Skip to content

Commit

Permalink
Update our binaries for FFmpeg 5.1
Browse files Browse the repository at this point in the history
In addition to updating FFmpeg to version 5.1.3, this updates libvpx to
fix the CVE-2023-5217 buffer overflow vulnerability.
  • Loading branch information
jlaine committed Nov 1, 2023
1 parent 9b32621 commit f1b1c0a
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 4 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -162,7 +162,7 @@ jobs:
python=${{ matrix.config.python }} \
setuptools
if [[ "${{ matrix.config.ffmpeg }}" == "5.1" ]]; then
curl -L -o ffmpeg.tar.gz https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.2-1/ffmpeg-win_amd64.tar.gz
curl -L -o ffmpeg.tar.gz https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.3-1/ffmpeg-win_amd64.tar.gz
elif [[ "${{ matrix.config.ffmpeg }}" == "5.0" ]]; then
curl -L -o ffmpeg.tar.gz https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.0.1-1/ffmpeg-win_amd64.tar.gz
else
Expand Down
3 changes: 1 addition & 2 deletions docs/overview/installation.rst
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Since release 8.0.0 binary wheels are provided on PyPI for Linux, Mac and Window
pip install av
Currently FFmpeg 5.1.2 is used with the following features enabled for all platforms:
Currently FFmpeg 5.1.3 is used with the following features enabled for all platforms:

- fontconfig
- gmp
Expand All @@ -26,7 +26,6 @@ Currently FFmpeg 5.1.2 is used with the following features enabled for all platf
- libopenjpeg
- libopus
- libspeex
- libtheora
- libtwolame
- libvorbis
- libvpx
Expand Down
2 changes: 1 addition & 1 deletion scripts/fetch-vendor.json
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
{
"urls": ["https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.2-1/ffmpeg-{platform}.tar.gz"]
"urls": ["https://github.com/PyAV-Org/pyav-ffmpeg/releases/download/5.1.3-1/ffmpeg-{platform}.tar.gz"]
}

0 comments on commit f1b1c0a

Please sign in to comment.