Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-4629

Опубликовано: 10 нояб. 2020
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2020-4629: libvpx security update (MODERATE)

[1.7.0-8]

  • Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  • Enable webm-io explicitly

[1.7.0-7]

  • Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  • Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  • Remove php-cli BR

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

libvpx

1.7.0-8.el8

libvpx-devel

1.7.0-8.el8

Oracle Linux x86_64

libvpx

1.7.0-8.el8

libvpx-devel

1.7.0-8.el8

Связанные CVE

CVE-2019-2126
CVE-2019-9371
CVE-2019-9232
CVE-2019-9433

Ссылки на источники

Связанные уязвимости

rocky логотип

RLSA-2020:4629

rocky
больше 4 лет назад

Moderate: libvpx security update

suse-cvrf логотип

openSUSE-SU-2020:0105-1

suse-cvrf
больше 5 лет назад

Security update for libvpx

suse-cvrf логотип

SUSE-SU-2020:0143-1

suse-cvrf
больше 5 лет назад

Security update for libvpx

ubuntu логотип

CVE-2019-2126

CVSS3: 8.8
ubuntu
почти 6 лет назад

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.

redhat логотип

CVE-2019-2126

CVSS3: 8.8
redhat
больше 5 лет назад

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.