FFmpeg 3.3.6 has been released on December 31: https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.3.6 According to FFmpeg's security page, it fixes two security issues: http://ffmpeg.org/security.html Debian has issued an advisory for one of these issues on January 27: https://www.debian.org/security/2018/dsa-4099
Update submitted for Mageia 6. Will submit to tainted later because the build system is *still* broken (this is getting tiring).
CC: (none) => pterjan, sysadmin-bugs
Note that there are core and tainted builds for this package. Testing procedure: https://bugs.mageia.org/show_bug.cgi?id=8065#c6 https://bugs.mageia.org/show_bug.cgi?id=14042#c6 Advisory: ======================== Updated ffmpeg packages fix security vulnerabilities: This update provides ffmpeg version 3.3.6, which fixes several security vulnerabilities and other bugs which were corrected upstream. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16840 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17081 https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.3.6 http://ffmpeg.org/download.html http://ffmpeg.org/security.html ======================== Updated packages in {core,tainted}/updates_testing: ======================== ffmpeg-3.3.6-1.mga6 libavcodec57-3.3.6-1.mga6 libpostproc54-3.3.6-1.mga6 libavformat57-3.3.6-1.mga6 libavutil55-3.3.6-1.mga6 libavresample3-3.3.6-1.mga6 libswscaler4-3.3.6-1.mga6 libavfilter6-3.3.6-1.mga6 libswresample2-3.3.6-1.mga6 libffmpeg-devel-3.3.6-1.mga6 libffmpeg-static-devel-3.3.6-1.mga6 from ffmpeg-3.3.6-1.mga6.src.rpm
Assignee: bugsquad => qa-bugs
Testing this on Mageia 6.
CC: (none) => tarazed25
Mageia 6 :: x86_64 Downloaded some of the samples from http://www.divx.com/en/devices/profiles/video and ran some conversions with the updated core version. $ ffmpeg -i WiegelesHeliSki_DivXPlus_19Mbps.mkv output_ski.avi output_ski.avi played OK in vlc with sound. Video quality a little degraded. $ ffmpeg -i Fashion_DivX720p_ASP.divx output.avi $ vlc output.avi The converted file looked OK. $ ffmpeg -i WaterlooRoad.mkv -an -scodec copy output.wmv The output file played OK but without a sound stream. A subtitle track can be combined with a video. vlc will use the separate subtitle file if it exists but it is more convenient to combine the two streams. $ ffmpeg -n -i comedy.mp4 -f srt -i comedy.srt -c:s mov_text -metadata:s:s:0 language=eng -c:v copy -c:a copy newfile.mp4 The subtitle track could be selected in vlc while newfile.mp4 was playing. This all looks fine for the core updates.
Continuing from comment 4... Installed the tainted versions of the ffmpeg packages. $ ll *.{mp4,srt} -rw-r--r-- 1 lcl lcl 320208609 Jan 29 19:40 comedy.mp4 -rw-r--r-- 1 lcl lcl 33740 Jan 29 19:43 comedy.srt -rw-r--r-- 1 lcl lcl 1058676478 Jan 29 20:08 egypt.mp4 -rw-r--r-- 1 lcl lcl 70368 Jan 29 20:08 egypt.srt -rw-r--r-- 1 lcl lcl 1068500052 Jan 29 20:07 IceHotel.mp4 -rw-r--r-- 1 lcl lcl 136010 Jan 29 20:07 IceHotel.srt -rw-r--r-- 1 lcl lcl 320238933 Jan 29 19:50 newfile.mp4 $ ffmpeg -i IceHotel.mp4 hotel.avi The 1 GB conversion was effected in about four minutes. $ ll hotel.avi -rw-r--r-- 1 lcl lcl 392142596 Jan 29 20:19 hotel.avi Played by vlc the sound came through OK as an mp3 stream according to the codec information. $ ffmpeg -i comedy.mp4 -an -scodec copy comedy.wmv $ vlc comedy.wmv Played OK. Used this command to merge the subtitle track with the video file. $ ffmpeg -n -i comedy.mp4 -f srt -i comedy.srt -c:s mov_text -metadata:s:s:0 language=eng -c:v copy -c:a copy sameagain.mp4 With vlc, subtitles could be switched on and off. Both versions look good for 64 bits.
Whiteboard: (none) => MGA6-64-OK
Tested in i686 hardware : Pentium M 740. Installed tainted version, tried to use a conversion of video, all ok.
CC: (none) => lists.jjorgeWhiteboard: MGA6-64-OK => MGA6-64-OK MGA6-32-OK
Keywords: (none) => validated_update
CC: (none) => davidwhodginsKeywords: (none) => advisory
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2018-0116.html
Resolution: (none) => FIXEDStatus: NEW => RESOLVED