Medium ALAS2023-2023-413 1 CVE

Moderate: libvpx security update (Amazon Linux 2023)

Published Oct 30, 2023 · Updated Nov 3, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-44488: VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

Fixed packages 6

Release	Package	Fixed in
Amazon Linux · 2023	libvpx	0:1.11.0-1.amzn2023.0.3
Amazon Linux · 2023	libvpx-debuginfo	0:1.11.0-1.amzn2023.0.3
Amazon Linux · 2023	libvpx-debugsource	0:1.11.0-1.amzn2023.0.3
Amazon Linux · 2023	libvpx-devel	0:1.11.0-1.amzn2023.0.3
Amazon Linux · 2023	libvpx-utils	0:1.11.0-1.amzn2023.0.3
Amazon Linux · 2023	libvpx-utils-debuginfo	0:1.11.0-1.amzn2023.0.3

Vulnerabilities 1

Unscored —

CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

mozjs38 mozjs52 mozjs68 mozjs78 Debian Ubuntu Azure Linux

Sep 30, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-44488.html