Skip to content

Commit bd0f88a

Browse files
committed
Bump ffmpeg to 8.1.2 to fix CVE-2026-8461
ffmpeg 8.1.1 is affected by CVE-2026-8461, an out-of-bounds write in the MagicYUV decoder (libavcodec/magicyuv.c, CWE-787, CVSS 8.8). It is fixed upstream in ffmpeg 8.1.2. Update FFMPEG_VERSION from 8.1.1 to 8.1.2 in all seven build Dockerfiles (manylinux2014, manylinux_2_28 and musllinux_1_2).
1 parent ed685ab commit bd0f88a

7 files changed

Lines changed: 7 additions & 7 deletions

File tree

docker/manylinux2014/Dockerfile_aarch64

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
FROM quay.io/pypa/manylinux2014_aarch64:latest
55

66
ARG CCACHE_VERSION=4.13.6
7-
ARG FFMPEG_VERSION=8.1.1
7+
ARG FFMPEG_VERSION=8.1.2
88
ARG FREETYPE_VERSION=2.14.3
99
ARG LIBPNG_VERSION=1.6.58
1010
ARG VPX_VERSION=v1.15.2

docker/manylinux2014/Dockerfile_i686

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ FROM quay.io/pypa/manylinux2014_i686:latest
22

33
ARG CCACHE_VERSION=3.7.9
44
ARG CMAKE_VERSION=3.17.0
5-
ARG FFMPEG_VERSION=8.1.1
5+
ARG FFMPEG_VERSION=8.1.2
66
ARG NASM_VERSION=2.15.04
77
ARG OPENSSL_VERSION=1_1_1w
88
ARG QT_VERSION=5.15.0

docker/manylinux2014/Dockerfile_x86_64

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
FROM quay.io/pypa/manylinux2014_x86_64:latest
55

66
ARG CCACHE_VERSION=4.13.6
7-
ARG FFMPEG_VERSION=8.1.1
7+
ARG FFMPEG_VERSION=8.1.2
88
ARG FREETYPE_VERSION=2.14.3
99
ARG LIBPNG_VERSION=1.6.58
1010
ARG VPX_VERSION=v1.15.2

docker/manylinux_2_28/Dockerfile_aarch64

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33

44
FROM quay.io/pypa/manylinux_2_28_aarch64:latest
55

6-
ARG FFMPEG_VERSION=8.1.1
6+
ARG FFMPEG_VERSION=8.1.2
77
ARG FREETYPE_VERSION=2.14.3
88
ARG LIBPNG_VERSION=1.6.58
99
ARG VPX_VERSION=v1.15.2

docker/manylinux_2_28/Dockerfile_x86_64

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33

44
FROM quay.io/pypa/manylinux_2_28_x86_64:latest
55

6-
ARG FFMPEG_VERSION=8.1.1
6+
ARG FFMPEG_VERSION=8.1.2
77
ARG FREETYPE_VERSION=2.14.3
88
ARG LIBPNG_VERSION=1.6.58
99
ARG VPX_VERSION=v1.15.2

docker/musllinux_1_2/Dockerfile_aarch64

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
FROM quay.io/pypa/musllinux_1_2_aarch64:latest
44

55
ARG CCACHE_VERSION=4.13.6
6-
ARG FFMPEG_VERSION=8.1.1
6+
ARG FFMPEG_VERSION=8.1.2
77
ARG FREETYPE_VERSION=2.14.3
88
ARG LIBPNG_VERSION=1.6.58
99
ARG VPX_VERSION=v1.15.1

docker/musllinux_1_2/Dockerfile_x86_64

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
FROM quay.io/pypa/musllinux_1_2_x86_64:latest
44

55
ARG CCACHE_VERSION=4.13.6
6-
ARG FFMPEG_VERSION=8.1.1
6+
ARG FFMPEG_VERSION=8.1.2
77
ARG FREETYPE_VERSION=2.14.3
88
ARG LIBPNG_VERSION=1.6.58
99
ARG VPX_VERSION=v1.15.1

0 commit comments

Comments
 (0)