Advisories » MGASA-2023-0338

Updated libvpx packages fix a security vulnerability

Publication date: 04 Dec 2023
Modification date: 04 Dec 2023
Type: security
Affected Mageia releases : 9
CVE: CVE-2023-44488

Description

The updated packages fix a security vulnerability

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash
related to encoding. (CVE-2023-44488)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=32586
• https://www.openwall.com/lists/oss-security/2023/09/30/4
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44488

SRPMS

9/core

• libvpx-1.12.0-1.2.mga9