Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Fedora 42: FEDORA-2025-f5bf0fb721 critical: libvpx double free

fedora
Calendar Grey June 6, 2025
Dist Fedora Esm H88
Essential update for memory management flaw in Fedora 42's libvpx boosts software integrity. Immediate upgrade advised.
Add patch for double free

Summary

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications

with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs

deployed on millions of computers and devices worldwide.

Update Information:

Add patch for double free

Topics%20covered

Topics Covered

security advisory update Fedora threat double free libvpx

Change Log

* Tue Jun 3 2025 Wim Taymans - 1.15.0-3 - Add patch for double free Resolves: rhbz#2368931

References


[ 1 ] Bug #2368931 - CVE-2025-5262 libvpx: Double-free in libvpx encoder [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2368931

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f5bf0fb721' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libvpx
Product: Fedora 42
Version: 1.15.0
Release: 3.fc42
URL: http://www.webmproject.org/code/
Summary: VP8/VP9 Video Codec SDK

Topics%20covered

Topics Covered

security advisory update Fedora threat double free libvpx

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here