Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9: MGASA-2023-0338 critical: libvpx encoding crash

mageia
Calendar Grey December 4, 2023
Dist Mageia Esm H88
MGASA-2023-0338 fixes a critical issue in libvpx, resolving an encoding crash vulnerability for Mageia 9.
The updated packages fix a security vulnerability VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding

Summary

The updated packages fix a security vulnerability
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. (CVE-2023-44488)

References

- https://bugs.mageia.org/show_bug.cgi?id=32586

- https://www.openwall.com/lists/oss-security/2023/09/30/4

- https://www.cve.org/CVERecord?id=CVE-2023-44488

Topics%20covered

Topics Covered

security advisory critical software update libvpx Mageia encoding crash

Resolution

SRPMS

- 9/core/libvpx-1.12.0-1.2.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 04 Dec 2023
URL: https://advisories.mageia.org/MGASA-2023-0338.html
Type: security
CVE: CVE-2023-44488

Topics%20covered

Topics Covered

security advisory critical software update libvpx Mageia encoding crash

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here