[FFmpeg-cvslog] [ffmpeg-web] branch master updated. da832f0 web: Add 3.4.8

[ffmpeg-git at ffmpeg.org]

The branch, master has been updated
       via  da832f00be247d58b504a41a4dffb3589fd3ad7d (commit)
       via  0490b98355f5c975c61236f7132664adbe4510fa (commit)
      from  71f9d0b5c935b4de031a4644a27b238036a7c0a1 (commit)


- Log -----------------------------------------------------------------
commit da832f00be247d58b504a41a4dffb3589fd3ad7d
Author:     Michael Niedermayer <michael at niedermayer.cc>
AuthorDate: Sat Jul 4 01:05:21 2020 +0200
Commit:     Michael Niedermayer <michael at niedermayer.cc>
CommitDate: Sat Jul 4 01:05:21 2020 +0200

    web: Add 3.4.8
    
    Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

diff --git a/src/download b/src/download
index 709b800..1ba9cdb 100644
--- a/src/download
+++ b/src/download
@@ -412,10 +412,10 @@ libpostproc    55.  1.100</pre>
     </div> <!-- col -->
   </div> <!-- row -->
 
-  <h3 id="release_3.4">FFmpeg 3.4.7 "Cantor"</h3>
+  <h3 id="release_3.4">FFmpeg 3.4.8 "Cantor"</h3>
 
   <p>
-    3.4.7 was released on 2019-12-02. It is the latest stable FFmpeg release
+    3.4.8 was released on 2020-07-04. It is the latest stable FFmpeg release
     from the 3.4 release branch, which was cut from master on 2017-10-11.
   </p>
   <p>It includes the following library versions:
@@ -433,19 +433,19 @@ libpostproc    54.  7.100</pre>
 
   <div class="row">
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.4.7.tar.xz">Download xz tarball</a>
-      <small><a href="releases/ffmpeg-3.4.7.tar.xz.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.4.8.tar.xz">Download xz tarball</a>
+      <small><a href="releases/ffmpeg-3.4.8.tar.xz.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.4.7.tar.bz2">Download bzip2 tarball</a>
-      <small><a href="releases/ffmpeg-3.4.7.tar.bz2.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.4.8.tar.bz2">Download bzip2 tarball</a>
+      <small><a href="releases/ffmpeg-3.4.8.tar.bz2.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.4.7.tar.gz">Download gzip tarball</a>
-      <small><a href="releases/ffmpeg-3.4.7.tar.gz.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.4.8.tar.gz">Download gzip tarball</a>
+      <small><a href="releases/ffmpeg-3.4.8.tar.gz.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3 text-right">
-      <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.4.7">Changelog</a></small>
+      <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.4.8">Changelog</a></small>
       <a class="btn btn-success" href="https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/refs/heads/release/3.4:/RELEASE_NOTES">Release Notes</a>
     </div> <!-- col -->
   </div> <!-- row -->
diff --git a/src/security b/src/security
index cc5899e..ff82388 100644
--- a/src/security
+++ b/src/security
@@ -207,6 +207,15 @@ CVE-2018-10001, 47b7c68ae54560e2308bdb6be4fb076c73b93081
 
 <h2>FFmpeg 3.4</h2>
 
+<h3>3.4.8</h3>
+<p>
+Fixes following vulnerabilities:
+</p>
+<pre>
+CVE-2020-13904, 21ce988f98f2399b8919a8a425d467da682a29a7 / b5e39880fb7269b1b3577cee288e06aa3dc1dfa2
+CVE-2020-13904, bd09c9d46c70ef94d34c91f502326853d3f741ab / 9dfb19baeb86a8bb02c53a441682c6e9a6e104cc
+</pre>
+
 <h3>3.4.7</h3>
 <p>
 Fixes following vulnerabilities:

commit 0490b98355f5c975c61236f7132664adbe4510fa
Author:     Michael Niedermayer <michael at niedermayer.cc>
AuthorDate: Sat Jul 4 01:03:55 2020 +0200
Commit:     Michael Niedermayer <michael at niedermayer.cc>
CommitDate: Sat Jul 4 01:03:55 2020 +0200

    web/security: add CVE-2019-13390 to 3.4.7

diff --git a/src/security b/src/security
index 8522e16..cc5899e 100644
--- a/src/security
+++ b/src/security
@@ -213,6 +213,7 @@ Fixes following vulnerabilities:
 </p>
 <pre>
 CVE-2019-12730, 59ac4182583e4791a7f98b79099916fd96beedfd / ed188f6dcdf0935c939ed813cf8745d50742014b
+CVE-2019-13390, cfa7c079f72b65bfe038af84d95d384a609d4f0a / aef24efb0c1e65097ab77a4bf9264189bdf3ace3
 CVE-2019-17542, 4aaf644892843e3c68f4761725ab9435745f015c / 02f909dc24b1f05cfbba75077c7707b905e63cd2
 CVE-2019-17539, c3b7afa4e917d748f0c3f8237b04ebdd99bdcacb / 8df6884832ec413cf032dfaa45c23b1c7876670c
 </pre>

-----------------------------------------------------------------------

Summary of changes:
 src/download | 18 +++++++++---------
 src/security | 10 ++++++++++
 2 files changed, 19 insertions(+), 9 deletions(-)


hooks/post-receive
--