[ALSA-2026:3967] Important: libvpx security update
Type:
security
Severity:
important
Release date:
2026-03-10
Description:
The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libvpx-devel-1.7.0-13.el8_10.aarch64.rpm 1ca92a7c85638bb898a6ff7936f10638ab6b1ccba6c32182b12d73fece8b4f50
aarch64 libvpx-1.7.0-13.el8_10.aarch64.rpm 5d8b084cf931557cab6c86a81b2ba57c334172c0964eb3a40fa7d643273a6ec0
i686 libvpx-devel-1.7.0-13.el8_10.i686.rpm d20227f85e48d144571a9a565495195463ed258314e37e545e242a42f094ee1e
i686 libvpx-1.7.0-13.el8_10.i686.rpm dc5429ca42873134f02f87fd1971a56fd5a07ea94700ff02123fb414aab2a3f9
ppc64le libvpx-devel-1.7.0-13.el8_10.ppc64le.rpm 2737d5ad3cfd60abde66bfa05c3d03a6abd8dc7a042c9476dc03ef303f67b3ce
ppc64le libvpx-1.7.0-13.el8_10.ppc64le.rpm 6cbefc8cac278891395fa44f4e7b8a5725967fd223c90c06f9d885682f542458
s390x libvpx-1.7.0-13.el8_10.s390x.rpm e7b91c20ad390457ff79f8f2f92e6839047a96a1e99bbabbbe79846fa16606b2
s390x libvpx-devel-1.7.0-13.el8_10.s390x.rpm ef9beb27b18e317090c4527b90a603a083067ac94209a5a36a44b3e4c4b588dd
x86_64 libvpx-devel-1.7.0-13.el8_10.x86_64.rpm b27ddd1b05027c6dadc2255d43c521563113819d3239ed0bcb361341057d798d
x86_64 libvpx-1.7.0-13.el8_10.x86_64.rpm fc9e2ed4bf747e29c9e74f870399eef668dfbe4a6d890dffc539ec5e6f9bf679
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.