ALAS2-2018-1015


Amazon Linux 2 Security Advisory: ALAS-2018-1015
Advisory Release Date: 2018-05-11 00:01 Pacific
Severity: Low
References: CVE-2017-13194 

Issue Overview:

Denial of service (DoS) in vpx/src/vpx_image.c file
A vulnerability in the Android media framework (libvpx) related to odd frame width.(CVE-2017-13194 )


Affected Packages:

libvpx


Issue Correction:
Run yum update libvpx to update your system.

New Packages:
src:
    libvpx-1.3.0-5.amzn2.0.2.src

x86_64:
    libvpx-1.3.0-5.amzn2.0.2.x86_64
    libvpx-devel-1.3.0-5.amzn2.0.2.x86_64
    libvpx-utils-1.3.0-5.amzn2.0.2.x86_64
    libvpx-debuginfo-1.3.0-5.amzn2.0.2.x86_64