[wrynose,11/17] gstreamer1.0: set status for CVE-2026-5056

Message ID	6a77d34c65fe362269a8f4179685f121208230c5.1786633048.git.fabien.thomas@smile.fr
State	New
Headers	show Return-Path: <fabien.thomas@smile.fr> ip: 209.85.221.44, mailfrom: fabien.thomas@smile.fr) From: Fabien Thomas <fabien.thomas@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 11/17] gstreamer1.0: set status for CVE-2026-5056 Date: Thu, 13 Aug 2026 17:22:01 +0200 Message-ID: <6a77d34c65fe362269a8f4179685f121208230c5.1786633048.git.fabien.thomas@smile.fr> In-Reply-To: <cover.1786633048.git.fabien.thomas@smile.fr> References: <cover.1786633048.git.fabien.thomas@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,01/17] selftest: uboot: remove duplicated KVM presence test \| expand [wrynose,01/17] selftest: uboot: remove duplicated KVM presence test [wrynose,02/17] bind: upgrade 9.20.23 -> 9.20.26 [wrynose,03/17] libarchive: fix CVE-2026-14164 [wrynose,04/17] python3-pyopenssl: set CVE_PRODUCT [wrynose,05/17] python3-pyyaml: set CVE_PRODUCT [wrynose,06/17] python3-xmltodict: set CVE_PRODUCT [wrynose,07/17] python3-certifi: set CVE_PRODUCT [wrynose,08/17] python3-idna: set CVE_PRODUCT [wrynose,09/17] cpan_build: disable .packlist and html doc [wrynose,10/17] glibc: CVE-2026-5358 add CVE_STATUS [wrynose,11/17] gstreamer1.0: set status for CVE-2026-5056 [wrynose,12/17] python3-pip: set CVE_PRODUCT [wrynose,13/17] oe-selftest: fitimage: Do not expect kernel property in DTBO config subnodes [wrynose,14/17] kernel-fit-image.bbclass: Do not include kernel property in DTBO config subnodes [wrynose,15/17] kernel-fit-image.bbclass: Fix operation with KERNEL_DTBVENDORED = "1" [wrynose,16/17] kernel-fit-image: Add KERNEL_DTBVENDORED support for FIT_CONF_DEFAULT_DTB [wrynose,17/17] oe-selftest: fitimage: Add tests for KERNEL_DTBVENDORED

Message ID

6a77d34c65fe362269a8f4179685f121208230c5.1786633048.git.fabien.thomas@smile.fr

State

New

Headers

From: Fabien Thomas <fabien.thomas@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][wrynose 11/17] gstreamer1.0: set status for CVE-2026-5056
Date: Thu, 13 Aug 2026 17:22:01 +0200
Message-ID: 
 <6a77d34c65fe362269a8f4179685f121208230c5.1786633048.git.fabien.thomas@smile.fr>
In-Reply-To: <cover.1786633048.git.fabien.thomas@smile.fr>
References: <cover.1786633048.git.fabien.thomas@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[wrynose,01/17] selftest: uboot: remove duplicated KVM presence test | expand

Commit Message

Fabien Thomas Aug. 13, 2026, 3:22 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Per [1] this is fixed in 1.28.2.
cvelistV5 has just hash in version so creates false positive.

[1] https://security-tracker.debian.org/tracker/CVE-2026-5056

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
---
 meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb
index b727783746..4e51418c98 100644
--- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb
+++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb
@@ -71,4 +71,6 @@  RDEPENDS:${PN}-ptest:append:libc-glibc = " glibc-gconv-iso8859-5"
 
 CVE_PRODUCT = "gstreamer"
 
+CVE_STATUS[CVE-2026-5056] = "cpe-stable-backport: Fixed since 1.28.2"
+
 PTEST_BUILD_HOST_FILES = ""

[wrynose,11/17] gstreamer1.0: set status for CVE-2026-5056

Commit Message

Patch