Advisories ยป MGASA-2015-0249

Updated libvpx package fixes security vulnerability

Publication date: 01 Jul 2015
Type: security
Affected Mageia releases : 4 , 5
CVE: CVE-2015-1258

Description

libvpx before 1.4.0 allows remote attackers to trigger a negative value
for a size field, and consequently cause a denial of service or possibly
have unspecified other impact, via a crafted frame size in VP9 video data
(CVE-2015-1258)
                

References

SRPMS

5/core

4/core