Back Linuxsecurity Debian libvpx Critical DoS Buffer Overflow CVE-2026-2447 DSA-6143
For the oldstable distribution (bookworm), these problems have been fixed in version 1.12.0-1+deb12u5. For the stable distribution (trixie), these problems have been fixed in version 1.15.0-2.1+deb13u1. We recommend that you upgrade your libvpx packages. For the detailed security status of libvpx please refer to its security tracker page at: Further information Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at:
For the oldstable distribution (bookworm), these problems have been fixed in version 1.12.0-1+deb12u5. For the stable distribution (trixie), these problems have been fixed in version 1.15.0-2.1+deb13u1. We recommend that you upgrade your libvpx packages. For the detailed security status of libvpx please refer to its security tracker page at: Further information Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at:
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
