CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

multimedia/gstreamer1-plugins-x265 1.28.8

GStreamer libx265 based H265 plugin

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8
Upstream
up to date
Last update
to 1.28.8 · 30a7e19ff0
Quarterly
2026Q4: 1.28.8
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (7)

Show 7 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (25)

Jason E. Hale (jhale) · 1.28.8 MFH 2026Q4 ✓
GStreamer1: Update to 1.28.8

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.7
	 https://gstreamer.freedesktop.org/releases/1.28/#1.28.8

MFH:		2026Q4
Security:	bfa621d9-e508-4e3e-9a15-c2b54929ea77
30a7e19ff0
Gleb Popov (arrowd) · 1.28.6_2
*: Bump PORTREVISION on multimedia/x265 consumers

PR:		299194
e8660dbf74
Gleb Popov (arrowd) · 1.28.6_1
*: Bump PORTREVISION on multimedia/x265 consumers

PR:		298481
d98c0147b3
Jason E. Hale (jhale) · 1.26.10
GStreamer1: Update to 1.26.10

https://gstreamer.freedesktop.org/releases/1.26/#1.26.10

Security:	500cc49c-e93b-11f0-b8d8-4ccc6adda413
64597899da
Robert Clausecker (fuz) · 1.26.8_1
*/*: bump PORTREVISION following lib/libx265.so soname change

Reported by:	vvd
e6242cd11e
Jason E. Hale (jhale)
Gstreamer: Update to 1.24.9

https://gstreamer.freedesktop.org/releases/1.24/#1.24.9

Security:	d48a2224-9b4c-11ef-bdd9-4ccc6adda413
9033cb222f
Robert Clausecker (fuz)
*/*: bump port revisions of dependents following x265 updates

PR:		281680
90e15809d9
Jason E. Hale (jhale)
multimedia/gstreamer1: Update to 1.24.8

Mk/Uses/gstreamer.mk:
- Sort, fix whitespace issues and typos
- Promote several common variables to improve maintainer QOL
*   There's now no need to set manually set PORTVERSION nor
    SOVERSION in several Makefiles
*   This will help to prevent not updating some components
*   A note has been added, however, to remind maintainers
    to remake distinfo for certain ports
- Improve documentation

multimedia/gstreamer1-plugins-webrtc:
- New port split from multimedia/gstreamer1-plugins-bad
- multimedia/gstreamer1-plugins-rust has been updated
  to reflect this change

net/gstreamer1-plugins-sctp:
- New port split from multimedia/gstreamer1-plugins-bad

x11-toolkits/gstreamer1-plugins-qt5:
- Moved here from graphics/gstreamer1-plugins-qt to
  align with its new Qt6 counterpart

x11-toolkits/gstreamer1-plugins-qt6:
- New port: GStreamer Qt6 QML videosink plugin

*/*:
- Improve Makefile order and formatting
- Sorry for the repo churn, but not fixing this would just lead to more
  poorly formatted gstreamer ports in the future via copypasta

https://gstreamer.freedesktop.org/releases/1.24/#1.24.8

PR:		278914
Reported by:	vvd
8c1efc578d
Jan Beich (jbeich)
multimedia/x265: force rebuild consumers after 645419c8e465

$ ffmpeg
ld-elf.so.1: Shared object "libx265.so.192" not found, required by "libavcodec.so.60"

PR:		274526
Reported by:	vvd (on dev-commits-ports-main@ list)
Reported by:	Kevin Oberman (on multimedia@ list)
10be66c9da
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.20.3

PR:		261585
Reviewed by:	riggs,jbeich,tcberner

Differential Revision:	https://reviews.freebsd.org/D36850
e3b732b479
Charlie Li (vishwin)
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner)
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mikhail Teterin (mi)
For well over 10 years portmgr@ have been promising to remove the ridiculous need to bump PORTREVISION of depending ports, whenever a dependency is updated, but here we still are...

Bump PORTREVISION for the 9 users of x265 now that it has been
upgraded from 3.2 to 3.4.
d723ebaa17
Koop Mast (kwm)
Update gstreamer1 to 1.16.2.

- The spc plugin was removed inflavor for the gsm plugin.
- Added in tree qt plugin.

Changelog: https://gstreamer.freedesktop.org/releases/1.16/#1.16.2

Update net-im/fractal to 4.2.2 to support GStreamer 1.16 (approved by maintainer)

Thanks to antoine@ for the exp-run.

PR:		239386
aa49f23a6d
Jan Beich (jbeich)
multimedia/x265: update to 3.2

Changes:	https://x265.readthedocs.io/en/latest/releasenotes.html#version-3-2
9754f8c3f3
Jan Beich (jbeich)
multimedia/x265: update to 3.1.1

Changes:	https://x265.readthedocs.io/en/latest/releasenotes.html#version-3-1
a72292eb22
Jan Beich (jbeich)
multimedia/x265: update to 3.0

- Add SVTHEVC option, see http://x265.org/x265-svt-hevc-house/
- Drop libmd patch due to rebase churn for what little value it provides

Changes:	https://x265.readthedocs.io/en/latest/releasenotes.html#version-3-0
PR:		235906
Approved by:	maintainer timeout (2 weeks)
71bb197b3a
Guido Falsi (madpilot)
- Update multimedia/x265 to 2.6 - Use the distfile provided by the VideoLAN project - Add options for HI10P and HI12P (available only for amd64) - Add DEBUG option - Add OPTIMIZED_CFLAGS option - Force using clang 5.0 on 10.4. Base provided clang fails during   compilation - Chase shlib bump in dependent ports

PR:		225431
Submitted by:	daniel.engberg.lists@pyret.net
Approved by:	Maintainer timeout
a434ac470f
Koop Mast (kwm)
Update GStreamer1 ports to 1.8.0.

ChangeLog: https://gstreamer.freedesktop.org/releases/1.8/
405cf8c704
Mikhail Teterin (mi)
Upgrade x265 from 1.8 to 1.9. Add the test-target to utilize upstream's bundled tests and make myself the maintainer to deal with fallout, if any.

Bump PORTREVISION of the two other ports, which depend on x265 by default.

PR:		206864
7677b52b1f
Koop Mast (kwm)
Update GStreamer1 to 1.6.2. Update GStreamer1-vaapi to 0.7.0.

* Spell GStreamer consistently. [1]
* Fix typo in py3kplist in py3-gstreamer1 [1]
* Improve plugins COMMENTS (more improvements welcome)
* Actually include the gstreamer1-libav update this time.

PR:		204204 [1] (based on)
Submitted by:	olivierd@ [1]
353ad9c72e
Jan Beich (jbeich)
multimedia/x265: update to 1.8

ABI isn't compatible, so bump PORTREVISION in consumers.

PR:		204990
Submitted by:	Anton Sayetsky <vsasjason@gmail.com>
f870cd6d03
Koop Mast (kwm)
Update gstreamer1 ports to 1.6.0.

* gstreamer1-libav now uses ffmpeg from ports.
* New ports:
  * gstreamer1-validate: Tools to detect if elements are not behaving
    as expected, mainly aimed at developers, or advanced debugging.
  * gstreamer1-rtsp-server: Base foundation for building a rtsp
    server ontop of GStreamer
 * Bunch of new plugins like: mpg123, rsvg, libde265, openh264, x265 and dtls.

Release announcement:
  http://lists.freedesktop.org/archives/gstreamer-announce/2015-September/000357.html

Obtained from:	gnome devel repo
7b97259096