CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

multimedia/gstreamer1-libav 1.28.8

GStreamer plug-in with many audio/video decoders/encoders

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8
Upstream
up to date
Last update
to 1.28.8 · 30a7e19ff0
Quarterly
2026Q4: 1.28.8 · last MFH d2b644208d
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gstreamer1-libav
installs 1.28.8 from latest; from quarterly (2026Q4) 1.28.8
Port
# cd /usr/ports/multimedia/gstreamer1-libav && make install clean
Size
103 KiB download · 283 KiB installed
Depends on
devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/orc 0.4.44, multimedia/ffmpeg 9.0.2_2,1, multimedia/gstreamer1 1.28.8_1, multimedia/gstreamer1-plugins 1.28.8
License
LGPL20+

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.28.81.28.8–
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.61.28.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.81.28.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (12)

Show 12 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (89)

Jan Beich (jbeich) · 1.14.4_2
multimedia/gstreamer1-libav: unbreak FFMPEG=OFF on aarch64 after r483887

- Drop GNU as(1) dependency as it's no longer required

PR:		233137
Submitted by:	Mikaël Urankar (based on)
8eef9aa030
Jan Beich (jbeich) · 1.14.4_2
multimedia/gstreamer1-libav: unbreak and enable system ffmpeg

PR:		227748
Obtained from:	upstream
Security:	CVE-2018-7557
Security:	CVE-2018-7751
Security:	CVE-2018-10001
Security:	CVE-2018-12458
Security:	CVE-2018-13300
Security:	CVE-2018-13302
Security:	CVE-2018-14394
Security:	CVE-2018-14395
Security:	CVE-2018-15822
9ac8c6a332
Jan Beich (jbeich) · 1.14.4_1
multimedia/ffmpeg: update to 4.1

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.1:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
0872f77fd4
Tijl Coosemans (tijl) · 1.14.4
Update GStreamer to 1.14.4.

PR:		231406
Submitted by:	Greg V <greg@unrelenting.technology>
Exp-run by:	antoine
Approved by:	portmgr (antoine)
54c5444eba
Mark Linimon (linimon) · 1.12.3_2
Fix build on powerpc64.

Approved by:	portmgr (tier-2 blanket)
90b93f532a
Jan Beich (jbeich) · 1.12.3_2
multimedia/ffmpeg: update to 4.0

- FFSERVER support was removed upstream
- libressl now uses libtls backend instead of patching openssl one
- Clang i386 no longer uses 16-byte aligned stack

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.0:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR:		227726
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D15175
c400a2c8b6
Jan Beich (jbeich) · 1.12.3_1
multimedia/gstreamer1-libav: unbreak FFMPEG=off with CPUTYPE >= haswell

In file included from libavcodec/hevc_cabac.c:27:
In file included from libavcodec/cabac_functions.h:46:
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
        BRANCHLESS_GET_CABAC("%0", "%q0", "(%4)", "%1", "%w1",
        ^
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
libavcodec/x86/cabac.h:193:9: error: inline assembly requires more registers than available
libavcodec/x86/cabac.h:143:9: note: expanded from macro 'BRANCHLESS_GET_CABAC'
        "movzbl "statep"    , "ret"                                     \n\t"\
        ^
26bf82c7fb
Jan Beich (jbeich) · 1.12.3_1
multimedia/gstreamer1-libav: expose bundled libav

For debugging or as a workaround during ffmpeg upgrades.
15b98e4752
Antoine Brodin (antoine) · 1.12.3_1
- Those ports fail to build with python3 - Add some explicit FLAVOR to dependencies where needed
a021c1b8c0
Jan Beich (jbeich) · 1.12.3_1
multimedia/ffmpeg: update to 3.4

Notable changes:
- i386/amd64 now depend on NASM per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/4f9297ac3b39
- NETCDF is now MYSOFA but the dependency doesn't exist in ports yet
- SCHROEDINGER is gone per https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/220b24c7c9
- DRM, LIBRSVG2, LIBXML2 are new options
- ABI isn't completely compatible: some structs have changed

Minor cleanup:
- Don't pass --disable-{in,out}dev when it's already blocked by disabled dependency
- Drop redundant "Enable" from option descriptions
- Switch CDIO_DESC to use Mk/bsd.options.desc.mk

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n3.4:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR:		223057
Exp-run by:	antoine
84e727457f
Koop Mast (kwm) · 1.12.3
Update GStreamer 1.x suite to 1.12.3.

ChangeLog: https://gstreamer.freedesktop.org/releases/1.12/#1.12.3
3a0bcca815
Koop Mast (kwm) · 1.12.2
Update GStreamer1 ports to 1.12.2.

Rework the adding of dependancies in Mk/bsd.gstreamer.mk.
Previous when using USE_GSTREAMER[1] it would just add the request modules to BUILD/RUN_DEPENDS. This caused the qa script to complain because the old code didn't implicit depend on the gstreamer1 and gstreamer1-plugins[-bad] ports for the libraries they carried, even if they where present via the plugins! The new code adds implicit depends on these ports so USE_GSTREAMER[1] using ports have all the libraries included.

* The mad mp3 plugin was removed, mpg123 plugin also provides mp3 decoding. Switch over ports that used the gstreamer1 mad plugin.
* gtksink plugin renamed -> gtk
* Hook up the sndio plugin into the framework
* Add some indirect dependacies where needed
* Reorder the plugin list in bsd.gstreamer.mk so only one plugin per line. When changing plugins it doesn't result in multiple lines being changed.
* Remove mentions in bsd.gstreamer.mk of plugins mentions that where removed.
* Depend on libunwind on i386/amd64, GStreamer links to it if it is present.

PR:		220753
Exp-run by:	antoine@
d566d54fa6
Thomas Zander (riggs) · 1.8.0_2
Chase ffmpeg 3.3 update (ABI changes)

PR:		218658
Submitted by:	riggs
b50a4186ce
Jan Beich (jbeich) · 1.8.0_1
multimedia/ffmpeg: update to 3.2.2

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n3.2.2:/Changelog
PR:		207547
Submitted by:	riggs, ebirth@b0ss.net (libressl fix)
Exp-run by:	antoine (3 tries)
0c612c4aa3
Mathieu Arnold (mat) · 1.8.0
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Koop Mast (kwm) · 1.8.0
Update GStreamer1 ports to 1.8.0.

ChangeLog: https://gstreamer.freedesktop.org/releases/1.8/
405cf8c704
Koop Mast (kwm) · 1.6.3
Update GStreamer suite to 1.6.3.
145b227bd1
Koop Mast (kwm) · 1.6.2
Update GStreamer1 to 1.6.2. Update GStreamer1-vaapi to 0.7.0.

* Spell GStreamer consistently. [1]
* Fix typo in py3kplist in py3-gstreamer1 [1]
* Improve plugins COMMENTS (more improvements welcome)
* Actually include the gstreamer1-libav update this time.

PR:		204204 [1] (based on)
Submitted by:	olivierd@ [1]
353ad9c72e
Koop Mast (kwm) · 1.6.0
Update Gstreamer suite to 1.6.1.
f1f581a883
Mathieu Arnold (mat) · 1.6.0
Drop 8 support.

With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3694
7f0f664d7e
Koop Mast (kwm) · 1.6.0
Update gstreamer1 ports to 1.6.0.

* gstreamer1-libav now uses ffmpeg from ports.
* New ports:
  * gstreamer1-validate: Tools to detect if elements are not behaving
    as expected, mainly aimed at developers, or advanced debugging.
  * gstreamer1-rtsp-server: Base foundation for building a rtsp
    server ontop of GStreamer
 * Bunch of new plugins like: mpg123, rsvg, libde265, openh264, x265 and dtls.

Release announcement:
  http://lists.freedesktop.org/archives/gstreamer-announce/2015-September/000357.html

Obtained from:	gnome devel repo
7b97259096
Tijl Coosemans (tijl) · 1.4.5
Set PORTSCOUT on gstreamer ports
53a3544c77
Sean Bruno (sbruno) · 1.4.5
Remove duplicate armv6 conditional introduced in r377204

Submitted by:	antoine
425f648ca7
Sean Bruno (sbruno) · 1.4.5
These ports utilize GAS assembly and probably won't ever change.  For the ARM case, do not use -integrated-as.

PR:	196660 196774 196775 196776
Submitted by:	mikael.urankar@gmail.com
Approved by:	mentor (inplicit)
42a1f84a57
Koop Mast (kwm) · 1.4.5
Update gstreamer1-libav to 1.4.5.

Reminded by:	tijl@
1b6c5f5c0b
Koop Mast (kwm) · 1.4.4
Big Gstreamer update:

Update gstreamer, gstreamer-plugins, -good, -bad and -ugly ports to 1.4.4.
Update gstreamer1-plugins-gnonlin to 1.4.0.
Update py-gstreamer1 and py3-gstreamer1 to 1.4.0.

Add multimedia/gstreamer1-editing-services. GES is a high-level library
for facilitating the creation of audio/video non-linear editors.

Add pulseaudio plugin now that pulseaudio is updated and add the gl plugin.

Drop :keepla from USES=libtool.
Drop @dirrm[try] from plists and drop gnomehier from USE_GNOME
Switch to optionhelpers in multimedia/gstreamer1.

PR:		194922 (merged with my own WIP)
Submitted by:	olivierd
c6e9859c13
Tijl Coosemans (tijl) · 1.2.4_1
- Let clang realign the stack on a 16 byte boundary on i386 to fix a crash   at libavcodec/x86/h264_deblock.asm:504 due to unaligned memory access - Remove a patch that is no longer needed now

(Similar to r358825)

Reported by:	Joseph Olatt <joji@eskimo.com> (on freebsd-questions)
9dab03575c
Tijl Coosemans (tijl) · 1.2.4
- Update gstreamer1-libav to 1.2.4 (fixes crashes when seeking). - USES=libtool, INSTALL_TARGET=install-strip - Replace tiny pkg-plist with PLIST_FILES.

PR:		ports/188133, ports/188803
12d6142f76
Tijl Coosemans (tijl) · 1.2.3
Use binutils port on FreeBSD/ia64.

PR:		ports/187814
3f0dccddca
Tijl Coosemans (tijl) · 1.2.3
- Update gstreamer1-libav to version 1.2.3. - USES=tar:xz. - Remove redundant configure args. - Only link with -Wl,-Bsymbolic where necessary. - Remove detection of SSE and MMX instruction set support.  This enables   support for various x86 extensions (SSE2, SSE3,...) in the i386 package.   CPU support for these is detected at runtime except for MMX.  So the   i386 package requires at least a Pen

PR:		ports/181964 [1]
307f1a9630
Tijl Coosemans (tijl) · 1.2.2
Copy a patch from multimedia/libav to fix compilation with clang on i386 with MMX and SSE.
63ae5c8378
Koop Mast (kwm) · 1.2.2
Only set -fno-force-addr in CFLAGS when the compiler is gcc. [1] Fix the build on ppc64 by telling the libav bundled which arch we are on [2]

PR:		ports/187018 [1]
		ports/183129 [2]
Submitted by:	truckman@ [1]
		jhibbits@ [2]
03f6448ea9
Koop Mast (kwm) · 1.2.2
Update to 1.2.2.

Remove vaapi from plugin list in bsd.gstreamer.mk it accidently snuck in.

Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-December/045238.html
2dba4b6fda
Koop Mast (kwm) · 1.2.1
Update to 1.2.1.

Retire celt plugin, it was removed in flavor for the opus plugin.
Add new webp, kate and openjpeg plugin.
6fd348728d
Koop Mast (kwm) · 1.0.10
Stagify Gstreamer ports. Fix build of gstreamer and gstreamer1 with glib 2.38.x [1]. Update gstreamer and gstreamer-plugins to new rules, USES=gmake pathfix, new LIB_DEPENDS syntax. Only pull in flex if base version is too old. Be more selective for which OSVERSIONS we need gcc due to the clang bug.

Obtained from:	Gstreamer upstream [1]
44d0dc12bb
Baptiste Daroussin (bapt) · 1.0.10
Add NO_STAGE all over the place in preparation for the staging support (cat: multimedia)
855fb638fb
Koop Mast (kwm) · 1.0.10
Update to 1.0.10.

Bug fix release.
26461e5aec
Koop Mast (kwm) · 1.0.9
Update to 1.0.9.

This is a bug fix release.
Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-August/042360.html

Enable neon http plugin
Switch to new LIB_DEPEND format, use USES=gmake instead of USE_GMAKE
Utilize new introspection USE_GNOME component.
Allow gstreamer1-libav to play mp3's, note that mad plugin is still
prefered if available.
ea50e52183
Koop Mast (kwm) · 1.0.7
Add Gstreamer 1.0.7. This is the new stable version of the Gstreamer multimedia framework.

Use the USE_GSTREAMER1 macro to select Gstreamer 1.0 plugins. A new chapter
for the porters handbook about gstreamer is a work in progress.

X related plugins are now stand alone. The gio plugin is now part of the
gstreamer1-plugins port and the oss plugins are now part of the
gstreamer1-plugins-good port.

Note that the pulseaudio plugin is missing because it needs a newer version
of pulseaudio. Also there are still a number of plugins from -bad which
haven't been ported to the 1.0 API yet.
05d2886d27