summary: 0 Removed, 0 Changed, 0 Added function
 Variables changes summary: 0 Removed, 0 Changed, 0 Added variable
 Function symbols changes summary: 0 Removed, 1 Added function symbol not referenced by debug info
@@ -37,10 +38,10 @@ releases.
 ffbuild/library.mak |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

-Index: ffmpeg-5.1/ffbuild/library.mak
+Index: ffmpeg-7.1/ffbuild/library.mak
 ===================================================================
--- ffmpeg-5.1.orig/ffbuild/library.mak
-+++ ffmpeg-5.1/ffbuild/library.mak
+--- ffmpeg-7.1.orig/ffbuild/library.mak
+++ ffmpeg-7.1/ffbuild/library.mak
@@ -59,7 +59,7 @@ $(SUBDIR)lib$(FULLNAME).pc: $(SUBDIR)ver
 	$$(M) $$(SRC_PATH)/ffbuild/pkgconfig_generate.sh $(NAME) "$(DESC)"
Author	SHA256	Message	Date
Jonathan Kang	4577d2a47b	several CVE fixes	2025-10-14 11:00:23 +08:00
Jan Engelhardt	e3bda6d144	Fixup Version line	2025-10-07 16:06:13 +02:00
Bjørn Lie	5a8c29c429	Update to version 7.1.2 Co-authored-by: Bjørn Lie <bjorn.lie@gmail.com> Co-committed-by: Bjørn Lie <bjorn.lie@gmail.com>	2025-10-07 16:04:01 +02:00
Jan Engelhardt	89aa33ff4f	Reword work-around-abi-break.patch	2025-07-23 15:33:52 +02:00
Jan Engelhardt	b2122e4c37	Bump changelog date for vvenc addition	2025-07-23 15:29:16 +02:00
Jan Engelhardt	500bdcfaa8	Merge 'Add vvenc build conditional' (#20 ) Reviewed-on: jengelh/ffmpeg-7#20	2025-07-23 15:28:08 +02:00
Hans-Peter Jansen	70af22cdf4	Add vvenc build conditional	2025-07-23 10:31:12 +02:00
Jonathan Kang	abbd0684ea	Add ffmpeg-CVE-2025-7700.patch	2025-07-23 15:17:30 +08:00
Jan Engelhardt	0c40ed06d0	Use more pkgconfig() symbols for BuildRequires	2025-06-25 12:15:36 +02:00
Yifan J	efa133d10d	Build with noopenh264, drop ffmpeg-dlopen-openh264.patch	2025-06-25 16:55:31 +08:00
Jan Engelhardt	2c113ed6f6	Enable libiec61883 integration	2025-06-12 19:53:15 +02:00
ZhaoQiang	52f95e9110	Update changelog to add CVE fix entry for CVE-2024-36618 CVE-2024-36617 CVE-2024-36616 CVE-2024-36619 CVE-2024-36615	2025-05-28 19:52:56 +08:00
Jan Engelhardt	7ec55b5f78	Reorder user-facing changelog to be in sequence References: https://bugzilla.opensuse.org/1242310	2025-05-06 03:05:17 +02:00
ZhaoQiang	a150aa6c2e	Add bugID recored in n7.1.1 log. With this, maintiance team will allow to submit Factory source to SLE. Avoid bug fix lost. Also fix some old grammar typos.	2025-04-16 13:49:58 +08:00
Jan Engelhardt	f281b98b9b	Revert "Build with OpenVINO support in libavfilter" This reverts commit `ce60e9ed66`. Too many build-time dependencies.	2025-04-04 11:34:44 +02:00
Jan Engelhardt	5f822c5560	Bump mini's version	2025-04-02 02:07:52 +02:00
Jan Engelhardt	10630669eb	ffmpeg 7.1.1	2025-04-02 02:06:23 +02:00
Adrian Schröter	a40564ee7c	Fix BcntSync handling	2025-03-27 11:18:53 +01:00
Jan Engelhardt	09f8124ff4	Disable openvino on 32-bit	2025-03-26 21:25:23 +01:00
Jan Engelhardt	b1d5de540b	Merge 'refs/pull/13/head'	2025-03-25 22:11:38 +01:00
ZhaoQiang	10be3a7196	Add ffmpeg-7-CVE-2025-1816.patch: Backporting 0526535c from upstream, add missing constrains for num_parameters in audio_element_oub(). (CVE-2025-1816, bsc#1238728) and add some lost CVE bugID into the changelog.	2025-03-24 14:32:47 +08:00
Mia Herkt	ce60e9ed66	Build with OpenVINO support in libavfilter	2025-03-24 00:25:11 +01:00
Jan Engelhardt	d27a94528c	Add 0001-avcodec-libsvtav1-unbreak-build-with-latest-svtav1.patch	2025-03-05 10:46:17 +01:00
ZhaoQiang	40e49d492e	Add security fix record on the update history. (CVE-2024-35368, bsc#1234028)	2025-03-01 20:13:07 +08:00
Jan Engelhardt	fba0c8d5ae	Add BcntSyncTag directive	2025-02-24 14:06:39 +01:00
ZhaoQiang	90e1a4148e	Add 4 patches for 8 CVEs * CVE-2024-12361 * CVE-2024-35365 * CVE-2024-36613 * CVE-2025-0518 * CVE-2025-22919 * CVE-2025-22920 * CVE-2025-22921 * CVE-2025-25473	2025-02-23 21:23:54 +01:00
Antonio Larrosa	32cbe46280	Adjust bconds to build the package in SLFO without xvidcore.	2024-10-15 11:02:13 +02:00
Jan Engelhardt	d30cb95aec	ffmpeg 7.1	2024-10-02 10:32:42 +02:00
Olaf Hering	e2cfa392ea	avcodec/decode: clean-up if get_hw_frames_parameters fails (ffmpeg#11013, vlc#28811) Signed-off-by: Olaf Hering <olaf@aepfle.de>	2024-09-30 12:34:56 +00:00
Stefan Dirsch	47633c77ba	no longer build against libmfx; build also 15.5 against libvpl	2024-09-26 12:23:18 +02:00
ZhaoQiang	baf5b4d954	Add use 64bit for input size check log entry for n7.0.2's update, to record security fix position. (CVE-2024-7055, bsc#1229026)	2024-09-18 10:05:51 +02:00
Jan Engelhardt	f803df26e3	Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch (armv7 build fix)	2024-08-21 12:12:29 +02:00
Jan Engelhardt	62e69514f7	Delete unreferenced patches	2024-08-10 10:05:05 +02:00
Jan Engelhardt	c18297e308	Copy first preamble to second preamble	2024-08-10 00:56:47 +02:00
Jan Engelhardt	ab72df490f	Delete unreferenced patches	2024-08-08 19:27:36 +02:00
ZhaoQiang	c33511409d	Update to release-7.0.2, Drop patches merged by the update.	2024-08-08 18:09:14 +08:00
ZhaoQiang	8c17f41823	Add ffmpeg-7-fix-crashes.patch: Backporting 5b87869c from upstream, fix track handling when mixing IAMF and video tracks, Fixes crashes when muxing the two together.	2024-08-05 16:57:32 +08:00
Jan Engelhardt	c11c165366	Merge branch 'refs/pull/2/head'	2024-08-01 05:24:57 +02:00
ZhaoQiang	d213111022	Correct a bug numbers typo.	2024-08-01 10:51:46 +08:00
Jan Engelhardt	99ea9689b9	restore deleted metadata	2024-07-27 08:45:16 +02:00
ZhaoQiang	cfe0711bad	Add ffmpeg-7-CVE-2024-32228.patch, ffmpeg-7-CVE-2024-32229.patch, ffmpeg-7-CVE-2024-32230.patch to fix CVE issues.	2024-07-25 18:17:40 +08:00
Jan Engelhardt	5866842008	Synchronize with OBS	2024-07-09 16:02:33 +02:00