CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

graphics/gstreamer1-plugins-vulkan 1.28.1

GStreamer Vulkan graphics plugin

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8, update to 1.28.1 not built yet
Upstream
up to date
Last update
to 1.28.8 via multimedia/gstreamer1-plugins · 30a7e19ff0
Quarterly
2026Q4: 1.28.8
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML

Install

Package
# pkg install gstreamer1-plugins-vulkan
installs 1.28.8 from latest; from quarterly (2026Q4) 1.28.8
Port
# cd /usr/ports/graphics/gstreamer1-plugins-vulkan && make install clean
Size
341 KiB download · 1.6 MiB installed
Depends on
devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/orc 0.4.44, graphics/gstreamer1-plugins-gl 1.28.8, graphics/vulkan-loader 1.4.365, graphics/wayland 1.26.0, misc/iso-codes 4.20.1, multimedia/gstreamer1 1.28.8_1, multimedia/gstreamer1-plugins 1.28.8, multimedia/gstreamer1-plugins-bad 1.28.8, print/freetype2 2.14.3, textproc/libxml2 2.15.4, x11/libxcb 1.17.0, x11/libxkbcommon 1.13.2
License
LGPL20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.28.81.28.8–
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.61.28.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.81.28.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (7)

Show 7 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (14)

Daniel Engberg (diizzy) · 1.28.1
graphics/gstreamer1-plugins-vulkan: Utilize GST_PLUGIN_DEPENDS

Unbreak by utilizing GST_PLUGIN_DEPENDS instead of using MESON_ARGS

Reported by:	makc
67f167acdd
Jason E. Hale (jhale) · 1.28.0
GStreamer1: Update to 1.28.0

The y4menc (previously from good) and y4mdec (previously from bad)
plugins have been consolidated into y4m (now from good).

The vaapi component (multimedia/gstreamer1-vaapi) is no longer supplied
by upstream and will be removed after 2026Q1. This has been superseded by
the va plugin from 'bad', which we don't have and is rather Linux-heavy,
but no ports seem to use this anyways. Remove from makesum-all target
and adjust to be static 1.26.10 (last available) version.

Add svtav1 component to gstreamer.mk after f96400339bd6. [1]

multimedia/gstreamer1-plugins-svt-hevc has been marked DEPRECATED since
multimedia/svt-hevc is marked DEPRECATED and will be removed after
2026Q1. [1] This port does not seem to be used anywhere in the ports
tree.

Note for local patching: meson_options.txt was renamed by upstream to
meson.options across the board [2] and this change adapts to that.

Changes:
https://gstreamer.freedesktop.org/releases/1.28/

[2] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/128710caab3e7521384c4c82df031702f1728af8

PR:		292706 [1]
Reported by:	jbeich [1]
c11c91c602
Jason E. Hale (jhale) · 1.26.0
GStreamer: Update to 1.26.0

https://gstreamer.freedesktop.org/releases/1.26/
1ba9b3ba5b
Jason E. Hale (jhale)
multimedia/gstreamer1: Update to 1.24.8

Mk/Uses/gstreamer.mk:
- Sort, fix whitespace issues and typos
- Promote several common variables to improve maintainer QOL
*   There's now no need to set manually set PORTVERSION nor
    SOVERSION in several Makefiles
*   This will help to prevent not updating some components
*   A note has been added, however, to remind maintainers
    to remake distinfo for certain ports
- Improve documentation

multimedia/gstreamer1-plugins-webrtc:
- New port split from multimedia/gstreamer1-plugins-bad
- multimedia/gstreamer1-plugins-rust has been updated
  to reflect this change

net/gstreamer1-plugins-sctp:
- New port split from multimedia/gstreamer1-plugins-bad

x11-toolkits/gstreamer1-plugins-qt5:
- Moved here from graphics/gstreamer1-plugins-qt to
  align with its new Qt6 counterpart

x11-toolkits/gstreamer1-plugins-qt6:
- New port: GStreamer Qt6 QML videosink plugin

*/*:
- Improve Makefile order and formatting
- Sorry for the repo churn, but not fixing this would just lead to more
  poorly formatted gstreamer ports in the future via copypasta

https://gstreamer.freedesktop.org/releases/1.24/#1.24.8

PR:		278914
Reported by:	vvd
8c1efc578d
Gleb Popov (arrowd)
multimedia/gstreamer1: Update to 1.22, new stable branch.

PR:		269895
Exp-run by:	antoine
Sponsored by:   Serenity Cybersecurity, LLC
4a8a17c8c6
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.20.3

PR:		261585
Reviewed by:	riggs,jbeich,tcberner

Differential Revision:	https://reviews.freebsd.org/D36850
e3b732b479
Charlie Li (vishwin)
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner)
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Niclas Zeising (zeising)
Bump portrevision for devel/evdev-proto

Bump portrevision on everything with a build dependency on
devel/evdev-proto, to chace the update of evdev-proto in r550442.
a8d9df7e30
Koop Mast (kwm)
Update gstreamer1 to 1.16.2.

- The spc plugin was removed inflavor for the gsm plugin.
- Added in tree qt plugin.

Changelog: https://gstreamer.freedesktop.org/releases/1.16/#1.16.2

Update net-im/fractal to 4.2.2 to support GStreamer 1.16 (approved by maintainer)

Thanks to antoine@ for the exp-run.

PR:		239386
aa49f23a6d
Jan Beich (jbeich)
devel/vulkan-*: update to 1.1.108

- Force rebuild all consumers to catch regressions early

Changes:	https://github.com/KhronosGroup/glslang/compare/7.10.2984...7.11.3214
Changes:	https://github.com/KhronosGroup/SPIRV-Headers/compare/4618b86...c4f8f65
Changes:	https://github.com/KhronosGroup/SPIRV-Tools/compare/v2018.6...v2019.2
Changes:	https://github.com/KhronosGroup/Vulkan-Headers/compare/sdk-1.1.82.0...sdk-1.1.108.0
Changes:	https://github.com/KhronosGroup/Vulkan-Loader/compare/sdk-1.1.82.0...sdk-1.1.108.0
Changes:	https://github.com/KhronosGroup/Vulkan-Tools/compare/sdk-1.1.82.0...sdk-1.1.108.0
Changes:	https://github.com/KhronosGroup/Vulkan-ValidationLayers/compare/sdk-1.1.82.0...sdk-1.1.108.0
PR:		238945
Submitted by:	Greg V (maintainer)
45a354eba3
Tijl Coosemans (tijl)
Update GStreamer to 1.14.4.

PR:		231406
Submitted by:	Greg V <greg@unrelenting.technology>
Exp-run by:	antoine
Approved by:	portmgr (antoine)
54c5444eba