On Mon Oct 5, 2026 at 1:00 PM CEST, Bhavesh Rajesh Maheshwari wrote: > Hi Yoann, > > Any update on this
Hello, After checking, I'll take those into my branch for test/review. Those headers are indeed not exported but We had to check the upstream source's Makefiles to check that. I would have appreciated a direct link to that (for next time!) Regards, > > > Thanks, > > Bhavesh Maheshwari > Engineer > +91 8827543501 > [email protected]<mailto:[email protected]> > [cid:d3773a93-eb5a-4d0d-a651-42fd8103d1c8]<https://www.einfochips.com/> > ________________________________ > From: Bhavesh Rajesh Maheshwari <[email protected]> > Sent: 28 September 2026 15:48 > To: [email protected] > <[email protected]>; [email protected] > <[email protected]> > Subject: Re: [External] Re: [wrynose][oe-core][PATCH 5/5] ffmpeg: Fix for > CVE-2026-66041 > > Hi Yoann, > Thanks for checking. I looked at the FFmpeg 8.0 QuircContext documentation > and source. Although Doxygen lists the struct, it is defined in > libavfilter/vf_quirc.c and used as the quirc filter’s private context. It > isn’t part of the public API. > The patch adds width and height fields to that private context, and the build > with the patch applied is verified. I don’t expect this to break supported > external code. The only potential concern would be downstream code relying > directly on this internal struct layout. > > Thanks, > > Bhavesh Maheshwari > Engineer > +91 8827543501 > [email protected]<mailto:[email protected]> > [cid:a6d6c0b2-4532-484b-9ec6-adca64de6f13]<https://www.einfochips.com/> > ________________________________ > From: [email protected] > <[email protected]> on behalf of Yoann Congal via > lists.openembedded.org <[email protected]> > Sent: 27 September 2026 02:07 > To: Bhavesh Rajesh Maheshwari <[email protected]>; > [email protected] > <[email protected]> > Subject: [External] Re: [wrynose][oe-core][PATCH 5/5] ffmpeg: Fix for > CVE-2026-66041 > > > CAUTION: This email originated from outside of the organization. This message > might not be safe, use caution in opening it. If in doubt, do not open the > attachment nor links in the message. > > > On Tue Sep 22, 2026 at 9:01 AM CEST, Bhavesh R Maheshwari via > lists.openembedded.org wrote: >> From: Bhavesh R Maheshwari <[email protected]> >> >> Pick the patch from [1], also referenced in the NVD report [2]. >> >> [1] >> https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcode.ffmpeg.org%2FFFmpeg%2FFFmpeg%2Fcommit%2F4da9812e25894fb51d62a8875cfa8eb39b5e20f5&data=05%7C02%7Cbhavesh.maheshwari%40einfochips.com%7C7fe67053ed514d0a521d08df1c0df794%7C0beb0c359cbb4feb99e5589e415c7944%7C1%7C0%7C639260518444725508%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=yXRkqouFPx5rn7HcXqCIyLYvG6DGjw%2F5lRPYq544zPg%3D&reserved=0<https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5> >> [2] >> https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnvd.nist.gov%2Fvuln%2Fdetail%2Fcve-2026-66041&data=05%7C02%7Cbhavesh.maheshwari%40einfochips.com%7C7fe67053ed514d0a521d08df1c0df794%7C0beb0c359cbb4feb99e5589e415c7944%7C1%7C0%7C639260518444753817%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=UvlOY1pB7KYXkF5k%2Bgyx5DEihvVKJ3yojDR%2F7QLFNpg%3D&reserved=0<https://nvd.nist.gov/vuln/detail/cve-2026-66041> >> >> Signed-off-by: Bhavesh R Maheshwari <[email protected]> >> --- >> .../ffmpeg/ffmpeg/CVE-2026-66041.patch | 60 +++++++++++++++++++ >> .../recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb | 1 + >> 2 files changed, 61 insertions(+) >> create mode 100644 >> meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66041.patch >> >> diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66041.patch >> b/meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66041.patch >> new file mode 100644 >> index 0000000000..7a8c4e0c8b >> --- /dev/null >> +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66041.patch >> @@ -0,0 +1,60 @@ >> +From 9db6b5816516b85e981e177863b2eb361dbec3c8 Mon Sep 17 00:00:00 2001 >> +From: Michael Niedermayer <[email protected]> >> +Date: Sun, 28 Jun 2026 15:33:38 +0200 >> +Subject: [PATCH] avfilter/vf_quirc: resize the quirc buffers when the input >> + size changes >> + >> +Fixes: out of array access >> +Fixes: JbvzNObhorBp >> +Fixes: 030e140145 (lavfi: add quirc filter) >> +Found-by: Adrian Junge (vurlo) >> +Signed-off-by: Michael Niedermayer <[email protected]> >> + >> +CVE: CVE-2026-66041 >> +Upstream-Status: Backport >> [https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcode.ffmpeg.org%2FFFmpeg%2FFFmpeg%2Fcommit%2F4da9812e25894fb51d62a8875cfa8eb39b5e20f5&data=05%7C02%7Cbhavesh.maheshwari%40einfochips.com%7C7fe67053ed514d0a521d08df1c0df794%7C0beb0c359cbb4feb99e5589e415c7944%7C1%7C0%7C639260518444773405%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=fL9bPK6QDy%2FfoOT4NV2UwWLNCNW3NU12RP0eKmsBr7Q%3D&reserved=0<https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5>] >> + >> +Signed-off-by: Bhavesh R Maheshwari <[email protected]> >> +--- >> + libavfilter/vf_quirc.c | 12 ++++++++++++ >> + 1 file changed, 12 insertions(+) >> + >> +diff --git a/libavfilter/vf_quirc.c b/libavfilter/vf_quirc.c >> +index 59dc84caa8..d2ba48e7bc 100644 >> +--- a/libavfilter/vf_quirc.c >> ++++ b/libavfilter/vf_quirc.c >> +@@ -36,6 +36,7 @@ typedef struct QuircContext { >> + const AVClass *class; >> + >> + struct quirc *quirc; >> ++ int width, height; >> + } QuircContext; > > Same question as 1/5: > https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ffmpeg.org%2Fdoxygen%2F8.0%2FstructQuircContext.html&data=05%7C02%7Cbhavesh.maheshwari%40einfochips.com%7C7fe67053ed514d0a521d08df1c0df794%7C0beb0c359cbb4feb99e5589e415c7944%7C1%7C0%7C639260518444792117%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=xB5mU5FhBShAJ7zomz7F7lBWu2BBpYTDKNAdGXAR0QM%3D&reserved=0<https://www.ffmpeg.org/doxygen/8.0/structQuircContext.html> > Are you sure this does not break existing code? > > FYI, for the series as a whole: Since 2-4/5 are indenpendant of 1,5/5, > I'll keep 2-4/5 in my branch for tests/reviews but hold 1,5/5 while we > clarify the API change. > > Thanks! > -- > Yoann Congal > Smile ECS -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247398): https://lists.openembedded.org/g/openembedded-core/message/247398 Mute This Topic: https://lists.openembedded.org/mt/121370959/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
