portage-ng / portage / media-video / gpac / 2.4.0-r1
version « ‹ 2.4.0-r1 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference media-video/gpac · none place version 2.4.0-r1 in a vulnerable range
▸ GLSA 202408-21 GPAC: Multiple Vulnerabilities this version unaffected normal remote 2024-08-10

Multiple vulnerabilities have been discovered in GPAC, the worst of which could lead to arbitrary code execution.

Announced
2024-08-10
Revised
2024-08-10
Access
remote
Bugs
#785649 #835341
Advisory
https://security.gentoo.org/glsa/202408-21

Affected packages

PackageArchVulnerableUnaffected
media-video/gpac*< 2.2.0>= 2.2.0

Background

GPAC is an implementation of the MPEG-4 Systems standard developed from scratch in ANSI C.

Description

Multiple vulnerabilities have been discovered in GPAC. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All GPAC users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-video/gpac-2.2.0"

References