[FFmpeg-cvslog] [ffmpeg-web] branch master updated. 69585f5 web/security: update 3.2.9 / 3.2.10 CVEs

ffmpeg-git at ffmpeg.org ffmpeg-git at ffmpeg.org
Sat Jan 13 16:55:44 EET 2018


The branch, master has been updated
       via  69585f5407f8c00adcddb1947951253d1f7d55f3 (commit)
       via  7708f9089b6599d1ad685d9889a882863ee74ab2 (commit)
      from  3d11b841a7def16586734057496f188783aab517 (commit)


- Log -----------------------------------------------------------------
commit 69585f5407f8c00adcddb1947951253d1f7d55f3
Author:     Michael Niedermayer <michael at niedermayer.cc>
AuthorDate: Sat Jan 13 15:54:38 2018 +0100
Commit:     Michael Niedermayer <michael at niedermayer.cc>
CommitDate: Sat Jan 13 15:54:38 2018 +0100

    web/security: update 3.2.9 / 3.2.10 CVEs

diff --git a/src/security b/src/security
index ddb5e99..8f66616 100644
--- a/src/security
+++ b/src/security
@@ -109,12 +109,22 @@ CVE-2017-7866, e371f031b942d73e02c090170975561fabd5c264
 
 <h2>FFmpeg 3.2</h2>
 
+<h3>3.2.10</h3>
+<p>
+Fixes following vulnerabilities:
+</p>
+<pre>
+CVE-2017-16840, 519a54cc195b92fe6ba71fd156e31e944d862d7e / 3228ac730c11eca49d5680d5550128e397061c85
+CVE-2017-17081, b51f515c5c837351f2104b43c0e2a0562a759086 / 58cf31cee7a456057f337b3102a03206d833d5e8
+</pre>
+
 <h3>3.2.9</h3>
 <p>
 Fixes following vulnerabilities:
 </p>
 <pre>
 CVE-2017-15186, 0eb0b21c7f4f2b6a3a74d2d252f95b81a4d472c3 / df62b70de8aaa285168e72fe8f6e740843ca91fa
+CVE-2017-17081, b2c9771dd435fbce4f0a422bbdc16ecf7b243395 / 127a362630e11fe724e2e63fc871791fdcbcfa64
 </pre>
 
 <h3>3.2.8</h3>

commit 7708f9089b6599d1ad685d9889a882863ee74ab2
Author:     Michael Niedermayer <michael at niedermayer.cc>
AuthorDate: Sat Jan 13 15:51:29 2018 +0100
Commit:     Michael Niedermayer <michael at niedermayer.cc>
CommitDate: Sat Jan 13 15:51:29 2018 +0100

    web/download: add 3.2.10

diff --git a/src/download b/src/download
index 2add1cb..91e0623 100644
--- a/src/download
+++ b/src/download
@@ -348,10 +348,10 @@ libpostproc    54.  5.100</pre>
     </div> <!-- col -->
   </div> <!-- row -->
 
-  <h3 id="release_3.2">FFmpeg 3.2.9 "Hypatia"</h3>
+  <h3 id="release_3.2">FFmpeg 3.2.10 "Hypatia"</h3>
 
   <p>
-    3.2.9 was released on 2017-10-26. It is the latest stable FFmpeg release
+    3.2.10 was released on 2018-01-13. It is the latest stable FFmpeg release
     from the 3.2 release branch, which was cut from master on 2016-10-26.
   </p>
   <p>It includes the following library versions:
@@ -369,19 +369,19 @@ libpostproc    54.  1.100</pre>
 
   <div class="row">
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.2.9.tar.xz">Download xz tarball</a>
-      <small><a href="releases/ffmpeg-3.2.9.tar.xz.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.2.10.tar.xz">Download xz tarball</a>
+      <small><a href="releases/ffmpeg-3.2.10.tar.xz.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.2.9.tar.bz2">Download bzip2 tarball</a>
-      <small><a href="releases/ffmpeg-3.2.9.tar.bz2.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.2.10.tar.bz2">Download bzip2 tarball</a>
+      <small><a href="releases/ffmpeg-3.2.10.tar.bz2.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.2.9.tar.gz">Download gzip tarball</a>
-      <small><a href="releases/ffmpeg-3.2.9.tar.gz.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.2.10.tar.gz">Download gzip tarball</a>
+      <small><a href="releases/ffmpeg-3.2.10.tar.gz.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3 text-right">
-      <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.2.9">Changelog</a></small>
+      <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.2.10">Changelog</a></small>
       <a class="btn btn-success" href="https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/refs/heads/release/3.2:/RELEASE_NOTES">Release Notes</a>
     </div> <!-- col -->
   </div> <!-- row -->

-----------------------------------------------------------------------

Summary of changes:
 src/download | 18 +++++++++---------
 src/security | 10 ++++++++++
 2 files changed, 19 insertions(+), 9 deletions(-)


hooks/post-receive
-- 



More information about the ffmpeg-cvslog mailing list