# GStreamer 1.28.9 stable bug-fix release

**URL:** <https://discourse.gstreamer.org/t/gstreamer-1-28-9-stable-bug-fix-release/5938>\
**Category:** News and Announcements\
**Created:** [November 6, 2026, 2:23pm UTC](https://discourse.gstreamer.org/t/gstreamer-1-28-9-stable-bug-fix-release/5938 "2026-11-06T14:23:05Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tpm](https://discourse.gstreamer.org/letter_avatar_proxy/v4/letter/t/c5a1d2/32.png) [@tpm](https://discourse.gstreamer.org/u/tpm)\
**Post date:** [November 6, 2026, 2:23pm UTC](https://discourse.gstreamer.org/t/gstreamer-1-28-9-stable-bug-fix-release/5938/1 "2026-11-06T14:23:05Z")

</div>

The GStreamer team is pleased another bug fix release in the new stable 1.28 release series.

**This release contains security fixes and bug fixes.** It should be safe to upgrade from 1.28.x, and we recommend you update at your earliest convenience.

**This release also contains follow-up fixes for two security issues addressed in earlier releases:** an incomplete fix for an out-of-bounds read in the MPEG-4 video parser (GST-SA-2026-0049), and a use-after-free and race condition in the RTP session DoS protection (GST-SA-2026-0074).

# Highlights:

- Various [security fixes][security] and playback fixes
- decodebin3, playbin3: fix assertion that would crash music players with certain files and sources
- qtdemux: fix seeking beyond the end of file in push mode
- flvdemux: don’t prematurely EOS on AVC/audio sequence end
- rtspsrc: Reuse non-compliant URL fallback across tracks
- H.264 and H.265 RTP depayloader header extension tracking fixes
- level: Add 24 bits support
- gtk4paintablesink: Mark EGL display as foreign to not terminate it
- amfcodec: fix rate\_control (H.265, AV1) and gop\_size (H.265) properties
- asio: fix stopping asio element causing crashes
- cuda: Correctly save alpha and blend on property change
- HLS: fix awss3hlssink EXT-X-PROGRAM-DATE-TIME moving at twice the speed of the target duration
- hlssink3: Fix stream writing regression for CMAF and WebVTT sinks
- isobmff: Fix NTP seconds roll-over past 2036
- Fix gap event regression in MPEG-PS demuxer with certain subtitle streams
- qsv, d3d11, d3d12: Build fixes on latest msys2 environment
- va: do not advertise unsupported formats in encoder caps
- v4l2 video decoder fixes including delay negotiation for H.264 and H.265 for better decodebin2 compatibility
- wayland: output hotplug fixes
- webrtcsink: add support of mpph264enc encoder (rockchip)
- Rust plugins: enable cross-compilation with sysroot in Meson build
- cerbero: update ca-certificates and pip, and fix issue with rolling distro versions
- Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements

Release notes with details about changes and fixed bugs can be found at:

> **[GStreamer 1.28 release notes | GStreamer](https://gstreamer.freedesktop.org/releases/1.28/#1.28.9)**
>
> GStreamer: open source multimedia framework

For details of our security fixes, please check out our security center at

> **[Security Center | GStreamer](https://gstreamer.freedesktop.org/security/)**
>
> GStreamer Security Center

Binaries for Android, iOS, Mac OS X and Windows should be available soon.

As always, please let us know of any issues you run into by filing an issue or Merge Request in [GitLab](https://gitlab.freedesktop.org/gstreamer/gstreamer/).

Thanks!

> **Source tarball download and checksums**
>
> | sha256sum | tarball |
> | --- | --- |
> | 6dbf744f583131a34845cc641e803843766a9ba80ce00378a9043fd6d8d5fb38 | [https://gstreamer.freedesktop.org/src/gstreamer/gstreamer-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gstreamer/gstreamer-1.28.9.tar.xz) |
> | c1fda668b520e6aef763c0eb962c032c9fe52bce322e8b00c69b4e9e847bddc1 | [https://gstreamer.freedesktop.org/src/gst-plugins-base/gst-plugins-base-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-plugins-base/gst-plugins-base-1.28.9.tar.xz) |
> | e518cd97483706a252e95e60312a22d23dec6f5e7673af6f5bde719c3a9ca7f4 | [https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-good-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-good-1.28.9.tar.xz) |
> | 550a52536962186f5488e06b5c08f31ae0f18400aee32a3385156d31cb4b1189 | [https://gstreamer.freedesktop.org/src/gst-plugins-ugly/gst-plugins-ugly-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-plugins-ugly/gst-plugins-ugly-1.28.9.tar.xz) |
> | 4a4e0b7bf84f868378c48f143a7ac3a98923b488a5b74f1a35ba46bc3c43f6b1 | [https://gstreamer.freedesktop.org/src/gst-plugins-bad/gst-plugins-bad-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-plugins-bad/gst-plugins-bad-1.28.9.tar.xz) |
> | 4b3df21fa70972a80891d2298cf32c14a62c3db4483d545c7ac018230399186b | [https://gstreamer.freedesktop.org/src/gst-libav/gst-libav-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-libav/gst-libav-1.28.9.tar.xz) |
> | b87ed564d857a226a3135bd2c42eae7b40eb64031cb9cbce124722af92cc8b9d | [https://gstreamer.freedesktop.org/src/gst-rtsp-server/gst-rtsp-server-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-rtsp-server/gst-rtsp-server-1.28.9.tar.xz) |
> | 23caf8439ba063091da226e7a1774915848105ff47ebdbe7773fffa21a094692 | [https://gstreamer.freedesktop.org/src/gst-editing-services/gst-editing-services-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-editing-services/gst-editing-services-1.28.9.tar.xz) |
> | e6ad2658fad5b96d99af72ceec7e48995ff792fbda438d34486d189ce047718a | [https://gstreamer.freedesktop.org/src/gst-python/gst-python-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-python/gst-python-1.28.9.tar.xz) |
> | cfe8ae964fb394e03fd66b831daba08e0b5d1fb7d8bf047ade351afcb5855eaf | [https://gstreamer.freedesktop.org/src/gst-devtools/gst-devtools-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gst-devtools/gst-devtools-1.28.9.tar.xz) |
> | c0206b072651c0cce75b3519011408686302573a19cf52cdb3ef5d88c7f34dcb | [https://gstreamer.freedesktop.org/src/gstreamer-sharp/gstreamer-sharp-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gstreamer-sharp/gstreamer-sharp-1.28.9.tar.xz) |
> | 478f37a134f3e8580987a7c3a8b66c7174a8dcd40443d814d1346410d02bbf55 | [https://gstreamer.freedesktop.org/src/gstreamer-docs/gstreamer-docs-1.28.9.tar.xz](https://gstreamer.freedesktop.org/src/gstreamer-docs/gstreamer-docs-1.28.9.tar.xz) |