CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

multimedia/gstreamer1-plugins-bad 1.28.5

GStreamer-plugins that need more quality, testing or documentation

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8, update to 1.28.5 not built yet
Upstream
up to date
Last update
to 1.28.8 via multimedia/gstreamer1-plugins · 30a7e19ff0
Quarterly
2026Q4: 1.28.8
Formerly
multimedia/gstreamer1-transcoder until 2022-10-15
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gstreamer1-plugins-bad
installs 1.28.8 from latest; from quarterly (2026Q4) 1.28.8
Port
# cd /usr/ports/multimedia/gstreamer1-plugins-bad && make install clean
Size
2.2 MiB download · 10 MiB installed
Depends on
devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/json-glib 1.10.8, devel/orc 0.4.44, graphics/cairo 1.18.2,3, misc/iso-codes 4.20.1, multimedia/gstreamer1 1.28.8_1, multimedia/gstreamer1-plugins 1.28.8, print/freetype2 2.14.3, print/harfbuzz 14.6.0, textproc/libxml2 2.15.4, x11-toolkits/pango 1.57.1, x11/libX11 1.8.14,1
License
LGPL20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.28.81.28.8–
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.61.28.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.81.28.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (16)

Show 16 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (65)

Koop Mast (kwm)
Update gstreamer1 ports to 1.6.0.

* gstreamer1-libav now uses ffmpeg from ports.
* New ports:
  * gstreamer1-validate: Tools to detect if elements are not behaving
    as expected, mainly aimed at developers, or advanced debugging.
  * gstreamer1-rtsp-server: Base foundation for building a rtsp
    server ontop of GStreamer
 * Bunch of new plugins like: mpg123, rsvg, libde265, openh264, x265 and dtls.

Release announcement:
  http://lists.freedesktop.org/archives/gstreamer-announce/2015-September/000357.html

Obtained from:	gnome devel repo
7b97259096
Tijl Coosemans (tijl)
By default libtool replaces -export-symbols <file> with -retain-symbols-file <file> on ELF systems, but this doesn't really do what -export-symbols is meant to do.  On GNU ELF systems it converts <file> to a simple version script first and then uses -version-script instead of -retain-symbols-file. Let USES=libtool patch libtool scripts to do this on all systems with GNU ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same
Makefile.am and clean up the port Makefile.

japanese/scim-honoka: Tries to hide all symbols that start with an
underscore, but because this library is written in C++ all symbols start
with _Z so it ends up hiding everything.  Just don't hide anything at all
like the textproc/scim configure script does.

multimedia/schroedinger: Apply an upstream patch.

textproc/scim-input-pad: Same as japanese/scim-honoka.

PR:		201922
Approved by:	portmgr (antoine)
Exp-run by:	antoine
a374acb969
Koop Mast (kwm)
Big Gstreamer update:

Update gstreamer, gstreamer-plugins, -good, -bad and -ugly ports to 1.4.4.
Update gstreamer1-plugins-gnonlin to 1.4.0.
Update py-gstreamer1 and py3-gstreamer1 to 1.4.0.

Add multimedia/gstreamer1-editing-services. GES is a high-level library
for facilitating the creation of audio/video non-linear editors.

Add pulseaudio plugin now that pulseaudio is updated and add the gl plugin.

Drop :keepla from USES=libtool.
Drop @dirrm[try] from plists and drop gnomehier from USE_GNOME
Switch to optionhelpers in multimedia/gstreamer1.

PR:		194922 (merged with my own WIP)
Submitted by:	olivierd
c6e9859c13
Thomas Zander (riggs)
- Make gstreamer{,1}-plugins-{good,bad,ugly} respect MAKE_JOBS during build

PR:		189096
Submitted by:	jiashiun@gmail.com
Approved by:	mentors (implicit)
d2a12805c5
Baptiste Daroussin (bapt)
Convert GMAKE to MAKE_CMD Please note that lots of invocation of MAKE_CMD here are wrong as they do not properly respect MAKE_ENV and friends

With hat:	portmgr
a33191366c
Tijl Coosemans (tijl)
Update gstreamer 1.0 ports to version 1.2.4.
ce5a9a5d44
Tijl Coosemans (tijl)
When linking a library libA with a library libB using libtool, if libB.la exists, libtool will add all libraries libB.la refers to (dependency_libs field) to the linker command line and store them in the dependency_libs field of libA.la.  So everything that subsequently links with libA will also link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

PORTREVISION is bumped on all ports with USES=libtool that install .la
libraries.  Most ports are also changed to add :keepla because .la
libraries have to be kept around as long as there are dependent ports with
.la libraries that refer to them in their dependency_libs field.  In most
cases :keepla can be removed again as soon as all dependent ports that
install .la libraries have some form of USES=libtool added to their
Makefile.

PR:		ports/188759
Exp-run:	bdrewery
Approved by:	portmgr (bdrewery)
aad09bc5e2
Koop Mast (kwm)
Update gstreamer to 1.2.3.

Switch from USE_GNOME=ltverhack to USES=libtool
8e9a2ad5ef
Koop Mast (kwm)
Update to 1.2.2.

Remove vaapi from plugin list in bsd.gstreamer.mk it accidently snuck in.

Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-December/045238.html
2dba4b6fda
Koop Mast (kwm)
Update to 1.2.1.

Retire celt plugin, it was removed in flavor for the opus plugin.
Add new webp, kate and openjpeg plugin.
6fd348728d
Koop Mast (kwm)
Stagify Gstreamer ports. Fix build of gstreamer and gstreamer1 with glib 2.38.x [1]. Update gstreamer and gstreamer-plugins to new rules, USES=gmake pathfix, new LIB_DEPENDS syntax. Only pull in flex if base version is too old. Be more selective for which OSVERSIONS we need gcc due to the clang bug.

Obtained from:	Gstreamer upstream [1]
44d0dc12bb
Koop Mast (kwm)
Fix the build of audio/gstreamer1-plugins-modplug on 10.0+ by removing hardcoded -lstdc++.
452af786b2
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: multimedia)
855fb638fb
Koop Mast (kwm)
Update to 1.0.9.

This is a bug fix release.
Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-August/042360.html

Enable neon http plugin
Switch to new LIB_DEPEND format, use USES=gmake instead of USE_GMAKE
Utilize new introspection USE_GNOME component.
Allow gstreamer1-libav to play mp3's, note that mad plugin is still
prefered if available.
ea50e52183
Koop Mast (kwm)
Add Gstreamer 1.0.7. This is the new stable version of the Gstreamer multimedia framework.

Use the USE_GSTREAMER1 macro to select Gstreamer 1.0 plugins. A new chapter
for the porters handbook about gstreamer is a work in progress.

X related plugins are now stand alone. The gio plugin is now part of the
gstreamer1-plugins port and the oss plugins are now part of the
gstreamer1-plugins-good port.

Note that the pulseaudio plugin is missing because it needs a newer version
of pulseaudio. Also there are still a number of plugins from -bad which
haven't been ported to the 1.0 API yet.
05d2886d27