[PATCH] h266parser: Fix out of bounds write when parsing pic_timing SEI

Gbp-Pq: Name CVE-2026-3081.patch

[PATCH] h266parser: Validate tile index bounds in picture partition parsing

Gbp-Pq: Name CVE-2026-3084.patch

[PATCH 1/3] h266parser: Fix overflow when parsing subpic_level_info

1. non_subpic_layers_fraction, ref_level_idc and ref_level_fraction_minus1
   fields should not have the GST_H266_MAX_SUBLAYERS limitation.
2. Should check max_sublayers_minus1, no more than GST_H266_MAX_SUBLAYERS-1

Fixes ZDI-CAN-27381, CVE-2025-6663

Closes: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4503
Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/9295>

Gbp-Pq: Name 0001-h266parser-Fix-overflow-when-parsing-subpic_level_in.patch

[PATCH] Skip failing tests

camerabin:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1244

netsim:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3000

Gbp-Pq: Name Skip-failing-tests.patch

opencv data path

Gbp-Pq: Name 02_opencv-data-path.patch

gst-plugins-bad1.0 (1.26.2-3+deb13u1) trixie-security; urgency=medium

  * CVE-2026-2923
  * CVE-2026-3081
  * CVE-2026-3082
  * CVE-2026-3084
  * CVE-2026-3086

[dgit import unpatched gst-plugins-bad1.0 1.26.2-3+deb13u1]

Import gst-plugins-bad1.0_1.26.2-3+deb13u1.debian.tar.xz

[dgit import tarball gst-plugins-bad1.0 1.26.2-3+deb13u1 gst-plugins-bad1.0_1.26.2-3+deb13u1.debian.tar.xz]

Import gst-plugins-bad1.0_1.26.2.orig.tar.xz

[dgit import orig gst-plugins-bad1.0_1.26.2.orig.tar.xz]