< back to search

gpp_maybe Security update for libvpx

SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2408

This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large parameters (bsc#1225879). - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally configured size (bsc#1225403).

Release Date

Jul 11 2024
References

Bugzilla: 1225879, 1225403
CVEs: CVE-2023-6349, CVE-2024-5197
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Desktop Applications Module 15.6 ppc64le

Packages

libvpx
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock src

libvpx4
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock rpm

Desktop Applications Module 15.6 s390x

Packages

libvpx
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock src

libvpx4
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock rpm

Desktop Applications Module 15.6 aarch64

Packages

libvpx
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock src

libvpx4
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock rpm

Desktop Applications Module 15.6 x86_64

Packages

libvpx
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock src

libvpx4
VP8/VP9 codec library

1.6.1-150000.6.16.1 lock rpm