Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Fedora 22: libvpx Security Update For CVE-2015-1258 Buffer Overflow

fedora
Calendar Grey September 24, 2015
Dist Fedora Esm H88
Enhance security with libvpx update addressing CVE-2015-1258 negative-size issue for Fedora 22.
libvpx-1.3.0-7.fc21 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.3.0-7.fc22 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.4.0-5.fc23 - set --size-lim...

Summary

libvpx provides the VP8 SDK, which allows you to integrate your applications

with the VP8 video codec, a high quality, royalty free, open source codec

deployed on millions of computers and devices worldwide.

Update Information:

libvpx-1.3.0-7.fc21 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.3.0-7.fc22 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.4.0-5.fc23 - set --size-limit=16384x16384 to avoid CVE-2015-1258

Change Log

References


[ 1 ] Bug #1223266 - CVE-2015-1258 chromium-browser: Negative-size parameter in Libvpx. https://bugzilla.redhat.com/show_bug.cgi?id=1223266

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libvpx' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libvpx
Product: Fedora 22
Version: 1.3.0
Release: 7.fc22
URL: Summary : VP8 Video Codec SDK

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here