[Deepin Integration]~[v25-Release] fix(ffmpeg): CVE-2026-58049 by deepin-ci-robot@deepin-community/ffmpeg by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
ffmpeg	7:6.1.5-0deepin4

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4219/testing/ ./

Changelog | 更新信息

ffmpeg (7:6.1.5-0deepin4) unstable; urgency=medium

• CVE-2026-58049: Fix out-of-bounds write in RASC decoder decode_dlta()
  Check that 32-bit DLTA accesses stay within the row boundary.
  Upstream commit: 11ff18a6c80187405fc492f9bb07ba9f2f663f76
• CVE-2026-30999: Fix heap buffer overflow in av_bprint_finalize()
  Free the AVBprint buffer after using it in tools/zmqsend.c
  Upstream: https://git.ffmpeg.org/git/ffmpeg.git/commit/144af8f8

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4219