Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 538798 (ffmpeg-2.2-stable) - =media-video/ffmpeg-2.2.14 stable request
Summary: =media-video/ffmpeg-2.2.14 stable request
Status: RESOLVED FIXED
Alias: ffmpeg-2.2-stable
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Keywording and Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Media-video project
URL:
Whiteboard:
Keywords: STABLEREQ
Depends on: 510690 521050 538810 538896 538898 538904 538908 539114
Blocks: 525148 528554 547668 548964 551972
  Show dependency tree
 
Reported: 2015-02-04 13:18 UTC by Pacho Ramos
Modified: 2015-07-04 13:51 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Pacho Ramos gentoo-dev 2015-02-04 13:18:12 UTC
This is for adding other pending stabilizations as blockers and, for now, the 2.2 tracker
Comment 1 Alexis Ballier gentoo-dev 2015-02-08 10:40:45 UTC
@pacho: why does this depend on gnome-3.14 stable ? I'd say it's the opposite: you need ffmpeg-2 for gst 1.4 stable
Comment 2 Alexis Ballier gentoo-dev 2015-02-08 10:41:57 UTC
apart from that, I'd say we're good to go as long as arch teams proceed with blocker bugs before this one
Comment 3 Pacho Ramos gentoo-dev 2015-02-08 10:47:23 UTC
(In reply to Alexis Ballier from comment #1)
> @pacho: why does this depend on gnome-3.14 stable ? I'd say it's the
> opposite: you need ffmpeg-2 for gst 1.4 stable

This is because of the gst-libav, I thought on two options:
- Stabilize its 1.4.x version at the same time of this one (and then all together).
- Stabilize all the other gnome-3.14+gst-1.4 pack *but* the gst-livav-1.4 (as 1.2 works ok still with gstreamer-1.4) and, then, stabilize that plugin in this bug report.

Anyway we can rethink about it if it becomes the last blocker :/ (ideally we could CC arches in all soon but... we are waiting for bug 530652 and some others and then I don't know how much gnome-3.14+gst-1.4 will be delayed :S)
Comment 4 Alexis Ballier gentoo-dev 2015-02-08 10:52:57 UTC
(In reply to Pacho Ramos from comment #3)
> (In reply to Alexis Ballier from comment #1)
> > @pacho: why does this depend on gnome-3.14 stable ? I'd say it's the
> > opposite: you need ffmpeg-2 for gst 1.4 stable
> 
> This is because of the gst-libav, I thought on two options:
> - Stabilize its 1.4.x version at the same time of this one (and then all
> together).
> - Stabilize all the other gnome-3.14+gst-1.4 pack *but* the gst-livav-1.4
> (as 1.2 works ok still with gstreamer-1.4) and, then, stabilize that plugin
> in this bug report.
> 
> Anyway we can rethink about it if it becomes the last blocker :/ (ideally we
> could CC arches in all soon but... we are waiting for bug 530652 and some
> others and then I don't know how much gnome-3.14+gst-1.4 will be delayed :S)

But wait, the starting point of all this was:
- gst 1.2 is fine with ffmpeg 2.2 but not with libav-10
- gst 1.4 required ffmpeg 2.2 or libav 10. I patched it to work with libav-9.
- ffmpeg 2.2 can be stabilized before gst.
- gst-1.4 is then a pivot version: it can be stabilized so that libav-10 can be stabilized later.

Is any of the above not true ?

(what is not fine with gst 1.2 is ffmpeg 2.3+, which version are still masked)
Comment 5 Pacho Ramos gentoo-dev 2015-02-08 14:53:15 UTC
(In reply to Alexis Ballier from comment #4)
[...]
> - gst 1.2 is fine with ffmpeg 2.2 but not with libav-10

-> this is not 100% true, if I don't misremember it builds with ffmpeg-2.2 but doesn't really work ok with it (some people have memory leaks), I remember this problem when months ago I needed to look at Mageia patches for that but the memleaks were not really solved until upstream handled them in 1.3.x (at first I remember they backported the fixes from 1.3 to 1.2 but later they reverted that commits as they caused breakages with the libav versions 1.2 is supposed to work)
Comment 6 Alexis Ballier gentoo-dev 2015-02-08 16:18:33 UTC
you'd know better, but i thought this was fixed:

*gst-plugins-libav-1.2.4 (25 Jun 2014)

  25 Jun 2014; Pacho Ramos <pacho@gentoo.org>
  +files/gst-plugins-libav-1.2.4-ffmpeg2.patch,
  +files/gst-plugins-libav-1.2.4-fix-memory-leak.patch,
  +gst-plugins-libav-1.2.4.ebuild, -gst-plugins-libav-1.2.0.ebuild:
  Version bump, fix memory leak (#494282)
Comment 7 Pacho Ramos gentoo-dev 2015-02-08 20:44:26 UTC
Oh, yeah, you are true, sorry, many time passed since I committed it. Anyway, reading bug 494282 I am not sure if maybe a rebuild of the plugin after ffmpeg bump (with the := subslots?) would be needed :/
Comment 8 Alexis Ballier gentoo-dev 2015-02-09 09:21:08 UTC
(In reply to Pacho Ramos from comment #7)
> Oh, yeah, you are true, sorry, many time passed since I committed it.
> Anyway, reading bug 494282 I am not sure if maybe a rebuild of the plugin
> after ffmpeg bump (with the := subslots?) would be needed :/

this will be done with the := subslot, but even without it, it'll have preserved-libs or revdep-rebuild
Comment 9 Pacho Ramos gentoo-dev 2015-02-09 10:04:46 UTC
It currently doesn't set := because it's using the virtual:
>=virtual/ffmpeg-9-r1[${MULTILIB_USEDEP}]

But as the preserved-libs will do the trick, no problem
Comment 10 Alexis Ballier gentoo-dev 2015-02-16 08:32:29 UTC
cc'ing security@g.o since that's from here that we'll handle stabilization to fix blocked sec bugs
Comment 11 Alexis Ballier gentoo-dev 2015-03-16 15:49:08 UTC
2.2.13
Fixes following vulnerabilities:

CVE-2015-1872, 4c246c65bfa221c45452923cf148f7b11245b6d5 / fabbfaa095660982cc0bc63242c459561fa37037


2.2.12
Fixes following vulnerabilities:

CVE-2014-9603, 7279be7c75c38547994466b6f95bc3cadb05238b / 3030fb7e0d41836f8add6399e9a7c7b740b48bfd
CVE-2014-9604, c351cd720a0c870dc09a15b6e191188978349bc7 / 3881606240953b9275a247a1c98a567f3c44890f
Comment 12 Alexis Ballier gentoo-dev 2015-03-31 08:03:53 UTC
been waiting long enough, lets go
Comment 13 Alexis Ballier gentoo-dev 2015-03-31 08:06:30 UTC
arches should also package.use.stable.mask x265 for now, we'll stabilize it later.
Comment 14 Jeroen Roovers (RETIRED) gentoo-dev 2015-04-02 16:24:13 UTC
Stable for HPPA.
Comment 15 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2015-04-11 12:10:22 UTC
amd64 stable
Comment 16 redneb 2015-04-11 16:31:12 UTC
Why was media-libs/x265 stabilized for hppa?
Comment 17 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2015-04-12 09:12:16 UTC
(In reply to redneb from comment #16)
> Why was media-libs/x265 stabilized for hppa?

@jer,

(In reply to Alexis Ballier from comment #13)
> arches should also package.use.stable.mask x265 for now, we'll stabilize it
> later.
Comment 18 Alexis Ballier gentoo-dev 2015-04-13 06:46:03 UTC
(In reply to Mikle Kolyada from comment #17)
> (In reply to redneb from comment #16)
> > Why was media-libs/x265 stabilized for hppa?
> 
> @jer,
> 
> (In reply to Alexis Ballier from comment #13)
> > arches should also package.use.stable.mask x265 for now, we'll stabilize it
> > later.

it's not really a big issue; x265 should go stable rather sooner than later, it's just that its bugs tend to pile up
Comment 19 Pacho Ramos gentoo-dev 2015-04-26 16:17:33 UTC
x86 stable
Comment 20 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2015-05-11 17:09:28 UTC
(In reply to Alexis Ballier from comment #18)
> (In reply to Mikle Kolyada from comment #17)
> > (In reply to redneb from comment #16)
> > > Why was media-libs/x265 stabilized for hppa?
> > 
> > @jer,
> > 
> > (In reply to Alexis Ballier from comment #13)
> > > arches should also package.use.stable.mask x265 for now, we'll stabilize it
> > > later.
> 
> it's not really a big issue; x265 should go stable rather sooner than later,
> it's just that its bugs tend to pile up

x265 is stable now on amd64 too, because libav pulls it too.
Comment 21 Pacho Ramos gentoo-dev 2015-05-15 07:47:52 UTC
ppc stable
Comment 22 Pacho Ramos gentoo-dev 2015-05-15 07:49:41 UTC
ppc64 stable
Comment 23 Jack Morgan (RETIRED) gentoo-dev 2015-05-29 07:43:48 UTC
sparc stable
Comment 24 Jack Morgan (RETIRED) gentoo-dev 2015-05-30 00:04:13 UTC
ia64 stable
Comment 25 Markus Meier gentoo-dev 2015-05-30 10:55:35 UTC
arm stable
Comment 26 Yury German Gentoo Infrastructure gentoo-dev 2015-07-01 11:59:23 UTC
There is now a vulnerability against this version. Non Vulnerable version is 2.2.15. See Bug #548006
Comment 27 Tobias Klausmann (RETIRED) gentoo-dev 2015-07-04 13:51:55 UTC
This also required these on alpha:

=net-libs/libssh-0.7.0-r1
=dev-util/cmocka-0.3.1-r1

Tested and stabilized all three, closing.