Version in base suite: 1.18.4-2

Base version: gst-plugins-base1.0_1.18.4-2
Target version: gst-plugins-base1.0_1.18.4-2+deb11u1
Base file: /srv/ftp-master.debian.org/ftp/pool/main/g/gst-plugins-base1.0/gst-plugins-base1.0_1.18.4-2.dsc
Target file: /srv/ftp-master.debian.org/policy/pool/main/g/gst-plugins-base1.0/gst-plugins-base1.0_1.18.4-2+deb11u1.dsc

 changelog                                 |    6 +++++
 patches/GST-2023-0001_GST-2023-0002.patch |   32 ++++++++++++++++++++++++++++++
 patches/series                            |    1 
 3 files changed, 39 insertions(+)

diff -Nru gst-plugins-base1.0-1.18.4/debian/changelog gst-plugins-base1.0-1.18.4/debian/changelog
--- gst-plugins-base1.0-1.18.4/debian/changelog	2021-04-22 17:46:32.000000000 +0000
+++ gst-plugins-base1.0-1.18.4/debian/changelog	2023-06-29 16:09:27.000000000 +0000
@@ -1,3 +1,9 @@
+gst-plugins-base1.0 (1.18.4-2+deb11u1) bullseye-security; urgency=medium
+
+  * GST-2023-0001 GST-2023-0002
+
+ -- Moritz Mühlenhoff <moritz@wikimedia.org>  Thu, 29 Jun 2023 18:09:27 +0200
+
 gst-plugins-base1.0 (1.18.4-2) unstable; urgency=medium
 
   * Upload to unstable.
diff -Nru gst-plugins-base1.0-1.18.4/debian/patches/GST-2023-0001_GST-2023-0002.patch gst-plugins-base1.0-1.18.4/debian/patches/GST-2023-0001_GST-2023-0002.patch
--- gst-plugins-base1.0-1.18.4/debian/patches/GST-2023-0001_GST-2023-0002.patch	1970-01-01 00:00:00.000000000 +0000
+++ gst-plugins-base1.0-1.18.4/debian/patches/GST-2023-0001_GST-2023-0002.patch	2023-06-29 14:08:59.000000000 +0000
@@ -0,0 +1,32 @@
+--- gst-plugins-base1.0-1.18.4.orig/gst-libs/gst/tag/tags.c
++++ gst-plugins-base1.0-1.18.4/gst-libs/gst/tag/tags.c
+@@ -530,7 +530,8 @@ gst_tag_image_data_to_image_sample (cons
+   GstStructure *image_info = NULL;
+ 
+   g_return_val_if_fail (image_data != NULL, NULL);
+-  g_return_val_if_fail (image_data_len > 0, NULL);
++  g_return_val_if_fail (image_data_len > 0
++      || image_data_len == G_MAXUINT32, NULL);
+   g_return_val_if_fail (gst_tag_image_type_is_valid (image_type), NULL);
+ 
+   GST_DEBUG ("image data len: %u bytes", image_data_len);
+--- gst-plugins-base1.0-1.18.4.orig/gst/subparse/gstsubparse.c
++++ gst-plugins-base1.0-1.18.4/gst/subparse/gstsubparse.c
+@@ -815,7 +815,7 @@ subrip_fix_up_markup (gchar ** p_txt, gc
+     }
+ 
+     if (*next_tag == '<' && *(next_tag + 1) == '/') {
+-      end_tag = strchr (cur, '>');
++      end_tag = strchr (next_tag, '>');
+       if (end_tag) {
+         const gchar *last = NULL;
+         if (num_open_tags > 0)
+@@ -828,6 +828,8 @@ subrip_fix_up_markup (gchar ** p_txt, gc
+         } else {
+           --num_open_tags;
+           g_ptr_array_remove_index (open_tags, num_open_tags);
++          cur = end_tag + 1;
++          continue;
+         }
+       }
+     }
diff -Nru gst-plugins-base1.0-1.18.4/debian/patches/series gst-plugins-base1.0-1.18.4/debian/patches/series
--- gst-plugins-base1.0-1.18.4/debian/patches/series	2021-04-22 17:46:27.000000000 +0000
+++ gst-plugins-base1.0-1.18.4/debian/patches/series	2023-06-29 14:08:55.000000000 +0000
@@ -0,0 +1 @@
+GST-2023-0001_GST-2023-0002.patch