From e7335e4f0a33d167696ca3dba9a09a8eb6b3b943 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Sun, 10 Nov 2024 00:19:24 +0100 Subject: [PATCH] gstreamer1.0: set status for CVE-2024-0444 This is patched in gstreamer1.0-plugins-bad in 1.22 branch since 1.22.9 via [1]. cpe product is set to gstreamer, they share source git repository. [1] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/394d5066f8a7b728df02fe9084e955b2f7d7f6fe (From OE-Core rev: 5ea630617daf0897e5a1edd7482f705e1e7997fe) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/gstreamer/gstreamer1.0_1.22.12.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.22.12.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.22.12.bb index f4acb0977b..8486e258d5 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.22.12.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.22.12.bb @@ -71,4 +71,6 @@ RDEPENDS:${PN}-ptest:append:libc-glibc = " glibc-gconv-iso8859-5" CVE_PRODUCT = "gstreamer" +CVE_STATUS[CVE-2024-0444] = "cpe-incorrect: this is patched in gstreamer1.0-plugins-bad in 1.22 branch since 1.22.9" + PTEST_BUILD_HOST_FILES = ""