[ALSA-2025:9119] Important: libvpx security update
Type:
security
Severity:
important
Release date:
2025-07-02
Description:
The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Double-free in libvpx encoder (CVE-2025-5283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libvpx-1.7.0-12.el8_10.aarch64.rpm 285379755f64e033bf3d654c3fde0c2e0d018c5f0f2e2250808476bf939d3220
aarch64 libvpx-devel-1.7.0-12.el8_10.aarch64.rpm f6013684fbbbc2eb972b48b4f1cae6b267afd8a8f888d7aac0bd44a0e769f163
i686 libvpx-devel-1.7.0-12.el8_10.i686.rpm 815b4b59a49a3bda57b3737ffe239675f999dcc07a68c1af22a8999ef9aaf0ea
i686 libvpx-1.7.0-12.el8_10.i686.rpm f08277db71ec4984178357eddfca321e9f2f98d79c2de2944cbd9793759d158e
ppc64le libvpx-devel-1.7.0-12.el8_10.ppc64le.rpm 629fad471e5e056cb1a5dfb25aaf6e2a77cb025b8788923831fecd3c1dff709f
ppc64le libvpx-1.7.0-12.el8_10.ppc64le.rpm 7222d82bb3c3d1b6952fd25372b8087a3d88933b4d1482cf533d591c86993628
s390x libvpx-1.7.0-12.el8_10.s390x.rpm 261cb7e9274a2ac0e17481c5c0dda7955961b9c88fee614de204b623454d9256
s390x libvpx-devel-1.7.0-12.el8_10.s390x.rpm c6b1b5a99dec79d10bb900267889d296859b5ef8c1d010b4766477cb9085d533
x86_64 libvpx-1.7.0-12.el8_10.x86_64.rpm 36a84678b7c2b9d23941a75878d3f46f3ed67e50cdd2c58acc6bd57b3a9829b7
x86_64 libvpx-devel-1.7.0-12.el8_10.x86_64.rpm cb179dce69a52ec8dc4f09bfef6973571d04217aefb4d858d7745a339fc66500
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.