CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

multimedia/gstreamer1-plugins 1.28.8

GStreamer written collection of plugins handling several media types

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8
Upstream
up to date
Last update
to 1.28.8 · 30a7e19ff0
Quarterly
2026Q4: 1.28.8 · last MFH d2b644208d
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML

Install

Package
# pkg install gstreamer1-plugins
installs 1.28.8 from latest; from quarterly (2026Q4) 1.28.8
Port
# cd /usr/ports/multimedia/gstreamer1-plugins && make install clean
Size
2.0 MiB download · 11 MiB installed
Depends on
devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/orc 0.4.44, graphics/libdrm 2.4.134,1, misc/iso-codes 4.20.1, multimedia/gstreamer1 1.28.8_1, print/freetype2 2.14.3, textproc/libxml2 2.15.4
License
LGPL20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.28.81.28.8–
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.61.28.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.81.28.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (14)

Show 14 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
293720maintainer-feedback? multimedia/gstreamer1-plugins: Playing a DVD doesn't work anymoreNew2026-03-10

Commits (151)

Jason E. Hale (jhale) · 1.28.8 MFH 2026Q4 ✓
GStreamer1: Update to 1.28.8

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.7
	 https://gstreamer.freedesktop.org/releases/1.28/#1.28.8

MFH:		2026Q4
Security:	bfa621d9-e508-4e3e-9a15-c2b54929ea77
30a7e19ff0
Jason E. Hale (jhale) · 1.28.6 MFH 2026Q3 ✓
GStreamer1: Update to 1.28.6

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.6

MFH:		2026Q3
Security:	dde0fb16-2731-4d3c-aabf-459357235745
6eac03c7fd
Jason E. Hale (jhale) · 1.28.5 MFH 2026Q3 ✓
GSteamer1: Uppdate to 1.28.5

multimedia/gstreamer1-plugins-rust is now a first-class citizen using gstreamer
tagging.

Refactor custom targets in multimedia/gstreamer1 and fix a few bugs in
generate-vuxml-entry.py.

MFH:		2026Q3
Security:	6eee35e6-fca5-4db2-ab73-f27add3e3ef1
703f5a47c3
Jason E. Hale (jhale) · 1.28.4
GStreamer1: Update to 1.28.4

Backport several security fixes from not-yet-released 1.28.5.

Add a `create-vuxml` target to multimedia/gstreamer1 to automagically
create a VuXML entry for new GStreamer releases. The backing script
can be used standalone for cases when more fine tuning is needed.

Changes:
https://gstreamer.freedesktop.org/releases/1.28/#1.28.4

Security:	4e82a0e6-6801-42c6-8fb6-91b6b275a9e1
e8ed805b33
Bernhard Froehlich (decke) · 1.28.3
multimedia/gstreamer1-plugins: Fix CPE data

According to NIST CPE Dictionary gstreamer_project:gstreamer is
deprecated in favour of gstreamer:gstreamer
30d19e50a2
Jason E. Hale (jhale) · 1.28.3
GStreamer1: Update to 1.28.3

multimedia/gstreamer1-plugins-rust: Update to 0.15.2

Changes:
https://gstreamer.freedesktop.org/releases/1.28/#1.28.2
https://gstreamer.freedesktop.org/releases/1.28/#1.28.3

MFH:		2026Q2
Security:	05aadfcc-55f5-11f1-915c-8974b59277b5,
		ea4c5b9d-55f7-11f1-915c-8974b59277b5
1d35c6d802
Daniel Engberg (diizzy) · 1.28.1
multimedia/gstreamer1-plugins: Introduce GST_PLUGIN_DEPENDS

Some plugins such as graphics/gstreamer1-plugins-vulkan has a dependency
of wayland which previously were handled by passing both CONFIGURE_ARGS and
MESON_ARGS via the gstreamer1 "framework" as the framework isn't
aware if dependencies to get what would eventually end up in MESON_ARGS in
correct order. This approach broke with commit
bf193dc1da282c769d3291817a8378adbd762ac7 as we now only make use of
MESON_ARGS instead of incorrectly using CONFIGURE_ARGS to pass
MESON_ARGS. In order to fix this introduce GST_PLUGIN_DEPENDS which
gets appended after gstreamer's current framework logic in MESON_ARGS.
It only supports defining one dependency but it's sufficient fow now.
25faac8fb8
Daniel Engberg (diizzy) · 1.28.1
*/*: Replace CONFIGURE_ARGS with MESON_ARGS

Meson based ports that uses CONFIGURE_ARGS "works" as MESON_ARGS is
appended however framework and documentation expects that MESON_ARGS
is used for Meson based ports

PR:		294808
Approved by:	blanket
bf193dc1da
Jason E. Hale (jhale) · 1.28.1
GStreamer1: Update to 1.28.1

multimedia/gstreamer1-plugins-rust: Update to 0.15.1

Changes:
https://gstreamer.freedesktop.org/releases/1.28/#1.28.1

Security:	791d4b29-19fb-11f1-87cc-e73692421fef
585b9a1616
Jason E. Hale (jhale) · 1.28.0
GStreamer1: Update to 1.28.0

The y4menc (previously from good) and y4mdec (previously from bad)
plugins have been consolidated into y4m (now from good).

The vaapi component (multimedia/gstreamer1-vaapi) is no longer supplied
by upstream and will be removed after 2026Q1. This has been superseded by
the va plugin from 'bad', which we don't have and is rather Linux-heavy,
but no ports seem to use this anyways. Remove from makesum-all target
and adjust to be static 1.26.10 (last available) version.

Add svtav1 component to gstreamer.mk after f96400339bd6. [1]

multimedia/gstreamer1-plugins-svt-hevc has been marked DEPRECATED since
multimedia/svt-hevc is marked DEPRECATED and will be removed after
2026Q1. [1] This port does not seem to be used anywhere in the ports
tree.

Note for local patching: meson_options.txt was renamed by upstream to
meson.options across the board [2] and this change adapts to that.

Changes:
https://gstreamer.freedesktop.org/releases/1.28/

[2] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/128710caab3e7521384c4c82df031702f1728af8

PR:		292706 [1]
Reported by:	jbeich [1]
c11c91c602
Jason E. Hale (jhale) · 1.26.10
GStreamer1: Update to 1.26.10

https://gstreamer.freedesktop.org/releases/1.26/#1.26.10

Security:	500cc49c-e93b-11f0-b8d8-4ccc6adda413
64597899da
Jason E. Hale (jhale) · 1.26.9
GStreamer1: Update to 1.26.9

multimedia/gstreamer1-plugins-rust: Update to 0.14.4

https://gstreamer.freedesktop.org/releases/1.26/#1.26.9
42dc4b66e5
Jason E. Hale (jhale) · 1.26.8
GStreamer1: Update to 1.26.8

https://gstreamer.freedesktop.org/releases/1.26/#1.26.8

MFH:		2025Q4
41ba8fe748
Jason E. Hale (jhale) · 1.26.7
GStreamer1: Update to 1.26.7

https://gstreamer.freedesktop.org/releases/1.26/#1.26.7
ea4a6ee736
Daniel Engberg (diizzy) · 1.26.6
*/*: Remove libtool dependency

None of these ports utilizes libtool
Build tested using Poudriere

Approved by:	blanket, build fix
7f25f24de0
Jason E. Hale (jhale) · 1.26.6
GStreamer1: Update to 1.26.6

multimedia/gstreamer1-plugins-rust: Update to 0.14.2

https://gstreamer.freedesktop.org/releases/1.26/#1.26.6
31891908b9
Jason E. Hale (jhale) · 1.26.5
GStreamer1: Update to 1.26.5

Rename multimedia/gstreamer1-validate -> devel/gstreamer1-devtools and
update to 1.26.5. gst-validate has been gst-devtools since 1.17.x, but
got lost in the mix. This a development toolkit, hence the move to the
devel category.

https://gstreamer.freedesktop.org/releases/1.26/#1.26.5
2680e71d5d
Jason E. Hale (jhale) · 1.26.4
GStreamer1: Update to 1.26.4

multimedia/gstreamer1-plugins-rust: Update to 0.14.0

Add custom target to update the distinfo files for the whole suite
depending on _GST1_VERSION for maintainer QoL.

https://gstreamer.freedesktop.org/releases/1.26/#1.26.4
5dd5a01952
Jason E. Hale (jhale) · 1.26.3
GStreamer1: Update to 1.26.3

https://gstreamer.freedesktop.org/releases/1.26/#1.26.3

Security:	69bfe2a4-5a39-11f0-8792-4ccc6adda413
5646dd1886
Jason E. Hale (jhale) · 1.26.2
GStreamer1: Update to 1.26.2

multimedia/gstreamer1-plugins-rust: Update to 0.13.6

https://gstreamer.freedesktop.org/releases/1.26/#1.26.2
9799edd889
Jason E. Hale (jhale) · 1.26.1
GStreamer: Update to 1.26.1

https://gstreamer.freedesktop.org/releases/1.26/#1.26.1
ff5a16ab9b
Jason E. Hale (jhale) · 1.26.0
GStreamer: Update to 1.26.0

https://gstreamer.freedesktop.org/releases/1.26/
1ba9b3ba5b
Jason E. Hale (jhale) · 1.24.12
GStreamer: Update to 1.24.12

https://gstreamer.freedesktop.org/releases/1.24/#1.24.12
e0ab9406ea
Jason E. Hale (jhale) · 1.24.11
GStreamer: Update to 1.24.11

https://gstreamer.freedesktop.org/releases/1.24/#1.24.11
f94c040c58
Jason E. Hale (jhale)
audio/gstreamer1-plugins-alsa: Add port

GStreamer ALSA plugin.

If multimedia/qt6-multimedia is built with both the GSTREAMER and ALSA
options enabled, certain applications like multimedia/mkvtoolnix may
crash if this plugin is not installed.

PR:		282078
7fac7b6b62
Jason E. Hale (jhale)
GStreamer: Update to 1.24.10

https://gstreamer.freedesktop.org/releases/1.24/#1.24.10

Security:	7256fae8-b3e8-11ef-b680-4ccc6adda413,
		750ab972-b3e8-11ef-b680-4ccc6adda413,
		772d8625-b3e8-11ef-b680-4ccc6adda413,
		7945c543-b3e8-11ef-b680-4ccc6adda413,
		7b34ddf7-b3e8-11ef-b680-4ccc6adda413,
		7d1b4e5d-b3e8-11ef-b680-4ccc6adda413,
		7f3a302b-b3e8-11ef-b680-4ccc6adda413
f2f4b35340
Jason E. Hale (jhale)
Gstreamer: Update to 1.24.9

https://gstreamer.freedesktop.org/releases/1.24/#1.24.9

Security:	d48a2224-9b4c-11ef-bdd9-4ccc6adda413
9033cb222f
Jason E. Hale (jhale)
multimedia/gstreamer1: Update to 1.24.8

Mk/Uses/gstreamer.mk:
- Sort, fix whitespace issues and typos
- Promote several common variables to improve maintainer QOL
*   There's now no need to set manually set PORTVERSION nor
    SOVERSION in several Makefiles
*   This will help to prevent not updating some components
*   A note has been added, however, to remind maintainers
    to remake distinfo for certain ports
- Improve documentation

multimedia/gstreamer1-plugins-webrtc:
- New port split from multimedia/gstreamer1-plugins-bad
- multimedia/gstreamer1-plugins-rust has been updated
  to reflect this change

net/gstreamer1-plugins-sctp:
- New port split from multimedia/gstreamer1-plugins-bad

x11-toolkits/gstreamer1-plugins-qt5:
- Moved here from graphics/gstreamer1-plugins-qt to
  align with its new Qt6 counterpart

x11-toolkits/gstreamer1-plugins-qt6:
- New port: GStreamer Qt6 QML videosink plugin

*/*:
- Improve Makefile order and formatting
- Sorry for the repo churn, but not fixing this would just lead to more
  poorly formatted gstreamer ports in the future via copypasta

https://gstreamer.freedesktop.org/releases/1.24/#1.24.8

PR:		278914
Reported by:	vvd
8c1efc578d
Daniel Engberg (diizzy)
multimedia/gstreamer1-plugins*: Remove Musepack library support

Remove support for Musepack audio library

PR:		281025
0fb54007da
Thomas Zander (riggs)
multimedia/gstreamer1-plugins*: Remove support for librtmp

PR:		277758
Reported by:	diizzy
925dc0594f
Thomas Zander (riggs)
multimedia/gstreamer1*: Update to upstream release 1.22.10
9a83291fa8
Muhammad Moinur Rahman (bofh)
*/*: Sanitize MANPREFIX for meson ports

Approved by:	portmgr
9f8f710b3e
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.22.5

PR:		272141, 271505
MFH:		2023Q3
06be4e146b
Rene Ladan (rene)
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.22.4

PR:		272141, 272100
ced4dbad8d
Jan Beich (jbeich)
multimedia/gstreamer1-plugins: drop unused variables after e3b732b4791c

Reported by:	portscan
6c779413be
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.22.2

PR:		271021

Differential Revision:	https://reviews.freebsd.org/D39818
e7c053182e
Jan Beich (jbeich)
multimedia/gstreamer1-plugins*: skip --auto-features=enabled for now

Properly fixing this maybe easier once subpackages (D16457) arrive
and gstreamer ports are split based on plugin collections rather than
external dependencies.

meson.build:313:0: ERROR: Dependency "x11" not found, tried pkgconfig

PR:		270361
04417decf1
Gleb Popov (arrowd)
multimedia/gstreamer1: Update to 1.22, new stable branch.

PR:		269895
Exp-run by:	antoine
Sponsored by:   Serenity Cybersecurity, LLC
4a8a17c8c6
Gleb Popov (arrowd)
multimedia/gstreamer1-plugins{-bad,}: Fixup pkg-plist.

Reported by:	jbeich
Fixes:	88a2a7b867abff10d848f12dea00e2fa3e21a319
6746c5492d
Gleb Popov (arrowd)
multimedia/gstreamer1: Update to 1.20.6

Sponsored by:	Serenity Cybersecurity, LLC
88a2a7b867
Gleb Popov (arrowd)
multimedia/gstreamer1-plugins-zxing: Create a port.

PR:		269383

Reviewed by: tcberner

Differential Revision: https://reviews.freebsd.org/D38442
96196935d8
Thomas Zander (riggs)
multimedia/gstreamer1-plugins: Fix build in the presence of tremor

Details:
If audio/libtremor is installed, the dependency may be picked up by the
auto detection. This leads so a build error in gstreamer1-plugins-ogg.
This patch explicitly disables tremor in gstreamer-* ports.

PR:		268560
Reported by:	gja822@narod.ru
MFH:		2023Q1
192c7ba5fa
Thomas Zander (riggs)
www/gstreamer1-plugins-srt: New SRT plugin for gstreamer

gstreamer now supports the "Secure Reliable Transport (SRT) Protocol"
via www/srt. This port adds the corresponding plugin, via
multimedia/gstreamer1-plugins-bad.
PR:		268545
Reported by:	p5B2EA84B3@t-online.de
d6cd2faae3
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.20.5

PR:		268501
09c25d30f0
Thomas Zander (riggs)
multimedia/gstreamer1-*: Retire libkate

Rationale:
libkate is going away in
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268179 after being
unmaintained upstream for a long time.

PR:		268183
Reviewed by:	riggs
23dab349f2
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.20.4

PR:		267075
2d51705c04
Thomas Zander (riggs)
multimedia/gstreamer1-*: Fix build in the presence of wildmidi

PR:		267132
b86933a615
Thomas Zander (riggs)
multimedia/gstreamer1-*: Fix plugin building in dirty environments

This should solve (fingers crossed) the meson autodetection problem for
the remaining plugins from the "bad" set when building in dirty
environments.

PR:		267132, 267510
6ff8606f00
Thomas Zander (riggs)
multimedia/gstreamer1-plugins: Fix build in the presence of libdrm

PR:		267100
Reported by:	rkoberman@gmail.com
040e9e0991