OpenH264 Vulnerability / CVE-2025-27091

Ask Fedora
1

As the codec is distributed via cisco’s repo, but IIRC build in fedora’s infra; is the fixed version already in the pipeline? I cant find any bz entry …

https://security-tracker.debian.org/tracker/CVE-2025-27091

2

From

rpm -qi openh246

and a cisco description, yes fedora is vulnerable.