ELSA-2020-3876

ELSA-2020-3876 - libvpx security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-10-06

Description

[1.3.0-8]
- Fix for CVE-2020-0034
- Resolves: rhbz#1823909

[1.3.0-7]
- Fix for CVE-2019-9232 and CVE-2019-9433
- Resolves: rhbz#1796085, rhbz#1796099

[1.3.0-6]
- Fix for CVE-2017-0393
- Resolves: rhbz#1779498

[1.3.0-4]
- fix Illegal Instruction abort

[1.3.0-3]
- update library symbol list for 1.3.0 from Debian

[1.3.0-2]
- armv7hl specific target

[1.3.0-1]
- update to 1.3.0

[1.2.0-1]
- update to 1.2.0

[1.1.0-1]
- update to 1.1.0

[1.0.0-3]
- fix vpx.pc file to include -lm (bz825754)

[1.0.0-2]
- use included vpx.pc file (drop local libvpx.pc)
- apply upstream fix to vpx.pc file (bz 814177)

[1.0.0-1]
- update to 1.0.0

[0.9.7.1-3]
- use macro instead of hard-coded version

[0.9.7.1-2]
- fix build on generic targets

[0.9.7.1-1]
- libvpx 0.9.7-p1

[0.9.7-1]
- libvpx 0.9.7

[0.9.6-2]
- add 2 symbols to the shared library for generic targets

[0.9.6-1]
- update to 0.9.6

[0.9.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[0.9.5-2]
- apply patch from upstream git (Change I6266aba7), should resolve CVE-2010-4203

[0.9.5-1]
- update to 0.9.5

[0.9.1-3]
- only package html docs to avoid multilib conflict (bz 613185)

[0.9.1-2]
- build shared library the old way for generic arches

[0.9.1-1]
- update to 0.9.1

[0.9.0-7]
- update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93
- upstream fix for bz 599147
- proper shared library support

[0.9.0-6]
- add hackish fix for bz 599147
(upstream will hopefully fix properly in future release)

[0.9.0-5]
- fix noexecstack flag

[0.9.0-4]
- BuildRequires: yasm (were optimized again)

[0.9.0-3]
- add pkg-config file
- move headers into include/vpx/
- enable optimization

[0.9.0-2]
- fix permissions on binaries
- rename generic binaries to v8_*
- link shared library to -lm, -lpthread to resolve missing weak symbols

[0.9.0-1]
- Initial package for Fedora

Related CVEs

CVE-2017-0393

CVE-2020-0034

CVE-2019-9232

CVE-2019-9433

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_aarch64_beta
	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_aarch64_latest
	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_aarch64_optional_beta
	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_aarch64_optional_latest
	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_aarch64_u9_base
	libvpx-1.3.0-8.el7.aarch64.rpm	266ba0f754f353589d4a8a15ecf32a65ba7bb6b9e92f99b994dd4218972980c0	-	ol7_aarch64_beta
	libvpx-1.3.0-8.el7.aarch64.rpm	266ba0f754f353589d4a8a15ecf32a65ba7bb6b9e92f99b994dd4218972980c0	-	ol7_aarch64_latest
	libvpx-1.3.0-8.el7.aarch64.rpm	266ba0f754f353589d4a8a15ecf32a65ba7bb6b9e92f99b994dd4218972980c0	-	ol7_aarch64_u9_base
	libvpx-devel-1.3.0-8.el7.aarch64.rpm	63cc079800c3d649ed11e21e08d0fe3b04ccdd0cc99258b4148c9ee8572e0437	-	ol7_aarch64_optional_beta
	libvpx-devel-1.3.0-8.el7.aarch64.rpm	63cc079800c3d649ed11e21e08d0fe3b04ccdd0cc99258b4148c9ee8572e0437	-	ol7_aarch64_optional_latest
	libvpx-utils-1.3.0-8.el7.aarch64.rpm	ed6bbd4abf0dd55ff6310fbdf32cf1fc24b900aa64cb88dbe866d3a58c5a708d	-	ol7_aarch64_optional_beta
	libvpx-utils-1.3.0-8.el7.aarch64.rpm	ed6bbd4abf0dd55ff6310fbdf32cf1fc24b900aa64cb88dbe866d3a58c5a708d	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_x86_64_beta
	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_x86_64_latest
	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_x86_64_optional_latest
	libvpx-1.3.0-8.el7.src.rpm	716cbd58d710f3790c9046e3fbb7e97c6aa7978cd3980e60d52f6c87ed814c22	-	ol7_x86_64_u9_base
	libvpx-1.3.0-8.el7.i686.rpm	476fc06d8fa792c321ab06b3d264126ad70d79b4b0a133c7387d969bfd78e5e3	-	ol7_x86_64_beta
	libvpx-1.3.0-8.el7.i686.rpm	476fc06d8fa792c321ab06b3d264126ad70d79b4b0a133c7387d969bfd78e5e3	-	ol7_x86_64_latest
	libvpx-1.3.0-8.el7.i686.rpm	476fc06d8fa792c321ab06b3d264126ad70d79b4b0a133c7387d969bfd78e5e3	-	ol7_x86_64_u9_base
	libvpx-1.3.0-8.el7.x86_64.rpm	1926a2008e5f2513e2408bf1fa02a957e2ae8df03bb7d8ce576fb35c31d36131	-	ol7_x86_64_beta
	libvpx-1.3.0-8.el7.x86_64.rpm	1926a2008e5f2513e2408bf1fa02a957e2ae8df03bb7d8ce576fb35c31d36131	-	ol7_x86_64_latest
	libvpx-1.3.0-8.el7.x86_64.rpm	1926a2008e5f2513e2408bf1fa02a957e2ae8df03bb7d8ce576fb35c31d36131	-	ol7_x86_64_u9_base
	libvpx-devel-1.3.0-8.el7.i686.rpm	f6f255df81a7f9502181b5cd6686704770746098c3960e9f0a0d195b8b6db0ad	-	ol7_x86_64_optional_beta
	libvpx-devel-1.3.0-8.el7.i686.rpm	f6f255df81a7f9502181b5cd6686704770746098c3960e9f0a0d195b8b6db0ad	-	ol7_x86_64_optional_latest
	libvpx-devel-1.3.0-8.el7.x86_64.rpm	51d0d26963868a0a42819edb6977a1dc311285538869ecc695e425a145696cad	-	ol7_x86_64_optional_beta
	libvpx-devel-1.3.0-8.el7.x86_64.rpm	51d0d26963868a0a42819edb6977a1dc311285538869ecc695e425a145696cad	-	ol7_x86_64_optional_latest
	libvpx-utils-1.3.0-8.el7.x86_64.rpm	f0515b1e0c5b272bcd5c5acf1fe2119deab055650c9abd00170f337147740691	-	ol7_x86_64_optional_beta
	libvpx-utils-1.3.0-8.el7.x86_64.rpm	f0515b1e0c5b272bcd5c5acf1fe2119deab055650c9abd00170f337147740691	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team