Changelog for Winff SlackBuild Script -------------------------------------------------------------------- 09/09/2022: Took over as maintainer for the Winff SlackBuild script. The Original author of Winff no longer maintains and is now maintained by Debian Maintainer Paul Gevers. Corrected the various dead URL.Updated the various URL to https.patched it to look in the slackware's doc folder. see these posts for details. https://github.com/WinFF/winff/issues/250 https://ffmpeg.org/download.html#build-windows 24/09/2022: Winff will now use the users default pdf viewer using xdg-open also added support for Okular pdf reader. It will now use the -O2 optimization and added some hardening flags to the linker and fix wrongly escaped single quote in the man page.I've added these patches from Debian Maintainer Paul Gevers. Removed the hint that said TEST in the lower left side corner of the GUI,when you hover the mouse in the area between the convert button and options button.Fixed the Dialog boxes under the Ffmpeg tab were it will now show pass 1 and pass 2 separately previously the pass 1 dialog was merged with the top parameter dialog box.Put Underscore between the "Cancel Changes", "Apply Changes" and "Apply to All" buttons and will now be further apart for clarity. From FFmpeg versions 5 and later the -vol command will fail.For example -vol 512 has been changed to -filter:a "volume=1.5", since slackware uses FFmpeg4 this is not a problem for now.Added Hints to the 2 buttons next to the folder path.The open was not working due to older lazarus not passing commands updating to Lazarus 2.2.2-0 will solve that problem.If you cross compile winff for windows without patching the language files it will show the old links. Thanks to David Miller for patches,Improvments and testing Winff. Created a set of patches instead of sed commands. Extended the Copyright, which previously was upto the year 2016. GTK2 has reached end of life also GTK3 widget set support in lazarus is in alpha stage in lazarus.See the following post for details. https://blog.gtk.org/2020/12/16/gtk-4-0/ https://wiki.freepascal.org/Widgetset As such it no longer make sense to default to GTK.We will now default to qt5 nstead of GTK.Therefore libqtpas is now a dependency. Install libqtpas before installing lazarus. Removed a Dangling link to AV GNU/Linux Distro. If for Some reason "Cancel changes","Apply to all" and "Apply changes" button does not appear do not fret, Enter the Values you need to modify in Video/Audio/Crop/Time and then add the file to convert it would pass the options.You can check the Command in the FFmpeg tab. This is a workaround. Patched the manpage to show the winff docmentation location in slackware. This build removes all other localization files except english since it contains outdated links and may pose security risk. Bumped the build no. 20/01/2023: Fixed $ARCH issue for 32-bit systems. freepascal supports i386 only. The SlackBuild is modified to reflect that.Bumped the build no. Users of WinFF must be aware of these two security issues that are still unresolved upstream. a. The first one is due to the way filenames are inserted in the temporary shell scripts generated to convert the media. Due to the lack of character escaping, it is possible to insert system command using specially crafted filename such as 'aaa";xcalc;".avi' or "aaa$(xcalc).mp4' Thus leading to an arbitrary command execution. b. The second issue is related to the permission of this temporary shell script. every users can access to them and modify them. Even if those files are only temporary and launched right after generation, it leads to a race-condition case where another user may try to replace the script content before its execution in order to execute its own command with the winff user permission. you can read about this issue here: https://github.com/WinFF/winff/issues/242 As for first issue check the filename before converting otherwise it will compromise your system and don't download from untrusted sources. For the second I have no clue and this is beyond my abilities.If you have a patch for these issue feel free to send it to me. 11/01/2024: Upgraded to the latest git commit 31b79e3. 22/01/2024: Added -pie and -zdefs hardening flags to linker. Bumped the build no. 27/02/2024: Updated to version 1.6.3 03/03/2024: Resubmit to SBo Modify the SlackBuild to avoid creating object code files to /usr/share/lazarus when compiling winff and remove unused function in doinst.sh Thanks to Andrew Clemons for pointing it out.