From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id INmqBl860mbFfwEA62LTzQ:P1 (envelope-from ) for ; Fri, 30 Aug 2024 21:32:15 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id INmqBl860mbFfwEA62LTzQ (envelope-from ) for ; Fri, 30 Aug 2024 23:32:15 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=B4TTOO+P; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=f62ABd3Y; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1725053534; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=fXOAsJUCuMCOsOP3rLRcEB/wQS2ElapL4FcC/3y0pWQ=; b=GRK7k+GCyaGiSMymhAimVYHsd6uEO757obqlDEaK9cGNYpqwEERShqtWOyYCdXpSAji6SF nXz14xB3q5LTfj91wU3qMpKRL+33dquJLNq+NyBpRLA10Z/oKc/AHjV0iRnfTHBtQJlBJi Y0SHvVlYfmLfjD0+CQlx3LxmR2rkJQ9WTFf7/xHPao+cqh1sYsJ3GTbwo77fNOuGBZkGHH g6K6q8iZGI3GR7jIUhOa9KPSm8FTfzkQqvj8vVDB9ABiK6nQcJnB3YE8ULTJOE1jM2swg8 4Zvn/1u9+C7s8ab5RB6uJtDXOA13tA561TCD/kN5OVuy++48aOKeKlPkz/AvbA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1725053534; a=rsa-sha256; cv=none; b=YXFxrRDZlMILfrtqSHsOpiSvS3uhvDNLz7FBr0jOaTqfxTxeoEKgMmX7oHqgyOnPcCoT51 72B1Tifsbeozggw3z9RefRP5126yLlwKP/B+X8Agy96Y2559PUDvMH7HD1UEt84kDoqGoc ytdpWE83moF7atORdFf7td0BS+pm3maG8QEl1VZXgBMW19uyxhfFbC6r+CfkTbBdFNLGll bv1tuCzyIh4CcjRuo51NA5cTR50jh2954a1BJ6xX4R8GIVfBiedm/X4XJ3EcoAhP7Fo/E0 DiHiyKRYTcOo0rtN3zjU3xzwzVX1bd/HAPcvkZQA23xPqSfBiRC3kFviF4yyeA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=B4TTOO+P; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=f62ABd3Y; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id C7F5215207 for ; Fri, 30 Aug 2024 23:32:14 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sk9Dy-0007LL-Pt; Fri, 30 Aug 2024 17:32:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sk9Dx-0007Kt-G0 for guix-patches@gnu.org; Fri, 30 Aug 2024 17:32:05 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sk9Dx-0003KI-5I for guix-patches@gnu.org; Fri, 30 Aug 2024 17:32:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:References:In-Reply-To:From:To:Subject; bh=fXOAsJUCuMCOsOP3rLRcEB/wQS2ElapL4FcC/3y0pWQ=; b=B4TTOO+P+k8q2TDrRmg2anYb8JTTH9Pyi0ytj7pDVcxTCoyw6hD7RK6KVTasMod/W08TIt2hCf3iztW3KmS92EnwE/4lV/cf8e7heQV+UNzx/ll6KSeq4eBgPFaVV62z8pA53seOqoXd+M9yPeRnjWmROZanap9UCn5KOOf0WP4heTwXJs2KrraBedazCAb+V1Dh5AcVkoqhGzbh+yxiPN6IvoRGCkEDED4uA4Ik6UUc7MK44XcrlXG3GXdDk84a1VokDp6CPXK7Coo/kpbXgZ5UrcwXZ2bhpB2UNX5pWsVAq+GvgJkY3xeWfeyAGrJ3sEcrD83m7Me7SR4CoIBZcw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1sk9Es-0004bN-91 for guix-patches@gnu.org; Fri, 30 Aug 2024 17:33:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#72799] [PATCH 0/3] ffmpeg updates [fixes CVE-2024-7055, CVE-2024-7272] Resent-From: Rodion Goritskov Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 30 Aug 2024 21:33:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 72799 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: security patch To: 72799@debbugs.gnu.org Received: via spool by 72799-submit@debbugs.gnu.org id=B72799.172505353517626 (code B ref 72799); Fri, 30 Aug 2024 21:33:02 +0000 Received: (at 72799) by debbugs.gnu.org; 30 Aug 2024 21:32:15 +0000 Received: from localhost ([127.0.0.1]:53530 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sk9E6-0004aE-OD for submit@debbugs.gnu.org; Fri, 30 Aug 2024 17:32:14 -0400 Received: from mail-lj1-f174.google.com ([209.85.208.174]:53305) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sk9E5-0004Zz-6i for 72799@debbugs.gnu.org; Fri, 30 Aug 2024 17:32:13 -0400 Received: by mail-lj1-f174.google.com with SMTP id 38308e7fff4ca-2f029e9c9cfso27147121fa.2 for <72799@debbugs.gnu.org>; Fri, 30 Aug 2024 14:31:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1725053409; x=1725658209; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:to:from:from:to:cc:subject:date:message-id:reply-to; bh=fXOAsJUCuMCOsOP3rLRcEB/wQS2ElapL4FcC/3y0pWQ=; b=f62ABd3Y3zq/9iR/4IfbmqbtsDwBb2PtdXwEnMZE2ckZqAwQh1zhU5pUIIGCz7CXfv CWZUB6D2kHqdNP5QqiqMNdThV9EJwfU1pW9p6ss6Yt8hXU4vyfw3AvCsdB2OStUuHivp ZqafRu0PY9sjfTz30zB7qjqG0yajsF+pc7sye2JB11G05VGeiNL7yCrPbUJgHC5p/Zfm R1k96j4wOJpBSTz9wzpFV9hc9eXxEa1fc45xLNxsjOXVWXPImC3fPvUGblwFUa9CtP2I 4HGzBSQFpnGid0eSkETMXrGM9sbOnReoQ9uA3Ax+crm1Md2Q59CRbV7dh8VokZ7YGZZo NK9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1725053409; x=1725658209; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=fXOAsJUCuMCOsOP3rLRcEB/wQS2ElapL4FcC/3y0pWQ=; b=rQpAhEGW1njDn22XeBMONA+X8sxt6wHWGDXRd8zgvz4ijWQe0xOg6/4wrFTXaHgYZ4 VLx44JBe1Zp1T47D5HekrW4dYkE+Ikrem026Q7QkxjP6J8i66XagVxkIK4H5eWwQEsBK aiY2DFkSLgLQ4PPOIWFxd/4yl+cKKuhqdASkYQsE7zRVYmHosfMv1fKVxSGuHDcn/0ze SoAP3IXcCYfTf0/v8o7ffP0aPVlvzKuTg4YpJJSrC1X+RKS0Ndn7TDam9iwlgokovf3n K5hmgoDfalhurkF83vTf22pa2MyWSnrPfHb5Or6y4BjOHKCYrxmgiiVBuzR5IN0VThkr J3KQ== X-Gm-Message-State: AOJu0YyVMaswrd0E0wDGZQrmatt1WA7kbD9iDzc8m4qRpFMi5BJhOvlb sRBUwE6GCu/QZO3prUft3H3Qf+f20XThqDM7Zb3J4H9CJZrE1R/wRFSeC2tVpqs= X-Google-Smtp-Source: AGHT+IHTqWJMnUfMPoSvJVtN4XqL+4AvGIRiViJVixe4auOSS+ihzOHNHqdcoKnCDydnMmd/yVOPPg== X-Received: by 2002:a2e:b8d6:0:b0:2f1:750d:53a7 with SMTP id 38308e7fff4ca-2f6105c4993mr70667541fa.8.1725053408470; Fri, 30 Aug 2024 14:30:08 -0700 (PDT) Received: from bumblebee-mighty ([92.51.75.166]) by smtp.gmail.com with ESMTPSA id 38308e7fff4ca-2f614f007aasm8413871fa.38.2024.08.30.14.30.07 for <72799@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 30 Aug 2024 14:30:08 -0700 (PDT) From: Rodion Goritskov In-Reply-To: (ashish is's message of "Sun, 25 Aug 2024 00:34:50 +0000") References: Date: Sat, 31 Aug 2024 01:30:05 +0400 Message-ID: <87r0a5aeci.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: C7F5215207 X-Migadu-Scanner: mx12.migadu.com X-Migadu-Spam-Score: -8.92 X-Spam-Score: -8.92 X-TUID: fzBm/fqp2gO9 Hi! Patches apply and build fine. However, it looks like ffmpeg-4 and ffmpeg-6 triggers lots (~1000 for ffmpeg-4 and ~700 for ffmpeg-6) package rebuilds. ffmpeg-5 is fine, only 12 packages to be rebuild. Maybe ffmpeg-4 and ffmpeg-6 should be grafted (these CVEs looks scary) and patches for them send in the separate branch? Need some experienced maintainers to understand how it should be resolved.