diff --git a/0011-add-patch-to-fix-CVE-2025-12343.patch b/0011-add-patch-to-fix-CVE-2025-12343.patch new file mode 100644 index 0000000000000000000000000000000000000000..9ab75771618e402ad71f35daa0856239ddc9e28f --- /dev/null +++ b/0011-add-patch-to-fix-CVE-2025-12343.patch @@ -0,0 +1,36 @@ +From b8d5f65b9e89d893f27cf00799dbc15fc0ca2f8e Mon Sep 17 00:00:00 2001 +From: Jiasheng Jiang +Date: Thu, 7 Aug 2025 14:50:10 +0000 +Subject: [PATCH] libavfilter/dnn/dnn_backend_tf: Remove redundant av_freep() + to avoid double free + +Remove redundant av_freep() to avoid double free since task will be freed in dnn_free_model_tf() after the success of ff_queue_push_back(). + +Fixes: af052f9066 ("lavfi/dnn: fix mem leak in TF backend error handle") +Signed-off-by: Jiasheng Jiang +--- + libavfilter/dnn/dnn_backend_tf.c | 2 -- + 1 file changed, 2 deletions(-) + +diff --git a/libavfilter/dnn/dnn_backend_tf.c b/libavfilter/dnn/dnn_backend_tf.c +index 6ca7fb6910..2c33691f96 100644 +--- a/libavfilter/dnn/dnn_backend_tf.c ++++ b/libavfilter/dnn/dnn_backend_tf.c +@@ -833,14 +833,12 @@ static int dnn_execute_model_tf(const DNNModel *model, DNNExecBaseParams *exec_p + + ret = extract_lltask_from_task(task, tf_model->lltask_queue); + if (ret != 0) { +- av_freep(&task); + av_log(ctx, AV_LOG_ERROR, "unable to extract last level task from task.\n"); + return ret; + } + + request = ff_safe_queue_pop_front(tf_model->request_queue); + if (!request) { +- av_freep(&task); + av_log(ctx, AV_LOG_ERROR, "unable to get infer request.\n"); + return AVERROR(EINVAL); + } +-- +2.25.1 + diff --git a/ffmpeg.spec b/ffmpeg.spec index 005dec0e97f91f1bc3726e163489ae0c7c0662ce..e135b9d773b1f519cfb031d60260f98f13b76284 100644 --- a/ffmpeg.spec +++ b/ffmpeg.spec @@ -1,4 +1,4 @@ -%define anolis_release 10 +%define anolis_release 11 %global av_codec_soversion 60 %global av_device_soversion 60 @@ -39,6 +39,8 @@ Patch0008: 0008-add-patch-to-fix-CVE-2025-1594.patch Patch0009: 0009-add-patch-to-fix-CVE-2025-63757.patch # https://git.ffmpeg.org/gitweb/ffmpeg.git/patch/0e8ccde9e5c9daa081eb4c037d83350390c9aa2b Patch0010: 0010-add-patch-to-fix-CVE-2025-10256.patch +#https://git.ffmpeg.org/gitweb/ffmpeg.git/patch/b8d5f65b9e89d893f27cf00799dbc15fc0ca2f8e +Patch0011: 0011-add-patch-to-fix-CVE-2025-12343.patch BuildRequires: lame-devel >= 3.98.3 BuildRequires: libtool @@ -423,6 +425,9 @@ rm -rf %{buildroot}%{_datadir}/%{name}/examples %changelog +* Wed Feb 25 2026 yangjinlin01 - 6.1.1-11 +- Add patch to fix CVE-2025-12343 + * Tue Feb 24 2026 yangjinlin01 - 6.1.1-10 - Add patch to fix CVE-2025-10256