[USN-6403-3] libvpx vulnerabilities
Ubuntu Security Notice USN-6403-3
November 01, 2023
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)
Several security issues were fixed in libvpx.
- libvpx: VP8 and VP9 video codec
USN-6403-1 fixed several vulnerabilities in libvpx. This update provides
the corresponding update for Ubuntu 16.04 LTS.
Original advisory details:
It was discovered that libvpx did not properly handle certain malformed
media files. If an application using libvpx opened a specially crafted
file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code.
The problem can be corrected by updating your system to the following
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
In general, a standard system update will make all the necessary changes.
A libvpx security update has been released for Ubuntu Linux 16.04 LTS.