ELSA-2023-5539

ELSA-2023-5539 - libvpx security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-10-11

Description

[1.9.0-7]
- Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
Resolves: rhbz#2241191
- crash related to VP9 encoding in libvpx (CVE-2023-44488)
Resolves: rhbz#2241806

Related CVEs

CVE-2023-44488

CVE-2023-5217

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	libvpx-1.9.0-7.el9_2.src.rpm	2c756523d8cf0293c7949b90a7b22d8c	-	ol9_aarch64_appstream
	libvpx-1.9.0-7.el9_2.src.rpm	2c756523d8cf0293c7949b90a7b22d8c	-	ol9_aarch64_codeready_builder
	libvpx-1.9.0-7.el9_2.aarch64.rpm	631a9726c70fd454b40b3d3619cc2202	-	ol9_aarch64_appstream
	libvpx-devel-1.9.0-7.el9_2.aarch64.rpm	f57fa6f2cc98bc19c806b28679caddca	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	libvpx-1.9.0-7.el9_2.src.rpm	2c756523d8cf0293c7949b90a7b22d8c	-	ol9_x86_64_appstream
	libvpx-1.9.0-7.el9_2.src.rpm	2c756523d8cf0293c7949b90a7b22d8c	-	ol9_x86_64_codeready_builder
	libvpx-1.9.0-7.el9_2.i686.rpm	3aa78b3dc4f0172f2379da44687fd7dc	-	ol9_x86_64_appstream
	libvpx-1.9.0-7.el9_2.x86_64.rpm	1160b6af299135444cea0083b86d20b8	-	ol9_x86_64_appstream
	libvpx-devel-1.9.0-7.el9_2.i686.rpm	de6574371caedbbe2bde56a58ca34330	-	ol9_x86_64_codeready_builder
	libvpx-devel-1.9.0-7.el9_2.x86_64.rpm	5467560c48380a9aded05b3694e5db07	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team