mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-05-05 20:27:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

gstreamer1.0: set status of CVE-2025-3887 to patched

Browse Source 
This CVE was fixed in plugins-bad.
See [1] and [2] which is included in 1.24.13.
These commits are backport of [3] to 1.24.
Commits fixing this CVE were copied from [4].

[1] e4351ef03f
[2] ed4c2ce380
[3] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8884
[4] https://security-tracker.debian.org/tracker/CVE-2025-3887

(From OE-Core rev: 13d7e30b45e90187800ba5a383c9579ba2fa0344)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Peter Marko
2025-09-25 16:05:07 +02:00
committed by Steve Sakoman
parent 58836a4e5d
commit b066c3a8cc
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb
View File

@@ -77,4 +77,8 @@ CVE_STATUS_STABLE_BACKPORT[status] = "cpe-stable-backport: these CVEs are patche
CVE_STATUS[CVE-2025-2759] = "not-applicable-platform: affects installation packages for non Linux OSes"
CVE_STATUS_GROUPS += "CVE_STATUS_PLUGINS_BAD"
CVE_STATUS_PLUGINS_BAD = "CVE-2025-3887"
CVE_STATUS_PLUGINS_BAD[status] = "cpe-incorrect: these CVEs is patched in current version of gstreamer1.0-plugins-bad"
PTEST_BUILD_HOST_FILES = ""