Skip to content
OpenAdvisories
Low ALAS2-2018-1015 1 CVE

Low: libvpx security update (Amazon Linux 2)

Published May 10, 2018 · Updated May 11, 2018

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-13194: A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201. 1535183: CVE-2017-13194 libvpx: denial of service (DoS) in vpx/src/vpx_image.c file

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 libvpx 0:1.3.0-5.amzn2.0.2
Amazon Linux · 2 libvpx-debuginfo 0:1.3.0-5.amzn2.0.2
Amazon Linux · 2 libvpx-devel 0:1.3.0-5.amzn2.0.2
Amazon Linux · 2 libvpx-utils 0:1.3.0-5.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2017-13194.html