Packman Build Service PMBS

Changes of Revision 2

gstreamer-plugins-ugly-codecs.changes Changed

gstreamer-plugins-ugly-codecs.spec Changed

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/ChangeLog -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/ChangeLog Changed

@@ -1,3 +1,102 @@
+=== release 1.28.7 ===
+
+2026-09-07 20:11:13 +0100  Tim-Philipp Müller <tim@centricular.com>
+
+	* gst-plugins-ugly.doap:
+	* meson.build:
+	  Release 1.28.7
+
+2026-08-05 13:04:46 +0100  Tim-Philipp Müller <tim@centricular.com>
+
+	* meson.build:
+	  Back to development after 1.28.6
+
+=== release 1.28.6 ===
+
+2026-08-05 12:59:39 +0100  Tim-Philipp Müller <tim@centricular.com>
+
+	* gst-plugins-ugly.doap:
+	* meson.build:
+	  Release 1.28.6
+
+2026-07-08 11:16:30 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstrtpasfdepay.c:
+	  rtpasfdepay: Clarify comment for gst_rtp_asf_depay_update_padding()
+	  It was not exactly clear from the previous comment what this function actually
+	  does and why that is necessary.
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236>
+
+2026-07-03 12:20:52 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstrtpasfdepay.c:
+	  rtpasfdepay: Map buffer used for padding updating read-write
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236>
+
+2026-07-03 12:08:19 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstrtpasfdepay.c:
+	  rtpasfdepay: Don't forget to unmap RTP packet if we don't have a full packet
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236>
+
+2026-07-03 12:03:54 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstrtpasfdepay.c:
+	  rtpasfdepay: Prevent out-of-bounds reads and writes when updating padding on malformed packets
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236>
+
+2026-07-03 11:18:51 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstrtpasfdepay.c:
+	  rtpasfdepay: Drop packets that are larger than the negotiated maximum packet size
+	  Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5185
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236>
+
+2026-07-03 11:18:35 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstrtpasfdepay.c:
+	  rtpasfdepay: Check for enough data before reading
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236>
+
+2026-07-03 11:18:05 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstrtpasfdepay.c:
+	  rtpasfdepay: Fix debug logs
+	  Use %u for printing unsigned integers and actually print the expected header
+	  size instead of a static 4.
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236>
+
+2026-07-28 17:11:12 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/asfdemux/gstasfdemux.c:
+	  asfdemux: Avoid integer overflows during bounds checks
+	  Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5230
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12243>
+
+2026-07-13 14:10:40 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/dvdsub/gstdvdsubdec.c:
+	  dvdsubdec: Check correct offset value against available data size
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12240>
+
+2026-07-13 14:09:28 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/dvdsub/gstdvdsubdec.c:
+	  dvdsubdec: Clip subpicture rectangle to the frame size
+	  Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5197
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12240>
+
+2026-07-13 14:07:51 +0300  Sebastian Dröge <sebastian@centricular.com>
+
+	* gst/dvdsub/gstdvdsubdec.c:
+	  dvdsubdec: Ensure enough data is available when skipping over SPU_WIPE
+	  Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12240>
+
+2026-07-08 23:48:39 +0200  Tim-Philipp Müller <tim@centricular.com>
+
+	* meson.build:
+	  Back to development after 1.28.5
+
 === release 1.28.5 ===
 
 2026-07-08 23:42:39 +0200  Tim-Philipp Müller <tim@centricular.com>

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/RELEASE -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/RELEASE Changed

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/gst-plugins-ugly.doap -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/gst-plugins-ugly.doap Changed

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/gst/asfdemux/gstasfdemux.c -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/gst/asfdemux/gstasfdemux.c Changed

@@ -2381,7 +2381,7 @@
 }
 
 static inline gboolean
-gst_asf_demux_skip_bytes (guint num_bytes, guint8 ** p_data, guint64 * p_size)
+gst_asf_demux_skip_bytes (guint64 num_bytes, guint8 ** p_data, guint64 * p_size)
 {
   if (*p_size < num_bytes)
     return FALSE;
@@ -3167,6 +3167,9 @@
       if (!gst_asf_demux_get_stream_video (&video_object, &data, &size))
         goto not_enough_data;
 
+      if (video_object.size < 40)
+        goto not_enough_data;
+
       vsize = video_object.size - 40;   /* Byte order gets offset by single byte */
 
       GST_INFO ("object is a video stream with %u bytes of "
@@ -3648,8 +3651,9 @@
 
   for (i = 0; i < blockcount; ++i) {
     GstStructure *s;
-    guint16 stream_num, name_len, data_type, lang_idx G_GNUC_UNUSED;
-    guint32 data_len, ival;
+    guint16 stream_num, data_type, lang_idx G_GNUC_UNUSED;
+    guint32 ival;
+    guint64 name_len, data_len;
     gchar *name_utf8;
 
     if (size < (2 + 2 + 2 + 2 + 4))
@@ -3690,6 +3694,8 @@
     ival = gst_asf_demux_get_uint32 (&data, &size);
 
     /* skip anything else there may be, just in case */
+    if (data_len < 4)
+      goto not_enough_data;
     gst_asf_demux_skip_bytes (data_len - 4, &data, &size);
 
     s = gst_asf_demux_get_metadata_for_stream (demux, stream_num);
@@ -4506,6 +4512,9 @@
     return GST_FLOW_ERROR;
   gst_asf_demux_skip_bytes (ASF_OBJECT_HEADER_SIZE, p_data, p_size);
 
+  if (obj.size < ASF_OBJECT_HEADER_SIZE)
+    return GST_FLOW_ERROR;
+
   obj_data_size = obj.size - ASF_OBJECT_HEADER_SIZE;
 
   if (*p_size < obj_data_size)

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/gst/asfdemux/gstrtpasfdepay.c -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/gst/asfdemux/gstrtpasfdepay.c Changed

@@ -245,16 +245,18 @@
   }
 }
 
-/* Set the padding field to te correct value as the spec
- * says it should be se to 0 in the rtp packets
- */
+/* Update the packet with the required amount of padding. For RTP packets the
+ * padding is stripped off and here we need to add it back to create valid
+ * ASF packets again. This requires allocating a packet_size large buffer,
+ * adding zero padding and rewriting the padding length field with the correct
+ * value. */
 static GstBuffer *
 gst_rtp_asf_depay_update_padding (GstRtpAsfDepay * depayload, GstBuffer * buf)
 {
   GstBuffer *result;
   GstMapInfo map;
   guint8 *data;
-  gint offset = 0;
+  guint offset = 0;
   guint8 aux;
   guint8 seq_type;
   guint8 pad_type;
@@ -268,18 +270,20 @@
   padding = depayload->packet_size - plen;
 
   GST_LOG_OBJECT (depayload,
-      "padding buffer size %" G_GSIZE_FORMAT " to packet size %d", plen,
+      "padding buffer size %" G_GSIZE_FORMAT " to packet size %u", plen,
       depayload->packet_size);
 
   result = gst_buffer_new_and_alloc (depayload->packet_size);
 
-  gst_buffer_map (result, &map, GST_MAP_READ);
+  gst_buffer_map (result, &map, GST_MAP_READWRITE);
   data = map.data;
   memset (data + plen, 0, padding);
 
   gst_buffer_extract (buf, 0, data, plen);
   gst_buffer_unref (buf);
 
+  if (offset + 1 > depayload->packet_size)
+    goto malformed;
   aux = dataoffset++;
   if (aux & 0x80) {
     guint8 err_len = 0;
@@ -293,6 +297,8 @@
     err_len = aux & 0x0F;
     offset += err_len;
 
+    if (offset + 1 > depayload->packet_size)
+      goto malformed;
     aux = dataoffset++;
   }
   seq_type = (aux >> 1) & 0x3;
@@ -307,16 +313,22 @@
   switch (pad_type) {
       /* DWORD */
     case 3:
+      if (offset + 4 > depayload->packet_size)
+        goto malformed;
       GST_WRITE_UINT32_LE (&(dataoffset), padding);
       break;
 
       /* WORD */
     case 2:
+      if (offset + 2 > depayload->packet_size)
+        goto malformed;
       GST_WRITE_UINT16_LE (&(dataoffset), padding);
       break;
 
       /* BYTE */
     case 1:
+      if (offset + 1 > depayload->packet_size)
+        goto malformed;
       dataoffset = (guint8) padding;
       break;
 
@@ -328,6 +340,14 @@
   gst_buffer_unmap (result, &map);
 
   return result;
+
+malformed:
+  {
+    GST_WARNING_OBJECT (depayload, "ASF packet too small to contain header");
+    gst_buffer_unmap (result, &map);
+    gst_buffer_unref (result);
+    return NULL;
+  }
 }
 
 /* Docs: 'RTSP Protocol PDF' document from http://sdp.ppona.com/ (page 8) */
@@ -344,6 +364,7 @@
   guint len_offs;
   GstClockTime timestamp;
   GstRTPBuffer rtpbuf = { NULL };
+  guint packet_len = 0;
 
   depay = GST_RTP_ASF_DEPAY (depayload);
 
@@ -365,14 +386,14 @@
 
   outbufs = gst_buffer_list_new ();
   do {
-    guint packet_len;
+    hdr_len = 4;
 
     /* packet header is at least 4 bytes */
-    if (payload_len < 4)
+    if (payload_len < hdr_len)
       goto too_small;
 
     /*                      1                   2                   3
-     *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 
+     *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
      * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
      * |S|L|R|D|I|RES  | Length/Offset                                 |
      * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
@@ -398,33 +419,34 @@
     D = ((payload0 & 0x10) != 0);
     I = ((payload0 & 0x08) != 0);
 
-    hdr_len = 4;
-
     len_offs = (payload1 << 16) | (payload2 << 8) | payload3;
 
     if (R) {
-      GST_DEBUG ("Relative timestamp field present : %u",
-          GST_READ_UINT32_BE (payload + hdr_len));
       hdr_len += 4;
+      if (payload_len < hdr_len)
+        goto too_small;
+      GST_DEBUG ("Relative timestamp field present : %u",
+          GST_READ_UINT32_BE (payload + hdr_len - 4));
     }
     if (D) {
-      GST_DEBUG ("Duration field present : %u",
-          GST_READ_UINT32_BE (payload + hdr_len));
       hdr_len += 4;
+      if (payload_len < hdr_len)
+        goto too_small;
+      GST_DEBUG ("Duration field present : %u",
+          GST_READ_UINT32_BE (payload + hdr_len - 4));
     }
     if (I) {
-      GST_DEBUG ("LocationId field present : %u",
-          GST_READ_UINT32_BE (payload + hdr_len));
       hdr_len += 4;
+      if (payload_len < hdr_len)
+        goto too_small;
+      GST_DEBUG ("LocationId field present : %u",
+          GST_READ_UINT32_BE (payload + hdr_len - 4));
     }
 
     GST_LOG_OBJECT (depay, "S %d, L %d, R %d, D %d, I %d", S, L, R, D, I);
-    GST_LOG_OBJECT (depay, "payload_len:%d, hdr_len:%d, len_offs:%d",
+    GST_LOG_OBJECT (depay, "payload_len:%u, hdr_len:%u, len_offs:%u",
         payload_len, hdr_len, len_offs);
 
-    if (payload_len < hdr_len)
-      goto too_small;
-
     /* skip headers */
     payload_len -= hdr_len;
     payload += hdr_len;
@@ -442,6 +464,9 @@
     if (packet_len > payload_len)
       packet_len = payload_len;
 
+    if (packet_len > depay->packet_size)
+      goto too_big;
+
     GST_LOG_OBJECT (depay, "packet len %u, payload len %u, packet_size:%u",
         packet_len, payload_len, depay->packet_size);
 
@@ -460,6 +485,12 @@
         gst_adapter_push (depay->adapter, sub);
         /* RTP marker bit M is set if this is last fragment */
         if (gst_rtp_buffer_get_marker (&rtpbuf)) {
+          if (available + packet_len > depay->packet_size) {
+            /* Update packet_len for the debug log further below */
+            packet_len = available + packet_len;
+            gst_adapter_clear (depay->adapter);
+            goto too_big;
+          }
           GST_LOG_OBJECT (depay, "last fragment, assembling packet");
           outbuf =
               gst_adapter_take_buffer (depay->adapter, available + packet_len);
@@ -481,11 +512,17 @@
     /* If we haven't completed a full ASF packet, return but first
        push what we have so far */
     if (!outbuf) {
+      gst_rtp_buffer_unmap (&rtpbuf);
       gst_rtp_base_depayload_push_list (depayload, outbufs);
       return NULL;
     }
 
     outbuf = gst_rtp_asf_depay_update_padding (depay, outbuf);
+    if (!outbuf) {
+      gst_rtp_buffer_unmap (&rtpbuf);
+      gst_rtp_base_depayload_push_list (depayload, outbufs);
+      return NULL;
+    }
 
     if (!S)
       GST_BUFFER_FLAG_SET (outbuf, GST_BUFFER_FLAG_DELTA_UNIT);
@@ -519,8 +556,21 @@
 too_small:
   {
     gst_rtp_buffer_unmap (&rtpbuf);
-    GST_WARNING_OBJECT (depayload, "Payload too small, expected at least 4 "
-        "bytes for header, but got only %d bytes", payload_len);
+    GST_WARNING_OBJECT (depayload, "Payload too small, expected at least %u "
+        "bytes for header, but got only %u bytes", hdr_len, payload_len);
+    if (gst_buffer_list_length (outbufs) == 0) {
+      gst_rtp_base_depayload_dropped (depayload);
+      gst_buffer_list_unref (outbufs);
+    } else {
+      gst_rtp_base_depayload_push_list (depayload, outbufs);
+    }
+    return NULL;
+  }
+too_big:
+  {
+    gst_rtp_buffer_unmap (&rtpbuf);
+    GST_WARNING_OBJECT (depayload, "Payload too big, expected at most %u "
+        "bytes, but got %u bytes", depay->packet_size, packet_len);
     if (gst_buffer_list_length (outbufs) == 0) {
       gst_rtp_base_depayload_dropped (depayload);
       gst_buffer_list_unref (outbufs);

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/gst/dvdsub/gstdvdsubdec.c -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/gst/dvdsub/gstdvdsubdec.c Changed

@@ -342,6 +342,8 @@
         GST_WARNING_OBJECT (dec, "SPU_WIPE not yet implemented");
 
         length = (buf1 << 8) | (buf2);
+
+        PARSE_BYTES_NEEDED (1 + length);
         buf += 1 + length;
 
         dec->buf_dirty = TRUE;
@@ -501,8 +503,9 @@
 
   target = state->target;
 
-  x = dec->left;
-  right = dec->right + 1;
+  /* If left/right is still outside the frame, clip it off */
+  x = CLAMP (dec->left, 0, dec->in_width - 1);
+  right = MIN (dec->right + 1, dec->in_width);
 
   while (x < right) {
     gboolean in_hl;
@@ -636,13 +639,15 @@
     hl_top = -1;
     hl_bottom = -1;
   }
-  last_y = MIN (dec->bottom, dec->in_height);
 
-  y = dec->top;
+  /* If top/bottom is still outside the frame, clip it off */
+  last_y = MIN (dec->bottom, dec->in_height - 1);
+  y = CLAMP (dec->top, 0, dec->in_height - 1);
+
   state.target = Y_data + 4 * dec->left + (y * Y_stride);
 
   /* Now draw scanlines until we hit last_y or end of RLE data */
-  for (; ((state.offset1 < dec->data_size + 2) && (y <= last_y)); y++) {
+  for (; ((state.offsetstate.id < dec->data_size + 2) && (y <= last_y)); y++) {
     /* Set up to draw the highlight if we're in the right scanlines */
     if (y > hl_bottom || y < hl_top) {
       state.hl_left = -1;

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/meson.build -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/meson.build Changed

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/po/gst-plugins-ugly-1.0.pot -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/po/gst-plugins-ugly-1.0.pot Changed

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/po/gst-plugins-ugly.pot -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/po/gst-plugins-ugly.pot Changed

_service:download_files:gst-plugins-ugly-1.28.5.tar.xz/release-notes-1.28.md -> _service:download_files:gst-plugins-ugly-1.28.7.tar.xz/release-notes-1.28.md Changed

@@ -2,11 +2,11 @@
 
 GStreamer 1.28.0 was originally released on 27 January 2026.
 
-The latest bug-fix release in the stable 1.28 series is 1.28.5(#1.28.5) and was released on 08 July 2026.
+The latest bug-fix release in the stable 1.28 series is 1.28.7(#1.28.7) and was released on 07 September 2026.
 
 See https://gstreamer.freedesktop.org/releases/1.28/latest for the latest version of this document.
 
-*Last updated: Wednesday 08 July 2026, 23:00 UTC (log)gitlog*
+*Last updated: Monday 07 September 2026, 20:00 UTC (log)gitlog*
 
 latest: https://gstreamer.freedesktop.org/releases/1.28/
 gitlog: https://gitlab.freedesktop.org/gstreamer/www/commits/main/src/htdocs/releases/1.28/release-notes-1.28.md
@@ -2590,6 +2590,356 @@
 - List of Merge Requests applied in 1.28.5(https://gitlab.freedesktop.org/groups/gstreamer/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.28.5)
 - List of Issues fixed in 1.28.5(https://gitlab.freedesktop.org/groups/gstreamer/-/work_items?scope=all&utf8=%E2%9C%93&state=closed&milestone_title=1.28.5)
 
+<a id="1.28.6"></a>
+
+### 1.28.6
+
+The sixth 1.28 bug-fix release (1.28.6) was released on 05 August 2026.
+
+This release only contains bugfixes and important security fixessecurity.
+It *should* be safe to update from 1.28.x and we recommend you do so at your
+earliest convenience.
+
+security: https://gstreamer.freedesktop.org/security/
+
+#### Highlighted bugfixes in 1.28.6
+
+ - Various security fixessecurity and playback fixes
+ - playbin3, playbin: fix stalls after re-enabling previously disabled subtitles
+ - Fix regression in core if a pad is re-linked while changed sticky events are being pushed
+ - dtls/webrtc: fix some issues with OpenSSL 4.0.0
+ - RTP retransmission bitrate estimation fixes
+ - Fix RTP depayloading of SMPTE ST291 frames with multiple ANC packets
+ - Add H.266 muxing support to the Rust (f)mp4 muxers
+ - Better handling of input buffers without timestamps in Rust (f)mp4 muxers
+ - webrtcsink H.264 level/profile negotiation fixes and support for nvv4l2h265enc encoder
+ - SMPTE ST2038 ancillary metadata and closed caption combiner improvements
+ - Fix SEI insertion into H.265/HEVC streams with alpha
+ - Windows D3D11 WinRT screen capture element fixes
+ - Improved coded buffer size handling for VA encoders
+ - Textaccumulate: various tweaks how the element outputs text, plus better handling of French punctuation
+ - hlssink3: improved handling of input buffers without timestamps
+ - Fix build against FFmpeg 9.0
+ - cerbero: fix Windows packages binary size increase regression; upgrade libsrt recipe to 1.5.6
+ - Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements
+
+#### gstreamer
+
+ - baseparse: Don't reset infer_ts/pts_interpolate subclass configuration in reset() and related fixes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12102)
+ - cpuid: fix AArch64 NEON detection to check HWCAP_ASIMD, not HWCAP_NEON(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12224)
+ - pad: fix livelock when pushing changed sticky events when the pad is re-linked(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12142)
+ - valve: Don't send a reconfigure even when setting the `drop` property to the same value(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12082)
+ - meson: Make the g-ir-scanner init section consistent across modules(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12163)
+ - meson: use dependency('dl') instead of cc.find_library('dl')(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12154)
+
+#### gst-plugins-base
+
+ - gl/eagl: Fix GstGLUIView leak from duplicate __bridge_retained(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12118)
+ - playsink: don't wait for text pad block during reconfiguration(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12178)
+ - typefind: Actually register various forgotten typefinders(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12098)
+ - meson: Make the g-ir-scanner init section consistent across modules(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12163)
+ - Remove incorrect G_GNUC_CONST annotation for _get_type() functions and some other functions(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12157)
+
+#### gst-plugins-good
+
+ - aacparse: Don't assert on parsing errors or insufficient data(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12143)
+ - avidemux: Make sure enough data is available when parsing FUJIFILM strd and various other fixes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12241)
+ - matroskademux: Make sure enough data is available when parsing FLAC headers(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12242)
+ - rtph264depay: rtph265depay: Limit the maximum fragmentation unit size(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12244)
+ - rtpqcelpdepay: Handle changes in interleave value correctly(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12237)
+ - rtpsource: fix bitrate estimation for RTX(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12171)
+ - v4l2: Use MPLANE flag to determine n_v4l_planes directly(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12177)
+ - y4mdec: Some parsing fixes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12122)
+ - tests: qtmux: drain to EOS before teardown in test_caps_renego(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12200)
+ - Remove incorrect G_GNUC_CONST annotation for _get_type() functions and some other functions(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12157)
+
+#### gst-plugins-bad
+
+ - adpcmdec: Fix IMA ADPCM input size check to match with the actual code(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12245)
+ - baseparse: Don't reset infer_ts/pts_interpolate subclass configuration in reset() and related fixes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12102)
+ - d3d11winrtcapture: Fix incorrect capture height(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12115)
+ - dtls: make BIO read signal retry instead of EOF when no data(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12191)
+ - dtls: New DTLS test failure with OpenSSL 4.0.0(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5234)
+ - dvdspu: Fix too strict off-by-one bounds check in a couple of places(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12126)
+ - h263parse: diracparse: Sync baseparse configuration with other compressed video parsers(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12096)
+ - h265parser: Fix out-of-bounds writes in RPS parsing(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12239)
+ - h265seiinserter: Fix HEVC with alpha stream handling(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12189)
+ - h266parser: fix SEI parsing error handler(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12132)
+ - meson: Make the g-ir-scanner init section consistent across modules(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12163)
+ - mpegpsdemux: Use byte readers for parsing data and make sure enough data is available(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12183)
+ - openjpegdec: Various issues related to striped mode and image origins, plus memory leaks(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12246)
+ - pnmdec: Don't assert if creating the output state fails and don't flush more data than is available(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12124)
+ - tfliteinference: fix leaks(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11404)
+ - tsdemux: Don't assert if stream pad was not yet created(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12162)
+ - vabaseenc: clamp driver-reported coded size to the coded buffer size(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12123)
+ - vtdec: Don't register the hw-only variant on simulators(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12112)
+ - vulkantrash: avoid reinitializing trash objects multiple times(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12117)
+ - waylandsink: Omit reporting drop frame on preroll(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12037)
+ - webrtcbin: fix possible floating leak for post-aux(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12085)
+ - wlvideobufferpool: Fix memory leak in gst_wl_video_buffer_pool_alloc_buffer(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12160)
+ - docs: Fix build when mse library is disabled(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12113)
+ - Remove incorrect G_GNUC_CONST annotation for _get_type() functions and some other functions(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12157)
+
+#### gst-plugins-ugly
+
+ - asfdemux: Avoid integer overflows during bounds checks(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12243)
+ - dvdsubdec: Clip subpicture rectangle to the frame size(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12240)
+ - rtpasfdepay: Drop packets that are larger than the negotiated maximum packet size and various other fixes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12236)
+
+#### GStreamer Rust plugins
+
+ - hlsbasesink: Don't unwrap() running_time when a segment is added(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3175)
+ - hlssink3: don't unwrap() PTS of a fragment's first buffer(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3193)
+ - isobmff: Add support for video/x-h266(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3165)
+ - isofmp4mux: use previous highest PTS when none are available(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3180)
+ - rtp: fix overflowing adds(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3187)
+ - rtpsmpte291depay: Fix depayloading frames with multiple ANC packets(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3161)
+ - rtprecv: fix deadlock handling RTCP packet in buffer list(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3190)
+ - st2038combiner: Fix off-by-one when ST-2038 pads are skewed(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3156)
+ - textaccumulate: output joined single buffer, add list as meta(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3150)
+ - webrtc: add support for nvv4l2h265enc(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3160)
+ - webrtcsink: handle level-asymmetry-allowed when answering(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3184)
+ - meson: Work around openssl-sys detection bug on Windows(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3158)
+ - meson: Sort entries for deterministic build results(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3209)
+ - Clippy and cargo test fixes(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3182)
+ - Fix some hotdoc markdown code blocks in various docs(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3172)
+
+#### gst-libav
+
+ - Fix build failure with FFmpeg 9.0(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12221)
+ - libav: FFmpeg 9.0 Build Failure(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5251)
+ - avdemux: Close demuxer on pad deactivation instead of state change and don't use uninitialized audio channel positions(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12099)
+ - avdemux: Use a dynamic-sized array for the AVStreams(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12238)
+
+#### gst-rtsp-server
+
+ - rtsp-server: fix racy leak in test_pool_thread_copy under valgrind(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12201)
+ - meson: Make the g-ir-scanner init section consistent across modules(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12163)
+
+#### gstreamer-sharp
+
+ - No changes
+
+#### gst-python
+
+ - meson: use dependency('dl') instead of cc.find_library('dl')(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12154)
+
+#### gst-editing-services
+
+ - meson: Make the g-ir-scanner init section consistent across modules(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12163)
+ - Remove incorrect G_GNUC_CONST annotation for _get_type() functions and some other functions(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12157)
+
+#### gst-devtools, gst-validate + gst-integration-testsuites
+
+ - meson: Make the g-ir-scanner init section consistent across modules and fix validate g-ir-scanner invocation so that it doesn't load any plugins(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12163)
+ - meson: use dependency('dl') instead of cc.find_library('dl')(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12154)
+ - Remove incorrect G_GNUC_CONST annotation for _get_type() functions and some other functions(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12157)
+
+#### gst-examples
+
+ - No changes
+
+#### gstreamer-docs
+
+ - No changes
+
+#### Development build environment
+
+ - No changes
+
+#### Cerbero build tool and packaging changes in 1.28.6
+
+ - gst-plugins-rs: Don't incorrectly package .lib plugin static libs, fixing package binary size regression(https://gitlab.freedesktop.org/gstreamer/cerbero/-/merge_requests/2307)
+ - windows inno installer: add support for v7(https://gitlab.freedesktop.org/gstreamer/cerbero/-/merge_requests/2316)
+ - soundtouch: download the tarball from surina.net vice codeberg.org(https://gitlab.freedesktop.org/gstreamer/cerbero/-/merge_requests/2302)
+ - srt: upgrade to 1.5.6(https://gitlab.freedesktop.org/gstreamer/cerbero/-/merge_requests/2310)
+ - windows.config: fix Windows MinGW cross compilation for certain Rust recipes(https://gitlab.freedesktop.org/gstreamer/cerbero/-/merge_requests/2304)
+
+#### Contributors to 1.28.6
+
+Albert Sjölund, Bernhard M. Wiedemann, Charles Turner, Diego Nieto,
+Emiel Van Severen, François Laignel, Gareth Sylvester-Bradley, He Junyan,
+Ingmar Steen, Jan Schmidt, Jeongkeun Kim, Jerome Colle, Jihoon Lee,
+L. E. Segovia, Maksim Nikolaev, Marcus Hanestad, Mathieu Duponchelle,
+Matthew Waters, Nicolas Dufresne, Nirbheek Chauhan, Olivier Crête,
+Piotr Brzeziński, Qi Hou, Reilly Brogan, Sanchayan Maity, Sebastian Dröge,
+Seungha Yang, Seyi Kuforiji, Thibault Saunier, Tim-Philipp Müller,
+Tjitte de Wert,
+
+... and many others who have contributed bug reports, translations, sent
+suggestions or helped testing. Thank you all!
+
+#### List of merge requests and issues fixed in 1.28.6
+
+- List of Merge Requests applied in 1.28.6(https://gitlab.freedesktop.org/groups/gstreamer/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.28.6)
+- List of Issues fixed in 1.28.6(https://gitlab.freedesktop.org/groups/gstreamer/-/work_items?scope=all&utf8=%E2%9C%93&state=closed&milestone_title=1.28.6)
+
+<a id="1.28.7"></a>
+
+### 1.28.7
+
+The seventh 1.28 bug-fix release (1.28.7) was released on 07 September 2026.
+
+This release only contains bugfixes and important security fixessecurity.
+It *should* be safe to update from 1.28.x and we recommend you do so at your
+earliest convenience.
+
+security: https://gstreamer.freedesktop.org/security/
+
+#### Highlighted bugfixes in 1.28.7
+
+ - Various security fixessecurity and playback fixes
+ - appsrc EOS handling regression fix for applications pushing EOS into a blocked appsrc
+ - glcolorconvert fixes for older OpenGL/GLSL versions
+ - mxfdemux: Fix keyframe detection regression and possible artefacts after seeking
+ - QML6 GL Overlay output texture lifetime handling fixes
+ - opencv: Add support for building against OpenCV 5
+ - hip: Add missing API version suffix in HIP support library filename and fix hipcc detection on Windows with HIP SDK 7.x
+ - analytics: fix classes off-by-one in ssdtensordec leading to mislabelling of objects in the examples
+ - isobmff: Fix min_display_mastering_luminance in mdcv box
+ - rtpbin2: rtprecv: limit the number of remote sources being tracked
+ - st2038anc: parity bit handling fixes for ST 291 ADF words
+ - video converter and videoconvertscale fixes
+ - mpegdemux: restore gap event sending in MPEG-PS demuxer
+ - Fix x264enc high bit depth support in binary packages
+ - Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements
+
+#### gstreamer
+
+ - cpuid: Clean up NEON and ASIMD getauxval detection + port Orc's elf_aux_info support(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12258)
+ - dataurisrc: Fix empty payloads and unsupported charset conversion(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12407)
+ - pipeline: Avoid lock inversion when handling GST_MESSAGE_RESET_TIME(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12421)
+ - validate: Use a single value type in configs lists(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12343)
+
+#### gst-plugins-base
+
+ - appsrc: Don't push EOS directly in event handler (regression fix)(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12283)
+ - glcolorconvert: don't rely on integer modulus '%'(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12286)
+ - mikey: use TEK_WITH_SALT for proper key/salt separation in KEY_DATA(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12404)
+ - overlay-composition: Don't try to scale high bitdepth rectangles(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12330)
+ - rtpbasedepayload: Don't assert if previous buffer's delayed header extensions are still queued(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12444)
+ - rtsp: message: fix crash when an auth value started with whitespace(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12431)
+ - typefindhelper: Revert "Drop unnecessary check for factories without a function"(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12443)
+ - typefind: regression causes txt file to be detected as subtitle(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5285)
+ - typefindfunctions: Critical warnings when typefinding invalid ogv file(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5279)
+ - validate: Use a single value type in configs lists(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12343)
+ - video-converter: Fix GRAY output border color(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12374)
+ - video-format: Fix annotation on component function(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12425)
+ - videoconvertscale: keep input colorimetry in scale-only elements(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12378)
+ - videotimecode: Fix documentation bug and update annotations(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12255)
+
+#### gst-plugins-good
+
+ - effectv: quarktv: read from mapped memory to reduce latency and improve performance(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12422)
+ - flxdec: Various read fixes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12387)
+ - qml6gloverlay: output texture lifetime fixes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12342)
+ - qtdemux: Add 'stream-format' field for AC-4 caps(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12371)
+ - qtdemux: Ensure enough data is available for reading closed caption boxes(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12437)
+ - rtpmanager: crash on malformed RTCP SDES due to uninitialized values being used(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5277)
+ - rtpmanager: Fix malformed SDES processing segfault(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12375)
+ - rtpsession: implement DoS protection mechanisms(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12436)
+ - scaletempo: fix integer overflow in output_overlap_s16(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12265)
+ - soup: fix redirect uri when not using automatic redirects(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12391)
+ - souphttpsrc: Add new `location-trusted` property(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12438)
+
+#### gst-plugins-bad
+
+ - amc: Don't set the Hardware class in metadata for sw video codecs(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12327)
+ - d3d12: Fix copy-paste typos(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12368)
+ - d3d12cmdqueue: Fix deadlock during GC(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12353)
+ - d3d12screencapturesrc: Fix out-of-bounds access with monochrome cursors(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12320)
+ - dwritebaseoverlay: Fix assertion 'G_VALUE_HOLDS_UINT (value)'(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12323)
+ - hip: Add missing API version suffix in library filename(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12299)
+ - gstreamer-hip api_version failure(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5245)
+ - hip: Fix hipcc detection on Windows with HIP SDK 7.x(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12332)
+ - hipstream: Return actual device_id instead of vendor from device_id getter(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12394)
+ - hipmemorycopy: Add missing ifdef guard(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12361)
+ - jpegparse: Fix byte order of JFIF density fields(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12259)
+ - mpegdemux: restore gap sending(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12400)
+ - mxfdemux: Fix keyframe detection(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12324)
+ - onnx: Fix nullptr dereference on ORT init failure(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12295)
+ - onnxinference: fix dead lock with wrong model file(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12329)
+ - opencv: Support OpenCV 5(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12363)
+ - pnmdec: Protect against bogus dimensions headers(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12390)
+ - ssdtensordec: The classes were off by one(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12256)
+ - tsdemux: Add 'stream-format' field for AC-4 caps(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12371)
+ - validate: Use a single value type in configs lists(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12343)
+ - vulkan(av1,vp9)dec: set access NONE at buffer pool allocation parameters(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12417)
+
+#### gst-plugins-ugly
+
+ - No changes
+
+#### GStreamer Rust plugins
+
+ - isobmff: Fix min_display_mastering_luminance in mdcv box(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3227)
+ - rtprecv: limit the number of remote sources being tracked(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3229)
+ - rtspsrc2: Fix handling of scheme and parameter parsing(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3237)
+ - st2038anc: Fix inverted even/odd parity on ST 291 ADF words(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3217)
+ - Fix a couple of new Rust 1.97 clippy warnings(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3198)
+ - Sort entries for deterministic build results(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3209)
+ - Update dependencies(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3200)
+ - closedcaption: update to winnow to 1.0(https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/merge_requests/3220)
+
+#### gst-libav
+
+ - avauddec, avaudenc: Don't try channel layout mapping with >64 channels(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12439)
+
+#### gst-rtsp-server
+
+ - No changes
+
+#### gstreamer-sharp
+
+ - No changes
+
+#### gst-python
+
+ - No changes
+
+#### gst-editing-services
+
+ - validate: Use a single value type in configs lists(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12343)
+
+#### gst-devtools, gst-validate + gst-integration-testsuites
+
+ - validate: Use a single value type in configs lists(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12343)
+
+#### gst-examples
+
+ - No changes
+
+#### gstreamer-docs
+
+ - No changes
+
+#### Development build environment
+
+ - wraps: macos-bison-binary: Fix cross-compile when host/build machine cpu family differ(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12312)
+ - wraps: update libnice to 0.1.24(https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12402)
+
+#### Cerbero build tool and packaging changes in 1.28.7
+
+ - x264: Fix high bit-depth support(https://gitlab.freedesktop.org/gstreamer/cerbero/-/merge_requests/2328)
+ - libnice: update to 0.1.24(https://gitlab.freedesktop.org/gstreamer/cerbero/-/merge_requests/2336)
+
+#### Contributors to 1.28.7
+
+Aisuneko icecat, Antonio Rojas, Colin Kinloch, Dominique Leroux, Edward Hervey,
+Eric Chandrasekhar,François Laignel, Frank Wennerdahl, Gareth Sylvester-Bradley,
+Jan Schmidt, Lei Zhen, L. E. Segovia, Marcus Hanestad, Mark Nauwelaerts,
+masa-iwm, Mathieu Duponchelle, Matthew Waters, Nirbheek Chauhan, Pablo García,
+Sanchayan Maity, Sebastian Dröge, Seungha Yang, Seyi Kuforiji, Stéphane Cerveau,
+Thibault Saunier, Thomas Devoogdt, Tim-Philipp Müller, YoungSoo Lee,
+
+... and many others who have contributed bug reports, translations, sent
+suggestions or helped testing. Thank you all!
+
+#### List of merge requests and issues fixed in 1.28.7
+
+- List of Merge Requests applied in 1.28.7(https://gitlab.freedesktop.org/groups/gstreamer/-/merge_requests?scope=all&utf8=%E2%9C%93&state=merged&milestone_title=1.28.7)
+- List of Issues fixed in 1.28.7(https://gitlab.freedesktop.org/groups/gstreamer/-/work_items?scope=all&utf8=%E2%9C%93&state=closed&milestone_title=1.28.7)
+
 ## Schedule for 1.30
 
 Our next major feature release will be 1.30, and 1.29 will be the unstable