multimedia/gstreamer1: Update to 1.24.8
Mk/Uses/gstreamer.mk:
- Sort, fix whitespace issues and typos
- Promote several common variables to improve maintainer QOL
* There's now no need to set manually set PORTVERSION nor
SOVERSION in several Makefiles
* This will help to prevent not updating some components
* A note has been added, however, to remind maintainers
to remake distinfo for certain ports
- Improve documentation
multimedia/gstreamer1-plugins-webrtc:
- New port split from multimedia/gstreamer1-plugins-bad
- multimedia/gstreamer1-plugins-rust has been updated
to reflect this change
net/gstreamer1-plugins-sctp:
- New port split from multimedia/gstreamer1-plugins-bad
x11-toolkits/gstreamer1-plugins-qt5:
- Moved here from graphics/gstreamer1-plugins-qt to
align with its new Qt6 counterpart
x11-toolkits/gstreamer1-plugins-qt6:
- New port: GStreamer Qt6 QML videosink plugin
*/*:
- Improve Makefile order and formatting
- Sorry for the repo churn, but not fixing this would just lead to more
poorly formatted gstreamer ports in the future via copypasta
https://gstreamer.freedesktop.org/releases/1.24/#1.24.8
PR: 278914
Reported by: vvd8c1efc578dPort details
graphics/gstreamer1-plugins-cairo 1.28.8
GStreamer overlay renderer plugin based on cairo
Port info
- Maintainer
- multimedia@FreeBSD.org
- Packages
- latest: 1.28.8
- Upstream
- up to date
- Last update
- to 1.28.8 via multimedia/gstreamer1-plugins · 30a7e19ff0
- Quarterly
- 2026Q4: 1.28.8
- WWW
- https://gstreamer.freedesktop.org/
- Links
- cgit · VuXML
Install
- Package
# pkg install gstreamer1-plugins-cairoinstalls 1.28.8 fromlatest; fromquarterly(2026Q4) 1.28.8- Port
# cd /usr/ports/graphics/gstreamer1-plugins-cairo && make install clean- Size
- 15 KiB download · 40 KiB installed
- Depends on
- devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/orc 0.4.44, graphics/cairo 1.18.2,3, misc/iso-codes 4.20.1, multimedia/gstreamer1 1.28.8_1, multimedia/gstreamer1-plugins 1.28.8, multimedia/gstreamer1-plugins-good 1.28.8, print/freetype2 2.14.3, textproc/libxml2 2.15.4
- License
- LGPL20
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.28.8 | 1.28.8 | – |
| FreeBSD 15 | 1.28.8 | 1.28.8 | – |
| FreeBSD 14 | 1.28.8 | 1.28.6 | 1.28.8 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.28.8 | 1.28.8 | – |
| FreeBSD 14 | 1.28.8 | 1.28.8 | 1.28.8 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.28.8.Fixed (7)
Show 7 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-18295 | 7.8 | 2026-08-20 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst… |
| CVE-2026-18296 | 7.8 | 2026-08-20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
| CVE-2026-18297 | 7.8 | 2026-08-20 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
| CVE-2026-18298 | 7.8 | 2026-08-20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
| CVE-2026-18299 | 7.8 | 2026-08-20 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations … |
| CVE-2026-73433 | 6.6 | 2026-08-12 | A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length … |
| CVE-2026-73434 | 6.1 | 2026-08-12 | A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat… |
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (14)
Update gstreamer1 to upstream release 1.20.3 PR: 261585 Reviewed by: riggs,jbeich,tcberner Differential Revision: https://reviews.freebsd.org/D36850e3b732b479
textproc/libxml2: bump all LIB_DEPENDS consumers This is a separate commit to facilitate easier cherry-picking for quarterly. PR: 262853, 262940, 262877, 263126 Approved by: fluffy (mentor)d63665f7cd
textproc/libxml2: bump all dependencies This should make sure that all dependent ports will pick up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246247c7db751
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
Update GStreamer1 to 1.6.2. Update GStreamer1-vaapi to 0.7.0. * Spell GStreamer consistently. [1] * Fix typo in py3kplist in py3-gstreamer1 [1] * Improve plugins COMMENTS (more improvements welcome) * Actually include the gstreamer1-libav update this time. PR: 204204 [1] (based on) Submitted by: olivierd@ [1]353ad9c72e
Update Gstreamer framework to 1.4.5.91f8647292
Fix 41 gstreamer1-plugins- ports that were creating empty packages With hat: portmgr134c55fc88
Update gstreamer 1.0 ports to version 1.2.4.ce5a9a5d44
When linking a library libA with a library libB using libtool, if libB.la exists, libtool will add all libraries libB.la refers to (dependency_libs field) to the linker command line and store them in the dependency_libs field of libA.la. So everything that subsequently links with libA will also link to these extra libraries. This causes too much overlinking. This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs field in .la libraries during staging. However, because .la libraries have very limited use when dependency_libs is empty it makes sense to completely remove them during staging. So with this commit USES=libtool is modified to remove .la libraries and a new form (USES=libtool:keepla) is introduced in case they need to be kept (dependency_libs is still emptied). PORTREVISION is bumped on all ports with USES=libtool that install .la libraries. Most ports are also changed to add :keepla because .la libraries have to be kept around as long as there are dependent ports with .la libraries that refer to them in their dependency_libs field. In most cases :keepla can be removed again as soon as all dependent ports that install .la libraries have some form of USES=libtool added to their Makefile. PR: ports/188759 Exp-run: bdrewery Approved by: portmgr (bdrewery)aad09bc5e2
Stagify Gstreamer ports. Fix build of gstreamer and gstreamer1 with glib 2.38.x [1]. Update gstreamer and gstreamer-plugins to new rules, USES=gmake pathfix, new LIB_DEPENDS syntax. Only pull in flex if base version is too old. Be more selective for which OSVERSIONS we need gcc due to the clang bug. Obtained from: Gstreamer upstream [1]44d0dc12bb
Add NO_STAGE all over the place in preparation for the staging support (cat: graphics)eb08c5441c
Add Gstreamer 1.0.7. This is the new stable version of the Gstreamer multimedia framework. Use the USE_GSTREAMER1 macro to select Gstreamer 1.0 plugins. A new chapter for the porters handbook about gstreamer is a work in progress. X related plugins are now stand alone. The gio plugin is now part of the gstreamer1-plugins port and the oss plugins are now part of the gstreamer1-plugins-good port. Note that the pulseaudio plugin is missing because it needs a newer version of pulseaudio. Also there are still a number of plugins from -bad which haven't been ported to the 1.0 API yet.05d2886d27