Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

Fedora 38: FEDORA-2023-c896cf87db Critical: Libvpx Heap Overflow

fedora
Calendar Grey October 1, 2023
Scroller Fedora
Apply Fedora patch for libvpx resolving a buffer overflow vulnerability in vp8 encoding. Update immediately for improved safety.
Security fix for CVE-2023-5217

Summary

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications

with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs

deployed on millions of computers and devices worldwide.

Update Information:

Security fix for CVE-2023-5217

Topics%20covered

Topics Covered

security advisory fedora critical software update heap overflow libvpx

Change Log

* Fri Sep 29 2023 Neal Gompa - 1.13.0-5 - Minor spec cleanups * Thu Sep 28 2023 Boudhayan Bhattacharya - 1.13.0-4 - Patch for CVE-2023-5217 * Thu Jul 20 2023 Fedora Release Engineering - 1.13.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2241260 - CVE-2023-5217 libvpx: Heap buffer overflow in vp8 encoding in libvpx [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241260

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-c896cf87db' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libvpx
Product: Fedora 38
Version: 1.13.0
Release: 5.fc38
URL: https://www.webmproject.org/code/
Summary: VP8/VP9 Video Codec SDK

Topics%20covered

Topics Covered

security advisory fedora critical software update heap overflow libvpx

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.