Your message dated Thu, 08 Feb 2018 21:18:16 +0000
with message-id <e1ejtac-000hcb...@fasolo.debian.org>
and subject line Bug#886912: fixed in ffmpeg 7:3.2.10-1~deb9u1
has caused the Debian Bug report #886912,
regarding ffmpeg segfaults when using sftp
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
886912: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886912
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: ffmpeg
Version: 7:3.2.9-1~deb9u1
Severity: important
Dear Maintainer,
To reproduce:
1. Open a file with the -i option and supply it with the sftp:// protocol with
an ip and path to the desired file.
The following log displays that using the sftp in at least my configuration
will cause a segfault and the ip used was 127.0.1.1:
yetoo@debian:~/Videos$ ffmpeg -loglevel debug -i sftp://127.0.1.1/midlife.mp4
ffmpeg version 3.2.9-1~deb9u1 Copyright (c) 2000-2017 the FFmpeg developers
built with gcc 6.3.0 (Debian 6.3.0-18) 20170516
configuration: --prefix=/usr --extra-version='1~deb9u1' --toolchain=hardened
--libdir=/usr/lib/x86_64-linux-gnu --incdir=/usr/include/x86_64-linux-gnu
--enable-gpl --disable-stripping --enable-avresample --enable-avisynth
--enable-gnutls --enable-ladspa --enable-libass --enable-libbluray
--enable-libbs2b --enable-libcaca --enable-libcdio --enable-libebur128
--enable-libflite --enable-libfontconfig --enable-libfreetype
--enable-libfribidi --enable-libgme --enable-libgsm --enable-libmp3lame
--enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable-libpulse
--enable-librubberband --enable-libshine --enable-libsnappy --enable-libsoxr
--enable-libspeex --enable-libssh --enable-libtheora --enable-libtwolame
--enable-libvorbis --enable-libvpx --enable-libwavpack --enable-libwebp
--enable-libx265 --enable-libxvid --enable-libzmq --enable-libzvbi --enable-omx
--enable-openal --enable-opengl --enable-sdl2 --enable-libdc1394
--enable-libiec61883 --enable-chromaprint --enable-frei0r --enable-libopencv
--enable-libx264 --enable-shared
libavutil 55. 34.101 / 55. 34.101
libavcodec 57. 64.101 / 57. 64.101
libavformat 57. 56.101 / 57. 56.101
libavdevice 57. 1.100 / 57. 1.100
libavfilter 6. 65.100 / 6. 65.100
libavresample 3. 1. 0 / 3. 1. 0
libswscale 4. 2.100 / 4. 2.100
libswresample 2. 3.100 / 2. 3.100
libpostproc 54. 1.100 / 54. 1.100
Splitting the commandline.
Reading option '-loglevel' ... matched as option 'loglevel' (set logging level)
with argument 'debug'.
Reading option '-i' ... matched as input url with argument
'sftp://127.0.1.1/midlife.mp4'.
Finished splitting the commandline.
Parsing a group of options: global .
Applying option loglevel (set logging level) with argument debug.
Successfully parsed a group of options.
Parsing a group of options: input url sftp://127.0.1.1/midlife.mp4.
Successfully parsed a group of options.
Opening an input file: sftp://127.0.1.1/midlife.mp4.
[NULL @ 0x5609c5fa0d60] Opening 'sftp://127.0.1.1/midlife.mp4' for reading
[sftp @ 0x5609c5fa15c0] No default whitelist set
Segmentation fault
-- System Information:
Debian Release: 9.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8),
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages ffmpeg depends on:
ii libavcodec57 7:3.2.9-1~deb9u1
ii libavdevice57 7:3.2.9-1~deb9u1
ii libavfilter6 7:3.2.9-1~deb9u1
ii libavformat57 7:3.2.9-1~deb9u1
ii libavresample3 7:3.2.9-1~deb9u1
ii libavutil55 7:3.2.9-1~deb9u1
ii libc6 2.24-11+deb9u1
ii libpostproc54 7:3.2.9-1~deb9u1
ii libsdl2-2.0-0 2.0.5+dfsg1-2
ii libswresample2 7:3.2.9-1~deb9u1
ii libswscale4 7:3.2.9-1~deb9u1
ii libva1 1.7.3-2
ffmpeg recommends no packages.
Versions of packages ffmpeg suggests:
pn ffmpeg-doc <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: ffmpeg
Source-Version: 7:3.2.10-1~deb9u1
We believe that the bug you reported is fixed in the latest version of
ffmpeg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 886...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
James Cowgill <jcowg...@debian.org> (supplier of updated ffmpeg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 26 Jan 2018 09:45:14 +0000
Source: ffmpeg
Binary: ffmpeg ffmpeg-doc libavcodec57 libavcodec-extra57 libavcodec-extra
libavcodec-dev libavdevice57 libavdevice-dev libavfilter6 libavfilter-extra6
libavfilter-extra libavfilter-dev libavformat57 libavformat-dev libavresample3
libavresample-dev libavutil55 libavutil-dev libpostproc54 libpostproc-dev
libswresample2 libswresample-dev libswscale4 libswscale-dev libav-tools
Architecture: source
Version: 7:3.2.10-1~deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian Multimedia Maintainers
<pkg-multimedia-maintainers@lists.alioth.debian.org>
Changed-By: James Cowgill <jcowg...@debian.org>
Description:
ffmpeg - Tools for transcoding, streaming and playing of multimedia files
ffmpeg-doc - Documentation of the FFmpeg multimedia framework
libav-tools - Compatibility links for libav-tools (transitional package)
libavcodec-dev - FFmpeg library with de/encoders for audio/video codecs -
developm
libavcodec-extra - FFmpeg library with extra codecs (metapackage)
libavcodec-extra57 - FFmpeg library with additional de/encoders for
audio/video codecs
libavcodec57 - FFmpeg library with de/encoders for audio/video codecs - runtime
libavdevice-dev - FFmpeg library for handling input and output devices -
developmen
libavdevice57 - FFmpeg library for handling input and output devices - runtime
fi
libavfilter-dev - FFmpeg library containing media filters - development files
libavfilter-extra - FFmpeg library with extra filters (metapackage)
libavfilter-extra6 - FFmpeg library with extra media filters - runtime files
libavfilter6 - FFmpeg library containing media filters - runtime files
libavformat-dev - FFmpeg library with (de)muxers for multimedia containers -
develo
libavformat57 - FFmpeg library with (de)muxers for multimedia containers -
runtim
libavresample-dev - FFmpeg compatibility library for resampling - development
files
libavresample3 - FFmpeg compatibility library for resampling - runtime files
libavutil-dev - FFmpeg library with functions for simplifying programming -
devel
libavutil55 - FFmpeg library with functions for simplifying programming - runti
libpostproc-dev - FFmpeg library for post processing - development files
libpostproc54 - FFmpeg library for post processing - runtime files
libswresample-dev - FFmpeg library for audio resampling, rematrixing etc. -
developme
libswresample2 - FFmpeg library for audio resampling, rematrixing etc. -
runtime f
libswscale-dev - FFmpeg library for image scaling and various conversions -
develo
libswscale4 - FFmpeg library for image scaling and various conversions - runtim
Closes: 886912
Changes:
ffmpeg (7:3.2.10-1~deb9u1) stretch-security; urgency=medium
.
* New upstream release.
- avcodec/x86/mpegvideodsp: Fix signedness bug in need_emu.
(CVE-2017-17081)
- avformat/libssh: check the user provided a password before trying to
use it. (Closes: #886912)
* debian/patches:
- Drop CVE-2017-16840 patch - applied upstream.
Checksums-Sha1:
a4fa87191b3f2c2904e9f3d27fd5422ba0743873 5187 ffmpeg_3.2.10-1~deb9u1.dsc
e90b423252a0e338e725f0781c6d31a16c97531f 8036940 ffmpeg_3.2.10.orig.tar.xz
449ebbbc1eaafcb4c013f7c00a1ad67d4e0f8254 473 ffmpeg_3.2.10.orig.tar.xz.asc
3c66390fc12639119691b387819a7ef8f135a25b 39188
ffmpeg_3.2.10-1~deb9u1.debian.tar.xz
3b70ea2d328c5afc8c43015a693dff4d4be28a27 8911
ffmpeg_3.2.10-1~deb9u1_source.buildinfo
Checksums-Sha256:
47fdf3ba8d440cbdfee18fb19cb1c68bf0956ac2a177b8062f2e12b5d28fb336 5187
ffmpeg_3.2.10-1~deb9u1.dsc
3c1626220c7b68ff6be7312559f77f3c65ff6809daf645d4470ac0189926bdbc 8036940
ffmpeg_3.2.10.orig.tar.xz
215defff760480ea1cb8ac5b7b02a121610d40c4cff07a040ec40f6ac5551694 473
ffmpeg_3.2.10.orig.tar.xz.asc
a907b22f375340c20017b08dd6656dcb3ec1341d937933b8bdec8a3e1786401f 39188
ffmpeg_3.2.10-1~deb9u1.debian.tar.xz
ddc83ce0c68d032460aad536bb05c5cf179c908e9a1bbd325cb978c8ff82b756 8911
ffmpeg_3.2.10-1~deb9u1_source.buildinfo
Files:
17e275331c27cfade816ea9a7af21422 5187 video optional ffmpeg_3.2.10-1~deb9u1.dsc
ec747925e19aa77adbec17e98e24a72e 8036940 video optional
ffmpeg_3.2.10.orig.tar.xz
0985ac62e9bc13e371c4ccbfc4979a74 473 video optional
ffmpeg_3.2.10.orig.tar.xz.asc
53a742437cb1106c871f728d0cc0b415 39188 video optional
ffmpeg_3.2.10-1~deb9u1.debian.tar.xz
099b558c92cfdc1c498111a545a8cb5d 8911 video optional
ffmpeg_3.2.10-1~deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCgAyFiEE+Ixt5DaZ6POztUwQx/FnbeotAe8FAlpsRsQUHGpjb3dnaWxs
QGRlYmlhbi5vcmcACgkQx/FnbeotAe9CIg//bTQ/h0HFY3/q03JIXd7ibyObrqz6
iRLI0p17yuGkUZ2BwLlHnqnBGAlhlloD5ujagfS06EseGtYTG/LPABmkSknx4W2m
x1O/0cxiU2MejN8zPQ7Ln3rOM0pi+IKPjU7xcQZEiMJf0TvO+h7AZfoDO37fMF+p
wSnYaBqVojmyH4/JPewbaf2MrSx1Em2fmjKZI/KDa5KrfTexn/CxH6kQZ20c7Qf5
cpINytOXmsCJUqB5iOQTjHjyaRY89C+e5/Ygr8ipZoSzi7znPS0m/9EQXjZntTF2
EqHmgjcGTBs2AAGb6AgKvubTk12Da58QZivHPzn2UVLGSsKBbPPQyDVpKQIEY3eR
6kmEubdaVAuigfHk6pZThFs5FewJ1cfbIVPw6Mcf4e6OCw79Ea5iWc4Q7kG2081c
BhfuZ/MWYoXXKTsvp1J9bwSkKQHxLf5yJ+jFyrmUTPnnp4Yssj0ELQgKJEdYzMQU
EBhftsKy3IK6EKB5H/BriR2Xqm6MZrCSqcyubgijEs7DGjahdmx67aCj1tjcoErt
AMwO8SmT5Uq5KZ5Hykjn1Km/4W2h8cXg3RkJ5iYr3py0kjBnfJ0QJ6XeavfU54Ej
5coa6bfwwfYrHUIXrbLhnDwySwB8XaGMUIHhWGXB1mDUhOXnR06XV/b1gBqndhw8
VyYFclOutQqSXUk=
=odO0
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers