From: Peter Marko <peter.marko@siemens.com>
Date: Sat, 1 Aug 2026 21:22:25 +0000 (+0200)
Subject: gstreamer1.0: set status for CVE-2026-5056
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=175bc4a39b85f796fbcb65bea84304c9a357f9b3;p=thirdparty%2Fopenembedded%2Fopenembedded-core.git

gstreamer1.0: set status for CVE-2026-5056

Per [1] this is fixed in 1.28.2.
cvelistV5 has just hash in version so creates false positive.

[1] https://security-tracker.debian.org/tracker/CVE-2026-5056

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.4.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.4.bb
index 59f4e99c70..d1f06a5233 100644
--- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.4.bb
+++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.4.bb
@@ -71,4 +71,6 @@ RDEPENDS:${PN}-ptest:append:libc-glibc = " glibc-gconv-iso8859-5"
 
 CVE_PRODUCT = "gstreamer"
 
+CVE_STATUS[CVE-2026-5056] = "cpe-stable-backport: Fixed since 1.28.2"
+
 PTEST_BUILD_HOST_FILES = ""