Backport 4 upstream patches from GStreamer MR !11811 to fix
CVE-2026-53705 (integer overflow vulnerabilities in wavpackdec).
The patches address:
- Integer overflow in output buffer size allocation
- Use of correctly-sized variable types
- Integer overflow in input buffer size check
- Unmapping input buffer directly after decoding
Paths were adjusted from upstream monorepo layout to match the
RHEL 8 standalone source tree, and conflicts were resolved for
3 of the 4 patches due to differences in the 1.16.1 codebase.
CVE: CVE-2026-53705
Upstream patches:
- ed09b69275.patch
- e9ded43316.patch
- 9326c636a2.patch
- f7cb3e0288.patch
Resolves: RHEL-184473
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
