Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 38 oneVPL-2023-b6aab4f954 Critical: Security Fix

fedora
Calendar Grey October 11, 2023
Dist Fedora Esm H88
Enhance oneVPL and oneVPL-intel-gpu within Fedora 38 to address several security vulnerabilities. No ABI modifications implemented.
Update oneVPL and oneVPL-intel-gpu to latest releases

Summary

The oneAPI Video Processing Library (oneVPL) provides a single video processing

API for encode, decode, and video processing that works across a wide range of

accelerators.

The base package is limited to the dispatcher and samples. To use oneVPL for

video processing you need to install at least one implementation. Current

implementations:

- oneVPL-cpu for use on CPU

- oneVPL-intel-gpu for use on Intel Xe graphics and newer

- intel-mediasdk for use on legacy Intel graphics

Update Information:

Update oneVPL and oneVPL-intel-gpu to latest releases. Fixes CVE-2023-22338 and CVE-2023-22840. No ABI changes.

Topics%20covered

Topics Covered

security advisory critical software update Fedora security fix oneVPL

Change Log

* Tue Oct 3 2023 Simone Caronni - 2023.3.1-1 - Update to 2023.3.1. * Thu Jul 20 2023 Fedora Release Engineering - 2023.1.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2171625 - oneVPL-intel-gpu: FTBFS in Fedora rawhide/f38 https://bugzilla.redhat.com/show_bug.cgi?id=2171625 [ 2 ] Bug #2185325 - oneVPL-2023.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2185325 [ 3 ] Bug #2231401 - CVE-2023-22840 oneVPL-intel-gpu: Multiple vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2231401 [ 4 ] Bug #2235293 - oneVPL-intel-gpu-23.3.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2235293

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-b6aab4f954' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: oneVPL
Product: Fedora 38
Version: 2023.3.1
Release: 1.fc38
URL: https://www.intel.com/content/www/us/en/developer/tools/overview.html
Summary: oneAPI Video Processing Library

Topics%20covered

Topics Covered

security advisory critical software update Fedora security fix oneVPL

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here