[qt/qt/qtinterfaceframework-taglib]: Summary of bulk changes made

Git repository change summary for qt/qt/qtinterfaceframework-taglib
Pushed by mirror-service into branch 'upstream/master'.
Changed from 8a78c5e5bdfbcf8edd7e140943a0a4aaa2a296a5 to 0a13a11bad3c9c9a2a6f88db2981ccbfcad43bb0
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 7f2964ab8bafb5716b63cecd9f5a9a8fe059752a by GitHub (on behalf of Acts1631) on 18/08/2026 at 04:59..
MPC: guard SV7 property conversions (#1423)

SV7 derives the audio length and bitrate from file-controlled frame
counts and stream length. A crafted stream can make the derived bitrate
exceed the int property range, so converting it is undefined.
Guard the SV7 conversions, and account for rounding when checking the
existing SV8 conversions.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/7f2964ab8bafb5716b63cecd9f5a9a8fe059752a

Git commit 0a13a11bad3c9c9a2a6f88db2981ccbfcad43bb0 by GitHub (on behalf of Acts1631) on 18/08/2026 at 05:07..
Xiph: bound comment field lengths (#1424)

Xiph comment lengths are read from the file. Without checking them
against the remaining packet, a wrapped length can reset the parser
position and make each field iteration copy the same payload.
Reject truncated vendor and field data before advancing the parser.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/0a13a11bad3c9c9a2a6f88db2981ccbfcad43bb0