security advisoryupdatedebian
Double free on init failure has been fixed in libvpx, a library for decoding and encoding VP8 and VP9 videos. For Debian 11 bullseye, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4201-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk May 31, 2025 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : libvpx Version : 1.9.0-1+deb11u4 CVE ID : CVE-2025-5283 Debian Bug : 1106689 Double free on init failure has been fixed in libvpx, a library for decoding and encoding VP8 and VP9 videos. For Debian 11 bullseye, this problem has been fixed in version 1.9.0-1+deb11u4. We recommend that you upgrade your libvpx packages. For the detailed security status of libvpx please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libvpx Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . GStreamer in Ubuntu 21.04 faced a significant security patch addressing potential buffer overflow vulnerabilities during playback.. Debian Security, libvpx Update, Double Free Error, VP8 VP9 Security. . Severity: Critical. LinuxSecurity.com Team
May 31, 2025
•Critical
Debian LTS