gstreamer gst-plugins-base gst-plugins-good gst-plugins-bad gst-plugins-ugly gst-libav gst-plugins-rs-gstreamer 1.26.10

[Douglas R. Reno]

New point version

[Joe Locash]

Highlighted bugfixes:

• curlhttpsrc fixes and improvements
• decklinkvideosink: Fix frame completion callbacks for firmware 14.3+
• flac: Fix 6.1 and 7.1 channel layouts and support encoding and decoding of 32-bit audio
• glimagesink: Fix handling of odd height buffers
• matroskademux: make maximum allowed block size large enough to support 4k uncompressed video
• mxf: Add support for custom Sony XDCAM video variant
• opusenc: multichannel and surround sound handling improvements
• playbin3: HLS/DASH stream selection handling improvements to fix disabling and re-enabling of audio/video streams with adaptivedemux2
• qtmux: robust recording mode space left estimation fixes for streams that start with a timestamp offset
• splitmuxsrc seeking improvements
• Support FLAC audio in DASH manifests
• Python bindings: fix regression where buffers were no longer writable in pad probe callbacks
• cerbero: add python bindings for GstApp; Windows installer improvements
• Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements

Full release notes: ​https://gstreamer.freedesktop.org/releases/1.26/#1.26.10

Fixed at 5097211de2.

[zeckma]

This is a security release and fixes CVE-2025-67326 and CVE-2025-67327.

No current rating, defaulting to high. They allow for out of bounds read operations in the MIDI parser which can lead to a crash (DOS) in gst-plugins-bad.

Reopened for SA which afterwards will be promptly closed. 1.28.0 at the moment is the most current GStreamer release.

[Bruce Dubbs]

Milestone renamed

[zeckma]

SA-12.4-080 issued.