GStreamer editing services
pkg audit for the packaged version 1.28.8.| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-18295 | 7.8 | 2026-08-20 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst… |
| CVE-2026-18296 | 7.8 | 2026-08-20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
| CVE-2026-18297 | 7.8 | 2026-08-20 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
| CVE-2026-18298 | 7.8 | 2026-08-20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
| CVE-2026-18299 | 7.8 | 2026-08-20 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations … |
| CVE-2026-73433 | 6.6 | 2026-08-12 | A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length … |
| CVE-2026-73434 | 6.1 | 2026-08-12 | A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat… |
GStreamer1: Update to 1.28.8 Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.7 https://gstreamer.freedesktop.org/releases/1.28/#1.28.8 MFH: 2026Q4 Security: bfa621d9-e508-4e3e-9a15-c2b54929ea7730a7e19ff0
GStreamer1: Update to 1.28.6 Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.6 MFH: 2026Q3 Security: dde0fb16-2731-4d3c-aabf-4593572357456eac03c7fd
GSteamer1: Uppdate to 1.28.5 multimedia/gstreamer1-plugins-rust is now a first-class citizen using gstreamer tagging. Refactor custom targets in multimedia/gstreamer1 and fix a few bugs in generate-vuxml-entry.py. MFH: 2026Q3 Security: 6eee35e6-fca5-4db2-ab73-f27add3e3ef1703f5a47c3
GStreamer1: Update to 1.28.4 Backport several security fixes from not-yet-released 1.28.5. Add a `create-vuxml` target to multimedia/gstreamer1 to automagically create a VuXML entry for new GStreamer releases. The backing script can be used standalone for cases when more fine tuning is needed. Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.4 Security: 4e82a0e6-6801-42c6-8fb6-91b6b275a9e1e8ed805b33
GStreamer1: Update to 1.28.3 multimedia/gstreamer1-plugins-rust: Update to 0.15.2 Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.2 https://gstreamer.freedesktop.org/releases/1.28/#1.28.3 MFH: 2026Q2 Security: 05aadfcc-55f5-11f1-915c-8974b59277b5, ea4c5b9d-55f7-11f1-915c-8974b59277b51d35c6d802
GStreamer1: Update to 1.28.1 multimedia/gstreamer1-plugins-rust: Update to 0.15.1 Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.1 Security: 791d4b29-19fb-11f1-87cc-e73692421fef585b9a1616
GStreamer1: Update to 1.28.0 The y4menc (previously from good) and y4mdec (previously from bad) plugins have been consolidated into y4m (now from good). The vaapi component (multimedia/gstreamer1-vaapi) is no longer supplied by upstream and will be removed after 2026Q1. This has been superseded by the va plugin from 'bad', which we don't have and is rather Linux-heavy, but no ports seem to use this anyways. Remove from makesum-all target and adjust to be static 1.26.10 (last available) version. Add svtav1 component to gstreamer.mk after f96400339bd6. [1] multimedia/gstreamer1-plugins-svt-hevc has been marked DEPRECATED since multimedia/svt-hevc is marked DEPRECATED and will be removed after 2026Q1. [1] This port does not seem to be used anywhere in the ports tree. Note for local patching: meson_options.txt was renamed by upstream to meson.options across the board [2] and this change adapts to that. Changes: https://gstreamer.freedesktop.org/releases/1.28/ [2] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/128710caab3e7521384c4c82df031702f1728af8 PR: 292706 [1] Reported by: jbeich [1]c11c91c602
GStreamer1: Update to 1.26.10 https://gstreamer.freedesktop.org/releases/1.26/#1.26.10 Security: 500cc49c-e93b-11f0-b8d8-4ccc6adda41364597899da
GStreamer1: Update to 1.26.9 multimedia/gstreamer1-plugins-rust: Update to 0.14.4 https://gstreamer.freedesktop.org/releases/1.26/#1.26.942dc4b66e5
GStreamer1: Update to 1.26.8 https://gstreamer.freedesktop.org/releases/1.26/#1.26.8 MFH: 2025Q441ba8fe748
GStreamer1: Update to 1.26.7 https://gstreamer.freedesktop.org/releases/1.26/#1.26.7ea4a6ee736
GStreamer1: Update to 1.26.6 multimedia/gstreamer1-plugins-rust: Update to 0.14.2 https://gstreamer.freedesktop.org/releases/1.26/#1.26.631891908b9
GStreamer1: Update to 1.26.5 Rename multimedia/gstreamer1-validate -> devel/gstreamer1-devtools and update to 1.26.5. gst-validate has been gst-devtools since 1.17.x, but got lost in the mix. This a development toolkit, hence the move to the devel category. https://gstreamer.freedesktop.org/releases/1.26/#1.26.52680e71d5d
GStreamer1: Update to 1.26.4 multimedia/gstreamer1-plugins-rust: Update to 0.14.0 Add custom target to update the distinfo files for the whole suite depending on _GST1_VERSION for maintainer QoL. https://gstreamer.freedesktop.org/releases/1.26/#1.26.45dd5a01952
GStreamer1: Update to 1.26.3 https://gstreamer.freedesktop.org/releases/1.26/#1.26.3 Security: 69bfe2a4-5a39-11f0-8792-4ccc6adda4135646dd1886
libxml2: chase libxml soversion bump3068854dd0
GStreamer1: Update to 1.26.2 multimedia/gstreamer1-plugins-rust: Update to 0.13.6 https://gstreamer.freedesktop.org/releases/1.26/#1.26.29799edd889
GStreamer: Update to 1.26.1 https://gstreamer.freedesktop.org/releases/1.26/#1.26.1ff5a16ab9b
GStreamer: Update to 1.26.0 https://gstreamer.freedesktop.org/releases/1.26/1ba9b3ba5b
GStreamer: Update to 1.24.12 https://gstreamer.freedesktop.org/releases/1.24/#1.24.12e0ab9406ea
GStreamer: Update to 1.24.11 https://gstreamer.freedesktop.org/releases/1.24/#1.24.11f94c040c58
GStreamer: Update to 1.24.10 https://gstreamer.freedesktop.org/releases/1.24/#1.24.10 Security: 7256fae8-b3e8-11ef-b680-4ccc6adda413, 750ab972-b3e8-11ef-b680-4ccc6adda413, 772d8625-b3e8-11ef-b680-4ccc6adda413, 7945c543-b3e8-11ef-b680-4ccc6adda413, 7b34ddf7-b3e8-11ef-b680-4ccc6adda413, 7d1b4e5d-b3e8-11ef-b680-4ccc6adda413, 7f3a302b-b3e8-11ef-b680-4ccc6adda413f2f4b35340
devel/py-pygobject: bump consumer PORTREVISIONs after port rename With hat: gnome PR: 27372232a55d206d
Gstreamer: Update to 1.24.9 https://gstreamer.freedesktop.org/releases/1.24/#1.24.9 Security: d48a2224-9b4c-11ef-bdd9-4ccc6adda4139033cb222f
multimedia/gstreamer1: Update to 1.24.8
Mk/Uses/gstreamer.mk:
- Sort, fix whitespace issues and typos
- Promote several common variables to improve maintainer QOL
* There's now no need to set manually set PORTVERSION nor
SOVERSION in several Makefiles
* This will help to prevent not updating some components
* A note has been added, however, to remind maintainers
to remake distinfo for certain ports
- Improve documentation
multimedia/gstreamer1-plugins-webrtc:
- New port split from multimedia/gstreamer1-plugins-bad
- multimedia/gstreamer1-plugins-rust has been updated
to reflect this change
net/gstreamer1-plugins-sctp:
- New port split from multimedia/gstreamer1-plugins-bad
x11-toolkits/gstreamer1-plugins-qt5:
- Moved here from graphics/gstreamer1-plugins-qt to
align with its new Qt6 counterpart
x11-toolkits/gstreamer1-plugins-qt6:
- New port: GStreamer Qt6 QML videosink plugin
*/*:
- Improve Makefile order and formatting
- Sorry for the repo churn, but not fixing this would just lead to more
poorly formatted gstreamer ports in the future via copypasta
https://gstreamer.freedesktop.org/releases/1.24/#1.24.8
PR: 278914
Reported by: vvd8c1efc578dmultimedia/gstreamer1*: Update to upstream release 1.22.109a83291fa8
*/*: Sanitize MANPREFIX for meson ports Approved by: portmgr9f8f710b3e
Update gstreamer1 to upstream release 1.22.5 PR: 272141, 271505 MFH: 2023Q306be4e146b
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>3d9a815d9cUpdate gstreamer1 to upstream release 1.22.4 PR: 272141, 272100ced4dbad8d
Update gstreamer1 to upstream release 1.22.2 PR: 271021 Differential Revision: https://reviews.freebsd.org/D39818e7c053182e
multimedia/gstreamer1-editing-services: drop redundant MESON_ARGS after 3507fb3e4ec9 PR: 270361ff6cda3d32
multimedia/gstreamer1-editing-services: unbreak with --auto-features=enabled tools/meson.build:20:0: ERROR: Dependency "bash-completion" not found, tried pkgconfig PR: 270361 Reported by: antoine (via exp-run)7a9c872529
multimedia/gstreamer1-editing-services: drop unused dependency after e3b732b4791c Dependency gst-validate-1.0 found: NO found 1.16.3 but need: '>= 1.20.0' Did not find CMake 'cmake' Found CMake: NO Run-time dependency gst-validate-1.0 found: NO (tried pkgconfig and cmake) Looking for a fallback subproject for the dependency gst-validate-1.0 Neither a subproject directory nor a gst-devtools.wrap file was found. PR: 270361 Reported by: antoine (via exp-run)736a6a3fff
Update gstreamer1 to upstream release 1.20.5 PR: 26850109c25d30f0
Update gstreamer1 to upstream release 1.20.4 PR: 2670752d51705c04
Update gstreamer1 to upstream release 1.20.3 PR: 261585 Reviewed by: riggs,jbeich,tcberner Differential Revision: https://reviews.freebsd.org/D36850e3b732b479
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
multimedia: remove 'Created by' lines A big Thank You to the original contributors of these ports: * Aaron LI <aly@aaronly.me> * Alexander Botero-Lowry <alexbl@FreeBSD.org> * Alexander Logvinov <ports@logvinov.com> * Alexey Dokuchaev <danfe@FreeBSD.org> * Anders Nordby <anders@FreeBSD.org> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrew Thompson <andy@fud.org.nz> * Andrew Thompson <thompsa@FreeBSD.org> * Angel Carpintero <ack@telefonica.net> * Anish Mistry (with help from mean) * Anonymous <swell.k@gmail.com> * Ashish SHUKLA <ashish@FreeBSD.org> * Ashish Shukla <wahjava@gmail.com> * Ben Woods <woodsb02@FreeBSD.org> * Brian Somers <brian@FreeBSD.org> * Bruce M Simpson <bms@FreeBSD.org> * Byung-Hee HWANG <bh@izb.knu.ac.kr> * Charlie Kester <corky1951@comcast.net> * Chess Griffin <chess@chessgriffin.com> * Chris Piazza <cpiazza@FreeBSD.org> * Christopher Key <cjk32@cam.ac.uk> * Chuck Hein <chein@FreeBSD.org> & Jim Overholt <overholt@isdw.net> * Daniel Morante <daniel@morante.net> * Diego Depaoli <trebestie@gmail.com> and Yinghong Liu <relaxbsd@gmail.com> * Dierk Sacher <dierk@blaxxtarz.de> * Dreamcat4 <dreamcat4@gmail.com> * Earl Gay <earl@eeg3.net> * Ed Schouten <ed@FreeBSD.org> * Edwin Groothuis <edwin@mavetju.org> * Emanuel Haupt <ehaupt@FreeBSD.org> * Felix Palmen <felix@palmen-it.de> * Franz Bettag <franz@bett.ag> * FreeBSD GNOME Team <gnome@freebsd.org> * Gea-Suan Lin <gslin@gslin.org> * George Reid <greid@ukug.uk.freebsd.org> * Grzegorz Blach <gblach@FreeBSD.org> * Gustau Perez <gustau.perez@gmail.com> * Harold Gutch <logix@foobar.franken.de> * Heiner <h.eichmann@gmx.de> * Heiner Eichmann <h.eichmann@gmx.de> * Hendrik Scholz <hendrik@scholz.net> * Herbert J. Skuhra <h.skuhra@gmail.com> * Herve Quiroz <hq@FreeBSD.org> * Holger Lamm * J.R. Oldroyd <fbsd@opal.com> * Jason Harmening <jason.harmening@gmail.com> * Jille Timmermans (jille@quis.cx) * Juergen Lock <nox@FreeBSD.org> * Juergen Lock <nox@jelal.kn-bremen.de> * KalleDK <plexmaintainer@k-moeller.dk> * Koop Mast <kwm@FreeBSD.org> * Koop Mast <kwm@rainbow-runner.nl> * Kozlov Sergey <kozlov.sergey.404@gmail.com> * Kris Moore * Kuan-Chung Chiu <buganini@gmail.com> * Lars Eggert <lars.eggert@gmx.net> * Leinier Cruz Salfran <salfrancl@yahoo.es> * MANTANI Nobutaka <nobutaka@nobutaka.com> * Manuel Creach <manuel.creach@icloud.com> * Marc van Woerkom <3d@FreeBSD.org> * Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org> * Mark Felder <feld@FreeBSD.org> * Martin Matuska <mm@FreeBSD.org> * Martin Neubauer <m.ne@gmx.net> * Martin Wilke <miwi@FreeBSD.org> * Michael Johnson <ahze@FreeBSD.org> * Michael Johnson <ahze@ahze.net> * Michael Nottebrock <michaelnottebrock@gmx.net> * Michael Nottebrock <michaelnottebrock@gmx.net> et al * Mina Naguib <webmaster@topfx.com> * Mykola Dzham <i@levsha.me> * Naram Qashat <cyberbotx@cyberbotx.com> * Olivier Cochard-Labbe <olivier@FreeBSD.org> * Pascal Vizeli <pvizeli@yahoo.de> * Pav Lucistnik <pav@FreeBSD.org> * Pawel Pekala <pawel@FreeBSD.org> * Petar Zhivkov Petrov <pesho.petrov@gmail.com> * Phil Oleson * Phil Oleson <oz@nixil.net> * Piotr Kubaj <pkubaj@anongoth.pl> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Raaf <freebsd@luna.afraid.org> * Randall Hopper <aa8vb@nc.rr.com> * Rodrigo OSORIO <rodrigo@FreeBSD.org> * Rozhuk Ivan 2018 <rozhuk.im@gmail.com> * Rozhuk Ivan <rozhuk.im@gmail.com> * Rozhuk Ivan rozhuk.im@gmail.com * Rusmir Dusko <nemysis@FreeBSD.org> * Stacey Son <mythdev@son.org>, Ari Maniatis <ari@ish.com.au> * Steve Wills <steve@mouf.net> * Steve Wills <swills@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Sylvio Cesar <sylvio@FreeBSD.org> * Thierry Thomas <thierry@pompo.net> * Thomas E. Zander * Thomas E. Zander with help from Vladimir Kushnir * Vladimir Kondratiev <wulf@mail.mipt.ru> * William Grzybowski <wg@FreeBSD.org> * William Grzybowski <william88@gmail.com> * Yi-Hsuan Hsin <mhsin@mhsin.org> * Zastupov Stepan [RedChrom] <redchrom@mail.ru> * adamw * alex * arved * erich@FreeBSD.org * freebsd-ports@evilcode.net * giffunip@asme.org * ijliao * kamikaze@bsdforen.de * michael johnson <ahze@ahze.net> * mikael.urankar@gmail.com * mm * nox@FreeBSD.org * osa * pb@FreeBSD.org * piero * se@FreeBSD.org * sumikawa With hat: portmgr63f36d3262
multimedia/gstreamer1-editing-services: update to 1.16.3 and use meson * Switch to meson for the build, re-enabling Python 3.10+ compat. * Add gstreamer1-validate support and LIB_DEPENDS. * Drop __pycache__ from install and Perl5 and autotools from requisites. Reported by: VVD@unislabs.com (IRC) Discussed with: vishwin@, diizzy@ PR: 264611 Approved by: maintainer timeout (multimedia@, 19 d)e67fd20552
framework: convert bsd.gstreamer.mk to Uses/gstreamer.mk - convert bsd.gstreamer.mk to Uses/gstreamer.mk - convert ports tree to make use of USES=gstreamer - remove duplicate dependency lines from the tree Differential Revision: https://reviews.freebsd.org/D35097ca3f925d6e
textproc/libxml2: bump all LIB_DEPENDS consumers This is a separate commit to facilitate easier cherry-picking for quarterly. PR: 262853, 262940, 262877, 263126 Approved by: fluffy (mentor)d63665f7cd
textproc/libxml2: bump all dependencies This should make sure that all dependent ports will pick up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246247c7db751
multimedia/gstreamer1-editing-services: limit supported python version Approved by: porgmgr blanketba7383ebfa
Remove # $FreeBSD$ from Makefiles.305f148f48
Update gstreamer1 to 1.16.2. - The spc plugin was removed inflavor for the gsm plugin. - Added in tree qt plugin. Changelog: https://gstreamer.freedesktop.org/releases/1.16/#1.16.2 Update net-im/fractal to 4.2.2 to support GStreamer 1.16 (approved by maintainer) Thanks to antoine@ for the exp-run. PR: 239386aa49f23a6d
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang, c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib plus, everything INDEX-11 shows with a dependency on lang/gcc9 now. PR: 238330ea8c8ec7da
Clean up plistcf6456491e
Add missing files to the plist. PR: 227897a1a869f28f