libavfilter6-3.4.2-150200.11.60.1 < > , bd gURp9|\4?µngvR>Gz|e SάCw'?7*͍*2F=3u)0c1Ԍz3dZFɪ4T w@DE͵-[ȸ;9В`9r0j/꘏`v7+E/9dH@WD0 ՝bLi/ 飼n
AvKD F
#<] j)J?h&LUSj
yE+[;tM > @ ? ϰ d $ M = S d x ~
< D ( L ( X ( ( $ 8 , y 9
y : y > " @ 1 F @ G X H ` I h X l Y | \ ̨ ] ̰ ^ b c ͏ d e f l u 0 v 8 w x y z P ` d j Ϭ C libavfilter6 3.4.2 150200.11.60.1 FFmpeg audio and video filtering library The libavfilter library provides a generic audio/video filtering
framework containing several filters, sources and sinks. gURh01-armsrv2 "@SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later AND GPL-2.0-or-later https://www.suse.com/ System/Libraries https://ffmpeg.org/ linux aarch64 "@ gUIgUJ 2c929235dcec07c757297acf978123943714da19836403d6b82e1620f6620c19 libavfilter.so.6.107.100 root root root root ffmpeg-3.4.2-150200.11.60.1.src.rpm libavfilter.so.6()(64bit) libavfilter.so.6(LIBAVFILTER_6)(64bit) libavfilter6 libavfilter6(aarch-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libass.so.9()(64bit) libavcodec.so.57()(64bit) libavcodec.so.57(LIBAVCODEC_57)(64bit) libavcodec57 libavformat.so.57()(64bit) libavformat.so.57(LIBAVFORMAT_57)(64bit) libavformat57 libavresample.so.3()(64bit) libavresample.so.3(LIBAVRESAMPLE_3)(64bit) libavresample3 libavutil.so.55()(64bit) libavutil.so.55(LIBAVUTIL_55)(64bit) libavutil55 libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.17)(64bit) libfreetype.so.6()(64bit) libm.so.6()(64bit) libm.so.6(GLIBC_2.17)(64bit) libpostproc.so.54()(64bit) libpostproc.so.54(LIBPOSTPROC_54)(64bit) libpostproc54 libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libswresample.so.2()(64bit) libswresample.so.2(LIBSWRESAMPLE_2)(64bit) libswresample2 libswscale.so.4()(64bit) libswscale.so.4(LIBSWSCALE_4)(64bit) libswscale4 libva.so.2()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.4.2-150200.11.60.1 3.4.2-150200.11.60.1 3.4.2-150200.11.60.1 3.4.2-150200.11.60.1 3.4.2-150200.11.60.1 3.4.2-150200.11.60.1 3.4.2-150200.11.60.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 gggggggggff@fafaffWf,f"\f@e @d/@dJccʂ@c@cahaQ@a/k@a
@`@`@]@]#0@] @\F@[_[_[
@[
@[@[[[ @[QZ@ZI@Z
Z@ZZ.s@Z!D@Z YeY@Y@Y4Y@@YbY@Y}@Ym@YMY7Y.@Y.@Y @XXXh@X7@XXXXk@XY @XF@X9y@X=X=X TW@W#WWWE@Wv[@Wq@WM|W!@W WzW
@@W@VV@VVV@V@V$@Vy;@VwVuFVrVn@VhVetVZVG"@V4@U @UU@U@Ux&U`kUXUPU+U
@T9T}T+@qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com xiaoguang.wang@suse.com qzhao@suse.com qzhao@suse.com qzhao@suse.com meissner@suse.com songchuan.kang@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com alynx.zhou@suse.com qzhao@suse.com qzhao@suse.com qzheng@suse.com qzheng@suse.com qzheng@suse.com qzheng@suse.com qzheng@suse.com qzheng@suse.com qzheng@suse.com qzheng@suse.com kbabioch@suse.com qzheng@suse.com alarrosa@suse.com alarrosa@suse.com bjorn.lie@gmail.com nico.kruber@gmail.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jslaby@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de olaf@aepfle.de jengelh@inai.de jengelh@inai.de davejplater@gmail.com jengelh@inai.de davejplater@gmail.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de idonmez@suse.com dimstar@opensuse.org jengelh@inai.de olaf@aepfle.de jengelh@inai.de olaf@aepfle.de tchvatal@suse.com jengelh@inai.de aloisio@gmx.com jengelh@inai.de olaf@aepfle.de aloisio@gmx.com aloisio@gmx.com stefan.bruens@rwth-aachen.de aloisio@gmx.com aloisio@gmx.com jengelh@inai.de aloisio@gmx.com aloisio@gmx.com robert.munteanu@gmail.com aloisio@gmx.com jengelh@inai.de olaf@aepfle.de jengelh@inai.de jengelh@inai.de jengelh@inai.de olaf@aepfle.de idonmez@suse.com jengelh@inai.de aloisio@gmx.com idonmez@suse.com idonmez@suse.com olaf@aepfle.de jengelh@inai.de joerg.lorenzen@ki.tng.de olaf@aepfle.de olaf@aepfle.de olaf@aepfle.de idonmez@suse.com jengelh@inai.de idonmez@suse.com idonmez@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de develop7@develop7.info jengelh@inai.de robert.munteanu@gmail.com jengelh@inai.de dimstar@opensuse.org jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de - Add ffmpeg-CVE-2025-22921.patch:
Backporting 7f9c7f98 from upstream, clear array length when
freeing it.
(CVE-2025-22921, bsc#1237382) - Add ffmpeg-CVE-2025-0518.patch:
Backporting b5b6391d from upstream, fixes memory data leak when
use sscanf().
(CVE-2025-0518, bsc#1236007) - Add ffmpeg-CVE-2025-22919.patch:
Backporting 1446e37d from upstream, check for valid sample rate
As the sample rate <= 0 is invalid.
(CVE-2025-22919, bsc#1237371) - Add ffmpeg-CVE-2024-12361.patch:
Backport 4065ff69 from upstream, add check for av_packet_new_side_data()
to avoid null pointer dereference if allocation fails.
(CVE-2024-12361, bsc#1237358) - Add ffmpeg-CVE-2024-36613.patch:
Backport 50d8e4f2 from upstream, Adjust order of operations
around block align.
(CVE-2024-36613, bsc#1235092) - Add ffmpeg-CVE-2024-35365.patch:
Backport ced5c5fdb from upstream, Fix double-free on error.
(CVE-2024-35365, bsc#1235091) - Add ffmpeg-CVE-2024-35368.patch:
Backport 45133009 from upstream, After having created the
AVBuffer that is put into frame->buf[0], ownership of several
objects Fix double-free on the AVFrame is unreferenced.
(CVE-2024-35368, bsc#1234028) - Add ffmpeg-CVE-2023-51793.patch:
Backporting 0ecc1f0e from upstream, Fix odd height handling, Fix
out of array access.
(CVE-2023-51793, bsc#1223272). - Add ffmpeg-CVE-2023-51793-shim.patch:
Backport part of 1b20853f and f0dd5c00, avfilter/internal: Factor
out executing a filter's execute_func; avfilter/vf_weave: add slice
threading support; To prepare for CVE-2023-51793 fix.
(CVE-2023-51793, bsc#1223272). - Add ffmpeg-CVE-2023-51798.patch:
Backporting 68146f06 from upstream, Check pts before division.
(CVE-2023-51798 bsc#1223304) - Add ffmpeg-CVE-2021-38291.patch:
Backporting e01d306c from upstream, : don't return negative values
in av_get_audio_frame_duration().
(CVE-2021-38291, bsc#1189428) - Add ffmpeg-CVE-2020-22027.patch:
Backporting e787f8fd from upstream, check if width is 1.
(CVE-2020-22027, bsc#1186607) - Add ffmpeg-CVE-2020-22027-shim-273edb2f.patch:
Backporting 273edb2f from upstream, rewrite without using temp
memory to prepare dependence code for CVE-2020-22027.
(CVE-2020-22027, bsc#1186607) - Add ffmpeg-CVE-2024-32230.patch:
Backporting 96449cfe from upstream, Fix 1 line and one column images.
(CVE-2024-32230, bsc#1227296) - Add ffmpeg-CVE-2023-51794.patch: Fix heap buffer overflow at
libavfilter (CVE-2023-51794, bsc#1223437). - Add ffmpeg-CVE-2023-50010.patch:
Backporting e4d2666b from upstream, fixes the out of array access.
(CVE-2023-50010 bsc#1223256) - Add ffmpeg-CVE-2024-31578.patch:
Backporting ab0fdaed from upstream, Fix heap use after free when
vulkan_frames_init failed.
(CVE-2024-31578 bsc#1223070) - Add ffmpeg-CVE-2023-49502.patch
Backporting 737ede40 from upstream, Adjusts the logic to consider
the chroma planes and makes the change to all three bwdif
implementations.
(CVE-2023-49502 bsc#1223235) - ffmpeg-fix-new-binutils.patch: fix build with new binutils - Add ffmpeg-CVE-2021-28429.patch: Fix Integer overflow
vulnerability in av_timecode_make_string in libavutil/timecode.c
(bsc#1214246, CVE-2021-28429). - Add ffmpeg-CVE-2022-48434.patch: Backport from upstream to fix
use after free in libavcodec/pthread_frame.c (bsc#1209934). - Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix
null pointer dereference in decode_main_header() in
libavformat/nutdec.c (bsc#1206778). - Add ffmpeg-CVE-2019-13390.patch: Backport from upstream to fix
division by zero at adx_write_trailer in libavformat/rawenc.c
(bsc#1140754). - Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix
null pointer dereference in vp3_decode_frame() (bsc#1206442). - Add ffmpeg-CVE-2021-38094.patch: Backport from upstream to fix
integer overflow vulnerability in function filter_sobel in
libavfilter/vf_convolution.c (bsc#1190735, bsc#1190734,
bsc#1190733, bsc#1190724, bsc#1190731, bsc#1190732,
CVE-2021-38094, CVE-2021-38093, CVE-2021-38092, CVE-2020-20898,
CVE-2021-38090, CVE-2021-38091).
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak in
avcodec_alloc_context3 at options.c (bsc#1186756).
- Add ffmpeg-CVE-2021-3566.patch: Backport from upstream to fix
exposure of sensitive information on ffmpeg version prior to 4.3
(bsc#1189166).
- Add ffmpeg-CVE-2020-35965.patch: Backport from upstream to fix
out-of-bounds write in decode_frame in libavcodec/exr.c
(bsc#1187852).
- Add ffmpeg-CVE-2020-20892.patch: Backport from upstream to fix
an issue was discovered in function filter_frame in
libavfilter/vf_lenscorrection.c (bsc#1190719).
- Add ffmpeg-CVE-2020-20891.patch: Backport from upstream to fix
buffer overflow vulnerability in function config_input in
libavfilter/vf_gblur.c (bsc#1190718).
- Add ffmpeg-CVE-2020-20895.patch: Backport from upstream to fix
buffer overflow vulnerability in function
filter_vertically_##name in libavfilter/vf_avgblur.c
(bsc#1190722).
- Add ffmpeg-CVE-2020-20896.patch: Backport from upstream to fix
an issue was discovered in function latm_write_packet in
libavformat/latmenc.c (bsc#1190723).
- Add ffmpeg-CVE-2020-20899.patch: Backport from upstream to fix
buffer overflow vulnerability in function config_props in
libavfilter/vf_bwdif.c (bsc#1190726).
- Add ffmpeg-CVE-2020-20902.patch: Backport from upstream to fix
out-of-bounds read vulnerability exists in long_term_filter
function in g729postfilter.c (bsc#1190729). - Add ffmpeg-CVE-2020-22042.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak is
affected by: memory leak in the link_filter_inouts function in
libavfilter/graphparser.c (bsc#1186761). - Add ffmpeg-CVE-2021-38171.patch: Backport from upstream to fix
adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4
does not check the init_get_bits return value (bsc#1189724). - Add ffmpeg-CVE-2020-21688.patch: Backport from upstream to fix
a heap-use-after-free in the av_freep function in libavutil/mem.c
of FFmpeg 4.2 allows attackers to execute arbitrary code
(bsc#1189348).
- Add ffmpeg-CVE-2020-21697.patch: Backport from upstream to fix
a heap-use-after-free in the mpeg_mux_write_packet function in
libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of
service (DOS) via a crafted avi file (bsc#1189350).
- Add ffmpeg-CVE-2021-38114.patch: Backport from upstream to fix
the return value of the init_vlc function is not checked
(bsc#1189142). - Add ffmpeg-CVE-2019-9721.patch: Backport from upstream to fix
denial of service in the subtitle decoder in handle_open_brace
from libavcodec/htmlsubtitles.c (bsc#1129714).
- Add ffmpeg-CVE-2020-22046.patch: Backport from upstream to fix
a denial of service vulnerability exists in FFmpeg 4.2 due to
a memory leak in the avpriv_float_dsp_allocl function in
libavutil/float_dsp.c (bsc#1186849).
- Add ffmpeg-CVE-2020-22048.patch: Backport from upstream to fix
a denial of service vulnerability exists in FFmpeg 4.2 due to
a memory leak in the ff_frame_pool_get function in framepool.c
(bsc#1186859).
- Add ffmpeg-CVE-2020-22049.patch: Backport from upstream to fix
a denial of service vulnerability exists in FFmpeg 4.2 due to
a memory leak in the wtvfile_open_sector function in wtvdec.c
(bsc#1186861).
- Add ffmpeg-CVE-2020-22054.patch: Backport from upstream to fix
a denial of service vulnerability exists in FFmpeg 4.2 due to
a memory leak in the av_dict_set function in dict.c
(bsc#1186863). - Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
use-after-free via a crafted EXTINF duration in an m3u8 file
(bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
buffer overflow vulnerability via apng_do_inverse_blend in
libavcodec/pngenc.c (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
(bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
buffer overflow vulnerability exists in config_input() at
libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
buffer overflow vulnerability in filter_edges function in
libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
buffer overflow vulnerability in build_diff_map() in
libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
buffer overflow vulnerability in mov_write_video_tag() due to
the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability at
libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability exists in
ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability exists in
filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603,
bsc#1190728, CVE-2020-22022, CVE-2020-20901).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability exists in
filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability exists in
gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605,
bsc#1190721, CVE-2020-22025, CVE-2020-20894).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability exists at
libavfilter/vf_w3fdif.c in filter16_complex_low()
(bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability exists at
libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614,
bsc#1190727, CVE-2020-22032, CVE-2020-20900).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
a heap-based Buffer Overflow Vulnerability exists at
libavfilter/vf_vmafmotion.c in convolution_y_8bit()
(CVE-2020-22033) and buffer overflow vulnerability in
convolution_y_10bit() in libavfilter/vf_vmafmotion.c
(CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
a heap-based Buffer Overflow vulnerability exists at
libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
denial of service issue due to resource management errors via
fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
divide by zero issue via libavcodec/ratecontrol.c
(bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak in
the ff_v4l2_m2m_create_context function in v4l2_m2m.c
(bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak in
the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak at
the fifo_alloc_common function in libavutil/fifo.c
(bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak in
the url_open_dyn_buf_internal function in
libavformat/aviobuf.c (bsc#1186763). - Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
a heap-based buffer overflow problem in vqa_decode_chunk
(bnc#1154064 CVE-2019-17542). - Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
a NULL pointer dereference while converting a crafted AVI file
to MPEG4 in the ff_mpeg4_decode_picture_header function in
libavcodec/mpeg4videodec.c(bnc#1100352). - Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
1f00c97 to fix a denial of service issue (CVE-2019-9718,
boo#1129715). - Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
ed188f6 to check for scanf() failure (CVE-2019-12730,
bsc#1137526). - Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
boo#1101888). - Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
boo#1101889). - Add ffmpeg-CVE-2018-13305.patch to add a missing check for
negative values of the mqaunt variable (CVE-2018-13305,
bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff. - Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
e1182fa to fix an improper integer type (CVE-2018-12458,
bsc#1097983). - Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348). - Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869). - Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
vulnerabilities in the mms protocol that could result in accessing out of
bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
format demuxer that could result in remote code execution (CVE-2018-1999011
bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
pva format demuxer that can result in excessive amount of ressource
allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
the realmedia demuxer that can result in vulnerability, which allowed
attackers to read heap memory (CVE-2018-1999013, bnc#1102687). - Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
ed22dc2 to fix out of array access issue (bnc#1100356,
CVE-2018-13302). - Create a new package ffmpeg-private-devel which contains some
headers under /usr/include/ffmpeg/private that were not installed
by upstream. Those headers are needed by the libav package in order
to build avconv and other tools using the libav* libraries generated
by ffmpeg instead of its own. No other package should require
ffmpeg-private-devel. - Build and install also the sidxindex tool - Enable mpeg1video and mpeg2video in enable_decoders, and remove
it from disable-decoders call given to configure, mpeg2 now
available in openSUSE. - enable video stabilization/deshaking via libvidstab (optional) - Update to new bugfix release 3.4.2
* Fix integer overflows, multiplication overflows, undefined
shifts, and verify buffer lengths.
* avfilter/vf_transpose: Fix used plane count
[boo#1078488, CVE-2018-6392]
* avcodec/utvideodec: Fix bytes left check in decode_frame()
[boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
[boo#1072366, CVE-2017-17555]. - Update to new bugfix release 3.4.1
* Fixed integer overflows, division by zero, illegal bit shifts
* Fixed the gmc_mmx function which failed to validate width
and height [boo#1070762, CVE-2017-17081]
* Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
* ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
(upstreamed). - Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
[boo#1070762] - install also doc/ffserver.conf - Get rid of ffmpeg-pkgconfig-version.patch. - Update to new upstream release 3.4
* New video filters: deflicker, doublewave, lumakey, pixscope,
oscilloscope, robterts, limiter, libvmaf, unpremultiply,
tlut2, floodifll, pseudocolor, despill, convolve, vmafmotion.
* New audio filters: afir, crossfeed, surround, headphone,
superequalizer, haas.
* Some video filters with several inputs now use a common set
of options: blend, libvmaf, lut3d, overlay, psnr, ssim. They
must always be used by name.
* librsvg support for svg rasterization
* spec-compliant VP9 muxing support in MP4
* Remove the libnut and libschroedinger muxer/demuxer wrappers
* drop deprecated qtkit input device (use avfoundation instead)
* SUP/PGS subtitle muxer
* VP9 tile threading support
* KMS screen grabber
* CUDA thumbnail filter
* V4L2 mem2mem HW assisted codecs
* Rockchip MPP hardware decoding
* (Not in openSUSE builds, only original ones:)
* Gremlin Digital Video demuxer and decoder
* Additional frame format support for Interplay MVE movies
* Dolby E decoder and SMPTE 337M demuxer
* raw G.726 muxer and demuxer, left- and right-justified
* NewTek NDI input/output device
* FITS demuxer, muxer, decoder and encoder
- Fixed a double free in huffyuv [boo#1064577, CVE-2017-15186]
- Fixed an out-of-bounds in ffv1dec [boo#1066428, CVE-2017-15672]
- Fixed a denial of service in rtmppkt [boo#1082335, CVE-2017-11665] - Update to new upstream release 3.3.4.
* avutil/pixdesc: fixed NULL deref in av_color_primaries_name
[CVE-2017-14225] [boo#1058018]
* avformat/asfdec: Fix DoS in asf_build_simple_index
[CVE-2017-14223] [boo#1058019]
* avformat/mov: Fix DoS in read_tfra
[CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch - Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
[CVE-2017-14171] [boo#1057539],
0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
[CVE-2017-14170] [boo#1057537],
0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
[CVE-2017-14169] [boo#1057536] - Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
[CVE-2017-14058] [boo#1056762],
0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
[CVE-2017-14057] [boo#1056761],
0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
[CVE-2017-14059] [boo#1056763],
0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
[CVE-2017-14054] [boo#1056765],
0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
(code not enabled in openSUSE, though in packman)
[CVE-2017-14056] [boo#1056760],
0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
[CVE-2017-14055] [boo#1056766] - Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau. - Build unconditionally with lame and twolame - Update to maintenance release 3.3.3
* Various fixes for integer overflows, too-large bit shifts
and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
(included upstream) - Add 0001-avcodec-apedec-Fix-integer-overflow.patch
to address CVE-2017-11399 [boo#1049095] - Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions. - Update to new upstream release 3.3.2
* Various fixes for integer overflows and too-large bit shifts - Disable cuda support to fix boo#1041794:
ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
ffmpeg-libcdio_cdda-pkgconfig.patch
ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff - Add additional checks to ensure MPEG is off - Update to new upstream release 3.3.1
* Fix uninitialized variables, signed integer overflow,
excess shift operations. Add boundary checks. - Enable ac3 per request from idonmez - Update to new upstream release 3.3
* EBU R128 implementation now within ffmpeg, not relying on
external library anymore
* New video filters "premultiply", "readeia608", "threshold",
"midequalizer"
* Support for spherical videos
* New decoders: 16.8 and 24.0 floating point PCM, XPM
* New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
* MJPEG encoding uses Optimal Huffman tables now
* Native Opus encoder
* Support .mov with multiple sample description tables
* Removed the legacy X11 screen grabber, use XCB instead
* Removed asyncts filter (use af_aresample instead)
* resolved CVE-2016-10190 [boo#1022920],
CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
CVE-2017-7866 [boo#1034176] - Enable mp3 decoding - Have libavcodec57 additionally provide libavcodec57(unrestricted)
when building unrestricted: allow third party packages to require
the unrestricted codec. The existing -full provides is not
suitable as it can be provided by multiple libavcodec* packages,
whereas we require a specific ABI version. - Update to new upstream release 3.2.4
* lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
* lavf/mov.c: Avoid OOB in mov_read_udta_string()
* lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}() - Make sure each subpkg comes from the same src.rpm - Update to new upstream release 3.2.3
* Maintenance release with bugfixes
* ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch ->
ffmpeg-arm6l.diff - Wrap netcdf support in build condtional because it is a drop-in pkg - Enable all muxers and demuxers as they are just descriptor of format
thus do not change the behaviour in any relevant way.
* The best user now gets is proper interpretation of the format and
failure to play it without proper de/encoder
* Recommended by vlc team to be done this way :) - Update to new upstream release 3.2.2
* avformat/rtmppkt: Check for packet size mismatches
* avcodec/flacdec: Fix undefined shift in decode_subframe()
* avcodec/flacdec: Fix signed integer overflow in
decode_subframe_fixed()
* avcodec/flacdsp_template: Fix undefined shift in
flac_decorrelate_indep_c - Update to version 3.2.1:
* avcodec/aac_adtstoasc_bsf: validate and forward extradata
if the stream is already ASC
* libopusdec: default to stereo for invalid number of
channels
* sbgdec: prevent NULL pointer access
* rmdec: validate block alignment
* smacker: limit recursion depth of smacker_decode_bigtree
* mxfdec: fix NULL pointer dereference in mxf_read_packet_old
* ffmdec: validate codec parameters
* avformat/mpeg: Adjust vid probe threshold to correct
mis-detection
* avcodec/avpacket: fix leak on realloc in
av_packet_add_side_data()
* avformat/apngenc: use the stream parameters extradata if
available
* ffprobe: fix crash in case -of is specified with an empty
string
* exr: fix out-of-bounds read
* libschroedingerdec: fix leaking of framewithpts
* filmstripdec: correctly check image dimensions
* icodec: fix leaking pkt on error
* dvbsubdec: fix division by zero in compute_default_clut
* escape124: reject codebook size 0
* mpegts: prevent division by zero
* matroskadec: fix NULL pointer dereference in
webm_dash_manifest_read_header
* mxfdec: fix NULL pointer dereference
* avcodec/mpeg4videodec: Workaround interlaced mpeg4 edge MC
bug
* avcodec/mpegvideo: Fix edge emu buffer overlap with
interlaced mpeg4
* avcodec/ituh263dec: Avoid spending a long time in slice
sync
* avcodec: Check side data size before use
* avformat/flvdec: Fix regression losing streams - Update to new upstream release 3.2
* SDL2 output device and ffplay support
* SDL1 output device and SDL1 support removed
* New: libopenmpt demuxer, fifo muxer, True Audio (TTA) muxer
* New filters: weave, gblur, avgblur, sobel, prewitt,
vaguedenoiser, yuvtestsrc, lut2, hysteresis, maskedclamp,
crystalizer, acrusher, bitplanenoise, sidedata, asidedata
* Non-Local Means (nlmeans) denoising filter
* 16-bit support in curves filter and selectivecolor filter
* Added threads option per filter instance
* The "curves" filter does not automatically insert points at x=0
and x=1 anymore
* Matroska muxer now writes CRC32 elements by default in all
Level 1 elements
* New "tee" protocol
* VP8 in Ogg muxing
* Floating point support in ALS decoder
* Extended mov edit list support
* Changed mapping of RTP MIME type G726 to codec g726le.
- Drop ffmpeg-fix-CONFIG_VC1DSP-changes.patch
(no longer needed) - Enable libfdk_aac if it is available at buildtime - Update to version 3.1.5
* avformat/mxfdec: Check size to avoid integer overflow in
mxf_read_utf16_string()
* avcodec/mpegvideo_enc: Clear mmx state in
ff_mpv_reallocate_putbitbuffer()
* avcodec/utils: Clear MMX state before returning from
avcodec_default_execute*()
* libopenjpegenc: fix out-of-bounds reads when filling the
edges
* libopenjpegenc: stop reusing image data buffer for
openjpeg 2
* avformat/utils: Update codec_id before using it in the
parser init
* ffmpeg: remove unused and errorneous AVFrame timestamp
check
* Support for MIPS cpu P6600
* avutil/mips/generic_macros_msa: rename macro variable
which causes segfault for mips r6 - Update to version 3.1.4
* avformat/avidec: Check nb_streams in read_gab2_sub()
* avformat/avidec: Remove ancient assert
* avfilter/vf_colorspace: fix range for output colorspace
option
* lavc/mediacodecdec_h264: fix SODB escaping
* avcodec/nvenc: fix const options for hevc gpu setting
* avformat/avidec: Fix memleak with dv in avi
* lavc/movtextdec.c: Avoid infinite loop on invalid data.
* avcodec/ansi: Check dimensions
* avcodec/cavsdsp: use av_clip_uint8() for idct
* avformat/movenc: Check packet in mov_write_single_packet()
too
* avformat/movenc: Factor check_pkt() out
* avformat/utils: fix timebase error in avformat_seek_file()
* avcodec/g726: Add missing ADDB output mask
* avcodec/avpacket: clear side_data_elems
* avformat/movenc: Check first DTS similar to dts difference
* avcodec/ccaption_dec: Use simple array instead of AVBuffer
* avcodec/svq3: Reintroduce slice_type
* avformat/mov: Fix potential integer overflow in
mov_read_keys
* swscale/swscale_unscaled: Try to fix
Rgb16ToPlanarRgb16Wrapper() with slices
* swscale/swscale_unscaled: Fix packed_16bpc_bswap() with
slices
* avformat/avidec: Fix infinite loop in avi_read_nikon()
* lavf/utils: Avoid an overflow for huge negative durations.
* avformat/hls: Fix handling of EXT-X-BYTERANGE streams over
2GB
* lavc/avpacket: Fix undefined behaviour, do not pass a null
pointer to memcpy().
* lavc/mjpegdec: Do not skip reading quantization tables.
* cmdutils: fix implicit declaration of SetDllDirectory
function - Fix linking errors for arm and aarch64 builds, boo#995937
* Add ffmpeg-fix-CONFIG_VC1DSP-changes.patch - Update to version 3.1.3
* examples/demuxing_decoding: convert to codecpar
* avcodec/exr: Check tile positions
* avcodec/aacenc: Tighter input checks
* avformat/wtvdec: Check pointer before use
* libavcodec/wmalosslessdec: Check the remaining bits
* avcodec/adpcm: Fix adpcm_ima_wav padding
* avcodec/svq3: fix slice size check
* avcodec/diracdec: Check numx/y
* avcodec/h2645_parse: fix nal size
* avcodec/h2645_parse: Use get_nalsize() in
ff_h2645_packet_split()
* h2645_parse: only read avc length code at the correct
position
* h2645_parse: don't overread AnnexB NALs within an avc
stream
* avcodec/h264_parser: Factor get_avc_nalsize() out
* avcodec/cfhd: Increase minimum band dimension to 3
* avcodec/indeo2: check ctab
* avformat/swfdec: Fix inflate() error code check
* avcodec/rawdec: Fix bits_per_coded_sample checks
* vcodec/h2645_parse: Clear buffer padding
* avcodec/h2645: Fix NAL unit padding
* avfilter/drawutils: Fix single plane with alpha
* cmdutils: check for SetDllDirectory() availability - Update to version 3.1.2:
* avcodec/rawdec: Fix palette handling with changing
palettes
* avcodec/raw: Fix decoding of ilacetest.mov
* avformat/mov: Enable mp3 parsing if a packet needs it
* avformat/hls: Sync starting segment across variants on
live streams
* avformat/hls: Fix regression with ranged media segments
* avcodec/ffv1enc: Fix assertion failure with non zero
bits per sample
* avfilter/af_hdcd: small fix in af_hdcd.c where gain was
not being adjusted for "attenuate slowly"
* avformat/oggdec: Fix integer overflow with invalid pts
* libavcodec/dnxhd: Enable 12-bit DNxHR support.
* lavc/vaapi_encode_h26x: Fix a crash if "." is not the
decimal separator.
* avcodec/vp9_parser: Check the input frame sizes for
being consistent
* avformat/flvdec: parse keyframe before a/v stream was
created add_keyframes_index() when stream created or
keyframe parsed
* libavformat/rtpdec_asf: zero initialize the AVIOContext
struct
* libx264: Increase x264 opts character limit to 4096
* avcodec/h264_parser: Set sps/pps_ref
* librtmp: Avoid an infinite loop setting connection
arguments
* avformat/oggparsevp8: fix pts calculation on pages
ending with an invisible frame
* lavf/vplayerdec: Improve auto-detection.
* lavc/mediacodecdec_h264: properly convert extradata to
annex-b - Build with netcdf so as to enable af_sofalizer [boo#983398] - Update to version 3.1.1
* doc/APIchanges: document the lavu/lavf field moves
* avformat/avformat: Move new field to the end of AVStream
* avformat/utils: update deprecated AVStream->codec when the context is updated
* avutil/frame: Move new field to the end of AVFrame
* libavcodec/exr : fix decoding piz float file.
* avformat/mov: Check sample size
* lavfi: Move new field to the end of AVFilterContext
* lavfi: Move new field to the end of AVFilterLink
* ffplay: Fix usage of private lavfi API
* lavc/mediacodecdec_h264: add missing NAL headers to SPS/PPS buffers
* lavc/pnm_parser: disable parsing for text based PNMs - Update to version 3.1
* DXVA2-accelerated HEVC Main10 decoding
* fieldhint filter
* loop video filter and aloop audio filter
* Bob Weaver deinterlacing filter
* firequalizer filter
* datascope filter
* bench and abench filters
* ciescope filter
* protocol blacklisting API
* MediaCodec H264 decoding
* VC-2 HQ RTP payload format (draft v1) depacketizer and
packetizer
* VP9 RTP payload format (draft v2) packetizer
* AudioToolbox audio decoders
* AudioToolbox audio encoders
* coreimage filter (GPU based image filtering on OSX)
* libdcadec removed
* bitstream filter for extracting DTS core
* ADPCM IMA DAT4 decoder
* musx demuxer
* aix demuxer
* remap filter
* hash and framehash muxers
* colorspace filter
* hdcd filter
* readvitc filter
* VAAPI-accelerated format conversion and scaling
* libnpp/CUDA-accelerated format conversion and scaling
* Duck TrueMotion 2.0 Real Time decoder
* Wideband Single-bit Data (WSD) demuxer
* VAAPI-accelerated H.264/HEVC/MJPEG encoding
* DTS Express (LBR) decoder
* Generic OpenMAX IL encoder with support for Raspberry Pi
* IFF ANIM demuxer & decoder
* Direct Stream Transfer (DST) decoder
* loudnorm filter
* MTAF demuxer and decoder
* MagicYUV decoder
* OpenExr improvements (tile data and B44/B44A support)
* BitJazz SheerVideo decoder
* CUDA CUVID H264/HEVC decoder
* 10-bit depth support in native utvideo decoder
* libutvideo wrapper removed
* YUY2 Lossless Codec decoder
- Added minimum requirement for libva (0.35.0, matched by
1.3.0 package) - Guard usage of opencore using bcond_with, boo#980542 - Update to version 3.0.2
* avcodec/ttaenc: Reallocate packet if its too small
* configure: build fix for P5600 with mips code restructuring
* mips: add support for R6
* pgssubdec: fix subpicture output colorspace and range
* avcodec/ac3dec: Reset SPX when switching from EAC3 to AC3
* avfilter/vf_drawtext: Check return code of load_glyph()
* avformat/mux: Check that deinit is set before calling it
* avcodec/takdec: add code that got somehow lost in process of
REing
* avcodec/apedec: fix decoding of stereo files with one
channel full of silence
* avcodec/avpacket: Fix off by 5 error
* avcodec/h264: Fix for H.264 configuration parsing
* avcodec/bmp_parser: Ensure remaining_size is not too small
in startcode packet crossing corner case
* avcodec/pngdec: Fix alpha detection with skip_frame
* Changelog: Make formating consistent
* avfilter/src_movie: fix how we check for overflows with
seek_point
* avcodec/j2kenc: Add attribution to OpenJPEG project:
- Dropped dcadec (libdca was merged upstream) - Add ffmpeg-codec-choice.diff - Remove ffmpeg-devel subpackage.
All users have been converted to pkgconfig
Add Provides/Obsoletes to libavdevice-devel - Add ffmpeg-new-coder-errors.diff - Another try at organizing the codec-enable list.
Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
zlib
Enable audio: Celt, GSM, Opus, Speex, Vorbis
Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext - Update to new maintenance release 3.0.1
* vc2enc: fix use of uninitialized variables in the rate control
system
* postproc: fix an unaligned access
* lavc/hevc: Allow arbitrary garbage in bytestream as long as at
least one NAL unit is found. - Update included pkgconfig files to require the exact version
of ffmpeg pc files, instead of any later version
ffmpeg-pkgconfig-version.patch - Remove the optional vo-aacenc dependency, upstream removed it. - Update to new upstream release 3.0
* New filters: extrastereo, ocr, alimiter, stereowiden, stereotools,
rubberband, tremolo, agate, chromakey, displace, and many more.
* ffplay dynamic volume control
* audio high-order multiband parametric equalizer
* automatic bitstream filtering - Update to version 2.8.6
* avcodec/jpeg2000dec: More completely check cdef
* avutil/opt: check for and handle errors in av_opt_set_dict2()
* avcodec/flacenc: fix calculation of bits required in case
of custom sample rate
* avformat: Document urls a bit
* avformat/libquvi: Set default demuxer and protocol
limitations
* avformat/concat: Check protocol prefix
* doc/demuxers: Document enable_drefs and use_absolute_path
* avcodec/mjpegdec: Check for end for both bytes in unescaping
* avcodec/mpegvideo_enc: Check for integer overflow in
ff_mpv_reallocate_putbitbuffer()
* avformat/avformat: Replace some references to filenames by
urls
* avcodec/wmaenc: Check ff_wma_init() for failure
* avcodec/mpeg12enc: Move high resolution thread check to
before initializing threads
* avformat/img2dec: Use AVOpenCallback
* avformat/avio: Limit url option parsing to the documented
cases
* avformat/img2dec: do not interpret the filename by default
if a IO context has been opened
* avcodec/ass_split: Fix null pointer dereference in
ff_ass_style_get()
* mov: Add an option to toggle dref opening
* avcodec/gif: Fix lzw buffer size
* avcodec/put_bits: Assert buf_ptr in flush_put_bits()
* avcodec/tiff: Check subsample & rps values more completely
* swscale/swscale: Add some sanity checks for srcSlice*
parameters
* swscale/x86/rgb2rgb_template: Fix planar2x() for short
width
* swscale/swscale_unscaled: Fix odd height inputs for
bayer_to_yv12_wrapper()
* swscale/swscale_unscaled: Fix odd height inputs for
bayer_to_rgb24_wrapper()
* avcodec/aacenc: Check both channels for finiteness
* asfdec_o: check for too small size in asf_read_unknown
* asfdec_o: break if EOF is reached after
asf_read_packet_header
* asfdec_o: make sure packet_size is non-zero before seeking
* asfdec_o: prevent overflow causing seekback
* asfdec_o: check avio_skip in asf_read_simple_index
* asfdec_o: reject size > INT64_MAX in asf_read_unknown
* asfdec_o: only set asf_pkt->data_size after sanity checks
* Merge commit '8375dc1dd101d51baa430f34c0bcadfa37873896'
* dca: fix misaligned access in avpriv_dca_convert_bitstream
* brstm: fix missing closing brace
* brstm: also allocate b->table in read_packet
* brstm: make sure an ADPC chunk was read for adpcm_thp
* vorbisdec: reject rangebits 0 with non-0 partitions
* vorbisdec: reject channel mapping with less than two
channels
* ffmdec: reset packet_end in case of failure
* avformat/ipmovie: put video decoding_map_size into packet
and use it in decoder
* avformat/brstm: fix overflow - Update to version 2.8.5
* Fixes CVE-2016-1897 and CVE-2016-1898 [boo#961937] - Update to version 2.8.4
* Many bugfixes, see the included Changelog for all the changes.
* resolving CVE-2015-8661 [boo#960385], CVE-2015-8662 [boo#960384],
CVE-2015-8663 [boo#960383]
- Drop ffmpeg-remove_some_unused_ctrl_id_mappings.patch, fixed
upstream. - Obsolete ffmpeg-tools from packman - Add some provides to make it easier for firefox to recommend
this package for installation - Added patch ffmpeg-remove_some_unused_ctrl_id_mappings.patch to
successfully build against libvpx >= 1.5 (at least on PMBS). - Add buildconditionals for libass,libva,vdpau to fix build in SLE_11 - Rename bcond dca to dcadec
- Add more buildconditionals to get closer to removal of BUILD_ORIG - Remove unused imlib2 - Sync with packman changes
* All packman specific changes are protected with BUILD_ORIG
- Added the following patches
* ffmpeg-2.4.5-arm6l.patch
* ffmpeg-libcdio_cdda-pkgconfig.patch - Update to new upstream maintenance release 2.8.3
* avformat/matroskadec: Check subtitle stream before dereferencing
* avcodec/jpeg2000dec: Fix potential integer overflow with tile
dimensions
* avcodec/jpeg2000dec: Check for duplicate SIZ marker
* avcodec/jpeg2000: Change coord to 32bit to support larger than
32k width or height
* avcodec/jpeg2000dec: Check SIZ dimensions to be within the
supported range
* avcodec/jpeg2000: Check comp coords to be within the supported
size
* dds: validate compressed source buffer size
* dds: validate source buffer size before copying
* softfloat: assert when the argument of av_sqrt_sf is negative
- Fixes CVE-2015-8363 [bnc#957114], CVE-2015-8364 [bnc#957115],
CVE-2015-8365 [bnc#957116] - Update to new upstream release 2.8.2, containing fixes for the
following security issues:
* CVE-2015-8216 boo#955346
* CVE-2015-8217 boo#955347
* CVE-2015-8218 boo#955348
* CVE-2015-8219 boo#955350
- Upstream changes:
* various fixes in the aac_fixed decoder
* various fixes in softfloat
* swresample/resample: increase precision for compensation
* lavf/mov: add support for sidx fragment indexes
* avformat/mxfenc: Only store user comment related tags when needed
* ffmpeg: Don't try and write sdp info if none of the outputs had an rtp format.
* apng: use correct size for output buffer
* jvdec: avoid unsigned overflow in comparison
* avcodec/jpeg2000dec: Clip all tile coordinates
* avcodec/microdvddec: Check for string end in 'P' case
* avcodec/dirac_parser: Fix undefined memcpy() use
* avformat/xmv: Discard remainder of packet on error
* avformat/xmv: factor return check out of if/else
* avcodec/mpeg12dec: Do not call show_bits() with invalid bits
* avcodec/faxcompr: Add missing runs check in decode_uncompressed()
* libavutil/channel_layout: Check strtol*() for failure
* avformat/mpegts: Only start probing data streams within probe_packets
* avcodec/hevc_ps: Check chroma_format_idc
* avcodec/ffv1dec: Check for 0 quant tables
* avcodec/mjpegdec: Reinitialize IDCT on BPP changes
* avcodec/mjpegdec: Check index in ljpeg_decode_yuv_scan() before using it
* avcodec/h264_slice: Disable slice threads if there are multiple access units in a packet
* avformat/hls: update cookies on setcookie response
* opusdec: Don't run vector_fmul_scalar on zero length arrays
* avcodec/opusdec: Fix extra samples read index
* avcodec/ffv1: Initialize vlc_state on allocation
* avcodec/ffv1dec: update progress in case of broken pointer chains
* avcodec/ffv1dec: Clear slice coordinates if they are invalid or slice header decoding fails for other reasons
* rtsp: Allow $ as interleaved packet indicator before a complete response header
* videodsp: don't overread edges in vfix3 emu_edge.
* avformat/mp3dec: improve junk skipping heuristic
* concatdec: fix file_start_time calculation regression
* avcodec: loongson optimize h264dsp idct and loop filter with mmi
* avcodec/jpeg2000dec: Clear properties in jpeg2000_dec_cleanup() too
* avformat/hls: add support for EXT-X-MAP
* avformat/hls: fix segment selection regression on track changes of live streams
* configure: Require libkvazaar < 0.7.
* avcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup
- Drop ffmpeg-mov-sidx-fragment.patch, fixed upstream. - Update to new upstream release 2.8.1
* Minor bugfix release
* Includes all changes from. Ffmpeg-mt,
libav master of 2015-08-28, libav 11 as of 2015-08-28
- Add ffmpeg-mov-sidx-fragment.patch to add sidx fragment indexes.
Needed for new mpv release. - Update to new upstream release 2.8
* DirectDraw Surface image/texture decoder
* Many improvements to the JPEG 2000 decoder
* New video filters: colorkey, SSIM, showvolume, adrawgraph,
drawgraph, removegrain, erosion, dilation, deflate, inflate,
reverse, atadenoise, aphasemeter, showfreqs, vectorscope,
waveform, hstack, vstack, framerate
* New audio filters: Dynamic Audio Normalizer as dynaudnorm
filter, areverse, random, deband, sidechaincompress,
acrossfade
* allyuv and allrgb video sources
* Switched default encoders for webm to VP9 and Opus
* Removed experimental flag from the JPEG 2000 encoder - Update to new upstream release 2.7.2
- webp: fix infinite loop in webp_decode_frame
- huffyuvdec: validate image size
- avcodec/vp8: Check buffer size in vp8_decode_frame_header()
- avcodec/vp8: Fix null pointer dereference in ff_vp8_decode_free()
- avutil/fifo: Fix the case where func() returns less bytes than
requested in av_fifo_generic_write()
- bytestream2: set the reader to the end when reading more than
available
- oggparsedirac: check return value of init_get_bits
- vp9/update_prob: prevent out of bounds table read
- avcodec/pngdec: Check values before updating context in
decode_fctl_chunk()
- avcodec/pngdec: Copy IHDR & plte state from last thread
- avcodec/pngdec: Require a IHDR chunk before fctl
- avcodec/pngdec: Only allow one IHDR chunk
- ffmpeg: Do not use the data/size of a bitstream filter
after failure - Enable codecs for audio: PCM, Speex, CELT, FLAC, ILBC, Opus
- Enable codecs for image: BMP/PCX/TGA, TIFF, Sun/SGI/X11 raster
raw Huff-compressed or uncompressed YUV
- Update to new upstream release 2.7.1
* postproc: fix unaligned access
* avcodec/flacenc: Fix Invalid Rice order
* tls_gnutls: fix hang on disconnection
* avcodec/ffv1enc: fix bps for >8bit yuv when not explicitly set
* avio: fix potential crashes when combining ffio_ensure_seekback + crc
* ffmpeg_opt: Check for localtime() failure
* configure: Disable VSX on unspecified / generic CPUs - Enabled 'bluray' protocol - Update to new upstream release 2.7
* New encoders: apng (PNG with alpha)
* New decoders: TDSC (a JPEG/BGR24/zlib format)
* New audio filters: chorus
* New video filters: cover_rect, detelecine, fftfilt, find_rect
- Enable codecs: 012v, ansi, apng, bmp, exr, ffv1, ffvhuff
* unpack DivX-style packed B-frames in MPEG-4 bitstream filter
* WebM Live Chunk Muxer
* nvenc level and tier options
- Canopus HQ/HQA decoder
- Automatically rotate videos based on metadata in ffmpeg
- improved Quickdraw compatibility
- VP9 high bit-depth and extended colorspaces decoding support
- WebPAnimEncoder API when available for encoding and muxing WebP
- Direct3D11-accelerated decoding
- Support Secure Transport
- Multipart JPEG demuxer - Fix building with BUILD_ORIG - Update to new upstream release 2.6.3
* avcodec/libtheoraenc: Check for av_malloc failure
* ffmpeg_opt: Fix -timestamp parsing
* avcodec/cavsdec: Use ff_set_dimensions()
* swr: fix alignment issue caused by 8ch sse functions
* avcodec/mjpegdec: fix len computation in ff_mjpeg_decode_dqt()
* avformat/matroskadec: Cleanup error handling for bz2 & zlib
* avformat/matroskaenc: Check ff_vorbiscomment_length in
put_flac_codecpriv()
* avcodec/mpeg12dec: use the correct dimensions for checking SAR
* xcbgrab: Validate the capture area
* xcbgrab: Do not assume the non shm image data is always available
* avfilter/lavfutils: disable frame threads when decoding a single
image
* ffmpeg: remove incorrect network deinit
* OpenCL: Avoid potential buffer overflow in cmdutils_opencl.c
* libvpxenc: only set noise reduction w/vp8
* vp9: remove another optimization branch in iadst16 which causes
overflows.
* network: Do not leave context locked on error
* vp9: remove one optimization branch in iadst16 which causes
overflows.
* swresample: Allow reinitialization without ever setting channel
layouts/counts
* imgutils: initialize palette padding bytes in av_image_alloc
* id3v2: catch avio_read errors in check_tag
* avi: Validate sample_size
* diracdec: avoid overflow of bytes*8 in decode_lowdelay
* diracdec: prevent overflow in data_unit_size check
* matroskadec: use uint64_t instead of int for index_scale
* pngdec: don't use AV_PIX_FMT_MONOBLACK for apng
* pngdec: return correct error code from decode_frame_common
* swscale/ppc/swscale_altivec.c: POWER LE support in yuv2planeX_8()
delete macro GET_VF() it was wrong
* matroskadec: export cover art correctly
* mxfenc: don't try to write footer without header
- Enable building avresample for extra API compat
- Remove ffmpeg-pkgconfig-requires.diff: RPM's pkgconfigdeps.sh is
scanning Requires.private too. - Add baselibs.conf: provide -32bit libraries (used by xine-32bit). - Update to new upstream release 2.6.2
* avformat/utils: avoid discarded streams in
av_find_default_stream_index()
* avutil/cpu: add missing check for mmxext to av_force_cpu_flags
* avformat/http: replace cookies with updated values instead of
appending forever - Update to new upstream release 2.6.1
* Maintenance release with some bugfixes - Update to new upstream release 2.6
* The VP9 decoder is now usable on x86(-32) and pre-SSSE3 CPUs.
* 10-bit support in the SPP video filter
* New video filters: "colorlevels", "tblend", "palettegen",
"paletteuse". New audio filters: "dcshift".
* The old libmpcodecs wrapper is finally gone
* API changes: introduction of device inputs and outputs - Update to new upstream release 2.5.3
* AVFoundation screen-grabbing support, animated WebP decoding
support, and Animated PNG support. UDP-Lite support was added. - Initial package (version 2.5.3) for build.opensuse.org /sbin/ldconfig /sbin/ldconfig h01-armsrv2 1744721234 3.4.2-150200.11.60.1 3.4.2-150200.11.60.1 libavfilter.so.6 libavfilter.so.6.107.100 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38336/SUSE_SLE-15-SP2_Update/086e6c26aa0a396f6fd72844111d4608-ffmpeg.SUSE_SLE-15-SP2_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4cff4eaceb4320075dd47e4f8308a377bac8d09c, stripped P P R R R R !R R R R R R R R R R R R R R R R R #R R R R R R !¦pK(=# utf-8 22aa30ac7e9fb3d73900f809920a95a023ec5f9bd2c2d1375130916b0b4ad2dc ? 7zXZ
! t/:] "k%ֿ\#R`[FXa3)zc|in '/T^ĿX穤SM č\_Z7@^#
]& u_mU_AF*YQ[K%ńN('t=fJКBdU" v1;7{Vi/-W$)xeL(Lؽ pM k?M8.&P 01|5Ḁ;7D
Zשث9BO D/<՚톐 $
IKs2ْj3=Y=$ {[<߆=Mg2%ШWPBi u,|йJ2D?yL8?'yl&W7hi@-ڻBa5Hv~Ճ paVnm>7 xQF_a/M2/(Kvﳎ,Tdhvnl
V`s~Wh秈vPs7) f㝘0g6r>v <QE[CӃr
P![xɑ)bɬP= Ll!Ź#%Ќ+iμ.& ;REY W#:P gNez.7t?e xz")N.u<
&;B?\Dѭf3[)/+j^~APl+yK "DRH: C|L"αr2}8Xp*frhy5Z05Aw ӳ$#?ȼeXZ6@4)NBR\V? ZI}C{RL} 80ã솬 6qNXƥ,t\} $ y}cN 'у#. }!;ۃtܜ:C,YZף
Dyip])
FSLQoZ
=#& }I rt4((z=S堅3'Y{6sɵm}AHDf
DEc5 vu8ҰS6*' VZ8]Z cӪmאBٍ)F% Ⱥ]{( Мlj2RrSx+5 ?e_D(7[ji,tRP?qm] GhV|-Dē9kՌrL]i?5#|}(_j*Sf0ŞtYgVlY ]uJ r |k¢pC [8cՐj_sqB9
u,Q2=!xn__v59%4wh<?녉NK7jDH5'i wG\| 3d?_&bZܻsUKxLCIR۳2W!.2 V94g,r63tǼ Hh=AaUɡ)L 8x9lU/1`843gx fzpsXeY(hw! /ut @m潼
t}Ne10? e<I>>am)=ŮʌK9.
VlIl Ryymmߞ$^ 2PFv7̽
Z֕X.usüΟ\!(up1=+G#Qx<#Qllq A[}r۰`s2Tl"m5u1;tdKngs(Z"zvÈiyQՉJhIi#ԅ (rN nkj ū]B(`B
X
_yvSoNͅa2cIp,ߎnz8}O^)Ǜrj:sԸP?m-1*̅- :SOlnxd
; r+Im6Lf +B2_\oR35*M0 n֥#mBd[
lSoR[ѻF Cl1ͦhӎ Г=,IyC+$ۢA c;7qC ?F+H
"@ln lrlL vh?=/( HKQhmFӓ%"Ny@By=?X='m>ZLKyV(W\둕yB% q MDu&#<@ s$/LJyōҊ>Nۻt_Ȥ}uVFo: {u`%잱-gz~; 5Y?OE']MG87GW7=Zt6 CƤ>+r*W앱WL=kH9@|kש:<<`vS|)+7wxu3ZL6j6=b> S㉝5rxގ(/v3ѷ~ӽ>< )_^U4nMXl&6˼{`ڮ!L\嵓xFGQx_$QiɲikiT^
dD@o4c%淁.uVƽiM:^O K~4 DGz
=I]*G^#a"[dw0bI4kbj s Qz`hk杬Ѝ5vF31{
ѵT {+* ܣ{̙2Nc a| *æxa@rb
;AIP
8cL[jA9G[KǓc[GAy7ܟD}H`Oޛ3"q4=1 !FflLZ1Ս~T PYL/~ Q\N\
0.IB 5Z]1Zsw $f<Viȝhoۄ m .n[J] Q{"<_ o jH{7 L̀BI,p) ~OLءw1ϬQF .H}
0wg[𰪰i@?ᥪj<_l1<gB4W~M5&JQ2]ʥh ] 2ZB ] :VvCS
c 1H)\w7<ri
w p ;R\,Jqtup
7.ZS# Tkì!h> r:=l<Ԃly\Љ+$+\4PY.F`0'd-%gp m{>Ũw= m]/9p!9*
ntd[ ڔ,B 2VK "4&$M
Aߓ^S$1c
`^ I> wAhZZe0o=9edgV9 odH_ XwV *w@R# $w > 7ca2ޒ.fNawlT^: |_T`B~8 N ^w%}iM {]:jZ7_c~M!*Yu67{AMX R6wps ֆLec F4FP}# ڧu!VQE ~$ ֏B{ <8 Jt}. BP8Sb% Qmh~,|+`#+ ,qY}=DAAEbFǮ*0RY/
rxж5V+Y
L\He@JkCc` -"kj XVI:ܤ!ܞ!IE9cQ9p3MeBph/@[ \a gqˑ[6cٛ OYg]93+pc236@"h6ot g.LܺL#ʟu*E4=e3`! =4 t|PP\ioN^EОD$ fA'8{$^8hI֜RKkv:n@ʾ_s F8 : ?)vE{`'(d4VlX6l+
Ǯ q!'
XC3g/8X2]xѼJk: {}cu1F8TZjQ85f G"vw _K>?R=CGAm[k2EJ 6@vD=`>A|]KeMB UX8Ejr3c q-M%O}R^}! h`xN,-5gԪIγ9>Z2$Sҹt:N8fk)E/S
Ϫ?a|p!KKW0J&{ KOzCgi XOOP=j $_
Zk^ϓ I!sӦ^1uLPΦ}]ѓ%ʘ
a'( z
4wZu ~߱{@j^2˷IE)6
C-lh.dEB? x99c7lAY
ESy[%} y}RM$g'/(N4Ѝ ! AZ'µ4d4>̀wOLkO73: ieڳ`h|< ːciޤץ_n
8!\l_THe&FeHN v\2Ø8_ն<zxO͚AMsay8 #/_r2ʰܾ~JR\\3T z mkh#*/|aO_wa6X*I5:ߵϣկi%,.pu^@cbة
#,$ıh=eQ0cYcπ
-7kQ$u,<,9=A~w){R?o(ѵ&X%'MFez
OP<
ѧ^/9R>A F|(mϒؙl Ritm]r+AV:۰Yģf|p;#vCQdd\=$7嗫 Ůdf1Tk-' )OJ Lzd2p8ssqBeba.f,`OCR#0&Hj 7
όzлUgm[me I= cf֓|e,DH^*v~ڜJmOeiHIeP8A+auO% #:ZmRH{ P*V(#6׆jda
,lˈTYZcOi8Pt= .4#xȍ*sKRP]ڟn!L0 >Mog#+
IftwHMPo$jV-DZT衬NxԬ~p_"z2NW(Ƭf0FwLU"
hNIkVFPg'Sak!HLQ?]q髑V+ [#_yv8j[' /T
Z##; ~n%W"\X>i)RWxl7$Zq|Pә`
%,ɘ*=2NDi6sKi'=^Z3laU }G xPAf2@1shuBf;9̹PV\s;xLo؝N)ޛ,YRw]A~d wz Q:}oх!>'~(أi( ?zGWTW(3TMņ㣝LS1 Pe*sf߫@ a >RI+|JDZtbz|Ko@cG<eqK =E>rE[$ p x ϶9_h`2P݄ KD8"ǚA01S>!n׃Gl@i$ x A,QlQ"|=[y emɌ̀79v67: J9fa 4~O9fUy7լ^]*b'pY ^BC63jp
tZ;4Vby-uA }<# Ġh1t
`.9 M 'Ihn")V : Y䔖 6d(#`iSe~.]ɜDy7s"n">PB뉋YuV_r&mmHjk )b"JքXQZ{88R)E/ AZJl9%o%3j#'gӑ?_ɢU9(!#B4! VbOxW+0VY;!/E`.G2}& _3boՠ#8C {#U}\XulVraJ@4 /tׄ>Qeϫ|`'9X
o,A\?3[\dܷ ÓZ [YR$bC% Bg%j3&Fi)GhN#TAx1e
/mBoCiV)U =XN~[D[v>/"
ǻ v#ȊwD, 2V!u%a㧁=:GiQIVv*ʑ
ձ +dswW^JA|*)0U9m4.
ڈR.
. Z(
"?0ы!rm'k -o}Vmү4"~ٌ6Bc#|K/OTE^^;#v*T-"5^Ol^ÏጸLx<̨YLr\͌!oӊVP( 5Oog>{j'}PxDfxJ!~}HOHbqj8 Udxa 4SExo8/h9lfMiIT
O/!}J(mD{%aH᠍[x$5-5C;b!'d4?J &yJRQ=@d;[_QDZ܄]p= $[ ϯX%aN##n^5vT
Ohm|>#3R ݾI OԒ^< 5 ɻтD4P <δc /#qg*iRTUw/ F%H
{ % (AN\ yV>vA,GS+/kz^QF)kk<
z ϥ>}`4?<ˠ
D&9 9``h"jQ !q`2uJ+ot VcGO@uTKt (]efcm >)4_^]䔴9f T3cq`u߂מrn̹Zaҳ
\0 q˱|ߩįϤMq^?_Lw
<][ᾣ @;ԄwӀo*ǃ#.=";
}T8]*3an`Ų E"kL)9Zs,YZ`~s cvU둝uwBK
IY}V *Z]/+Nv (q T^yV1_{AO}I'4z
M^աs<;WMXY˞4i I,dp I$Qf Npe32[ L+9_[K+0'ݕ-x.nb
ck'\sc ͵F N{D?֜qGϬ(N3lO) Np:3c:I&gO'AY1њrtk-y=Q%@,lo$.JcFX)wBеW9nܒ}YU~+1_
,Ub˟@q?*,f٣H2AWzݲ!/b}ed38{4~lux0TH[W!>C$ Q`{JTux4P "SOVMXE^"Z ͒@xjb|h+a5^e e
- Fz$$Ƃ_ɏ PMx VQ'.}> ]< (XQ7ʸTs8Bi- d^ҥ" デ ؠnx:n39hV6+FFid̽3l[m^zFJV&ւn$cle~P{ %?3mɌd2%>5.I;>ˢӇQ ]c˙Ƙ!+~qb+ A j S3LT G.LlM?}òr6Seaݔr{#Q ㈘I\7.6φI OD!uAR>I#0AmِaI3o9@gBc ̈́R SecbOOUg$^Ur=oDH5NloFbFhĎ PϸQb B˓` Jn $_B\(kʮfa%=EqSš_.WE # Q5y ]kS[C:,˻o7G64F*Kb\
F|pkBӦl V^Ui!bedU+r
Jv@{634q@v6):ȓKٽmH0lnm5_P?w> *DY7^(|E+͏m!3CJ<zZ zߨ6ɚ |8FN-4 >1~:u,z;
_Lb HK~ؕRI`Sք;JF1c%%u φnFn+6B\62D<.M~<@8Ob^@7/RsqCnIU(O藽ӬCnBvxڋk0kݎj?ZuPa],Y궐V@9in\yj?,VM1
=h.HuxKbx =U!2Q+ dG̲8?,]Ɂ@adbuǯǦ>\ըm6f$p^s/I݈ gے6lB5-Pʲْ O?L~MA>۱svZR6tˑh䉋HSa_u@Wq$>[uy\6{
qqgt
o"]%Q
~Vry <`})xk8Ly`u0qt@ӓ'`zh'U9܂(gG\T way_H?3=hߋg-*Ztw|t[6ަ9d!cK-[딹!?)',F;H `F}2*nl4c6IWܼ0]Rh`pY@^ W6, ޮtE @ٲdceS;`T]r CjХ6go:4r 'r:%fsqFu dUL>T+ yN1QQ-2l>g\
Q|*C?i (5ux "WV:]>5+-2Z@1
,ּewR^J'EGMW{k'5ҕf9 $@[~ʓ(?|up 2 L\|cLC$\6Slc~sQa3~#YV^30PZ%gLv4u,©'Uq:xH!؛`%8P8ae5Efdn#\ZB8,tDڙ! b5#^ˍ[/.i "du =!X MgRզ96k؉'$B s;Z^ #g|#؇ҵ< FeH Wcy(8Bƅ9q4PpPv43)s
)xm֦sU0uAE)϶ݺw ,[w_+ we>- #KUiBqX p궘/|M°?/n|zɓnEɬ 2@ U1GRdJ;q S*鈦a3j1X R_<_K %MpE%kDg8ר p*зa~y)yO6 [8Ger eU>rITomH*"YB0B2=7rl.MM{<%ۧkHqjDCە`* wb}@TU2a3Tc"ynyd--~q6Uǒ~#yKr&8JX;Q;`WBB `OB ZfmY E4 `lZ_6M jsZ$Xt(\Q5M[MGLxnZgHe^wN`wS
ߞ| m^jAҵbH>="S߄W(IhG_ yv<I馀Ver49eO۠1U! ;~xM^poic n]'RN'W[
ըBcֆ ⸢UC:<.3A^25ņi-vx⮞> 2V@3k[,Ev´W~1$1BgHee2X o2VHڟ|{D
5/Rx p'̀J ?Kۆ^6 Ъ.k0ɲ
qö?x:< S~5O,/h>~cfl 0v]w&b)Fkh+ą>LH5
tOOғ 1XzŪ PS-](ZbU̅N_Z`Rxa xٽKU,6 Q먱VQCj?@|\t ' = h pr _!({yz-IA57'Ug"TMN fN|į3מrH5T 'h:gi\l.R <*HíP
Pb^٬_q:Zsq6w mBt>=I%coSEhT\'>p)mJere{K=JCx(
͘j%gk>"6بH֛M2灧mWq &aDk X }5QP5hB
kNaɠtu GbR=ZL>*6$~mE z ()V=t -H nEn?k1!ʯ
՚KZu< bk* P tjh9D'Vg@IO ~ʴ89Hܔ4q6}y ~Yz8N9s 8 ֔$N1r;"M bVOAex_l
a>(Zk/ 'iUcӑ# Uo A,뵍1ܐ ;8A@sr鑌ԸFz
7(;1s>ӵ!/X:h*J 302UA= 8BaE4
>Sg~ ܰ j ǃ 7:jF o?=y1iǠҋW*t
9EH%>\b1 ylOKpx
$$#EZ) K$ 7 Y
/ۚ@]0:;
W #&kn 7.3z!iX3W&`*&R0;
>AJnNkնd2A-9R=,o2a=<07 S>bV U+lT. ɿ83-BKD6#f_')igjZVWq٫>S^^lj)F Gj%am BO5\TC:[=1%w,_t
i? zG,z.DBQT$VN$D]_1{ q#Ade7]BYjCK#gn "MָoQ] b~t]p#
lڈ ih%0^`UcX"E p fj6iGE>ֈ~, U S'd/-"I>k~Yf.:gMEtٱ@ Q&AX58#yh,ƔZ]_ A QrFO[X#'
'qf0 Y!dbՅ$fzݯ|LfFnza cbp4D2D58 dP
kS-Jrlu!zB +R,sm
E %bդkq@1ryC+b#qeg
W,9!҉G xp]ṫfH:RJfX @_ 6_K9z d$l Jc~`2<̦jڹ녩~p?[_
S: ej|C1x pM]marU*<-V,3S74լU(5S`bhBc5`!^#('[ FZEgT:zXS@coPZWHŋVF9 wRf]J ԙB> %ea>ЋT:rX˯=7hqR< oNnڲo"vqf.[)I8HՌIN6ηC> Iw5vb[dbK `;k^RjWlTX2"=d d9r ?<>hyh0frsz8e
I^_G;%`R]]~.U{S_LݧѬe>KĦ"AU 2۲ >/E
M yZ'KV:Klj
Qx;,X28B
Urf4;N*@NO.sz[{QAջ?Xp V5I a TXF}Q<* ;X#:U/XPL{l gbw85tA;k[vB%f;LxS ?
k+5?R(wF ZrW0*˝oOXu#Z_Xep"rBzh+3zri+PK3WM, x1#8 872$KgX&I\Znh2xe,O4}{ T]nx"Is@X V|0Ns NV l,_{(;t{8 T%9dt,$X ڝ@*2fK _Ts5zhQ鷹$A4rRm] A!9USpXd,86lޔcy; r N4Y1) =^sJa0rV!'&y<>oo5{Ʃ2 Ѥ!q3G2WDAB
%zLQĖ(`8Zr:H^%
@"'L$:J}eE>T ;/TRw1aF'\ŅXT wM Ώ[I/s4̒9 K¨5A+[ļ%;sMͤ-.'m q8_ެ_Gnbؤ?|h#4`FջݟP ; " *.z=ueRSshLYWkOdsB, peF;T_d;ukO~ig8Iq9a=Y'ݾ f
_t@w?NSfr/7[,*Q
vf Rfl> u6 *'>VU8~fczږ, ꝿ?&{O˵iɧQIBb_r $9Q;ܛPJq#oLNT
:qwgc;B_CDV.x2iM:EOHWVH3E >xD-z(QyD[9e. %ooUʚb'wJiKwcjxZ#W\AN9>gs#1Z2s%o`Sf%i548
'uSհ ^VR(loXrnmh:ikt+WSl3Csvɕ%} lzGƗA<^e=:t/|lpz&b{
GMrDW|;DULx|Q96z>g'b9Im9b 3@h NfᵰNT.A!,b
1E.ǖ uɣFP3J-n[Vy=[]l# >8|eB6Я
5]ZWӴa7'W!+U,b뺣PAh@zp,~G@*_͂b ̙}9
06mُtEFH閛ӈۜD"kbx$/˂Cq B&J{Bgt[G&khsyCk U Fci ?qD]eʥЯ!Ϯp{Qke2_.E+l ;V5tζ \Pe![Wj * qXvxJ1|ݤ@ ˇ rұ
dP~Ù&/QvS妧p.O:v!*e8 8؟1j /cfW Z7V!Gr[UOV"5Aa x7k])/Bߙc
g _#7kQX8$_*
P2Ҫ&6J.{ ]
X&z'"sm;%X36
ёobQzB^X4xjWGkՙ|D9mk|;w >oTB>l,Z A¥Ė~ga3"g#H 4 돏>r w\w^u6ATթMIq@]pQ%;L0p3
eOb3adZbIFˁ=~^CK2'? >,%Zad7LN r2nP@Z~1WҙxS,f @O
G ٢V\Pï iy?.9Y̰,l&0ʪ$ #!ھT֒}]
1pG'Q@ ֙]$b,ׂD]} { >(C:r뎙(v߰3kC/>iМ' Kv[T4䟻PN58vW4g+!ſ[EPDF̎ILfduk r_*6yQFT}WiesR?'hL}V½EIy K
X;
!쪱 xЏ̄1 O͡u(}ܕ$z{im%giM@o(? $k.e$8 !hS&Pv) ȥ! :a5zc@{ٜP@fJsSMy6:/R) bzLN(iƋP z˦7% . 2fm t0^9\SC];NFhե1>v7DJ
R+.&b_%zw[w31*I{3DqTdr: +%k\#>f d _H!dSm(g|u0䙆{%ké \s{:LEV
饩?N9z 9R+ǏJ5-@ 33$u|x(xbBsfTjYAm5s@8ys ɓpF`e]~[PR1ppZa d ff7Jkh,ZvP#hl~Ʃ<22$ExlIpj!Љ*K7S?2xMRjwa& Gnh=ct1뒸y@%RJ '
Fj \&1 X~!5v?7 VCǸ: shyΠeL[l'Ms W hi"u&#IPZ Rp ۾@=m SJ+DеldseF^PRo+&jxuCj|=\s?:Qei3q悅}&=+Z#^m;m q 4f*rWJ^ ~C4O
I̒4w<5ن(X죧3қ
74vKGWɞBhVYː^㛘hZF7&bU]ШAjF.(1$"eyj- WVGWpj}i]lL^ʰ/6C*f-9FJeʪ3s͡^ԋpBhij]l[A9%|8Rd : @a &Ru5Yfeٷcł,ail pڥcE)` T?XKðO{:q t9}OM*QmvlAܥu`gx ZG+s]ETGo
a:ZDZ/mCr g!L}#R/8`dt.}wOᙙO 8tH4Vpc1c:ffff*39 ;%hF 3-yL~!To OS3/La~ iWP^tY1f}:\6IޭyN^kU2
ai3|{}rNj2{\ Q8w $k qP ?VX~c4d
L-8 C"4wb= ruS}q1Md:^ _dU+
b<:~:t494:vF!a>s
ů*kcn7` Ȏw:nfB%`V"La>w ]MkzRw?a
}^!{sҒ |Lmnͽ
V#S0
aE!m N'Kqcvn6Cx({qy1sݺzB 0YIw@]@> ఔ
:I%1Sɹ+R؆2~bRCˬѩ&w8 %/ t# I-:$̶c"0;d18'ٸ؝9PH07B 0Ф/eIwt |R Ϥ{ЕXg^Ub4%iK "6UoܖLH UK +TZP[[;/syG##J@B|3jeLZsj1D눌V1t) ZʑYeS}\}Lڱ8LWKs!\,9@= ֳ_ᡏ2_Fteꮴ~M⇕ vhվ2eer+9Eog) YuasbH 3e] $S5\Ðt ,MDQ)QKnWz"c2%Y
yN %mʓ4 &ū[93ȰqURю)~J|Q.ޖԦko`S7~8# AQ
I. N.ؕdFKH-| 3KsRnD4F$nk
^is'3(hˤήBӝË́Tþ& W=]" "A qI{eN#). ^Dǹfﺓj
qW0wanV(Hħ8 gX&}L6f@-B\8D|&)fGPJO8jۧWuN>]ƫQ3@X:;HK-I/
%Hͧ*%k5^aH$ͻcـDg{CT1
DwַcA.nAÂcpSRBa>d?sn,}" er
·M_Hգ^s ռ!_ݡ V7߸DXx_ `)4j|ʮMY>O!M 57C)X^A;Hb'm6X܌. }qmK%@DOL^yzوA;h0֓IB>1mMY2 jrGZ4rc|cHP*˜sy GK\<3-f9`{]P s^hecd]Hˏ|Ӧ_0Tg(/6av-D8@=p l `J(aiz#3A(ӚU
4L >(jgq㟯6u1MVQ_]e1&DT]/J q9ۋvBBm@#qu:K~pVm= ;7Ob*(l` :E [Pd=v( lJQBrI dz 7O,*ԍj#5iXakYW·[vtS.*VۣGH0u E*zuƓ T^oD+il0[mKVgiԍlKOH/Б547w:83%1LӉP\vO jW 0qz:t!2ыl? Q- Wypǽ@Bǖ!kN ~UEri8T7 gOwp'MjLJKyF("voFP}lȢ-%~v_/-v .ذA
k@܌6 $NILi /|7 C"$w^u1ʹ 1 ʁe1s/iiZ쟂AܠЭAH*@X+
c J!G|:<<]Qvn('Q>-LX.rIA&7`f y!FoR{4.jn=r r /d2}w$c'W{NakiJyiLFmkcKxނ_@F !ʇU KяK;¾gnc+ZU!
]`];w
㨥8 ^n,: O#dQp1@5`tj]܁~Bj֊Ոo5>JN.MS BJ-]dｰ~LzY B1"R>RD|Bm V mӅTNƋE8ƔQ HU{
hx']f^G(8љPxf8[Ua2Tw*fi(g) XJEO~UQ֎̵b&!gVj *=%}Xj)dAbAƇEׅՁb>7
A|)F 9Ziq-$z⧩a
֔ޝUbhLFbصlI4nchO+
{ohC'+~.|m7iGهwJ́KvO m
jj ܟi ձ'i)ؑ4P'z-0 pؽ4^V0|8y'7XН m mP8iu|G\p25 q$AVR~ɚlP,AW5ٯd? LӮa8e{=g7cEn̏056M
hK@4'^
v3{Z`|
xáWǨܒ/6pU E;9=Tp,|OiVju5iL]&0e9sK^ao:!)4Br9o$P+w3a wŠ̈́?lP 0ն mہD@?WearTW4n}xߔ#[3V2 'xRǧPSV+;7
bT vPfϾ@phs\vPwGR3A^xJ~42^8Pl ㊐Z~]
xP ÈDձ"^ft ybe
~x}TlWKOd1
/.g7Su
cD>?R/UjY:zH1Qhv>Uyso
]e Y<!3,-b-f1Ke 忸+OXoͮzY"HWt@Cqqhq] H5:&s`/o+m8&0cWp##VBA(QwZ%vY007I̽6eTlu~#[&O>yu7=ı~ 0C`6"N4
JjJ|[Dg^l0 k]q2p'T Z2@v5N^l-0u,
j 8&ۆ:X:Ҋd;cn,qH
$~v8AdՊ@5
ԟJ$
h +@\bty;A, bᩊ}Q _PKj\u:HoB tӏX$9
ubAſe1)l .Msg
*qH_ JBmjV:1WA19_`~t$J`mBvN_zY P67C[ sw\Kyq+!.^F(^1f@ױj>)ڇ(0p45_=~=mS]㗓X ۩Iޠ ?ax4y1=B{X^o͔q.3 RQ&8
@88!W_
!cwpTZ !ݿ"H^~U(1W F Ӗ~g"23)vM~~')R*' 2ZYƷx
%s $8ǐ?B6n]?e4y_=Ls* 9^V@9 }, Ebb=?\ CjOw{ZWǴOXA?IװSe}14=\)φʳzٞѱ/4){N )i%zw+yA
Ҫԛ 袀Ch_Sd}Av/ASh^ni5Nsؒ{>[CΔ@
Cqo@fj|eHfP Qh$aߓkU8Sj;gX#*`
ᓂz){Oz7}=PN[?ȾBxwqjvj y~}F-,uU_;[C9{ũk3;Z+ůnujOĿʻywB{ AlҞLaYu1h+A!0es%EQ7 ٩؏:C TF&'t*k: Qy TFtwpbpB_,7iLZ4TYU W@|2\ C @?j`;'im:j%I@13sx<
Do,~Ow9 :xË^N|L8[}S}cw:]3cK{"©9\r-[{;^+yb^ ' QHԈQJa >SAzD:F;-<Ϭ_GF Hnr )(\;K*'a˼mӧ&(aGy%KV]w
p@NK-ZΔ#\ _x
7 +wƳ9 ט&o}YHd#qh{Wz`&5X7)7Kl,8cHf4TwQ[ %x*hyXir m|/kbRLryBouXdd*#lؒݜp @$X7F
3DF~6 =h4~B.UpёV
&E2|^;.G(kgt mAڧ1+,He J|OFB
jFcR,lv*u4`N4J4qgNnjy %2{ZPJ$՛I#IDG" lQMeV a)=Oa U HXwNˆ
y9QK"ZE?@|(Tҋ!sk?ZkCC X_ ]ֻګi(a.ΌtR51譆ǨrI%,~B=`;0 02r8}S[?Y@-A8D΄-7 ])@{)k]WcRʾDvԫ/Y!|S%ks;Jp ;['#vSBJx7 q)V12=j}D'K֪N b_5ImQ
Uaeu K8D'\}BHQ\N? ;Aqru X;GIF`!ޏ.mER2* 8QǨMd @ )I4FM#Y*q` 'K %*JǠ{ . ҟH6OׄPF d+#7"Zftܤ* l Qg〢KZQ8u& .a -
j$8z{|jɝq2m)[ WʀDzfܛx R IṂaA9~\v:r,GQsez
0d@'4(*5%(:gERXe)YOw lԿ 2>2bSwhb|^ 1Y͒. ^= x˛2Ȃ2xMdϡpXCAS!['b>-#@ˆ,?u ,ɥ[_콠 $lI?oV[ t g.
T!XbE?
\lFIZ5YdlgƱ ľ t#bL^KԀSӛ۾ +eI
f0 8
zгcR0bj\}g.o LGaaQ齍,X!#{ w $졡}VU~ Ihsbyoq@p[屿t;_&!*ԁڷ-"N $I%#>˗6[W} e,"b
)ojL(KD@d RMz?DzeΕ`u̾2|Xd ΏՂ v}i:.b,Ai*K +8:4]dSXpv6}rHݠD 8(+DVsKMl $
DF2Uu M&>H͡@&B1w+&Q@9
. 4byOܘN+u٪=o/*]9D:Z0]r\&a,yv֧̠0O^/oD.E} JPGW,Nc/E!iߗ
kOTs9~qF%7N!ꏕ@ZCCQb42圃HlxWB%84WR16w$EHS_{Ut4) АG|iȇ&4 ɢ"XL!cb&Y6$5kMΣMՇ=]'Nx-^ť;RVCATiX.y[~ %@l( q?"MN.F`Zȑv(cfꊉNn ZYJm9f=ozi <65ٍ U2ڥ7n]YpCS{xޭ,蓶26ʻc$h/b%9vo:* 3ox{A]C{wErTSt:eGtХ^!uHssrP Қ Od`V.~G! s[2O@[Z9K^uI.l%`^m mj (طv涘@qfQ_H¶A˸k=58z|ے`n 5/?1iA0^܍2"ZÜ ē֚3d ijyGÏ='oEzɮ<椝֞lBf L<(S/Hz@NCة
anTNNKkSv|کˤ0Ҽ BR
5\!yCj/.Fi!:X#b
\; $ EU8~) "N4ubNE|
cz*38cl&,VBYԷ؇ I+ƚmg;R~_f->m7Jgc7>:
Hޒ,Td ӹ+b$%U
#J)GTʂH΅Jqaj9[@t lsX!C&UzY5817\ ׳^ˆC+c&`L]بs٠≋Z zð-: !r 2;5o\[ 0#
D!xOߒ*@ ;67M5$XAGIۄWJޔ{,ٖZ>ѕogʘy?}=ۦ`ÁT**HIIָlGgi0!wTWD*$|}Ե;{1\":6 Pa8!pBlDF_d:0Im\JwV){0i>(vX& 寬^]CG6`<\O EHw'ϟ} @4DD#K*H?!v
xkbn5Ƞ""pasa <ހ kOJۻq
-qdNHE-WyNɓ!XLO~V=SD4:Ӛ=CÁifr5Q;Mlx 4w7%Х6Z1XdT~2f4#$Y\cyLAK&^LJV㊻nI6AS[ Y|;ltDw
M'b87,&xN4E> ӄ p `\>zlCEvexpjesJ A /˖E}XY4(ƇS+ "0 ;\H2XqH]PCxFu8ۧ}mg'^eJ-,]5Uco$˴@?(^٪/{0L>Jr7(w4j(R-տgU
L2@SN&pYQ̱?r3YȾ$.`T".oK p#$ 0|)Za'r^Xw~)>1kNoFu
=;{@fFF.`M" 0Uvۊ:Uuw-Ѣ.SвxXp N{}3 π)^j~6! 9inPEArAP;e$X94N e &u3
ۦD6rc04_o;wlnThl cA ^wo]|0]nB-[`C-}@3 Oo`",5*2|:fMQO2&eIt6{P 4 5D |џqR/ .k잧OQJ:
r#kH`G[RaTY}- ۡ(j#@8S,B<GD/+u8i1P[) fk33V' ZV
ϰ} 8g9hNXn[~'n,&1FO=\a6?#J/ FB3Ph;֘bc#Qb@b@""i ?R_ _Xw'E=f
DvoBxKZə jsM U;v%hQpS?PE~C?H/RՅ u݈j "q< ^ Q;4qx [ RK ,Hsg ¹F
YZ