Skip to content
OpenAdvisories
High ALSA-2025:9118 1 CVE

Important: libvpx security update

Published Jun 16, 2025 · Updated Oct 29, 2026

Summary

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 9 libvpx 1.9.0-9.el9_6
AlmaLinux · 9 libvpx-devel 1.9.0-9.el9_6

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-5283
  • report
    https://bugzilla.redhat.com/2368749
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-9118.html