From 787d1f0f988f4b7fad6aa9ee4e8a0e50a0c64c4c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jeremy=20Lain=C3=A9?= Date: Wed, 1 Nov 2023 19:01:51 +0100 Subject: [PATCH] Update our binaries for FFmpeg 5.1 In addition to updating FFmpeg to version 5.1.3, this updates libvpx to fix the CVE-2023-5217 buffer overflow vulnerability. --- .github/workflows/tests.yml | 2 +- scripts/fetch-vendor.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 3cd077ade..972366110 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -162,7 +162,7 @@ jobs: python=${{ matrix.config.python }} \ setuptools if [[ "${{ matrix.config.ffmpeg }}" == "5.1" ]]; then - curl -L -o ffmpeg.tar.gz https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.2-1/ffmpeg-win_amd64.tar.gz + curl -L -o ffmpeg.tar.gz https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.3-1/ffmpeg-win_amd64.tar.gz elif [[ "${{ matrix.config.ffmpeg }}" == "5.0" ]]; then curl -L -o ffmpeg.tar.gz https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.0.1-1/ffmpeg-win_amd64.tar.gz else diff --git a/scripts/fetch-vendor.json b/scripts/fetch-vendor.json index 2a02f285b..75e4b8eca 100644 --- a/scripts/fetch-vendor.json +++ b/scripts/fetch-vendor.json @@ -1,3 +1,3 @@ { - "urls": ["https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.2-1/ffmpeg-{platform}.tar.gz"] + "urls": ["https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.3-1/ffmpeg-{platform}.tar.gz"] }