tests/check/meson.build | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 skip failing tests

The rtpvp8 test is new for 1.20 but fails.
The rtpstorage test isn't new but started failing with 1.20

https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1220
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1221

gst/audioparsers/gstflacparse.c | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

---

gst/isomp4/qtdemux.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 qtdemux: avoid integer overflow when parsing theora extension

ext/jpeg/gstjpegdec.c | 22 17 + 5 - 0 !
1 file changed, 17 insertions(+), 5 deletions(-)

 jpegdec: directly error out on negotiation failures

ext/gdk_pixbuf/gstgdkpixbufdec.c | 9 8 + 1 - 0 !
1 file changed, 8 insertions(+), 1 deletion(-)

 gdkpixbufdec: check if initializing the video info actually succeeded

gst/wavparse/gstwavparse.c | 63 46 + 17 - 0 !
1 file changed, 46 insertions(+), 17 deletions(-)

 wavparse: check for short reads when parsing headers in pull mode

gst/wavparse/gstwavparse.c | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 wavparse: make sure enough data for the tag list tag is available
 before parsing

gst/wavparse/gstwavparse.c | 12 5 + 7 - 0 !
1 file changed, 5 insertions(+), 7 deletions(-)

 wavparse: fix parsing of acid chunk

gst/wavparse/gstwavparse.c | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 wavparse: check that at least 4 bytes are available before parsing
 cue chunks

gst/wavparse/gstwavparse.c | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 wavparse: check that at least 32 bytes are available before parsing
 smpl chunks

gst/wavparse/gstwavparse.c | 5 3 + 2 - 0 !
1 file changed, 3 insertions(+), 2 deletions(-)

 wavparse: fix clipping of size to the file size

gst/wavparse/gstwavparse.c | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 wavparse: check size before reading ds64 chunk

gst/avi/gstavisubtitle.c | 5 3 + 2 - 0 !
1 file changed, 3 insertions(+), 2 deletions(-)

 avisubtitle: fix size checks and avoid overflows when checking sizes

gst/matroska/matroska-demux.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 matroskademux: only unmap gstmapinfo in wavpack header extraction
 error paths if previously mapped

gst/matroska/matroska-demux.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 matroskademux: fix off-by-one when parsing multi-channel wavpack

gst/matroska/matroska-demux.c | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 matroskademux: check for big enough wavpack codec private data before
 accessing it

gst/matroska/matroska-demux.c | 11 8 + 3 - 0 !
1 file changed, 8 insertions(+), 3 deletions(-)

 matroskademux: don't take data out of an empty adapter when
 processing WavPack frames

gst/matroska/matroska-demux.c | 12 12 + 0 - 0 !
1 file changed, 12 insertions(+)

 matroskademux: skip over laces directly when postprocessing the frame
 fails

gst/matroska/matroska-ids.c | 6 4 + 2 - 0 !
1 file changed, 4 insertions(+), 2 deletions(-)

 matroskademux: skip over zero-sized xiph stream headers

gst/matroska/matroska-demux.c | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 matroskademux: put a copy of the codec data into the a_ms/acm caps

gst/isomp4/qtdemux.c | 12 6 + 6 - 0 !
1 file changed, 6 insertions(+), 6 deletions(-)

 qtdemux: fix integer overflow when allocating the samples table for
 fragmented MP4

gst/isomp4/qtdemux.c | 17 9 + 8 - 0 !
1 file changed, 9 insertions(+), 8 deletions(-)

 qtdemux: fix debug output during trun parsing

gst/isomp4/qtdemux_dump.c | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 qtdemux: don't iterate over all trun entries if none of the flags are
 set

gst/isomp4/qtdemux.c | 22 22 + 0 - 0 !
1 file changed, 22 insertions(+)

 qtdemux: check sizes of stsc/stco/stts before trying to merge entries

gst/isomp4/qtdemux.c | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 qtdemux: make sure only an even number of bytes is processed when
 handling CEA608 data

gst/isomp4/qtdemux.c | 82 44 + 38 - 0 !
1 file changed, 44 insertions(+), 38 deletions(-)

 qtdemux: make sure enough data is available before reading wave
 header node

gst/isomp4/qtdemux.c | 190 74 + 116 - 0 !
1 file changed, 74 insertions(+), 116 deletions(-)

 qtdemux: fix length checks and offsets in stsd entry parsing

gst/isomp4/qtdemux.c | 9 7 + 2 - 0 !
1 file changed, 7 insertions(+), 2 deletions(-)

 qtdemux: fix error handling when parsing cenc sample groups fails

gst/isomp4/qtdemux.c | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 qtdemux: make sure there are enough offsets to read when parsing
 samples

gst/isomp4/qtdemux.c | 29 23 + 6 - 0 !
1 file changed, 23 insertions(+), 6 deletions(-)

 qtdemux: actually handle errors returns from various functions
 instead of ignoring them

gst/isomp4/qtdemux.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 qtdemux: check for invalid atom length when extracting closed caption
 data

gst/isomp4/qtdemux.c | 3 2 + 1 - 0 !
1 file changed, 2 insertions(+), 1 deletion(-)

 qtdemux: add size check for parsing smi / seqh atom

gst/isomp4/qtdemux.c | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 [patch] qtdemux: check if enough bytes are available for each stsd
 entry

There must be at least 8 bytes for the length / fourcc of each entry. After
reading those, the length is already validated against the remaining available
bytes.

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4407
Fixes CVE-2025-47219