advisories/16019.adv

type: security
subject: Updated libvpx package fixes security vulnerability
CVE:
 - CVE-2015-1258
src:
  4:
   core:
     - libvpx-1.3.0-1.1.mga4
  5:
   core:
     - libvpx-1.3.0-3.1.mga5
description: |
  libvpx before 1.4.0 allows remote attackers to trigger a negative value
  for a size field, and consequently cause a denial of service or possibly
  have unspecified other impact, via a crafted frame size in VP9 video data
  (CVE-2015-1258)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=16019
 - http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
ID: MGASA-2015-0249
1	type: security
2	subject: Updated libvpx package fixes security vulnerability
3	CVE:
4	- CVE-2015-1258
5	src:
6	4:
7	core:
8	- libvpx-1.3.0-1.1.mga4
9	5:
10	core:
11	- libvpx-1.3.0-3.1.mga5
12	description: \|
13	libvpx before 1.4.0 allows remote attackers to trigger a negative value
14	for a size field, and consequently cause a denial of service or possibly
15	have unspecified other impact, via a crafted frame size in VP9 video data
16	(CVE-2015-1258)
17	references:
18	- https://bugs.mageia.org/show_bug.cgi?id=16019
19	- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
20	ID: MGASA-2015-0249