Log message:
*: recursive bump for pcre2 10.49

Log message:
*: revbump for pcre2 symbol versioning change

Log message:
ffmpeg8 ffplay8: updated to 8.1.3

version 8.1.3:
Revert "lavfi/bwdif: fix heap-buffer-overflow with small height videos"
avfilter/vf_bwdif: fix line boundary checks for >8 bits content
avformat/hlsenc: fix compile error when mp4 is disabled
swscale/unscaled: fix rgbToRgbWrapper for non-native-endian formats
avformat/hls: avoid casting callback functions type
avcodec/vulkan/ffv1_dec_setup: act on the slice header rejection
avformat/hlsenc: reject out-of-range EXT-X-PROGRAM-DATE-TIME
avformat/http: only reuse old connection if valid
avformat/http: properly re-set s->range_end before requests
avutil/rational: avoid signed integer overflow
avformat/mpegts: Fix memleak of pes_filter.opaque
avcodec/leaddec: Check input data before allocating buffer
avcodec/jpeglsdec: bound cumulative decoded JPEG-LS height per packet
avcodec/cbs_h265: allocate VPS hrd_parameters dynamically
avcodec/atsc_a53: Avoid GetBits API to parse A53 CC data
avcodec/pngdec: bound decompressed zTXt/iCCP size (decompression-bomb guard)
avformat/av1: fix uvlc loop past end of bitstream
tools/zmqsend: close the input FILE
avcodec/ppc/vp8dsp: store the 16 pixel wide rows at any alignment
avformat/os_support: fix return value of win32_rename
vulkan_encode: fix leak and swallowed errors in init_base_units()
avfilter/dnn: fix async teardown race condition in all backends
avfilter/vf_decimate: reject blocks smaller than one chroma sample
avformat/genh: check for unsupported interleaved size 1 typ1 THP
lavc/vvc: Prevent OOB write in sh_entry_points
avcodec/vulkan_hevc: bound the per category reference counts in vk_hevc_start_frame
avcodec/vulkan_hevc: bound the reference count in vk_hevc_start_frame
avcodec/fflcms2: fix memory leak after cmsDeleteContext(NULL)
avcodec/cbs_h266_syntax_template: fix ph_recovery_poc_cnt range
avformat/http: free cookie parameters on parse failure
avutil/opt: fix av_opt_is_set_to_default() on default-NAN options
fftools: reject negative -t durations
avcodec/hevc: don't error out on remaining slices of a skipped picture
avcodec/vvc: Skip over the current picture in find_ref_idx
avcodec/mips/vc1dsp_msa: Fix mspel functions
avcodec/mips/hevcpred_msa: Fix compilation
avcodec/vc1_block: don't drop the last macroblock when 1 bit remains
avcodec/dovi_rpudec: strip zero padding
avformat/dashdec: check fragment_timescale before division in refresh_manifest
avutil/encryption_info: reject init info with zero-sized key IDs
avformat/genh: check thp extradata read and allocation
avformat/oggdec: check for integer overflow in buf_realloc
vulkan_av1: fix out-of-bounds write of tile_sizes
avcodec/cfhd: reject header tags after the frame buffer was allocated
avcodec/cfhd: check the channel number after every tag
avcodec/cfhd: reset the allocated band sizes when freeing the buffers
avcodec/cook: require the channel mask to cover every subpacket channel
avcodec/dvdsubenc: account for the byte alignment of each RLE line
avfilter/vf_colorconstancy: free only allocated buffers on setup failure
avcodec/hap: do not hide the failure of the chunk table allocation
avformat/mov: Allocate the array without clearing before read
avformat/mov: do not zero a key string before reading it
avformat/mov: bound the keys atom entry count by the atom size
avcodec/vvc/dec: compare the CTU area in ibc_tl_init()
avcodec/vvc/dec: free the tabs when pic_arrays_init() fails
avcodec/vvc/thread: clear fc->ft when the frame thread is freed
avfilter/vf_uspp: Fix qpcount
avcodec/codec_internal: clarify docs for FF_CODEC_CAP_SKIP_FRAME_FILL_PARAM
avfilter/f_metadata: avoid overread on long formatted output
avformat/tls_mbedtls: set the expected hostname for numeric hosts
libswscale/ppc/yuv2rgb_altivec: Fix heap buffer overflow in yuv2packedX
avcodec/apac: reset bitstream_index unconditionally to avoid integer overflow
avcodec/vorbisenc: dont assert on non finite input
avcodec/rv34: do not copy an unused reference line in the edge emulation
avcodec/rv34: do not await a negative reference-frame row
avcodec/vp9: unref next_refs in vp9_decode_flush
avcodec/vp8: do not await a negative reference-frame row
avformat/vpk: Check the channel count before dividing in the last block
avformat: Restore the container channel layout after a failed decoder open
avformat/sierravmd: require a 6bit palette in the probe
libswscale: use unaligned read/write macros in planarCopyWrapper
avformat/binka: reject truncated packet reads
avfilter/acrossover: reject non-finite parameters
avfilter/aiir: reject non-finite parameters
avfilter/firequalizer: reject overflowing delays
avcodec/wavpackenc: handle INT32_MIN samples
avfilter/aecho: reject non-finite delays and decays
libswresample/aarch64: Fix sign extension in audio conversion
avcodec/audiotoolbox: use 64-bit channel masks
avfilter/aarch64/vf_bwdif_init: Fix stride bound check
avformat/dashenc: free http options on avio_open_dyn_buf failure
avcodec/bmp: fix misaligned read in 16-bit decoding
avcodec/huffyuv: seed the median predictor endian independently
avformat/wvdec: convert flags to defines
avcodec/lcldec: clear what the multithread chunks leave undecoded
avformat/mlv: end the LJ92 packet where its data ends
avformat/mpegts: reject a max_packet_size below one TS payload
avformat/mpegts: keep the PES payload within max_packet_size
avfilter/spectrumsynth: negotiate one pixel format for both inputs
avfilter/afir: bound the crossfades by the samples of the input frame
avformat/rtpenc_av1: do not narrow the OBU size to (long)
avformat/rtpenc_av1: Check num_lebs
avformat/rtpenc_av1: bound OBU size in the keyframe search loop
avformat/gopher: Fix CRLF injection
avformat/rtpenc_vc2hq: reject data units larger than the RTP payload buffer
avformat/dashdec: reject a negative fragment index
avformat/hevc: reject hvcC NAL arrays that overflow the 16-bit count
avformat/mpegenc: reject stream counts that overflow the system header
avformat/mpegenc: pass buffer size into put_system_header()
avformat/librist: honor the caller buffer size in librist_read
avformat/scd: reject zero-channel tracks
avcodec/dolby_e: Add error recovery when parse_mantissas run out of bits
avfilter/af_pan: check the id of named input channels before use
swscale: avoid overflow in fast bilinear edge handling
avformat/rawutils: reject raw RGB frames that do not fit an AVPacket
avcodec/nvenc: write AV1 timecode metadata in AV1 syntax
avcodec/utils: add ff_alloc_timecode_metadata_av1()
avcodec/utils: factor the timecode fields out of ff_alloc_timecode_sei
vulkan_encode_av1: set primary_ref_frame to a reference name, not a slot
avformat/mov: reject a trun sample count the input cannot hold
avcodec/tiff: reject inflate output shorter than the strip
avformat/dashdec: check NULL pointer before use str_end_offset
avformat/dashdec: check NULL pointer of av_strtok value before use it
fftools/opt_common: fix format string bug in print_program_info
avformat/dashdec: fix integer truncation in calc_max_seg_no()
avdevice/android_camera: fix OOB read in metadata parsing
avcodec/cbs_h266: size vps_direct_ref_layer_flag for the full layer range
avcodec/ffv1dec: reject a remap that produces zero entries
avcodec/ffv1dec: mark the slice damaged when its remap fails
avcodec/pgssubdec: always give an output rect a palette
scale_d3d11: Fix hw_frame_ctx reference leak
avcodec/cfhd: reject transform-2 output wider than the plane
avformat/rtsp: clear authentication on cross-origin redirects
avcodec/dovi_rpuenc: normalize vdr_dm_metadata_present to 0/1
avcodec/dovi_rpuenc: validate vdr_rpu_id from the input metadata
avcodec/bsf/dovi_rpu: handle update_rpu() returning no RPU
avcodec/dovi_rpudec: bound num_x/y_partitions
avcodec/dovi_rpuenc: validate the data mapping before generation
avfilter/af_arnndn: pad the DCT input buffers to the read length
doc/nut.texi: point at the latest spec in the git repository
avformat/mov: bound sgpd sync entry_count by the atom size
avcodec/rscc: do not leave uninitilized data when the input is too short
avcodec/dvbsub_parser: avoid signed overflow in the capacity check
avformat/tls_openssl: bind peer identity for numeric-IP verify
avformat/codec2: avoid integer overflow in packet size and duration
avfilter/vf_xpsnr: avoid a zero block size on small frames
avcodec/cbs_av1: pad the ITU-T T.35 payload buffer
avcodec/screenpresso: reject deflate output shorter than the frame
avformat/hls: Enforce protocol checks when opening child playlists
avformat/hlsenc: Fix heap buffer overflow in parse_playlist()
avformat/hlsenc: Handle extensionless URIs in extract_segment_number()
avfilter/vf_lut3d: do not compute size*size before the size is validated
avfilter/vf_hqdn3d: reject unsupported frame parameter changes
avformat/tls_mbedtls: check the certificate verification result in tls_handshake()
Guard against int overflow when discarding samples
avformat/concatdec: Check recursion depth
avcodec/hevc: Fix integer overflow in WPP entry point range check
avformat/ty: don't let the Series2 AC3 trim underflow the packet size
avfilter/vf_swaprect: size the temp row buffer for the widest plane
avfilter/vf_floodfill: remove unneeded variables
avfilter/vf_floodfill: size the point stack for the current frame
avfilter/vf_lut3d: compute size2 after the 3DLUTSIZE directive
doc/developer.texi: update reviews section
doc/infra.txt: add fairy
avcodec/tdsc: unref the reference frame before reallocating on size change
avcodec/cavsdec: reject invalid start-code bitreader sizes
avcodec/libcodec2: reject packet sample counts that overflow int
avcodec/ffv1dec: mask the fltmap index on the 8bit remap path
avcodec/vorbisdec: skip the MDCT for unused channels
avcodec/exr: bound total decoded pixels by max_pixels
avcodec/bsf/dts2pts: evict unconsumable nodes from the poc tree
avcodec/bsf/dts2pts: fix removal of 2nd field nodes
avcodec/bsf/dts2pts: chain same-gop nodes instead of collecting into a fixed array
lavc/hevc: Always generate missing refs for foll pictures
avcodec/mjpegdec: reject redundant scans of a sequential image
avcodec/mjpegdec: reject flipping of bayer images
avcodec/tdsc: reject out-of-frame cursor position
avformat/spdif: fix reading past the buffer when probing AAC in IEC 61937
avfilter/vf_v360: keep remap source coordinates in bounds
avfilter/vf_v360: reject dimensions too small for the projection
avcodec/lzf: pad the decompressed buffer
avcodec/jpeg2000dec: avoid signed overflow in ROI shift
avcodec/hevc/ps: avoid signed overflow reading act qp offsets
avcodec/vvc/dec: fix pixel buffer tab leak on chroma format change
avcodec/vvc/dec: merge the SAO and ALF pixel buffer tab loops
avformat/hls_sample_encryption: Validate ADTS frame length against packet
avformat/iff: reject invalid data_size in ANIM
avformat/hls: reject Master Playlist tags in a Media Playlist
avformat/mov: bound the iref thmb/cdsc entry count by the sub-box size
avcodec/lcldec: zero the not-decoded tail to avoid heap disclosure
avfilter/vf_quirc: resize the quirc buffers when the input size changes
swscale/output: avoid signed overflow in yuv2rgb_write_full luma scaling
avformat/wavdec: fix integer overflow in W64 chunk size check
avformat/imfdec: check for a missing or empty Path in the asset map
avformat/imfdec: reject virtual tracks with no resources
avcodec/mace: reject sample counts that overflow int
avcodec/apac: Check bitstream_size to avoid integer overflow
avfilter/boxblur: reject pixel formats deeper than 16 bits
Guard lpc methods in flacdsp and add tests
Guard against loop underflow
avformat/movenc: free sgpd_entries on the roll-distance error path
avfilter/vf_removelogo: free the whole mask on allocation failure
avfilter/af_adeclick: free transform contexts and buffers on error
tests/checkasm/llviddsp: fix add_left_pred_int16 buffer compare size
avcodec/rasc: Check that 32-bit DLTA accesses stay within the row
avformat/mov: check current_dts for overflow
avcodec: Align bayer pixel formats to 2x2
avcodec/mpeg4videodec: Copy studio_profile in frame-thread context update
avfilter/vf_vif: Fix out of array access with small dimensions
avcodec/nellymoserdec: Check block count to avoid integer overflow
avformat/hlsenc: initialize avg_bandwidth
libavutil/pixdesc: fix prefix matching in *_from_name() functions
avformat/hlsplaylist: fix byte offsets for single_file+iframes_only
configure/x86: split 7-register check from EBP availability
avcodec/exr: check rle() return value in rle_uncompress()
(fforge/pr/24543) avfilter/vf_scale_cuda: fix non-scaling format conversion
(fforge/pr/24447) avformat/iamf: backport assorted fixes
(fforge/pr/24456) ffmpeg: fix matching of non-apic stream specifiers
(fforge/pr/24398) avcodec/bsf/dca_core: clear profile value on init()
(fforge/pr/24298) avformat/iamf_parse: bound the output mix gain duration by the \ 
audio elements
avformat/iamf_parse: check that num_sub_mixes and num_audio_elements in Mix \ 
Presentations are not zero
(fforge/pr/24296) avformat/movenc: fix crash when flushing a fragment with no data
swscale/loongarch: fix buffer underflow in yuv2plane1_8_lsx/lasx
(fforge/pr/24278) avcodec/h264_direct: do not read the other field's rows of \ 
colocated mb_type
avcodec/h264_slice: clear the ER picture when starting a second field
avcodec/mips/cabac: Fix building on OpenBSD/mips64
avcodec/pthread_frame: sync decoded side data to all worker threads
(fforge/pr/24145) avcodec/h264_direct: await both fields of a colocated field pair
avcodec/h264_direct: move check before loading things
(fforge/pr/23997) avcodec/adx: sync decoder channel state on NEW_EXTRADATA
avformat/rtpdec_asf: reject ASF objects smaller than their header
avformat/spdifenc: bound DTS core_size against the packet size in the HD path
avcodec/nvdec: don't double free the fdd-owned context on the sep_ref error path
avcodec/vulkan_hevc: reject too many VPS HRD parameter sets
avformat/vobsub: reuse subtitle streams and bound the stream count
avcodec/bsf/truehd_core: clear profile value on init()
avcodec/bsf/eac3_core: clear profile value on init()
(fforge/pr/23951) avformat/iamf_parse: fix inverted subblock duration validation
(fforge/pr/23888) avcodec/get_buffer: use frame pixel format instead of context
(fforge/pr/23868) avcodec/pngenc: fix overrun caused by exif size discrepancy
(fforge/pr/23854) avcodec/d3d12va_vp9: check size of frame bitstream against \ 
available buffer size
avcodec/d3d12va_vc1: check size of frame bitstream against available buffer size
avcodec/d3d12va_mpeg2: check size of frame bitstream against available buffer size
avcodec/d3d12va_hevc: check size of frame bitstream against available buffer size
avcodec/d3d12va_h264: check size of frame bitstream against available buffer size
avcodec/d3d12va_av1: check slice bitstream size against available buffer size
avcodec/d3d12va_av1: check size of frame bitstream against available buffer size
(fforge/pr/23716) avfilter/vsrc_gfxcapture_winrt: add missing system_error include
avutil/hwcontext_cuda: fix yuv420p V/U plane overlap in cuda_get_buffer()
avfilter/vf_scale_cuda: fix inverted downscaling check
avfilter/vf_scale_cuda: allocate inter buffer with correct subsampling
avfilter/vf_scale_cuda: allocate intermediate buffer directly
avfilter/vf_scale_cuda: use persistent intermediate CUDATex
avfilter/vf_scale_cuda: defer buffer allocation to setup_filters()
avfilter/vf_scale_cuda: introduce CUDATex and mapping helper
avfilter/vf_scale_cuda: add fail: label (cosmetic)
avfilter/vf_scale_cuda: eliminate redundant context push/pop
avfilter/cuda: support P012/P212 and MSB 4:4:4 in scale/transpose/thumbnail
avfilter/vf_scale_cuda: re-indent after previous change
avfilter/vf_scale_cuda: add `use_filters` option
avfilter/vf_scale_cuda: add generic 1D filter kernel
avfilter/vf_scale_cuda: generalize kernel signature to accept weights
avfilter/scale_filters: add internal copy of libswscale/filters.c
swscale/filters: add ability to set a virtual output size
swscale/filters: add option for adding an input pixel offset
swscale/filters: write new filter LUT generation code
fftools/ffmpeg_demux: only throttle readrate on the slowest stream
fftools/ffmpeg_demux: remove unused variable
fftools/ffmpeg_demux: skip finished/unstarted streams in readrate_sleep()

Log message:
*: recursive bump for pcre2 10.48

Log message:
*: Recursive revbump from multimedia/libbluray

Log message:
*: recursive bump for libmpg123 dependency in lame

Log message:
ffmpeg8 ffplay8: updated to 8.1.2

8.1.2:
swscale/x86/rgb_2_rgb: fix uyvytoyuv422 overwrite on odd width
swscale/aarch64: fix uyvy/yuyv to yuv420p/yuv422p on odd width
avcodec/snowenc: fix SIGFPE in get_dc() when a block lies outside the plane
avcodec/snowenc: fix out-of-bounds OBMC read in get_dc() for narrow planes
(fforge/pr/23505) avformat/tls_gnutls:fix crash when connecting to peer
libavcodec/jpeg2000htdec: remove trailing whitespace
libavdevice/alsa.c: fix NULL pointer dereference
avcodec/libjxlenc: check orientation tag metadata before reading
avformat/icecast: reject CR/LF in metadata header values
avfilter/avf_showspectrum: Fix allocation check
avformat/sctp: add size check in sctp_read() matching sctp_write()
avcodec/jpeg2000: Fix undefined behavior on ROI shift-up
aacdec_usac_mps212: reject reserved freq_res value
avcodec/aac/aacdec_usac_mps212: Off-by-one bounds check in ff_aac_ec_data_deci()
Update for 8.1.2
avcodec/snowenc: fix out-of-bounds memcpy in get_block_rd() for narrow planes
avutil/eval: apply unary sign to print, squish, gauss and lerp
avcodec/cbs_av1_syntax_template: reset seen_frame_header on sequence headers
avfilter/convolution: compute user matrix products in unsigned
avformat/mpegts: use av_fast_realloc() for prg
avfilter/avf_showcwt: fix DIRECTION_DU EOF fill clearing the wrong rows
avfilter/avf_showcwt: fix DIRECTION_RL EOF fill clearing the wrong columns
avfilter/avf_showcwt: avoid undefined float to int conversion of nb_consumed_samples
avfilter/avf_showcwt: fix out of array read in compute_kernel
avfilter/v360: compute remap table offsets in 64bit
avfilter/v360: reject out-of-range dimensions
swresample/x86/resample: write only int16 in the int16 resampler
avformat/rtpenc_amr: Check input size
swscale/ppc: fix ASAN stack-buffer-overflow in yuv2planeX
swscale/ppc: fix LOAD_FILTER overread in VSX path
avcodec/sanm: reject codec37 frames taller than the allocated buffer
avcodec/sanm: reject codec47 frames taller than the allocated buffer
avfilter: use ff_slice_pos() for per-slice boundary computation
avfilter: add ff_slice_pos() helper for slice boundaries
(origin/release/8.1, fforge/release/8.1) avformat/iamf_writer: reject muxing PCM \ 
streams
avfilter/estdif: avoid signed overflow in slice boundary calculation
swscale: support sliced input with cascaded scaling contexts
avformat/rtspdec: bound Content-Length in the ANNOUNCE handler to SDP_MAX_SIZE
avcodec/cbs_h266_syntax_template: reject subpic info with res_change_in_clvs
avcodec/misc4: Check nb channels
avcodec/rv10, rv34: check init_get_bits8() before RealVideo bit access
avformat/http: reject request-line tokens not terminated by whitespace
avformat/mov: reject out of range ispe dimensions, avoid overflow summing HEIF \ 
tile dimensions
avcodec/agm: validate actual src_y against prev plane in decode_inter_plane
avformat/dhav: Fix second integer overflow in get_duration()
fftools/ffmpeg_dec: deep-copy subtitle_header to fix use-after-free
avcodec/hevc/ps: Check window parameters
avcodec/hevc/ps: Factor window reading out
avcodec/truespeech: reject iterations count whose * 240 product overflows 32-bit
libavcodec/options_table: gamma22 and gamma28 aliases
avcodec/on2avc: reject subframe count whose * SUBFRAME_SIZE product overflows 32-bit
avfilter/zmq: initialize send_buf before shared cleanup on parse failure
avcodec/adpcm: fix signed integer overflow in get_nb_samples()
avformat/matroskadec: avoid signed overflow in DASH cue time differences
avcodec/fastaudio: reject subframes count whose * 256 product overflows 32-bit
avcodec/vc2enc_dwt: avoid signed overflow in the 9/7 DWT lifting
avcodec/vc2enc_dwt: avoid signed overflow in the 5/3 and Haar DWT
avformat/dashdec: Fail with any inner stream count being 0
avcodec/mjpegdec: require progress in AVRn interlaced field loop
avcodec/mwsc: do not dereference a missing reference frame
avcodec/misc4: reject invalid sample rate
swscale/output: avoid signed overflow in yuv2rgba64_1 alpha
swscale/output: avoid signed overflow in yuv2rgba64_full_1 alpha
tools/target_dem_fuzzer: do not exit on io_buffer allocation failure
avformat/gxfenc: Check timecode and propagate error
swscale/rgb2rgb_template: use unsigned for <<24
avformat/iamf_parse: bound substream count by remaining OBU size
avformat/matroskadec: bound TRACKENTRY parsing by max_streams
avcodec/diracdec: fix heap buffer overflow in edge_emu_buffer
avformat/rtmppkt: Check recursion depth
avcodec/tdsc: propagate max_pixels to the JPEG tile decoder
avcodec/imm5: propagate max_pixels to the H264/HEVC sub-decoders
avcodec/cri: propagate max_pixels to the JPEG tile decoder
avcodec/jpeglsdec: only apply color transform to decoded rows
avcodec/adpcm: require block_align to be a multiple of channels in ADPCM_PSXC init
avfilter/avf_showcwt: fix out-of-bounds read in du scroll
avfilter/f_ebur128: avoid signed-int wrap when sizing per-channel cache
avformat/mov: cap HEIF ICC profile copies via c*max_streams to bound CPU and memory
avcodec/aac/aacdec_usac: reject explicit usacSamplingFrequency of 0
avcodec/aac/aacdec_usac: avoid signed overflow in decode_tsd
avcodec/aac/aacdec: reject decoded frame without a valid sample rate
avformat/iff: check av_get_packet() result in ANIM branch
avcodec/cbs_h266_syntax_template: Fix pps_exp_slice_height_in_ctus_minus1 range
avfilter/vf_scale: split rational multiply
avcodec/bsf/dts2pts: fix binary tree invariant violation on selective dec_poc
avfilter/vf_drawtext: Avoid double free in glyph_enu_border_free()
avfilter/vf_drawtext: plug error-path leaks in measure_text/draw_text
avfilter/vf_drawtext: shape_text_hb() free allocated things on error
avfilter/vf_drawtext: avoid double-free of aliased FT_Glyph in glyph_enu_free
avfilter/vf_drawtext: don't double-free glyph that has been cached in tree
avfilter/vf_drawtext: always check pixel_mode == FT_PIXEL_MODE_MONO
avcodec/cook: bound subpacket channel sum against channel count
avcodec/apv_decode: avoid using apv_cbc
avformat/mxfdec: Remove unneeded check
avformat/ftp: Check string used for RNTO
avformat/ftp: Check for Telnet IAC characters and other non printable ASCII chars
avformat/ftp: reject CR/LF in the URL path to prevent FTP command injection
avcodec/jpeg2000dec: Clear header derived variables
avcodec/bsf/smpte436m_to_eia608: properly frees stuff on errors in \ 
ff_smpte436m_to_eia608_filter()
tests/checkasm/crc: retain offset values between calls
avformat/avc: Adjust get_ue_golomb() to handle 32 bit
avformat/whip: require remote DTLS fingerprint in SDP answer
avcodec/x86/vorbisdsp: change cmpleps to cmpltps in inverse coupling
avcodec/liboapvenc: derive and validate APV profile from pixel format
avformat/dashdec: bound manifest reloads and fragment-open retries
avfilter/af_join: fix wrong loop bound in buffer dedup (use-after-free)
avcodec/nvenc: fix compatibility with Video Codec SDK 13.1
avformat/mov: validate APV access unit length before passing to decoder
avcodec/h264_slice: guard color_frame() against chroma-width underflow
avcodec/magicyuv: reject slice_height misaligned with chroma vshift
avcodec/magicyuv: Expand the s->interlaced slice-height sanity check
avcodec/magicyuv: Fix 1 line MEDIAN slices
avformat/mxfdec: zero-init Sony MPEG-4 extradata and add padding
avformat/soxdec: Check sample_rate for nan
tests/tiny_ssim: fixed mistake in ssim_c1 calculation
avformat/hls: Check TIME-OFFSET value
avformat/hls: Check url_offset and size
avcodec/prores_raw: reject invalid tile alignment values
avformat/ty: check rec_size
avformat/ogg: Fix overflow and stale oggvorbis_private values
avformat/rtpenc_xiph: bail out when the max payload size underflows
avformat/rtpenc_aac: reject packets smaller than the ADTS header
avcodec/jpeg2000dec: compute mask in decode_clnpass() like in decode_sigpass()
avformat/flvdec: Check size at the top of the main loop
avformat/vividas: fix misaligned access
avformat/mccdec: dont pass NULL to bytestream2_put_buffer()
avcodec/g2meet: The stack is EPIC_PIX_STACK_SIZE
avcodec/h2645_sei: Initialize side data before deallocation
avfilter/boxblur: Fix off by one errors
avformat/assenc: Add the missing parentheses
avcodec/diracdec: Enlarge `mctmp` to cover the worst-case `blheight·ybsep + \ 
yblen` rows, and break the MC loop when no output rows remain
tools/zmqsend: free the AVBprint buffer after using it
[Wave] Fix issues with unaligned metadata chunks.
avformat/mpegts: Dont assume fc->priv_data is a MpegTSContext
fftools/graph: Add missing include "libavutil/mem.h" for \ 
fftools/graph/graphprint.c
avcodec/cbs_h266_syntax_template: tighten sh_num_tiles_in_slice_minus1 upper bound
avcodec/hevc: limit missing-ref fill to coded planes
avformat/mov: Fix negative index given to can_seek_to_key_sample()
avcodec/hdrdec: fix pixel count decrement in RLE decompress loop
(fforge/pr/23464) forgejo/workflows: update test workflow for 8.1 release
(fforge/pr/23445) aarch64: vp9lpf: Fix GCS violations
(fforge/pr/23303) avformat/mov: don't abort on unsupported or invalid chnl boxes
avformat/mov_chan: keep the layout untouched on chan/chnl box failure
(fforge/pr/23240) avformat/oggparsevorbis.c: Prevent integer overflow when \ 
summing header lengths; add bounds check.
(fforge/pr/23187) avformat/oggparsecelt: bound extra_headers to avoid an \ 
effectively infinite loop
(fforge/pr/23111) avformat/demux: use correct close function for custom io
avformat/hlsenc: use correct close function for custom io
avformat/hlsenc: respect io_open set in AVFormatContext
avformat/dashenc: respect io_open set in AVFormatContext
avformat/dashdec: respect io_open set in AVFormatContext
vulkan: fix using encode caps before querying
avformat/rtpdec_av1: fix buffer overflow due to variable confusion

Log message:
*: Recursive revbump from security/nettle-4.0