FEDORA-2020-6cd410d9e4 — security update for libvpx

stable

libvpx-1.8.2-1.fc30

FEDORA-2020-6cd410d9e4 created by spot 4 years ago for Fedora 30

Update to 1.8.2. Fixes several security vulnerabilities: CVE-2019-9232, CVE 2019-9433, CVE-2019-9325, CVE-2019-9371, CVE-2019-2126

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-6cd410d9e4

This update has been submitted for testing by spot.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update's test gating status has been changed to 'greenwave_failed'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

libvpx-1.8.2-1.fc30

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

BZ#1788966 CVE-2019-9232 libvpx: Out of bounds read in vp8_norm table

BZ#1788994 CVE-2019-9433 libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c

BZ#1789002 CVE-2019-9325 libvpx: Out-of-bounds read in read in decoder_peek_si_internal() in vp9/vp9_dx_iface.c

BZ#1789004 CVE-2019-9371 libvpx: Resource exhaustion after memory leak in mkvparser.cc

BZ#1789008 CVE-2019-2126 libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc

libvpx-1.8.2-1.fc30

Automated Test Results

ignored