Moderate: libvpx security update

2024-08-2800:00:00

errata.almalinux.org

libvpx

security update

vp8 sdk

webm

heap buffer overflow

vp9 encoding

integer overflow

CVSS4

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:L/VA:N/SA:N

AI Score

7.3

Confidence

High

JSON

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)
libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8i686libvpx-devel< 1.7.0-11.el8_10libvpx-devel-1.7.0-11.el8_10.i686.rpm
almalinux8i686libvpx< 1.7.0-11.el8_10libvpx-1.7.0-11.el8_10.i686.rpm
almalinux8x86_64libvpx-devel< 1.7.0-11.el8_10libvpx-devel-1.7.0-11.el8_10.x86_64.rpm
almalinux8aarch64libvpx-devel< 1.7.0-11.el8_10libvpx-devel-1.7.0-11.el8_10.aarch64.rpm
almalinux8x86_64libvpx< 1.7.0-11.el8_10libvpx-1.7.0-11.el8_10.x86_64.rpm
almalinux8aarch64libvpx< 1.7.0-11.el8_10libvpx-1.7.0-11.el8_10.aarch64.rpm
almalinux8ppc64lelibvpx< 1.7.0-11.el8_10libvpx-1.7.0-11.el8_10.ppc64le.rpm
almalinux8ppc64lelibvpx-devel< 1.7.0-11.el8_10libvpx-devel-1.7.0-11.el8_10.ppc64le.rpm
almalinux8s390xlibvpx-devel< 1.7.0-11.el8_10libvpx-devel-1.7.0-11.el8_10.s390x.rpm
almalinux8s390xlibvpx< 1.7.0-11.el8_10libvpx-1.7.0-11.el8_10.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	libvpx-devel	< 1.7.0-11.el8_10	libvpx-devel-1.7.0-11.el8_10.i686.rpm
almalinux	8	i686	libvpx	< 1.7.0-11.el8_10	libvpx-1.7.0-11.el8_10.i686.rpm
almalinux	8	x86_64	libvpx-devel	< 1.7.0-11.el8_10	libvpx-devel-1.7.0-11.el8_10.x86_64.rpm
almalinux	8	aarch64	libvpx-devel	< 1.7.0-11.el8_10	libvpx-devel-1.7.0-11.el8_10.aarch64.rpm
almalinux	8	x86_64	libvpx	< 1.7.0-11.el8_10	libvpx-1.7.0-11.el8_10.x86_64.rpm
almalinux	8	aarch64	libvpx	< 1.7.0-11.el8_10	libvpx-1.7.0-11.el8_10.aarch64.rpm
almalinux	8	ppc64le	libvpx	< 1.7.0-11.el8_10	libvpx-1.7.0-11.el8_10.ppc64le.rpm
almalinux	8	ppc64le	libvpx-devel	< 1.7.0-11.el8_10	libvpx-devel-1.7.0-11.el8_10.ppc64le.rpm
almalinux	8	s390x	libvpx-devel	< 1.7.0-11.el8_10	libvpx-devel-1.7.0-11.el8_10.s390x.rpm
almalinux	8	s390x	libvpx	< 1.7.0-11.el8_10	libvpx-1.7.0-11.el8_10.s390x.rpm