Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 4 articles for you...
203
security advisorysecurity issuebuffer overflowMageia 9: MGASA-2025-0090 moderate: gpac out-of-bounds read
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. (CVE-2023-5520) Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. (CVE-2024-0321) Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. . MGASA-2025-0090 - Updated gpac packages fix security vulnerabilities Publication date: 08 Mar 2025 URL: https://advisories.mageia.org/MGASA-2025-0090.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-5520, CVE-2024-0321, CVE-2024-0322 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. (CVE-2023-5520) Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. (CVE-2024-0321) Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. (CVE-2024-0322) References: - https://bugs.mageia.org/show_bug.cgi?id=34071 - https://ubuntu.com/security/notices/USN-7320-1 - https://www.cve.org/CVERecord?id=CVE-2023-5520 - https://www.cve.org/CVERecord?id=CVE-2024-0321 - https://www.cve.org/CVERecord?id=CVE-2024-0322 SRPMS: - 9/tainted/gpac-2.2.1-1.2.mga9.tainted . Mageia has issued a security advisory addressing vulnerabilities in gpac, particularly buffer overflows and out-of-bounds memory reads. It details the fixes made.. gpac security, Mageia advisory, software vulnerabilities, gpac update, security issues. . LinuxSecurity.com Team
Mar 08, 2025
Mageia
172
security advisorydenial of servicecritical issueUbuntu 22.04 LTS USN-7320-1 critical: gpac denial of service
Several security issues were fixed in GPAC.. ========================================================================== Ubuntu Security Notice USN-7320-1 March 04, 2025 gpac vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in GPAC. Software Description: - gpac: GPAC Project on Advanced Content Details: It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service (system crash). This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2023-5520, CVE-2024-0322) It was discovered that the GPAC MP4Box utility incorrectly handled certain malformed text files. If a user or automated system using MP4Box were tricked into opening a specially crafted RST file, an attacker could use this issue to cause a denial of service (system crash) or execute arbitrary code. (CVE-2024-0321) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS gpac 2.2.1+dfsg1-3.1ubuntu0.1~esm2 Available with Ubuntu Pro gpac-modules-base 2.2.1+dfsg1-3.1ubuntu0.1~esm2 Available with Ubuntu Pro libgpac12t64 2.2.1+dfsg1-3.1ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 22.04 LTS gpac 2.0.0+dfsg1-2ubuntu0.1~esm2 Available with Ubuntu Pro gpac-modules-base 2.0.0+dfsg1-2ubuntu0.1~esm2 Available with Ubuntu Pro libgpac11 2.0.0+dfsg1-2ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 20.04 LTS gpac 0.5.2-426-gc5ad4e4+dfsg5-5ubuntu0.1~esm2 Available with Ubuntu Pro gpac-modules-base 0.5.2-426-gc5ad4e4+dfsg5-5ubuntu0.1~esm2 Available with Ubuntu Pro libgpac4 0.5.2-426-gc5ad4e4+dfsg5-5ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS gpac 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1+esm1 Available with Ubuntu Pro gpac-modules-base 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1+esm1 Available with Ubuntu Pro libgpac4 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS gpac 0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1+esm2 Available with Ubuntu Pro gpac-modules-base 0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1+esm2 Available with Ubuntu Pro libgpac4 0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1+esm2 Available with Ubuntu Pro Ubuntu 14.04 LTS gpac 0.5.0+svn4288~dfsg1-4ubuntu1+esm2 Available with Ubuntu Pro gpac-modules-base 0.5.0+svn4288~dfsg1-4ubuntu1+esm2 Available with Ubuntu Pro libgpac2 0.5.0+svn4288~dfsg1-4ubuntu1+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7320-1 CVE-2023-5520,CVE-2024-0321, CVE-2024-0322 . Multiple vulnerability patches have been released for GPAC, impacting various Ubuntu LTS editions, essential for maintaining system integrity.. GPAC Security, Ubuntu Update, Security Fix, Denial of Service, System Stability. . Severity: Critical. LinuxSecurity.com Team
Mar 05, 2025
•Critical
Ubuntu
203
security advisorysecurity issueupdateMageia 9 MGASA-2024-0027 Critical: Security Vulnerabilities in Gpac
This update fixes two security vulnerabilities, CVE-2023-3012 and CVE-2023-3291, see the References below. References: - https://bugs.mageia.org/show_bug.cgi?id=32016 . MGASA-2024-0027 - Updated gpac packages fix security vulnerabilities Publication date: 09 Feb 2024 URL: https://advisories.mageia.org/MGASA-2024-0027.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-3012, CVE-2023-3291 This update fixes two security vulnerabilities, CVE-2023-3012 and CVE-2023-3291, see the References below. References: - https://bugs.mageia.org/show_bug.cgi?id=32016 - https://www.cve.org/CVERecord?id=CVE-2023-3012 - https://www.cve.org/CVERecord?id=CVE-2023-3291 SRPMS: - 9/tainted/gpac-2.2.1-1.1.mga9.tainted . Mageia 2024-0027 releases an update for gpac to resolve significant security vulnerabilities. Find out more about the issues that have been rectified.. gpac security updates, Mageia vulnerabilities, package security issues. . Severity: Critical. LinuxSecurity.com Team
Feb 09, 2024
•Critical
Mageia
87
security advisorydenial of servicecriticalDebian: DSA-5452-1 Critical: GPAC Denial Of Service Advisory
Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5452-1
Jul 14, 2023
•Critical
Debian
87
security advisorymoderatedenial of serviceDebian 11 DSA-5411-1 Moderate: Gpac DoS Risk Security Update
Multiple issues were found in GPAC multimedia framework, whcih could result in denial of service or potentially the execution of arbitrary code. For the stable distribution (bullseye), these problems have been fixed in . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5411-1
May 26, 2023
Debian
203
security advisorycriticalmemory corruptionMageia 2021-0431 Critical Security Update: Gpac Heap Overflow Info
A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21834) A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause . MGASA-2021-0431 - Updated gpac packages fix security vulnerability Publication date: 23 Sep 2021 URL: https://advisories.mageia.org/MGASA-2021-0431.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-21834, CVE-2021-21836, CVE-2021-21837, CVE-2021-21838, CVE-2021-21839, CVE-2021-21840, CVE-2021-21841, CVE-2021-21842, CVE-2021-21843, CVE-2021-21844, CVE-2021-21845, CVE-2021-21846, CVE-2021-21847, CVE-2021-21848, CVE-2021-21849, CVE-2021-21850, CVE-2021-21853, CVE-2021-21854, CVE-2021-21855, CVE-2021-21857, CVE-2021-21858, CVE-2021-21859, CVE-2021-21860, CVE-2021-21861 A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21834) A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21836) A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21837, CVE-2021-21838, CVE-2021-21839) A specially crafted MPEG-4 input used to process an atom using the "saio" FOURCC code cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21840) A specially crafted MPEG-4 input when reading an atom using the 'sbgp' FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in aheap-based buffer overflow that causes memory corruption. (CVE-2021-21841) A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21842) A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. After validating the number of ranges, at [41] the library will multiply the count by the size of the GF_SubsegmentRangeInfo structure. On a 32-bit platform, this multiplication can result in an integer overflow causing the space of the array being allocated to be less than expected. (CVE-2021-21843) A specially crafted MPEG-4 input when encountering an atom using the "stco" FOURCC code, can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21844) A specially crafted MPEG-4 input in "stsc" decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21845) A specially crafted MPEG-4 input in "stsz&" decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21846) A specially crafted MPEG-4 input in "stts" decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21847) The library will actually reuse the parser for atoms with the "stsz" FOURCC code when parsing atoms that use the "stz2" FOURCC code and can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21848) A specially crafted MPEG-4 input can cause an integer overflow when the library encounters an atom using the "tfra" FOURCC code due tounchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21849) A specially crafted MPEG-4 input can cause an integer overflow when the library encounters an atom using the "trun" FOURCC code due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21850) A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21853, CVE-2021-21854, CVE-2021-21855, CVE-2021-21857, CVE-2021-21858) The stri_box_read function is used when processing atoms using the 'stri' FOURCC code. (CVE-2021-21859) A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption. The FOURCC code, 'trik', is parsed by the function within the library. (CVE-2021-21860) When processing the 'hdlr' FOURCC code, a specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21861) References: - https://bugs.mageia.org/show_bug.cgi?id=29432 - https://lists.debian.org/debian-security-announce/2021/msg00151.html - https://www.cve.org/CVERecord?id=CVE-2021-21834 - https://www.cve.org/CVERecord?id=CVE-2021-21836 - https://www.cve.org/CVERecord?id=CVE-2021-21837 - https://www.cve.org/CVERecord?id=CVE-2021-21838 - https://www.cve.org/CVERecord?id=CVE-2021-21839 - https://www.cve.org/CVERecord?id=CVE-2021-21840 - https://www.cve.org/CVERecord?id=CVE-2021-21841 - https://www.cve.org/CVERecord?id=CVE-2021-21842 - https://www.cve.org/CVERecord?id=CVE-2021-21843 - https://www.cve.org/CVERecord?id=CVE-2021-21844 - https://www.cve.org/CVERecord?id=CVE-2021-21845 - https://www.cve.org/CVERecord?id=CVE-2021-21846 - https://www.cve.org/CVERecord?id=CVE-2021-21847 - https://www.cve.org/CVERecord?id=CVE-2021-21848 - https://www.cve.org/CVERecord?id=CVE-2021-21849 -https://www.cve.org/CVERecord?id=CVE-2021-21850 - https://www.cve.org/CVERecord?id=CVE-2021-21853 - https://www.cve.org/CVERecord?id=CVE-2021-21854 - https://www.cve.org/CVERecord?id=CVE-2021-21855 - https://www.cve.org/CVERecord?id=CVE-2021-21857 - https://www.cve.org/CVERecord?id=CVE-2021-21858 - https://www.cve.org/CVERecord?id=CVE-2021-21859 - https://www.cve.org/CVERecord?id=CVE-2021-21860 - https://www.cve.org/CVERecord?id=CVE-2021-21861 SRPMS: - 8/tainted/gpac-1.0.1-1.1.mga8.tainted . Mageia 2021-0432 introduces vital patches targeting several buffer overflows in ffmpeg for improved protection.. mpeg-4 decoder, security update, memory issues. . Severity: Critical. LinuxSecurity.com Team
Sep 23, 2021
•Critical
Mageia
87
security advisorymoderatedenial of serviceDebian Bullseye: DSA-4966-1 Moderate Advisory for GPAC DoS Vulnerabilities
Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code. The oldstable distribution (buster) is not affected. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4966-1
Aug 31, 2021
Debian
203
security advisorydenial of servicebuffer overflowMageia 7 Advisory: 2020-0137 Critical: GPAC Denial Of Service
The updated packages fix security vulnerabilities: AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. . MGASA-2020-0137 - Updated gpac packages fix security vulnerabilities Publication date: 10 Mar 2020 URL: https://advisories.mageia.org/MGASA-2020-0137.html Type: security Affected Mageia releases: 7 CVE: CVE-2018-21015, CVE-2018-21016, CVE-2019-13618, CVE-2019-20161, CVE-2019-20162, CVE-2019-20163, CVE-2019-20165, CVE-2019-20170, CVE-2019-20171, CVE-2019-20208 The updated packages fix security vulnerabilities: AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new-> AVCLevelIndication = cfg-> AVCLevelIndication;" but cfg could be NULL. (CVE-2018-21015) audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. (CVE-2018-21016) In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c. (CVE-2019-13618) An issue was discovered in GPAC version 0.8.0 and 0.9.0-development- 20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c. (CVE-2019-20161) An issue was discovered in GPAC version 0.8.0 and 0.9.0-development- 20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in isomedia/box_funcs.c. (CVE-2019-20162) An issue was discovered in GPAC version 0.8.0 and 0.9.0-development- 20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in odf/descriptors.c. (CVE-2019-20163) An issue was discovered in GPAC version 0.8.0 and0.9.0-development- 20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/box_code_apple.c. (CVE-2019-20165) An issue was discovered in GPAC version 0.8.0 and 0.9.0-development- 20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c. (CVE-2019-20170) An issue was discovered in GPAC version 0.8.0 and 0.9.0-development- 20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c. (CVE-2019-20171) dimC_Read in isomedia/box_code_3gpp.c in GPAC 0.8.0 has a stack-based buffer overflow. (CVE-2019-20208) References: - https://bugs.mageia.org/show_bug.cgi?id=26131 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html - https://www.cve.org/CVERecord?id=CVE-2018-21015 - https://www.cve.org/CVERecord?id=CVE-2018-21016 - https://www.cve.org/CVERecord?id=CVE-2019-13618 - https://www.cve.org/CVERecord?id=CVE-2019-20161 - https://www.cve.org/CVERecord?id=CVE-2019-20162 - https://www.cve.org/CVERecord?id=CVE-2019-20163 - https://www.cve.org/CVERecord?id=CVE-2019-20165 - https://www.cve.org/CVERecord?id=CVE-2019-20170 - https://www.cve.org/CVERecord?id=CVE-2019-20171 - https://www.cve.org/CVERecord?id=CVE-2019-20208 SRPMS: - 7/tainted/gpac-0.7.1-6.1.mga7.tainted . Recent updates to GPAC packages resolve critical vulnerabilities and address potential denial of service threats present in the Mageia distribution. Discover further details.. gpac Security, Mageia Advisory, Application Crash, Buffer Overflow. . Severity: Critical. LinuxSecurity.com Team
Mar 10, 2020
•Critical
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!