High ELSA-2025-9331 1 CVE

Important: libvpx security update (Oracle Linux 7)

Published Jul 8, 2025 · Updated Jul 8, 2025

Ecosystem: Oracle Linux

Summary

[1.3.0-8.0.1]
- Fixes CVE-2025-5283 vpx_codec_enc_init_multi fix double free on init fail [Orabug: 38103810]

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libvpx	0:1.3.0-8.0.1.el7
Oracle Linux · 7	libvpx-devel	0:1.3.0-8.0.1.el7
Oracle Linux · 7	libvpx-utils	0:1.3.0-8.0.1.el7

Vulnerabilities 1

Medium 5.4

CVE-2025-5283

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 27, 2025