Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5283: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Duplicate: https://console.harmony.a2z.com/al-cve-eval/cve/TEMP-1106689-EC87F6
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libvpx | 0:1.9.0-5.amzn2.0.2 |
| Amazon Linux · 2 | libvpx-debuginfo | 0:1.9.0-5.amzn2.0.2 |
| Amazon Linux · 2 | libvpx-devel | 0:1.9.0-5.amzn2.0.2 |
| Amazon Linux · 2 | libvpx-utils | 0:1.9.0-5.amzn2.0.2 |
Vulnerabilities 1
-
Medium 5.4
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-5283.html