FEDORA-2020-65eac1b48b — security update for libvpx

stable

libvpx-1.8.2-1.fc31

FEDORA-2020-65eac1b48b created by pwalter 4 years ago for Fedora 31

Update to 1.8.2

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-65eac1b48b

This update has been submitted for testing by pwalter.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

spot edited this update.

4 years ago

decathorpe commented & provided feedback 4 years ago

karma

Seems to work fine, can decode vp8 and vp9 video streams.

cairo provided feedback 4 years ago

karma

This update can be pushed to stable now if the maintainer wishes

4 years ago

smithp commented & provided feedback 4 years ago

karma

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

libvpx-1.8.2-1.fc31

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

modified

4 years ago

BZ#1788966 CVE-2019-9232 libvpx: Out of bounds read in vp8_norm table

BZ#1788994 CVE-2019-9433 libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c

BZ#1789002 CVE-2019-9325 libvpx: Out-of-bounds read in read in decoder_peek_si_internal() in vp9/vp9_dx_iface.c

BZ#1789004 CVE-2019-9371 libvpx: Resource exhaustion after memory leak in mkvparser.cc

BZ#1789008 CVE-2019-2126 libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc

libvpx-1.8.2-1.fc31

Automated Test Results

ignored