USN-4199-1: libvpx vulnerabilities
25 November 2019
Several security issues were fixed in libvpx.
- libvpx - VP8 and VP9 video codec
It was discovered that libvpx did not properly handle certain malformed
WebM media files. If an application using libvpx opened a specially crafted
WebM file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.
- USN-4199-2: libvpx-dev, libvpx1, vpx-tools, libvpx, libvpx-doc