[FFmpeg-cvslog] [ffmpeg-web] branch master updated. 1aa53f8 web: Add FFmpeg 3.2.8

ffmpeg-git at ffmpeg.org ffmpeg-git at ffmpeg.org
Sun Sep 17 16:56:52 EEST 2017


The branch, master has been updated
       via  1aa53f89859ffc61418734fdfac78a941c7863c6 (commit)
       via  f075439c16775b2bfa3f85dd217fbf62164369d2 (commit)
      from  df5f4d0b7e4cd2166b6cd73c801e321272b689cd (commit)


- Log -----------------------------------------------------------------
commit 1aa53f89859ffc61418734fdfac78a941c7863c6
Author:     Michael Niedermayer <michael at niedermayer.cc>
AuthorDate: Sun Sep 17 15:56:05 2017 +0200
Commit:     Michael Niedermayer <michael at niedermayer.cc>
CommitDate: Sun Sep 17 15:56:05 2017 +0200

    web: Add FFmpeg 3.2.8

diff --git a/src/download b/src/download
index d9bdff0..101032d 100644
--- a/src/download
+++ b/src/download
@@ -307,10 +307,10 @@ libpostproc    54.  5.100</pre>
     </div> <!-- col -->
   </div> <!-- row -->
 
-  <h3 id="release_3.2">FFmpeg 3.2.7 "Hypatia"</h3>
+  <h3 id="release_3.2">FFmpeg 3.2.8 "Hypatia"</h3>
 
   <p>
-    3.2.7 was released on 2017-07-30. It is the latest stable FFmpeg release
+    3.2.8 was released on 2017-09-17. It is the latest stable FFmpeg release
     from the 3.2 release branch, which was cut from master on 2016-10-26.
   </p>
   <p>It includes the following library versions:
@@ -328,19 +328,19 @@ libpostproc    54.  1.100</pre>
 
   <div class="row">
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.2.7.tar.xz">Download xz tarball</a>
-      <small><a href="releases/ffmpeg-3.2.7.tar.xz.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.2.8.tar.xz">Download xz tarball</a>
+      <small><a href="releases/ffmpeg-3.2.8.tar.xz.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.2.7.tar.bz2">Download bzip2 tarball</a>
-      <small><a href="releases/ffmpeg-3.2.7.tar.bz2.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.2.8.tar.bz2">Download bzip2 tarball</a>
+      <small><a href="releases/ffmpeg-3.2.8.tar.bz2.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3">
-      <a class="btn btn-success" href="releases/ffmpeg-3.2.7.tar.gz">Download gzip tarball</a>
-      <small><a href="releases/ffmpeg-3.2.7.tar.gz.asc">PGP signature</a></small>
+      <a class="btn btn-success" href="releases/ffmpeg-3.2.8.tar.gz">Download gzip tarball</a>
+      <small><a href="releases/ffmpeg-3.2.8.tar.gz.asc">PGP signature</a></small>
     </div> <!-- col -->
     <div class="col-md-3 text-right">
-      <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.2.7">Changelog</a></small>
+      <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n3.2.8">Changelog</a></small>
       <a class="btn btn-success" href="https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/refs/heads/release/3.2:/RELEASE_NOTES">Release Notes</a>
     </div> <!-- col -->
   </div> <!-- row -->
diff --git a/src/security b/src/security
index 3fe207a..9c6ca5a 100644
--- a/src/security
+++ b/src/security
@@ -62,6 +62,25 @@ CVE-2017-9996, a483e46b794539d21b1ec0f3e521f681a54a86d2 / 1e42736b95065c69a7481d
 
 <h2>FFmpeg 3.2</h2>
 
+<h3>3.2.8</h3>
+<p>
+Fixes following vulnerabilities:
+</p>
+<pre>
+CVE-2017-14054, 2bbef8ee271240ce4509b23fd33e35076715a39f / 124eb202e70678539544f6268efc98131f19fa49
+CVE-2017-14055, d4fc6b211f19365fbae4b4388ec396b293fda249 / 4f05e2e2dc1a89f38cd9f0960a6561083d714f1e
+CVE-2017-14056, 5bc9f70441d7e7067cba9188898c9252c72bab35 / 96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de
+CVE-2017-14057, f94517934bf0ff2510f472fa2bc4cd362951109c / 7f9ec5593e04827249e7aeb466da06a98a0d7329
+CVE-2017-14058, 2920c7cec0b1958b59e5e7990078bea4428f6912 / 7ec414892ddcad88313848494b6fc5f437c9ca4a
+CVE-2017-14059, 98e177c7288574b336d80618f4ec5d1f94243070 / 7e80b63ecd259d69d383623e75b318bf2bd491f6
+CVE-2017-14169, 816f7337bf3ed3e08afdc28278668d8eb81910cb / 9d00fb9d70ee8c0cc7002b89318c5be00f1bbdad
+CVE-2017-14170, 9cbac3602610afa0867b03bc1475c5c13441d096 / 900f39692ca0337a98a7cf047e4e2611071810c2
+CVE-2017-14171, a051de092e9c709b69d24d94b66a382909be67d5 / c24bcb553650b91e9eff15ef6e54ca73de2453b7
+CVE-2017-14222, c9527df274ada02a19c2f973b29d1d5b7069d4bf / 9cb4eb772839c5e1de2855d126bf74ff16d13382
+CVE-2017-14223, 4e4177dde23be77a97887f409f237e17ef53f329 / afc9c683ed9db01edb357bc8c19edad4282b3a97
+CVE-2017-14225, 726133b6d2cd8f5f43b5af536024d8e02791d8cf / 837cb4325b712ff1aab531bf41668933f61d75d2
+</pre>
+
 <h3>3.2.7</h3>
 <p>
 Fixes following vulnerabilities:

commit f075439c16775b2bfa3f85dd217fbf62164369d2
Author:     Michael Niedermayer <michael at niedermayer.cc>
AuthorDate: Sun Sep 17 12:33:13 2017 +0200
Commit:     Michael Niedermayer <michael at niedermayer.cc>
CommitDate: Sun Sep 17 12:33:13 2017 +0200

    web/security: use same length git hash for CVE-2017-14171

diff --git a/src/security b/src/security
index 57db9e5..3fe207a 100644
--- a/src/security
+++ b/src/security
@@ -20,7 +20,7 @@ CVE-2017-14056, 8cb0f2c4e55d1d8ba9dbc80dd19ad139d0200c2d / 96f24d1bee7fe7bac08e2
 CVE-2017-14222, d9cf9f5af82228b588828ae2692acccec588fdac / 9cb4eb772839c5e1de2855d126bf74ff16d13382
 CVE-2017-14169, 9d3a7c82a669a1a1c8e3904c65ded19e80d16edc / 9d00fb9d70ee8c0cc7002b89318c5be00f1bbdad
 CVE-2017-14223, b61e5a878c845b8bee1267fdb75c293feb00ae0d / afc9c683ed9db01edb357bc8c19edad4282b3a97
-CVE-2017-14171, e6a8d110d7e8e938913a0a85ca933b415f8ed24d / c24bcb553650b91e9eff15ef6e54ca73de2453b
+CVE-2017-14171, e6a8d110d7e8e938913a0a85ca933b415f8ed24d / c24bcb553650b91e9eff15ef6e54ca73de2453b7
 </pre>
 
 <h3>3.3.3</h3>

-----------------------------------------------------------------------

Summary of changes:
 src/download | 18 +++++++++---------
 src/security | 21 ++++++++++++++++++++-
 2 files changed, 29 insertions(+), 10 deletions(-)


hooks/post-receive
-- 



More information about the ffmpeg-cvslog mailing list