From dce3ac2abf4fc6af33e7dea2bd1caa6f74945417 Mon Sep 17 00:00:00 2001
From: Julian Stecklina <julian.stecklina@cyberus-technology.de>
Date: Wed, 15 Jul 2026 15:54:51 +0200
Subject: [PATCH] gst_all_1.gst-plugins-good: fix GStreamer-SA-2026-0021

Fixes: GStreamer-SA-2026-0021
Not-cherry-picked-because: unstable is already on 1.28
---
 .../libraries/gstreamer/good/default.nix            | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/pkgs/development/libraries/gstreamer/good/default.nix b/pkgs/development/libraries/gstreamer/good/default.nix
index 9c531daf1486..27c2381462b8 100644
--- a/pkgs/development/libraries/gstreamer/good/default.nix
+++ b/pkgs/development/libraries/gstreamer/good/default.nix
@@ -95,6 +95,19 @@ stdenv.mkDerivation (finalAttrs: {
     (replaceVars ./souploader.diff {
       nixLibSoup3Path = "${lib.getLib libsoup_3}/lib";
     })
+    # https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11262
+    (fetchpatch {
+      name = "GStreamer-SA-2026-0021-1.patch";
+      url = "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/35a905a92f4cfc85941c6c820009ac9219f755b2.patch";
+      sha256 = "sha256-1SgQo+wb2Adcgrz3zn6/qn248vnBdPuk2oJ1v9+Dbzo=";
+      stripLen = 2;
+    })
+    (fetchpatch {
+      name = "GStreamer-SA-2026-0021-2.patch";
+      url = "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/0d819ceb654b06bbdd54381da5363c16751758a2.patch";
+      sha256 = "sha256-a8P1YxLNMkYka01+8MhBO+uSzGbR186sumlQk5LuGfY=";
+      stripLen = 2;
+    })
   ];
 
   strictDeps = true;