Security update for libvpx SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0181-1 Final 1 1 2018-01-23T12:37:37Z current 2018-01-23T12:37:37Z 2018-01-23T12:37:37Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libvpx This update for libvpx fixes one issues. This security issue was fixed: - CVE-2017-13194: Fixed incorrect memory allocation related to odd frame width (bsc#1075992). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP2-2018-127,SUSE-SLE-DESKTOP-12-SP3-2018-127,SUSE-SLE-RPI-12-SP2-2018-127,SUSE-SLE-SDK-12-SP2-2018-127,SUSE-SLE-SDK-12-SP3-2018-127,SUSE-SLE-SERVER-12-SP2-2018-127,SUSE-SLE-SERVER-12-SP3-2018-127,SUSE-SLE-WE-12-SP2-2018-127,SUSE-SLE-WE-12-SP3-2018-127 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180181-1/ Link for SUSE-SU-2018:0181-1 https://lists.suse.com/pipermail/sle-security-updates/2018-January/003623.html E-Mail link for SUSE-SU-2018:0181-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1075992 SUSE Bug 1075992 https://www.suse.com/security/cve/CVE-2017-13194/ SUSE CVE CVE-2017-13194 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 libvpx1-1.3.0-3.3.1 libvpx1-32bit-1.3.0-3.3.1 vpx-tools-1.3.0-3.3.1 libvpx-devel-1.3.0-3.3.1 libvpx1-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libvpx1-32bit-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 vpx-tools-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libvpx1-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvpx1-32bit-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 vpx-tools-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvpx1-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP2 libvpx1-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvpx1-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libvpx1-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libvpx1-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvpx-devel-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libvpx-devel-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libvpx1-32bit-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 vpx-tools-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libvpx1-32bit-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 vpx-tools-1.3.0-3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201. CVE-2017-13194 SUSE Linux Enterprise Desktop 12 SP2:libvpx1-1.3.0-3.3.1 SUSE Linux Enterprise Desktop 12 SP2:libvpx1-32bit-1.3.0-3.3.1 SUSE Linux Enterprise Desktop 12 SP2:vpx-tools-1.3.0-3.3.1 SUSE Linux Enterprise Desktop 12 SP3:libvpx1-1.3.0-3.3.1 SUSE Linux Enterprise Desktop 12 SP3:libvpx1-32bit-1.3.0-3.3.1 SUSE Linux Enterprise Desktop 12 SP3:vpx-tools-1.3.0-3.3.1 SUSE Linux Enterprise Server 12 SP2:libvpx1-1.3.0-3.3.1 SUSE Linux Enterprise Server 12 SP3:libvpx1-1.3.0-3.3.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvpx1-1.3.0-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvpx1-1.3.0-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvpx1-1.3.0-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libvpx-devel-1.3.0-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libvpx-devel-1.3.0-3.3.1 SUSE Linux Enterprise Workstation Extension 12 SP2:libvpx1-32bit-1.3.0-3.3.1 SUSE Linux Enterprise Workstation Extension 12 SP2:vpx-tools-1.3.0-3.3.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libvpx1-32bit-1.3.0-3.3.1 SUSE Linux Enterprise Workstation Extension 12 SP3:vpx-tools-1.3.0-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180181-1/ https://www.suse.com/security/cve/CVE-2017-13194.html CVE-2017-13194 https://bugzilla.suse.com/1075992 SUSE Bug 1075992