Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5283: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Duplicate: https://console.harmony.a2z.com/al-cve-eval/cve/TEMP-1106689-EC87F6
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libvpx | 0:1.11.0-1.amzn2023.0.4 |
| Amazon Linux · 2023 | libvpx-debuginfo | 0:1.11.0-1.amzn2023.0.4 |
| Amazon Linux · 2023 | libvpx-debugsource | 0:1.11.0-1.amzn2023.0.4 |
| Amazon Linux · 2023 | libvpx-devel | 0:1.11.0-1.amzn2023.0.4 |
| Amazon Linux · 2023 | libvpx-utils | 0:1.11.0-1.amzn2023.0.4 |
| Amazon Linux · 2023 | libvpx-utils-debuginfo | 0:1.11.0-1.amzn2023.0.4 |
Vulnerabilities 1
-
Medium 5.4
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-5283.html