libvpx-1.7.0-12.el8_10

エラータID: AXSA:2025-10032:01

Release date: 
Friday, June 20, 2025 - 10:51
Subject: 
libvpx-1.7.0-12.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-5283
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libvpx-1.7.0-12.el8_10.src.rpm
    MD5: 28823891e48345a850e59c1bfa4e4079
    SHA-256: 42776bf0ead3a86a99070806edc992ddbc9eaa6f553a18282917af272c7e0b42
    Size: 2.57 MB

Asianux Server 8 for x86_64
  1. libvpx-1.7.0-12.el8_10.i686.rpm
    MD5: 41c9a8239ca2e118e25fed2e48fcc2ca
    SHA-256: 3af1286b6f11ae1b12f4e3ce7df84a2e4a9f72e54dc2b63d9bed050204d855e1
    Size: 884.51 kB
  2. libvpx-1.7.0-12.el8_10.x86_64.rpm
    MD5: 3c7891d21945f4891bfd1959ed90a178
    SHA-256: 1dafcb14c402d41d80605a0648a67acd3d14ae33918bccdb70d5817cb6b62fb3
    Size: 853.63 kB
  3. libvpx-devel-1.7.0-12.el8_10.i686.rpm
    MD5: 382ccf6414d20271ebb0e64d2a7e090d
    SHA-256: 6a43e585b001997d1b0067545c4d496bb1d8cf92f5f276991f898406bcc0368f
    Size: 328.48 kB
  4. libvpx-devel-1.7.0-12.el8_10.x86_64.rpm
    MD5: 6fd391381682b696bbad56c7bbea1e00
    SHA-256: b1df5559b7a2bfbbed3e3ca60c335fbf1336139e750102e8ec428a651599f465
    Size: 328.43 kB