libvpx vulnerabilities
A security issue affects these releases of Ubuntu and its
derivatives:
* Ubuntu 14.04 ESM
Summary
Several security issues were fixed in libvpx.
Software Description
* libvpx - VP8 and VP9 video codec
Details
USN-4199-1 fixed several vulnerabilities in libvpx. This update
provides the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that libvpx did not properly handle certain
malformed WebM media files. If an application using libvpx opened
a specially crafted WebM file, a remote attacker could cause a
denial of service, or possibly execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the
following package versions:
Ubuntu 14.04 ESM
libvpx1 - 1.3.0-2ubuntu0.1~esm1
To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary
changes.
References
* USN-4199-1
* CVE-2017-13194
* CVE-2019-9232
* CVE-2019-9433
--- Mystic BBS v1.12 A45 (Linux/64)
* Origin: BZ&BZ BBS (21:4/110)