[Deepin Integration]~[v25-Release] fix(cve): CVE-2024-32228 - avcodec/hevcdec: fix segfault on invalid film grain metadata by deepin-ci-robot@deepin-community/ffmpeg by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
ffmpeg	7:6.1.5-0deepin8

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4548/testing/ ./

Changelog | 更新信息

ffmpeg (7:6.1.5-0deepin8) unstable; urgency=medium

• fix(cve): CVE-2026-38349
• fix(cve): CVE-2026-38347 (unknown) - swscale/alphablend: don't
  overread alpha plane on subsampled odd size Upstream:
  https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/bb88e295394e5db584063bd
  e790bfbdba04d54ec
• fix(cve): CVE-2026-64832 (high) - avcodec/nvdec: don't double free
  the fdd-owned context on the sep_ref error path Upstream:
  https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d
  9d1d0d76d30e37f97

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4548