gpp_maybe Security update for libvpx

SUSE-SLE-Module-Basesystem-15-SP6-2024-2409

This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large parameters (bsc#1225879). - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally configured size (bsc#1225403). - CVE-2023-44488: Fixed heap buffer overflow in vp8 encoding (bsc#1216879).

• Release Date
  Jul 11 2024
• References
  Bugzilla: 1225879, 1216879, 1225403
  CVEs: CVE-2023-6349, CVE-2024-5197, CVE-2023-44488
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.6 s390x

• Packages
  libvpx
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock src

  libvpx-devel
  Development files for libvpx, a VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm

  libvpx7
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm

Basesystem Module 15.6 ppc64le

• Packages
  libvpx
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock src

  libvpx-devel
  Development files for libvpx, a VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm

  libvpx7
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm

Basesystem Module 15.6 aarch64

• Packages
  libvpx
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock src

  libvpx-devel
  Development files for libvpx, a VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm

  libvpx7
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm

Basesystem Module 15.6 x86_64

• Packages
  libvpx
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock src

  libvpx-devel
  Development files for libvpx, a VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm

  libvpx7
  VP8/VP9 codec library

  1.11.0-150400.3.7.1 lock rpm