ELSA-2020-4629 — Moderate: libvpx security update (Oracle Linux 8)

Summary

[1.7.0-8]
- Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
- Enable webm-io explicitly

[1.7.0-7]
- Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
- Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
- Remove php-cli BR

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	libvpx	0:1.7.0-8.el8
Oracle Linux · 8	libvpx-devel	0:1.7.0-8.el8

Vulnerabilities 4

Unscored —

CVE-2019-2126

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer…

qtwebengine-opensource-src aom libvpx godot Android Ubuntu

Aug 20, 2019
Unscored —

CVE-2019-9232

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …

libvpx libvpx libvpx Android Debian Ubuntu Alpine

Sep 27, 2019
Unscored —

CVE-2019-9371

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial o…

libvpx libvpx libvpx Android Debian Ubuntu Alpine

Sep 27, 2019
Unscored —

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…

libvpx libvpx libvpx Android Debian Ubuntu Alpine

Sep 27, 2019

Moderate: libvpx security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 4

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer…

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial o…

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…