CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

devel/gstreamer1-devtools 1.28.8

Gstreamer element validation suite

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8
Upstream
up to date
Last update
to 1.28.8 · 30a7e19ff0
Quarterly
2026Q4: 1.28.8 · last MFH d2b644208d
Formerly
multimedia/gstreamer1-validate until 2025-08-11
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML

Install

Package
# pkg install gstreamer1-devtools
installs 1.28.8 from latest; from quarterly (2026Q4) 1.28.8
Port
# cd /usr/ports/devel/gstreamer1-devtools && make install clean
Size
527 KiB download · 2.8 MiB installed
Depends on
accessibility/at-spi2-core 2.60.4, devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/json-glib 1.10.8, graphics/cairo 1.18.2,3, graphics/gdk-pixbuf2 2.44.1, lang/python312 3.12.15, multimedia/gstreamer1 1.28.8_1, multimedia/gstreamer1-plugins 1.28.8, multimedia/gstreamer1-plugins-bad 1.28.8, multimedia/gstreamer1-rtsp-server 1.28.8, print/harfbuzz 14.6.0, x11-toolkits/gtk30 3.24.52, x11-toolkits/pango 1.57.1
License
LGPL21+

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.28.81.28.8–
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.61.28.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.81.28.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (7)

Show 7 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (33)

Jason E. Hale (jhale) · 1.28.8 MFH 2026Q4 ✓
GStreamer1: Update to 1.28.8

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.7
	 https://gstreamer.freedesktop.org/releases/1.28/#1.28.8

MFH:		2026Q4
Security:	bfa621d9-e508-4e3e-9a15-c2b54929ea77
30a7e19ff0
Jason E. Hale (jhale) · 1.28.6 MFH 2026Q3 ✓
GStreamer1: Update to 1.28.6

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.6

MFH:		2026Q3
Security:	dde0fb16-2731-4d3c-aabf-459357235745
6eac03c7fd
Jason E. Hale (jhale) · 1.28.5 MFH 2026Q3 ✓
GSteamer1: Uppdate to 1.28.5

multimedia/gstreamer1-plugins-rust is now a first-class citizen using gstreamer
tagging.

Refactor custom targets in multimedia/gstreamer1 and fix a few bugs in
generate-vuxml-entry.py.

MFH:		2026Q3
Security:	6eee35e6-fca5-4db2-ab73-f27add3e3ef1
703f5a47c3
Jason E. Hale (jhale) · 1.28.4
GStreamer1: Update to 1.28.4

Backport several security fixes from not-yet-released 1.28.5.

Add a `create-vuxml` target to multimedia/gstreamer1 to automagically
create a VuXML entry for new GStreamer releases. The backing script
can be used standalone for cases when more fine tuning is needed.

Changes:
https://gstreamer.freedesktop.org/releases/1.28/#1.28.4

Security:	4e82a0e6-6801-42c6-8fb6-91b6b275a9e1
e8ed805b33
Jason E. Hale (jhale) · 1.28.3
GStreamer1: Update to 1.28.3

multimedia/gstreamer1-plugins-rust: Update to 0.15.2

Changes:
https://gstreamer.freedesktop.org/releases/1.28/#1.28.2
https://gstreamer.freedesktop.org/releases/1.28/#1.28.3

MFH:		2026Q2
Security:	05aadfcc-55f5-11f1-915c-8974b59277b5,
		ea4c5b9d-55f7-11f1-915c-8974b59277b5
1d35c6d802
Jason E. Hale (jhale) · 1.28.1
GStreamer1: Update to 1.28.1

multimedia/gstreamer1-plugins-rust: Update to 0.15.1

Changes:
https://gstreamer.freedesktop.org/releases/1.28/#1.28.1

Security:	791d4b29-19fb-11f1-87cc-e73692421fef
585b9a1616
Jason E. Hale (jhale) · 1.28.0
GStreamer1: Update to 1.28.0

The y4menc (previously from good) and y4mdec (previously from bad)
plugins have been consolidated into y4m (now from good).

The vaapi component (multimedia/gstreamer1-vaapi) is no longer supplied
by upstream and will be removed after 2026Q1. This has been superseded by
the va plugin from 'bad', which we don't have and is rather Linux-heavy,
but no ports seem to use this anyways. Remove from makesum-all target
and adjust to be static 1.26.10 (last available) version.

Add svtav1 component to gstreamer.mk after f96400339bd6. [1]

multimedia/gstreamer1-plugins-svt-hevc has been marked DEPRECATED since
multimedia/svt-hevc is marked DEPRECATED and will be removed after
2026Q1. [1] This port does not seem to be used anywhere in the ports
tree.

Note for local patching: meson_options.txt was renamed by upstream to
meson.options across the board [2] and this change adapts to that.

Changes:
https://gstreamer.freedesktop.org/releases/1.28/

[2] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/128710caab3e7521384c4c82df031702f1728af8

PR:		292706 [1]
Reported by:	jbeich [1]
c11c91c602
Jason E. Hale (jhale) · 1.26.10
GStreamer1: Update to 1.26.10

https://gstreamer.freedesktop.org/releases/1.26/#1.26.10

Security:	500cc49c-e93b-11f0-b8d8-4ccc6adda413
64597899da
Jason E. Hale (jhale) · 1.26.9
GStreamer1: Update to 1.26.9

multimedia/gstreamer1-plugins-rust: Update to 0.14.4

https://gstreamer.freedesktop.org/releases/1.26/#1.26.9
42dc4b66e5
Jason E. Hale (jhale) · 1.26.8
GStreamer1: Update to 1.26.8

https://gstreamer.freedesktop.org/releases/1.26/#1.26.8

MFH:		2025Q4
41ba8fe748
Jason E. Hale (jhale) · 1.26.7
GStreamer1: Update to 1.26.7

https://gstreamer.freedesktop.org/releases/1.26/#1.26.7
ea4a6ee736
Jason E. Hale (jhale) · 1.26.6
GStreamer1: Update to 1.26.6

multimedia/gstreamer1-plugins-rust: Update to 0.14.2

https://gstreamer.freedesktop.org/releases/1.26/#1.26.6
31891908b9
Jason E. Hale (jhale) · 1.26.5
GStreamer1: Update to 1.26.5

Rename multimedia/gstreamer1-validate -> devel/gstreamer1-devtools and
update to 1.26.5. gst-validate has been gst-devtools since 1.17.x, but
got lost in the mix. This a development toolkit, hence the move to the
devel category.

https://gstreamer.freedesktop.org/releases/1.26/#1.26.5
2680e71d5d
Charlie Li (vishwin) · 1.16.3_2 · as multimedia/gstreamer1-validate
gnome.mk: rename gdkpixbuf2 to gdkpixbuf to prepare for port move

The GTK 1-based gdk-pixbuf has not existed for some time.

No functional or package changes.
e87d8134a3
Tobias C. Berner (tcberner) · 1.16.3_1 · as multimedia/gstreamer1-validate
accessibility/at-spi2-core: update to 2.46.0

What's new in at-spi2-core 2.46.0:
* Fix GetInterfaces documentation on org.a11y.atspi.Accessible
  interface.

What's new in at-spi2-core 2.45.91:
* Send device event controller events using the same signature as other
  events.
* Document the Accessible, Action, and Cache dbus interfaces.
* Fix license of atspi-gmain.c (#87).

What's new in at-spi2-core 2.45.90:
* xml: Add some documentation.
* xml: Fix event arguments.
* xml: Add some missing DeviceEventController methods.
* Bind the AT-SPI bus to the graphical session.
* Mark bus service as belonging to the session slice.
* Add ATSPI_ROLE_PUSH_BUTTON_MENU.
* Add an "announcement" event/signal to allow objects to send
  notifications (!63).
* Various code clean-ups and test improvements.

What's new in at-spi2-core 2.45.1:
* Atk and at-spi2-atk are now merged into this project.
* Now requires meson 0.56.2 and glib 2.67.4.
* at-spi2-atk: Expose the accessible hierarchy via dbus introspection.
* Properly escape the AT-SPI bus address; fixes warnings about the address
  not containing a colon (!55).
* Add a text value to AtspiValue, so that a value can expose a textual
  description, as in the new Atk value API.
* Add atspi_event_listener_register_with_app, to allow an event listener
  to be registered only for a given application (!52).

- accessibility/atk and accessibility/at-spi2-atk have been merged into
  accessibility/at-spi2-core

- accessibility/at-spi2-core: bump consumers of removed ports atk and at-spi2-atk

PR:		269704
Exp-run by:	antoine
---
fa81a4f5f8
Thomas Zander (riggs) · 1.16.3 · as multimedia/gstreamer1-validate
Update gstreamer1 to upstream release 1.20.3

PR:		261585
Reviewed by:	riggs,jbeich,tcberner

Differential Revision:	https://reviews.freebsd.org/D36850
e3b732b479
Stefan Eßer (se) · 1.16.1 · as multimedia/gstreamer1-validate
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.16.1 · as multimedia/gstreamer1-validate
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.16.1 · as multimedia/gstreamer1-validate
multimedia: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron LI <aly@aaronly.me>
  *  Alexander Botero-Lowry <alexbl@FreeBSD.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Thompson <andy@fud.org.nz>
  *  Andrew Thompson <thompsa@FreeBSD.org>
  *  Angel Carpintero <ack@telefonica.net>
  *  Anish Mistry (with help from mean)
  *  Anonymous <swell.k@gmail.com>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Ashish Shukla <wahjava@gmail.com>
  *  Ben Woods <woodsb02@FreeBSD.org>
  *  Brian Somers <brian@FreeBSD.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Byung-Hee HWANG <bh@izb.knu.ac.kr>
  *  Charlie Kester <corky1951@comcast.net>
  *  Chess Griffin <chess@chessgriffin.com>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Chuck Hein <chein@FreeBSD.org> & Jim Overholt <overholt@isdw.net>
  *  Daniel Morante <daniel@morante.net>
  *  Diego Depaoli <trebestie@gmail.com> and Yinghong Liu <relaxbsd@gmail.com>
  *  Dierk Sacher <dierk@blaxxtarz.de>
  *  Dreamcat4 <dreamcat4@gmail.com>
  *  Earl Gay <earl@eeg3.net>
  *  Ed Schouten <ed@FreeBSD.org>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Felix Palmen <felix@palmen-it.de>
  *  Franz Bettag <franz@bett.ag>
  *  FreeBSD GNOME Team <gnome@freebsd.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Grzegorz Blach <gblach@FreeBSD.org>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Harold Gutch <logix@foobar.franken.de>
  *  Heiner <h.eichmann@gmx.de>
  *  Heiner Eichmann <h.eichmann@gmx.de>
  *  Hendrik Scholz <hendrik@scholz.net>
  *  Herbert J. Skuhra <h.skuhra@gmail.com>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Holger Lamm
  *  J.R. Oldroyd <fbsd@opal.com>
  *  Jason Harmening <jason.harmening@gmail.com>
  *  Jille Timmermans (jille@quis.cx)
  *  Juergen Lock <nox@FreeBSD.org>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  KalleDK <plexmaintainer@k-moeller.dk>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Koop Mast <kwm@rainbow-runner.nl>
  *  Kozlov Sergey <kozlov.sergey.404@gmail.com>
  *  Kris Moore
  *  Kuan-Chung Chiu <buganini@gmail.com>
  *  Lars Eggert <lars.eggert@gmx.net>
  *  Leinier Cruz Salfran <salfrancl@yahoo.es>
  *  MANTANI Nobutaka <nobutaka@nobutaka.com>
  *  Manuel Creach <manuel.creach@icloud.com>
  *  Marc van Woerkom <3d@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Neubauer <m.ne@gmx.net>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net> et al
  *  Mina Naguib <webmaster@topfx.com>
  *  Mykola Dzham <i@levsha.me>
  *  Naram Qashat <cyberbotx@cyberbotx.com>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Pascal Vizeli <pvizeli@yahoo.de>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Petar Zhivkov Petrov <pesho.petrov@gmail.com>
  *  Phil Oleson
  *  Phil Oleson <oz@nixil.net>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Raaf <freebsd@luna.afraid.org>
  *  Randall Hopper <aa8vb@nc.rr.com>
  *  Rodrigo OSORIO <rodrigo@FreeBSD.org>
  *  Rozhuk Ivan 2018 <rozhuk.im@gmail.com>
  *  Rozhuk Ivan <rozhuk.im@gmail.com>
  *  Rozhuk Ivan rozhuk.im@gmail.com
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Stacey Son <mythdev@son.org>, Ari Maniatis <ari@ish.com.au>
  *  Steve Wills <steve@mouf.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas E. Zander
  *  Thomas E. Zander with help from Vladimir Kushnir
  *  Vladimir Kondratiev <wulf@mail.mipt.ru>
  *  William Grzybowski <wg@FreeBSD.org>
  *  William Grzybowski <william88@gmail.com>
  *  Yi-Hsuan Hsin <mhsin@mhsin.org>
  *  Zastupov Stepan [RedChrom] <redchrom@mail.ru>
  *  adamw
  *  alex
  *  arved
  *  erich@FreeBSD.org
  *  freebsd-ports@evilcode.net
  *  giffunip@asme.org
  *  ijliao
  *  kamikaze@bsdforen.de
  *  michael johnson <ahze@ahze.net>
  *  mikael.urankar@gmail.com
  *  mm
  *  nox@FreeBSD.org
  *  osa
  *  pb@FreeBSD.org
  *  piero
  *  se@FreeBSD.org
  *  sumikawa

With hat:	portmgr
63f36d3262
Tobias C. Berner (tcberner) · 1.16.1 · as multimedia/gstreamer1-validate
framework: convert bsd.gstreamer.mk to Uses/gstreamer.mk

- convert bsd.gstreamer.mk to Uses/gstreamer.mk
- convert ports tree to make use of USES=gstreamer
- remove duplicate dependency lines from the tree

Differential Revision: https://reviews.freebsd.org/D35097
ca3f925d6e
Piotr Kubaj (pkubaj) · 1.16.1 · as multimedia/gstreamer1-validate
multimedia/gstreamer1-validate: fix build on GCC architectures

C11 compiler is required:
gstvalidateflow.c:84: error: redefinition of typedef 'ValidateFlowOverride'
gstvalidateflow.c:72: error: previous declaration of 'ValidateFlowOverride' was here
fa7c26b43c
Koop Mast (kwm) · 1.16.1 · as multimedia/gstreamer1-validate
Update gstreamer1 to 1.16.2.

- The spc plugin was removed inflavor for the gsm plugin.
- Added in tree qt plugin.

Changelog: https://gstreamer.freedesktop.org/releases/1.16/#1.16.2

Update net-im/fractal to 4.2.2 to support GStreamer 1.16 (approved by maintainer)

Thanks to antoine@ for the exp-run.

PR:		239386
aa49f23a6d
Tijl Coosemans (tijl) · 1.14.4 · as multimedia/gstreamer1-validate
Update GStreamer to 1.14.4.

PR:		231406
Submitted by:	Greg V <greg@unrelenting.technology>
Exp-run by:	antoine
Approved by:	portmgr (antoine)
54c5444eba
Koop Mast (kwm) · 1.12.2 · as multimedia/gstreamer1-validate
Update GStreamer1 ports to 1.12.2.

Rework the adding of dependancies in Mk/bsd.gstreamer.mk.
Previous when using USE_GSTREAMER[1] it would just add the request modules to BUILD/RUN_DEPENDS. This caused the qa script to complain because the old code didn't implicit depend on the gstreamer1 and gstreamer1-plugins[-bad] ports for the libraries they carried, even if they where present via the plugins! The new code adds implicit depends on these ports so USE_GSTREAMER[1] using ports have all the libraries included.

* The mad mp3 plugin was removed, mpg123 plugin also provides mp3 decoding. Switch over ports that used the gstreamer1 mad plugin.
* gtksink plugin renamed -> gtk
* Hook up the sndio plugin into the framework
* Add some indirect dependacies where needed
* Reorder the plugin list in bsd.gstreamer.mk so only one plugin per line. When changing plugins it doesn't result in multiple lines being changed.
* Remove mentions in bsd.gstreamer.mk of plugins mentions that where removed.
* Depend on libunwind on i386/amd64, GStreamer links to it if it is present.

PR:		220753
Exp-run by:	antoine@
d566d54fa6
Koop Mast (kwm) · 1.6.0 · as multimedia/gstreamer1-validate
Update gstreamer1 ports to 1.6.0.

* gstreamer1-libav now uses ffmpeg from ports.
* New ports:
  * gstreamer1-validate: Tools to detect if elements are not behaving
    as expected, mainly aimed at developers, or advanced debugging.
  * gstreamer1-rtsp-server: Base foundation for building a rtsp
    server ontop of GStreamer
 * Bunch of new plugins like: mpg123, rsvg, libde265, openh264, x265 and dtls.

Release announcement:
  http://lists.freedesktop.org/archives/gstreamer-announce/2015-September/000357.html

Obtained from:	gnome devel repo
7b97259096