gpp_maybe Security update for libvpx

SUSE-SLE-Module-Desktop-Applications-15-2020-143

This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611). - CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612). - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613). - CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614). - CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615).

Release Date

Jan 20 2020
References

Bugzilla: 1160615, 1160614, 1160611, 1160612, 1160613
CVEs: CVE-2019-9371, CVE-2019-2126, CVE-2019-9232, CVE-2019-9325, CVE-2019-9433
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Desktop Applications Module 15 s390x

Packages

libvpx
VP8/VP9 codec library

1.6.1-6.3.1 lock src

libvpx-devel
Development files for libvpx, a VP8/VP9 codec library

1.6.1-6.3.1 lock rpm

Desktop Applications Module 15 x86_64

Packages

libvpx
VP8/VP9 codec library

1.6.1-6.3.1 lock src

libvpx-devel
Development files for libvpx, a VP8/VP9 codec library

1.6.1-6.3.1 lock rpm

Desktop Applications Module 15 aarch64

Packages

libvpx
VP8/VP9 codec library

1.6.1-6.3.1 lock src

libvpx-devel
Development files for libvpx, a VP8/VP9 codec library

1.6.1-6.3.1 lock rpm

Desktop Applications Module 15 ppc64le

Packages

libvpx
VP8/VP9 codec library

1.6.1-6.3.1 lock src

libvpx-devel
Development files for libvpx, a VP8/VP9 codec library

1.6.1-6.3.1 lock rpm