Backport upstream GStreamer MR !12231 to fix CVE-2026-73433,
addressing multiple security issues in the AVI demuxer
(gst/avi/gstavidemux.c). The patch includes fixes for
bounds checking on FUJIFILM strd parsing, read-only buffer
handling, tag pointer dereferencing, vprp field info
calculation, integer overflow in index parsing, and subindex
item count validation.
CVE: CVE-2026-73433
Upstream patches:
- https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12231.patch
Resolves: RHEL-239068
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport 4 upstream patches from GStreamer MR !11811 to fix
CVE-2026-53705 (integer overflow vulnerabilities in wavpackdec).
The patches address:
- Integer overflow in output buffer size allocation
- Use of correctly-sized variable types
- Integer overflow in input buffer size check
- Unmapping input buffer directly after decoding
Paths were adjusted from upstream monorepo layout to match the
RHEL 8 standalone source tree, and conflicts were resolved for
3 of the 4 patches due to differences in the 1.16.1 codebase.
CVE: CVE-2026-53705
Upstream patches:
- ed09b69275.patch
- e9ded43316.patch
- 9326c636a2.patch
- f7cb3e0288.patch
Resolves: RHEL-184473
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
