git: ffddbdf2fba3 - main - security/vuxml: Add gstreamer1* < 1.28.4
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 29 Jun 2026 09:04:23 UTC
The branch main has been updated by jhale:
URL: https://cgit.FreeBSD.org/ports/commit/?id=ffddbdf2fba3b828d07b88a988ac3a74c61a2c8d
commit ffddbdf2fba3b828d07b88a988ac3a74c61a2c8d
Author: Jason E. Hale <jhale@FreeBSD.org>
AuthorDate: 2026-06-29 08:39:52 +0000
Commit: Jason E. Hale <jhale@FreeBSD.org>
CommitDate: 2026-06-29 09:04:18 +0000
security/vuxml: Add gstreamer1* < 1.28.4
---
security/vuxml/vuln/2026.xml | 76 ++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 76 insertions(+)
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index c0154b33bdc7..6406b55cc1c4 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,79 @@
+ <vuln vid="4e82a0e6-6801-42c6-8fb6-91b6b275a9e1">
+ <topic>gstreamer1 -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>gstreamer1-libav</name>
+ <name>gstreamer1-plugins</name>
+ <name>gstreamer1-plugins-bad</name>
+ <name>gstreamer1-plugins-good</name>
+ <name>gstreamer1-plugins-ugly</name>
+ <range><lt>1.28.4</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The GStreamer project reports:</p>
+ <blockquote cite="https://gstreamer.freedesktop.org/security/">
+ <p>Multiple security issues were identified and fixed in the GStreamer framework.</p>
+ <ul>
+ <li>GStreamer-SA-2026-0030: Missing bounds checks in RTCP SDES packet parsing</li>
+ <li>GStreamer-SA-2026-0031: Integer overflow and truncation in MXF demuxer</li>
+ <li>GStreamer-SA-2026-0032: Out-of-bounds read and write in XMP tag parser</li>
+ <li>GStreamer-SA-2026-0033: Out-of-bounds read and modification of const data in ID3v2 parser</li>
+ <li>GStreamer-SA-2026-0034: Division by zero in mDVDsub subtitle parser</li>
+ <li>GStreamer-SA-2026-0035: Integer overflow in WavPack decoder</li>
+ <li>GStreamer-SA-2026-0036: Out-of-bounds read in SBC audio parser header parsing</li>
+ <li>GStreamer-SA-2026-0037: Heap corruption in gst-libav AV protocol pipe</li>
+ <li>GStreamer-SA-2026-0038: Memory leak and NULL pointer dereference in gst-libav demuxer</li>
+ <li>GStreamer-SA-2026-0039: Assertion in AV1 parser tile data parsing</li>
+ <li>GStreamer-SA-2026-0040: Out-of-bounds read in VA JPEG decoder segment parsing</li>
+ <li>GStreamer-SA-2026-0042: Out-of-bounds reads and integer overflows in RealMedia demuxer</li>
+ <li>GStreamer-SA-2026-0043: Out-of-bounds read and write in RFB source</li>
+ <li>GStreamer-SA-2026-0045: Out-of-bounds reads in PCAP parser due to missing bounds checks</li>
+ <li>GStreamer-SA-2026-0046: Integer overflow in VMNC decoder cursor payload size calculation</li>
+ <li>GStreamer-SA-2026-0047: One-byte out-of-bounds read in H.264 NAL unit parser</li>
+ <li>GStreamer-SA-2026-0048: Out-of-bounds read in H.266 parser VUI aspect ratio parsing</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2026-12891</cvename>
+ <cvename>CVE-2026-12892</cvename>
+ <cvename>CVE-2026-12893</cvename>
+ <cvename>CVE-2026-52717</cvename>
+ <cvename>CVE-2026-52718</cvename>
+ <cvename>CVE-2026-52719</cvename>
+ <cvename>CVE-2026-52720</cvename>
+ <cvename>CVE-2026-52721</cvename>
+ <cvename>CVE-2026-52722</cvename>
+ <cvename>CVE-2026-53703</cvename>
+ <cvename>CVE-2026-53704</cvename>
+ <cvename>CVE-2026-53705</cvename>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0030.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0031.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0032.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0033.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0034.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0035.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0036.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0037.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0038.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0039.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0040.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0042.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0043.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0045.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0046.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0047.html</url>
+ <url>https://gstreamer.freedesktop.org/security/sa-2026-0048.html</url>
+ </references>
+ <dates>
+ <discovery>2026-06-12</discovery>
+ <entry>2026-06-29</entry>
+ </dates>
+ </vuln>
+
<vuln vid="d06b1fa2-731f-11f1-a0d2-589cfc10a551">
<topic>Multiple vulnerability found in Expat</topic>
<affects>