CVE-2023-40476

CVE-2023-40476

commit fddda166222a067d0e511950a0a8cfb9f5a521b7
Author: Nicolas Dufresne <nicolas.dufresne@collabora.com>
Date:   Wed Aug 9 12:49:19 2023 -0400

    h265parser: Fix possible overflow using max_sub_layers_minus1

    This fixes a possible overflow that can be triggered by an invalid value of
    max_sub_layers_minus1 being set in the bitstream. The bitstream uses 3 bits,
    but the allowed range is 0 to 6 only.

    Fixes ZDI-CAN-21768, CVE-2023-40476

    Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/2895

    Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5366>

Gbp-Pq: Name CVE-2023-40476.patch