Linux · Ubuntu · Package update · February 5, 2019

libgpac4 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1: libgpac4 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1 for Ubuntu 18.04.6 LTS (bionic)

libgpac4 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1, released February 5, 2019, fixes 8 CVEs in libgpac4. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
8
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0250
84th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 0 Routine 8

Fixed package versions

ProductReleaseFixed in
libgpac4Ubuntu 18.04.6 LTS (bionic)0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2018-13005 gpac: An issue was discovered in MP4Box in GPAC 0.7.1n/a 0.0250 None reported
Routine CVE-2018-13006 gpac: An issue was discovered in MP4Box in GPAC 0.7.1n/a 0.0227 None reported
Routine CVE-2018-7752 gpac: GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a differe...n/a 0.0150 None reported
Routine CVE-2018-20761 gpac: GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c...n/a 0.0148 None reported
Routine CVE-2018-20762 gpac: GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications...n/a 0.0148 None reported
Routine CVE-2018-20760 gpac: In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bo...n/a 0.0141 None reported
Routine CVE-2018-20763 gpac: In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bo...n/a 0.0141 None reported
Routine CVE-2018-1000100 gpac: GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines 2417 t...n/a 0.0109 None reported
Showing 1 to 8 of 8 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.