ALASFIREFOX-2023-016

Related Vulnerabilities: CVE-2023-44488  

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. (CVE-2023-44488)

ALASFIREFOX-2023-016


Amazon Linux 2 Security Advisory: ALASFIREFOX-2023-016
Advisory Release Date: 2023-10-12 17:29 Pacific
Advisory Updated Date: 2023-10-17 22:13 Pacific
Severity: Medium

Issue Overview:

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. (CVE-2023-44488)


Affected Packages:

firefox


Issue Correction:
Run yum update firefox to update your system.

New Packages:
aarch64:
    firefox-102.15.1-1.amzn2.0.2.aarch64
    firefox-debuginfo-102.15.1-1.amzn2.0.2.aarch64

src:
    firefox-102.15.1-1.amzn2.0.2.src

x86_64:
    firefox-102.15.1-1.amzn2.0.2.x86_64
    firefox-debuginfo-102.15.1-1.amzn2.0.2.x86_64