[CLSA-2026:1792504436] libvpx: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-20 20:53:21 UTC
Description:
- CVE-2023-44488: crash in vp9_change_config() on smaller width, bigger size - CVE-2023-6349: heap overflow in vp9_change_config() on a larger frame size
CVEs fixed:
Updated packages:
  • libvpx-1.9.0-10.el9_8.tuxcare.els1.aarch64.rpm
    sha:6070ff272b888fc5531edf1d59424d97618ea636c2e6ff21e3e139500ff473fa
  • libvpx-1.9.0-10.el9_8.tuxcare.els1.i686.rpm
    sha:4f1218e4be0dd018e59cfae0838cf9f467a99a066541acd49c6cf273f93fa44d
  • libvpx-1.9.0-10.el9_8.tuxcare.els1.x86_64.rpm
    sha:d6d9a5f27ce52b5da6af5a87c6572a1989c1d2ad0880184d2baa61865b02a283
  • libvpx-devel-1.9.0-10.el9_8.tuxcare.els1.aarch64.rpm
    sha:9b379567a0cfa5b6454d0cc5e945ed214d8f919c5ef217b16d52a69fa6feee8e
  • libvpx-devel-1.9.0-10.el9_8.tuxcare.els1.i686.rpm
    sha:fc75d97059d657b2014b777f060ad42bf83fd54d81442a6b462a8c8bfca3b6da
  • libvpx-devel-1.9.0-10.el9_8.tuxcare.els1.x86_64.rpm
    sha:9d41bf4dce7a27ebede81b83e840875580c651923bc10420cfbd730f99c1adbd
  • libvpx-utils-1.9.0-10.el9_8.tuxcare.els1.aarch64.rpm
    sha:c4cbd6c0b41075f5e8d2809f31d1818a90c3562d3ed44567911dcd015b41dd9a
  • libvpx-utils-1.9.0-10.el9_8.tuxcare.els1.i686.rpm
    sha:4b8726482838d3dc00027d4c47c5b6bf7433850926707a9046bac08fd57db3e4
  • libvpx-utils-1.9.0-10.el9_8.tuxcare.els1.x86_64.rpm
    sha:4cf1297d7e54fc5c1c61f68b198277b8192f1c82ffa46dfa71118f3dcb7c4cf3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.