Skip to content

fix(swscale): apply patch for CVE-2025-63757#22

Merged
Zeno-sole merged 1 commit intodeepin-community:masterfrom
add-uos:master
Jan 19, 2026
Merged

fix(swscale): apply patch for CVE-2025-63757#22
Zeno-sole merged 1 commit intodeepin-community:masterfrom
add-uos:master

Conversation

@add-uos
Copy link
Copy Markdown
Contributor

@add-uos add-uos commented Jan 19, 2026

Add security patch to address CVE-2025-63757 vulnerability in swscale module.

upstreams fix commits:

  • fix: [566e903] {swscale,output}: Fix unsigned cast position in yuv2*
  • fix: [0c6b7f9] {swscale,output}: swscale/output: Fix integer overflow in yuv2ya16_X_c_template()

links:

@add-uos
fix(swscale): apply patch for CVE-2025-63757
333215c 
Add security patch to address CVE-2025-63757 vulnerability in swscale module.

upstreams fix commits:
  * fix: [566e903] {swscale,output}: Fix unsigned cast position in yuv2*
  * fix: [0c6b7f9] {swscale,output}: swscale/output: Fix integer overflow in yuv2ya16_X_c_template()

links:
  * https://security-tracker.debian.org/tracker/CVE-2025-63757
  * https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20698
@deepin-ci-robot
Copy link
Copy Markdown
Contributor

deepin-ci-robot commented Jan 19, 2026

Hi @add-uos. Thanks for your PR. 😃

@deepin-ci-robot
Copy link
Copy Markdown
Contributor

deepin-ci-robot commented Jan 19, 2026

Hi @add-uos. Thanks for your PR.

I'm waiting for a deepin-community member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 19, 2026

TAG Bot

TAG: 7%6.1.1-2deepin7
EXISTED: no
DISTRIBUTION: unstable

@deepin-ci-robot
Copy link
Copy Markdown
Contributor

deepin-ci-robot commented Jan 19, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: lzwind
Once this PR has been reviewed and has the lgtm label, please assign tsic404 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@Zeno-sole Zeno-sole merged commit 5b61308 into deepin-community:master Jan 19, 2026
2 of 3 checks passed
@Zeno-sole
Copy link
Copy Markdown
Contributor

Zeno-sole commented Jan 19, 2026

/integrate

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 19, 2026

AutoIntegrationPr Bot
auto integrate with pr url: deepin-community/Repository-Integration#3624
PrNumber: 3624
PrBranch: auto-integration-21128549503

@deepin-community-ci-bot deepin-community-ci-bot Bot mentioned this pull request Jan 19, 2026
Open
@UTsweetyfish UTsweetyfish mentioned this pull request Jan 19, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lzwind lzwind lzwind approved these changes

@chenchongbiao chenchongbiao Awaiting requested review from chenchongbiao

@justforlxz justforlxz Awaiting requested review from justforlxz

Assignees

No one assigned

Labels

needs-ok-to-test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@add-uos @deepin-ci-robot @Zeno-sole @lzwind