linux/poky.git/meta/recipes-multimedia/gstreamer, branch walnascar

gstreamer1.0: set status of CVE-2025-3887 to patched

2025-09-25T19:25:51+00:00

This CVE was fixed in plugins-bad. See [1] and [2] which is included in 1.24.13. These commits are backport of [3] to 1.24. Commits fixing this CVE were copied from [4]. [1] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e4351ef03f1331410b0c1216a6178d885f37e495 [2] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ed4c2ce380f7168bd4a3423f4398eb341cb931c7 [3] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8884 [4] https://security-tracker.debian.org/tracker/CVE-2025-3887 (From OE-Core rev: 13d7e30b45e90187800ba5a383c9579ba2fa0344) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

gstreamer1.0: ignore CVE-2025-2759

2025-09-25T19:25:51+00:00

Copy statement from [1] that it is problem of installers (non-Linux). Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer". Since Yocto builds from sources into our own packages, ignore it. [1] https://security-tracker.debian.org/tracker/CVE-2025-2759 [2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/ (From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

gstreamer1.0: set status of 5 CVEs to patched

2025-09-25T19:25:51+00:00

These CVEs were fixed in last upgrade. See commit message for 340b182d5fc972175f1d2a89127f807073c10255 (From OE-Core rev: 20dd654a8e66ffb1cac97958547f54a52ebd587d) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

gstreamer1.0: upgrade 1.24.12 -> 1.24.13

2025-08-29T17:02:59+00:00

Below list of CVEs are addressed in this release CVE-2025-47183 CVE-2025-47219 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808 (From OE-Core rev: 340b182d5fc972175f1d2a89127f807073c10255) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

gstreamer1.0-vaapi: upgrade 1.24.12 -> 1.24.13

2025-08-29T17:02:59+00:00

(From OE-Core rev: 5b918f7a9002472c271f412bec19c6ef9eaf6098) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

gstreamer1.0-rtsp-server: upgrade 1.24.12 -> 1.24.13

2025-08-29T17:02:59+00:00

(From OE-Core rev: fb4f3b3d2ee5d6098993cf59337b5d982be74b19) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

gstreamer1.0-python: upgrade 1.24.12 -> 1.24.13

2025-08-29T17:02:59+00:00

(From OE-Core rev: c5742f1c6037c588e91011883b8cf5af6bd360a5) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

gstreamer1.0-plugins-ugly: upgrade 1.24.12 -> 1.24.13

2025-08-29T17:02:59+00:00

(From OE-Core rev: fac2cdbd50d7e1e74910cc4c035471305372d5d7) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

gstreamer1.0-plugins-good: upgrade 1.24.12 -> 1.24.13

2025-08-29T17:02:59+00:00

(From OE-Core rev: 01d4f52c290dc4acc7dd6e129db5470a626bfa90) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

gstreamer1.0-plugins-base: upgrade 1.24.12 -> 1.24.13

2025-08-29T17:02:59+00:00

(From OE-Core rev: 7b024f5983e83fbde68aaaeaeeff4997d22ba825) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman