Skip to content
OpenAdvisories
Medium ELSA-2024-9827 1 CVE

Moderate: libvpx security update (Oracle Linux 9)

Published Nov 18, 2024 · Updated Nov 18, 2024

Ecosystem: Oracle Linux

Summary

[1.9.0-8]
- Add patch to fix integer overflows.
- Disable LTO to fix build
- Resolves: RHEL-58144

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 libvpx 0:1.9.0-8.el9_5
Oracle Linux · 9 libvpx-devel 0:1.9.0-8.el9_5

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-5197

    Integer overflow in libvpx

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…

    Chromium libvpx libvpx libvpx Debian Ubuntu Azure Linux Alpine