multimedia/gstreamer1-libav: unbreak FFMPEG=OFF on aarch64 after r483887 - Drop GNU as(1) dependency as it's no longer required PR: 233137 Submitted by: Mikaël Urankar (based on)8eef9aa030
gstreamer1 -- multiple vulnerabilitiesentered 2026-08-08
GStreamer plug-in with many audio/video decoders/encoders
# pkg install gstreamer1-libavinstalls 1.28.8 from latest; from quarterly (2026Q4) 1.28.8# cd /usr/ports/multimedia/gstreamer1-libav && make install clean| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.28.8 | 1.28.8 | – |
| FreeBSD 15 | 1.28.8 | 1.28.8 | – |
| FreeBSD 14 | 1.28.8 | 1.28.6 | 1.28.8 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.28.8 | 1.28.8 | – |
| FreeBSD 14 | 1.28.8 | 1.28.8 | 1.28.8 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 1.28.8.| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-18295 | 7.8 | 2026-08-20 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst… |
| CVE-2026-18296 | 7.8 | 2026-08-20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
| CVE-2026-18297 | 7.8 | 2026-08-20 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
| CVE-2026-18298 | 7.8 | 2026-08-20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
| CVE-2026-18299 | 7.8 | 2026-08-20 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations … |
| CVE-2026-73433 | 6.6 | 2026-08-12 | A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length … |
| CVE-2026-73434 | 6.1 | 2026-08-12 | A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat… |
CVE-2026-12891, CVE-2026-12892, CVE-2026-12893, CVE-2026-52717, CVE-2026-52718, CVE-2026-52719, CVE-2026-52720, CVE-2026-52721, CVE-2026-52722, CVE-2026-53703, CVE-2026-53704, CVE-2026-53705
CVE-2015-6818, CVE-2015-6819, CVE-2015-6820, CVE-2015-6821, CVE-2015-6822, CVE-2015-6823, CVE-2015-6824, CVE-2015-6825, CVE-2015-6826
multimedia/gstreamer1-libav: unbreak FFMPEG=OFF on aarch64 after r483887 - Drop GNU as(1) dependency as it's no longer required PR: 233137 Submitted by: Mikaël Urankar (based on)8eef9aa030
multimedia/gstreamer1-libav: unbreak and enable system ffmpeg PR: 227748 Obtained from: upstream Security: CVE-2018-7557 Security: CVE-2018-7751 Security: CVE-2018-10001 Security: CVE-2018-12458 Security: CVE-2018-13300 Security: CVE-2018-13302 Security: CVE-2018-14394 Security: CVE-2018-14395 Security: CVE-2018-158229ac8c6a332
multimedia/ffmpeg: update to 4.1 Changes: https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.1:/Changelog ABI: https://abi-laboratory.pro/tracker/timeline/ffmpeg/0872f77fd4
Update GStreamer to 1.14.4. PR: 231406 Submitted by: Greg V <greg@unrelenting.technology> Exp-run by: antoine Approved by: portmgr (antoine)54c5444eba
Fix build on powerpc64. Approved by: portmgr (tier-2 blanket)90b93f532a
multimedia/ffmpeg: update to 4.0 - FFSERVER support was removed upstream - libressl now uses libtls backend instead of patching openssl one - Clang i386 no longer uses 16-byte aligned stack Changes: https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.0:/Changelog ABI: https://abi-laboratory.pro/tracker/timeline/ffmpeg/ PR: 227726 Exp-run by: antoine Differential Revision: https://reviews.freebsd.org/D15175c400a2c8b6
multimedia/gstreamer1-libav: unbreak FFMPEG=off with CPUTYPE >= haswell
In file included from libavcodec/hevc_cabac.c:27:
In file included from libavcodec/cabac_functions.h:46:
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
BRANCHLESS_GET_CABAC("%0", "%q0", "(%4)", "%1", "%w1",
^
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
"movzbl "statep" , "ret" \n\t"\
^26bf82c7fbmultimedia/gstreamer1-libav: expose bundled libav For debugging or as a workaround during ffmpeg upgrades.15b98e4752
- Those ports fail to build with python3 - Add some explicit FLAVOR to dependencies where neededa021c1b8c0
multimedia/ffmpeg: update to 3.4
Notable changes:
- i386/amd64 now depend on NASM per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/4f9297ac3b39
- NETCDF is now MYSOFA but the dependency doesn't exist in ports yet
- SCHROEDINGER is gone per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/220b24c7c9
- DRM, LIBRSVG2, LIBXML2 are new options
- ABI isn't completely compatible: some structs have changed
Minor cleanup:
- Don't pass --disable-{in,out}dev when it's already blocked by disabled dependency
- Drop redundant "Enable" from option descriptions
- Switch CDIO_DESC to use Mk/bsd.options.desc.mk
Changes: https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n3.4:/Changelog
ABI: https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR: 223057
Exp-run by: antoine84e727457fUpdate GStreamer 1.x suite to 1.12.3. ChangeLog: https://gstreamer.freedesktop.org/releases/1.12/#1.12.33a0bcca815
Update GStreamer1 ports to 1.12.2. Rework the adding of dependancies in Mk/bsd.gstreamer.mk. Previous when using USE_GSTREAMER[1] it would just add the request modules to BUILD/RUN_DEPENDS. This caused the qa script to complain because the old code didn't implicit depend on the gstreamer1 and gstreamer1-plugins[-bad] ports for the libraries they carried, even if they where present via the plugins! The new code adds implicit depends on these ports so USE_GSTREAMER[1] using ports have all the libraries included. * The mad mp3 plugin was removed, mpg123 plugin also provides mp3 decoding. Switch over ports that used the gstreamer1 mad plugin. * gtksink plugin renamed -> gtk * Hook up the sndio plugin into the framework * Add some indirect dependacies where needed * Reorder the plugin list in bsd.gstreamer.mk so only one plugin per line. When changing plugins it doesn't result in multiple lines being changed. * Remove mentions in bsd.gstreamer.mk of plugins mentions that where removed. * Depend on libunwind on i386/amd64, GStreamer links to it if it is present. PR: 220753 Exp-run by: antoine@d566d54fa6
Chase ffmpeg 3.3 update (ABI changes) PR: 218658 Submitted by: riggsb50a4186ce
multimedia/ffmpeg: update to 3.2.2 Changes: https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n3.2.2:/Changelog PR: 207547 Submitted by: riggs, ebirth@b0ss.net (libressl fix) Exp-run by: antoine (3 tries)0c612c4aa3
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.
With hat: portmgr
Sponsored by: Absolight8d6597e0bbUpdate GStreamer1 ports to 1.8.0. ChangeLog: https://gstreamer.freedesktop.org/releases/1.8/405cf8c704
Update GStreamer suite to 1.6.3.145b227bd1
Update GStreamer1 to 1.6.2. Update GStreamer1-vaapi to 0.7.0. * Spell GStreamer consistently. [1] * Fix typo in py3kplist in py3-gstreamer1 [1] * Improve plugins COMMENTS (more improvements welcome) * Actually include the gstreamer1-libav update this time. PR: 204204 [1] (based on) Submitted by: olivierd@ [1]353ad9c72e
Update Gstreamer suite to 1.6.1.f1f581a883
Drop 8 support. With hat: portmgr Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D36947f0f664d7e
Update gstreamer1 ports to 1.6.0.
* gstreamer1-libav now uses ffmpeg from ports.
* New ports:
* gstreamer1-validate: Tools to detect if elements are not behaving
as expected, mainly aimed at developers, or advanced debugging.
* gstreamer1-rtsp-server: Base foundation for building a rtsp
server ontop of GStreamer
* Bunch of new plugins like: mpg123, rsvg, libde265, openh264, x265 and dtls.
Release announcement:
http://lists.freedesktop.org/archives/gstreamer-announce/2015-September/000357.html
Obtained from: gnome devel repo7b97259096Set PORTSCOUT on gstreamer ports53a3544c77
Remove duplicate armv6 conditional introduced in r377204 Submitted by: antoine425f648ca7
These ports utilize GAS assembly and probably won't ever change. For the ARM case, do not use -integrated-as. PR: 196660 196774 196775 196776 Submitted by: mikael.urankar@gmail.com Approved by: mentor (inplicit)42a1f84a57
Update gstreamer1-libav to 1.4.5. Reminded by: tijl@1b6c5f5c0b
Big Gstreamer update: Update gstreamer, gstreamer-plugins, -good, -bad and -ugly ports to 1.4.4. Update gstreamer1-plugins-gnonlin to 1.4.0. Update py-gstreamer1 and py3-gstreamer1 to 1.4.0. Add multimedia/gstreamer1-editing-services. GES is a high-level library for facilitating the creation of audio/video non-linear editors. Add pulseaudio plugin now that pulseaudio is updated and add the gl plugin. Drop :keepla from USES=libtool. Drop @dirrm[try] from plists and drop gnomehier from USE_GNOME Switch to optionhelpers in multimedia/gstreamer1. PR: 194922 (merged with my own WIP) Submitted by: olivierdc6e9859c13
- Let clang realign the stack on a 16 byte boundary on i386 to fix a crash at libavcodec/x86/h264_deblock.asm:504 due to unaligned memory access - Remove a patch that is no longer needed now (Similar to r358825) Reported by: Joseph Olatt <joji@eskimo.com> (on freebsd-questions)9dab03575c
- Update gstreamer1-libav to 1.2.4 (fixes crashes when seeking). - USES=libtool, INSTALL_TARGET=install-strip - Replace tiny pkg-plist with PLIST_FILES. PR: ports/188133, ports/18880312d6142f76
Use binutils port on FreeBSD/ia64. PR: ports/1878143f0dccddca
- Update gstreamer1-libav to version 1.2.3. - USES=tar:xz. - Remove redundant configure args. - Only link with -Wl,-Bsymbolic where necessary. - Remove detection of SSE and MMX instruction set support. This enables support for various x86 extensions (SSE2, SSE3,...) in the i386 package. CPU support for these is detected at runtime except for MMX. So the i386 package requires at least a Pen PR: ports/181964 [1]307f1a9630
Copy a patch from multimedia/libav to fix compilation with clang on i386 with MMX and SSE.63ae5c8378
Only set -fno-force-addr in CFLAGS when the compiler is gcc. [1] Fix the build on ppc64 by telling the libav bundled which arch we are on [2] PR: ports/187018 [1] ports/183129 [2] Submitted by: truckman@ [1] jhibbits@ [2]03f6448ea9
Update to 1.2.2. Remove vaapi from plugin list in bsd.gstreamer.mk it accidently snuck in. Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-December/045238.html2dba4b6fda
Update to 1.2.1. Retire celt plugin, it was removed in flavor for the opus plugin. Add new webp, kate and openjpeg plugin.6fd348728d
Stagify Gstreamer ports. Fix build of gstreamer and gstreamer1 with glib 2.38.x [1]. Update gstreamer and gstreamer-plugins to new rules, USES=gmake pathfix, new LIB_DEPENDS syntax. Only pull in flex if base version is too old. Be more selective for which OSVERSIONS we need gcc due to the clang bug. Obtained from: Gstreamer upstream [1]44d0dc12bb
Add NO_STAGE all over the place in preparation for the staging support (cat: multimedia)855fb638fb
Update to 1.0.10. Bug fix release.26461e5aec
Update to 1.0.9. This is a bug fix release. Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-August/042360.html Enable neon http plugin Switch to new LIB_DEPEND format, use USES=gmake instead of USE_GMAKE Utilize new introspection USE_GNOME component. Allow gstreamer1-libav to play mp3's, note that mad plugin is still prefered if available.ea50e52183
Add Gstreamer 1.0.7. This is the new stable version of the Gstreamer multimedia framework. Use the USE_GSTREAMER1 macro to select Gstreamer 1.0 plugins. A new chapter for the porters handbook about gstreamer is a work in progress. X related plugins are now stand alone. The gio plugin is now part of the gstreamer1-plugins port and the oss plugins are now part of the gstreamer1-plugins-good port. Note that the pulseaudio plugin is missing because it needs a newer version of pulseaudio. Also there are still a number of plugins from -bad which haven't been ported to the 1.0 API yet.05d2886d27