Bug 21696 - ffmpeg 3.3.4
Summary: ffmpeg 3.3.4
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA6-32-OK MGA6-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2017-09-12 13:31 CEST by David Walser
Modified: 2017-09-21 15:44 CEST (History)
8 users (show)

See Also:
Source RPM: ffmpeg-3.3.3-1.mga6.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2017-09-12 13:31:44 CEST
FFmpeg 3.3.4 has been released today (September 12):
https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.3.4

It fixes at least one security issue.  We should update it for Mageia 6.

The bundled ffmpeg in avidemux should also be updated to 3.3.4.
David Walser 2017-09-12 13:31:56 CEST

Whiteboard: (none) => MGA6TOO

Comment 1 Marja Van Waes 2017-09-13 11:51:09 CEST
Assigning to the registered maintainer.

CC: (none) => marja11
Assignee: bugsquad => shlomif

Comment 2 David Walser 2017-09-13 12:01:18 CEST
Updated in Cauldron by Christiaan.

CC: (none) => cjw
Whiteboard: MGA6TOO => (none)
Version: Cauldron => 6

Comment 3 David Walser 2017-09-14 15:12:45 CEST
Note that there are core and tainted builds for this package.

Testing procedure:
https://bugs.mageia.org/show_bug.cgi?id=8065#c6
https://bugs.mageia.org/show_bug.cgi?id=14042#c6

Advisory:
========================

Updated ffmpeg packages fix security vulnerabilities:

This update provides ffmpeg version 3.3.4, which fixes several security
vulnerabilities and other bugs which were corrected upstream.

References:
https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.3.4
http://ffmpeg.org/download.html
http://ffmpeg.org/security.html
========================

Updated packages in {core,tainted}/updates_testing:
========================
ffmpeg-3.3.4-1.mga6
libavcodec57-3.3.4-1.mga6
libpostproc54-3.3.4-1.mga6
libavformat57-3.3.4-1.mga6
libavutil55-3.3.4-1.mga6
libavresample3-3.3.4-1.mga6
libswscaler4-3.3.4-1.mga6
libavfilter6-3.3.4-1.mga6
libswresample2-3.3.4-1.mga6
libffmpeg-devel-3.3.4-1.mga6
libffmpeg-static-devel-3.3.4-1.mga6

from ffmpeg-3.3.4-1.mga6.src.rpm

CC: (none) => shlomif
Assignee: shlomif => qa-bugs

Comment 4 David Walser 2017-09-14 15:13:10 CEST
The avidemux package still needs to be taken care of.  Don't let me forget that.
Comment 5 Len Lawrence 2017-09-14 17:28:50 CEST
mga6  x86_64

From Core updates Testing:

- ffmpeg-3.3.4-1.mga6.x86_64
- lib64avcodec57-3.3.4-1.mga6.x86_64
- lib64avfilter6-3.3.4-1.mga6.x86_64
- lib64avformat57-3.3.4-1.mga6.x86_64
- lib64avresample3-3.3.4-1.mga6.x86_64
- lib64avutil55-3.3.4-1.mga6.x86_64
- lib64postproc54-3.3.4-1.mga6.x86_64
- lib64swresample2-3.3.4-1.mga6.x86_64
- lib64swscaler4-3.3.4-1.mga6.x86_64

- lib64ffmpeg-devel-3.3.4-1
- lib64ffmpeg-static-devel-3.3.4-1

Used hints from previous testers.
$ ffmpeg -i Fashion_DivX720p_ASP.divx output.avi
Successful conversion - played fine in vlc.  Monitored sound with pavucontrol.

www.divx.com/en/hd has three sample Blender inspired movies.

$ ffmpeg -i Elephants_Dream_720p.divx elephants.avi
Played using totem.
$ ffmpeg -i Big_Buck_Bunny_1080p.divx bunny.avi
mplayer handled that OK - sound OK on plugged in speaker.

$ ffmpeg -i WaterlooRoad.mkv waterloo.avi
Worked OK but output was of lower quality.

$ ffmpeg -n -i MrsBrownsBoys.mp4 -f srt -i MrsBrownsBoys.srt -c:s mov_text -metadata:s:s:0 language=eng -c:v copy -c:a copy new.mp4
Joined mp4 amd subtitle track.  Selected subtitles in vlc and they appeared OK.

CC: (none) => tarazed25

Comment 6 Len Lawrence 2017-09-14 17:55:39 CEST
mga6  x86_64

Updated from Tainted Updates Testing

- ffmpeg-3.3.4-1.mga6.tainted.x86_64
- lib64avcodec57-3.3.4-1.mga6.tainted.x86_64
- lib64avfilter6-3.3.4-1.mga6.tainted.x86_64
- lib64avformat57-3.3.4-1.mga6.tainted.x86_64
- lib64avresample3-3.3.4-1.mga6.tainted.x86_64
- lib64avutil55-3.3.4-1.mga6.tainted.x86_64
- lib64dca0-0.0.5-10.mga6.tainted.x86_64
- lib64faad2-2.7-10.mga6.tainted.x86_64
- lib64ffmpeg-devel-3.3.4-1.mga6.tainted.x86_64
- lib64ffmpeg-static-devel-3.3.4-1.mga6.tainted.x86_64
- lib64opencore-amr-devel-0.1.3-1.mga6.tainted.x86_64
- lib64postproc54-3.3.4-1.mga6.tainted.x86_64
- lib64swresample2-3.3.4-1.mga6.tainted.x86_64
- lib64swscaler4-3.3.4-1.mga6.tainted.x86_64
- lib64vo-amrwbenc-devel-0.1.3-2.mga6.tainted.x86_64
- lib64x264-devel-0.148-0.20170120.stable.5.mga6.tainted.x86_64
- lib64x265-devel-2.2-1.mga6.tainted.x86_64
- lib64xvidcore-devel-1.3.4-3.mga6.tainted.x86_64

mencoder and mplayer were also present but left them out.
Should they have been included?

Ran the same tests as in comment 5 after removing the test output files.
Sound and vision all good for the test output files using mplayer and vlc.  Subtitle track available for the new.mp4 video.
Len Lawrence 2017-09-14 17:55:56 CEST

Whiteboard: (none) => MGA6-64-OK

Comment 7 Len Lawrence 2017-09-15 23:43:57 CEST
mga6  i586 in VirtualBox

Installed ffmpeg and libraries from Core Updates Testing and ran most of the tests referred to in comment 5.  Everything OK except sound.  Never had much luck with sound in vboxes.  Pulseaudio running; pavucontrol showed that the sound stream was connected to vlc but there was no signal.

This update may require real hardware.
Comment 8 Len Lawrence 2017-09-16 00:23:47 CEST
mga6  i586 in vbox

Installed from Tainted Updates Testing.
Ran the same tests on the same files as in comment 7.  Everything worked fine except the audio signal.
Comment 9 Lewis Smith 2017-09-17 21:47:25 CEST
Advisory uploaded; I agree with Len:
> This update may require real hardware. [for the remaining 32-bit test]

Keywords: (none) => advisory
CC: (none) => lewyssmith

Comment 10 William Kenney 2017-09-18 00:25:52 CEST
In VirtualBox, M6, MATE, 32-bit

Package(s) under test:
ffmpeg libavcodec57 libpostproc54 libavformat57
libavutil55 libswscaler4 libavfilter6

default install of ffmpeg libavcodec57 libpostproc54 libavformat57
libavutil55 libswscaler4 libavfilter6

[root@localhost wilcal]# urpmi ffmpeg
Package ffmpeg-3.3.3-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavcodec57
Package libavcodec57-3.3.3-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libpostproc54
Package libpostproc54-3.3.3-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavformat57
Package libavformat57-3.3.3-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavutil55
Package libavutil55-3.3.3-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libswscaler4
Package libswscaler4-3.3.3-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavfilter6
Package libavfilter6-3.3.3-1.mga6.tainted.i586 is already installed

ffmpeg -i canon_org.mov     -ar 22050  -s 240x140  canon.mp4
ffmpeg -i ob_org.flv        -ar 22050  -s 240x140  ob.wmv
ffmpeg -i sony_org.mp4      -ar 48000  -vb 303000  -r 30  -s 640x480  -aspect 4:3 -vcodec mpeg4  sony_resize.mp4
ffmpeg -i waiting_for_santa_org.wmv   -ar 48000  waiting_for_santa.mp4
ffmpeg -i star_wars_org.wav star_wars.mp3
ffmpeg -i james_bond_theme_org.mp3 james_bond_theme.webm
ffmpeg -i james_bond_theme.webm james_bond_theme.flac
ffmpeg -i waiting_for_santa_org.wmv  waiting_for_santa.mp3
All processes proceeded correctly. Created files play with VLC

install ffmpeg libavcodec57 libpostproc54 libavformat57
libavutil55 libswscaler4 libavfilter6 from updates_testing

[root@localhost wilcal]# urpmi ffmpeg
Package ffmpeg-3.3.4-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavcodec57
Package libavcodec57-3.3.4-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libpostproc54
Package libpostproc54-3.3.4-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavformat57
Package libavformat57-3.3.4-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavutil55
Package libavutil55-3.3.4-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libswscaler4
Package libswscaler4-3.3.4-1.mga6.tainted.i586 is already installed
[root@localhost wilcal]# urpmi libavfilter6
Package libavfilter6-3.3.4-1.mga6.tainted.i586 is already installed

ffmpeg -i canon_org.mov     -ar 22050  -s 240x140  canon.mp4
ffmpeg -i ob_org.flv        -ar 22050  -s 240x140  ob.wmv
ffmpeg -i sony_org.mp4      -ar 48000  -vb 303000  -r 30  -s 640x480  -aspect 4:3 -vcodec mpeg4  sony_resize.mp4
ffmpeg -i waiting_for_santa_org.wmv   -ar 48000  waiting_for_santa.mp4
ffmpeg -i star_wars_org.wav star_wars.mp3
ffmpeg -i james_bond_theme_org.mp3 james_bond_theme.webm
ffmpeg -i james_bond_theme.webm james_bond_theme.flac
ffmpeg -i waiting_for_santa_org.wmv  waiting_for_santa.mp3
All processes proceeded correctly.

CC: (none) => wilcal.int

William Kenney 2017-09-18 00:26:10 CEST

Whiteboard: MGA6-64-OK => MGA6-32-OK MGA6-64-OK

Comment 11 William Kenney 2017-09-18 00:27:24 CEST
This update works fine.
Testing complete for MGA6, 32-bit & 64-bit
Validating the update.
Could someone from the sysadmin team push to updates.
Thanks

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 12 Dave Hodgins 2017-09-18 00:40:46 CEST
Bug report update conflict with wilcal. :-) Adding my comment too ...

Videos play fine here, including sound. Mageia 5 x86_64 host. Both Mageia 6
x86_64 virtualbox guest, and i586 guest.

Don't remember if my vb guest settings are defaults or not. All of my vb guests
audio settings are PulseAudio Host Driver, ICH AC97 Audio Controller.

CC: (none) => davidwhodgins

Comment 13 Mageia Robot 2017-09-21 15:44:24 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2017-0349.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.