CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

multimedia/gstreamer1-plugins 1.28.8

GStreamer written collection of plugins handling several media types

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8
Upstream
up to date
Last update
to 1.28.8 · 30a7e19ff0
Quarterly
2026Q4: 1.28.8 · last MFH d2b644208d
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gstreamer1-plugins
installs 1.28.8 from latest; from quarterly (2026Q4) 1.28.8
Port
# cd /usr/ports/multimedia/gstreamer1-plugins && make install clean
Size
2.0 MiB download · 11 MiB installed
Depends on
devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/orc 0.4.44, graphics/libdrm 2.4.134,1, misc/iso-codes 4.20.1, multimedia/gstreamer1 1.28.8_1, print/freetype2 2.14.3, textproc/libxml2 2.15.4
License
LGPL20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.28.81.28.8–
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.61.28.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.81.28.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (14)

Show 14 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
293720maintainer-feedback? multimedia/gstreamer1-plugins: Playing a DVD doesn't work anymoreNew2026-03-10

Commits (151)

Matthew Rezny (rezny)
Revision bump of all ports with USE_GL after consolidation of mesa-libs

Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D10845
b760897dde
Jan Beich (jbeich)
graphics/opencv: back out r423216 and r423063 (replaying r423316)

Renaming didn't help to unblock 3.x progress as co-existence with 2.x
was no less complex than simply fixing consumers. This commit also
restores directory-level history accidentally lost via git-svn.

PR:		210505
Pointy hat to:	jbeich (should've discussed first)
d764059958
Mathieu Arnold (mat)
Remove all USE_OPENSSL occurrences.

Sponsored by:	Absolight
a28f0f7f7f
Thomas Zander (riggs)
Chase wavpack update: bump PORTREVISION on ports linking to it by default

PR:		216847
Reported by:	pkubaj@anongoth.pl
MFH:		2017Q1
8215c086e5
Dmitry Marakasov (amdmi3)
- Remove always-true/false conditions after FreeBSD 9, 10.1, 10.2 EOL

Approved by:	portmgr blanket
9d79e7b146
Gerald Pfeifer (gerald)
Bump PORTREVISIONS for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.8.5 to GCC 4.9.4 (at least under some circumstances such as versions of FreeBSD or platforms).

In particular that is ports with USE_GCC=yes, USE_GCC=any, or one of
gcc-c++11-lib, openmp, nestedfct, c++11-lib as well as c++14-lang,
c++11-lang, c++0x, c11 requested via USES=compiler.
89f8b05214
Jan Beich (jbeich)
graphics/opencv: add suffix to make room for 3.x series

To avoid confusion, the main port is to track the latest release.
Whether to rename includes/libraries as well making it possible to
install 2.x and 3.x side-by-side remains to be investigated.

PR:		210505 (for tracking)
Inspired by:	PkgSrc
ba3ffd9b12
Mathieu Arnold (mat)
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Koop Mast (kwm)
Update GStreamer1 ports to 1.8.0.

ChangeLog: https://gstreamer.freedesktop.org/releases/1.8/
405cf8c704
Koop Mast (kwm)
Add GStreamer1 gstsink plugin.
5a8d993c23
Hiroki Sato (hrs)
Fix broken dependency due to librtmp version bump.

PR:	207594
cf11fc20c0
Koop Mast (kwm)
Update GStreamer suite to 1.6.3.
145b227bd1
Koop Mast (kwm)
Update GStreamer1 to 1.6.2. Update GStreamer1-vaapi to 0.7.0.

* Spell GStreamer consistently. [1]
* Fix typo in py3kplist in py3-gstreamer1 [1]
* Improve plugins COMMENTS (more improvements welcome)
* Actually include the gstreamer1-libav update this time.

PR:		204204 [1] (based on)
Submitted by:	olivierd@ [1]
353ad9c72e
Koop Mast (kwm)
Update Gstreamer suite to 1.6.1.
f1f581a883
Koop Mast (kwm)
Update gstreamer1 ports to 1.6.0.

* gstreamer1-libav now uses ffmpeg from ports.
* New ports:
  * gstreamer1-validate: Tools to detect if elements are not behaving
    as expected, mainly aimed at developers, or advanced debugging.
  * gstreamer1-rtsp-server: Base foundation for building a rtsp
    server ontop of GStreamer
 * Bunch of new plugins like: mpg123, rsvg, libde265, openh264, x265 and dtls.

Release announcement:
  http://lists.freedesktop.org/archives/gstreamer-announce/2015-September/000357.html

Obtained from:	gnome devel repo
7b97259096
Tijl Coosemans (tijl)
By default libtool replaces -export-symbols <file> with -retain-symbols-file <file> on ELF systems, but this doesn't really do what -export-symbols is meant to do.  On GNU ELF systems it converts <file> to a simple version script first and then uses -version-script instead of -retain-symbols-file. Let USES=libtool patch libtool scripts to do this on all systems with GNU ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same
Makefile.am and clean up the port Makefile.

japanese/scim-honoka: Tries to hide all symbols that start with an
underscore, but because this library is written in C++ all symbols start
with _Z so it ends up hiding everything.  Just don't hide anything at all
like the textproc/scim configure script does.

multimedia/schroedinger: Apply an upstream patch.

textproc/scim-input-pad: Same as japanese/scim-honoka.

PR:		201922
Approved by:	portmgr (antoine)
Exp-run by:	antoine
a374acb969
Koop Mast (kwm)
Revert r392917 and part of r392902 (to gstreamer1-plugins/Makefile).

The new regex was too broad and broke the plugins from the -bad package.
88f16f3da4
Tijl Coosemans (tijl)
r392902 removed a command from post-patch that looked like a duplicate but wasn't.  Restore it by combining both in one RE.

Reported by:	kwm
49e9e92ca3
Tijl Coosemans (tijl)
Add Gstreamer plugin for HLS (HTTP Live Streaming)
8b421cfbb2
Antoine Brodin (antoine)
Convert to USES=jpeg
6e5719ca80
John Marino (marino)
multimedia category: Remove $PTHREAD_LIBS

approved by:	PTHREAD blanket
798eb9e9cb
Antoine Brodin (antoine)
Change libpng15.so to libpng.so in LIB_DEPENDS to prepare the upgrade
7ae46e9b12
Olli Hauer (ohauer)
- rename www/neon29 to www/neon and update to neon-0.30.1 - adjust ports depending on neon, bump PORTREVISION

Changelog:
Fix memory leak with GnuTLS (Werner Baumann, Patrick Ohly).
Fix possible crash after DNS lookup errors on Windows (Olivier Goffart).
Don't fail if the SSL cert changes between connections with OpenSSL, behaviour now matches that with GnuTLS.
Fix PKCS#11 support under OpenSSL with TLS 1.2.
Fix static linking with pkg-config file (Alan H)

PR:		195786
Differential Revision:	https://reviews.freebsd.org/D1319
Submitted by:	ohauer
Reviewed by:	portmgr (bapt, mat)
Approved by:	portmgr, lev (implicit)
311e3b182f
Koop Mast (kwm)
Update Gstreamer framework to 1.4.5.
91f8647292
Antoine Brodin (antoine)
Fix 41 gstreamer1-plugins- ports that were creating empty packages

With hat:	portmgr
134c55fc88
Koop Mast (kwm)
Big Gstreamer update:

Update gstreamer, gstreamer-plugins, -good, -bad and -ugly ports to 1.4.4.
Update gstreamer1-plugins-gnonlin to 1.4.0.
Update py-gstreamer1 and py3-gstreamer1 to 1.4.0.

Add multimedia/gstreamer1-editing-services. GES is a high-level library
for facilitating the creation of audio/video non-linear editors.

Add pulseaudio plugin now that pulseaudio is updated and add the gl plugin.

Drop :keepla from USES=libtool.
Drop @dirrm[try] from plists and drop gnomehier from USE_GNOME
Switch to optionhelpers in multimedia/gstreamer1.

PR:		194922 (merged with my own WIP)
Submitted by:	olivierd
c6e9859c13
Pawel Pekala (pawel)
- Update comms/spandsp to version 0.0.6 [1] - Convert all comms/spandsp-devel consumers to use newer comms/spandsp - Bump affected ports - Mark comms/spandsp-devel as deprecated and set expiration date - Add upgrade instructions to UPDATING

PR:		194399 [1]
Submitted by:	Nikola Kolev <koue@chaosophia.net> [1]
Approved by:	madpilot (asterisk ports), maintainer timeout (other)
baea955556
Johannes Jost Meixner (xmj)
multimedia/x264: General overhaul

- Split x264 into two ports: the CLI application (x264), and the library
  (libx264). This will allow x264 to use lavf and friends from ffmpeg for
  decoding and demuxing while preventing a circular dependency between the
  two: x264 can depend on ffmpeg, but ffmpeg will depend on libx264 rather
  than x264.
- Add the LAVF option to the CLI port, making the dependency on ffmpeg
  optional.
- Update to 0.142.2455.
- Amend fixes to local patches so that they can apply to the new upstream
  files.
- Provide the git revision and other version information to the build
  environment, allowing the CLI binary to display this information (like the
  Windows builds).
- Remove unsupported build options (X11_OUTPUT).
- Ensure that the library and CLI ports each have the appropriate options.
- Add notes for future contributors who wish to update the ports.
- Bump PORTREVISION for all dependent ports.

PR:           187805
Differential Revision:	https://reviews.freebsd.org/D1159
Submitted by: Andrew Berg <aberg010@my.hennepintech.edu>
Approved by:  koobs (maintainer, mentor)
4f12f3b178
Adam Weinberger (adamw)
Fix opencv detection, fixes gstreamer1-plugins-opencv build.
ee3240b8ef
Baptiste Daroussin (bapt)
Convert GMAKE to MAKE_CMD Please note that lots of invocation of MAKE_CMD here are wrong as they do not properly respect MAKE_ENV and friends

With hat:	portmgr
a33191366c
Olli Hauer (ohauer)
- USE_(BZIP2|XZ) -> USES= tar:(bzip2|xz)
886a9071a1
Koop Mast (kwm)
Update openjpeg to 2.1.0.

Version 2.x is incompatible with openjpeg 1.5. Preserve it as openjpeg15
and update users.

Approved by:	portmgr (implicit) for NO_STAGE ports
097c01dd0a
Sunpoet Po-Chuan Hsieh (sunpoet)
- Update to 2.3.1 (from audio/libshout2) - Use USES=libtool - Strip shared library - Bump PORTREVISION for audio/libshout shlib change and   dependency change from audio/libshout2 to audio/libshout [1]

Approved by:	portmgr (bapt) [1]
a26a7c64e7
Tijl Coosemans (tijl)
Fix LIB_DEPENDS on mjpegtools.

Reported by:	jenkins (swills)
834ddf0e25
Tijl Coosemans (tijl)
Update gstreamer 1.0 ports to version 1.2.4.
ce5a9a5d44
Tijl Coosemans (tijl)
When linking a library libA with a library libB using libtool, if libB.la exists, libtool will add all libraries libB.la refers to (dependency_libs field) to the linker command line and store them in the dependency_libs field of libA.la.  So everything that subsequently links with libA will also link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

PORTREVISION is bumped on all ports with USES=libtool that install .la
libraries.  Most ports are also changed to add :keepla because .la
libraries have to be kept around as long as there are dependent ports with
.la libraries that refer to them in their dependency_libs field.  In most
cases :keepla can be removed again as soon as all dependent ports that
install .la libraries have some form of USES=libtool added to their
Makefile.

PR:		ports/188759
Exp-run:	bdrewery
Approved by:	portmgr (bdrewery)
aad09bc5e2
Niclas Zeising (zeising)
The FreeBSD x11@ and graphics team proudly presents a zeising, kwm production, with help from dumbbell, bdrewery:

NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE

This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.

This patch also contains updates of libxcb and related ports, pixman, as well
as some drivers and utilities.

Bump portrevisions for xf86-* ports, as well as virtualbox-ose-additions due
to xserver version change.

Apart from these updates, the way shared libraries are handled has been
changed for all xorg ports, as well as libxml2 and freetype, which means
ltverhack is gone and as a consequence shared libraries have been bumped.
The plan is that this change will make library bumps less likely in the
future.
All affected ports have had their portrevisions bumped as a consequence of
this.

Fix some issues where WITH_NEW_XORG weren't detected properly on CURRENT.

Update instructions, hardware support, and more notes can be found on
https://wiki.freebsd.org/Graphics

Thanks to:	all testers, bdrewery and the FreeBSD x11@ team
exp-run by:	bdrewery [1]
PR:		ports/187602 [1]
Approved by:	portmgr (bdrewery), core (jhb)
39fc32e828
Koop Mast (kwm)
Update gstreamer to 1.2.3.

Switch from USE_GNOME=ltverhack to USES=libtool
8e9a2ad5ef
Koop Mast (kwm)
Remove left over directory.

Submitted by:	QaT
330437c238
Koop Mast (kwm)
Update to 1.2.2.

Remove vaapi from plugin list in bsd.gstreamer.mk it accidently snuck in.

Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-December/045238.html
2dba4b6fda
Koop Mast (kwm)
Update to 1.2.1.

Retire celt plugin, it was removed in flavor for the opus plugin.
Add new webp, kate and openjpeg plugin.
6fd348728d
Koop Mast (kwm)
Stagify Gstreamer ports. Fix build of gstreamer and gstreamer1 with glib 2.38.x [1]. Update gstreamer and gstreamer-plugins to new rules, USES=gmake pathfix, new LIB_DEPENDS syntax. Only pull in flex if base version is too old. Be more selective for which OSVERSIONS we need gcc due to the clang bug.

Obtained from:	Gstreamer upstream [1]
44d0dc12bb
Hiroki Sato (hrs)
s/rtmpdump/librtmp/

Spotted by:	vanilla
ec941d2562
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: multimedia)
855fb638fb
Koop Mast (kwm)
Update to 1.0.10.

Bug fix release.
26461e5aec
Koop Mast (kwm)
Update to 1.0.9.

This is a bug fix release.
Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-August/042360.html

Enable neon http plugin
Switch to new LIB_DEPEND format, use USES=gmake instead of USE_GMAKE
Utilize new introspection USE_GNOME component.
Allow gstreamer1-libav to play mp3's, note that mad plugin is still
prefered if available.
ea50e52183
Koop Mast (kwm)
Add PORTSCOUT macro's to prevent from picking up development versions.
7e59e64187
Koop Mast (kwm)
Also add USE_GCC=any as workaround for clang 3.3 crash on i386
c7ee117f4c
Koop Mast (kwm)
Add missed file to plist.

Submitted by:	pointyhat (via miwi)
0011670c11
Koop Mast (kwm)
Provide the rtmp streaming plugin [1]. Provide complete version for gstreamer1-plugins-core so it passes the version check. [2]

Reported by:	Olivier Duchateau <duchateau.olivier@gmail.com> [2]
Requested by:	Vanilla Hsu <v@fatpipi.com> [1]
fda1757e89