Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Fedora 37 - FEDORA-2023-3388038193 Moderate: libwebp Heap Overflow Fix

fedora
Calendar Grey September 16, 2023
Dist Fedora Esm H88
This patch resolves a critical memory leak in libjpeg for Fedora 37, strengthening protection protocols.
Backport fix for CVE-2023-4863.

Summary

WebP is an image format that does lossy compression of digital

photographic images. WebP consists of a codec based on VP8, and a

container based on RIFF. Webmasters, web developers and browser

developers can use WebP to compress, archive and distribute digital

images more efficiently.

Update Information:

Backport fix for CVE-2023-4863.

Topics%20covered

Topics Covered

security advisory Fedora moderate severity heap overflow libwebp

Change Log

* Wed Sep 13 2023 Boudhayan Bhattacharya - 1.3.1-3 - Add patch for CVE-2023-4863 ref rhbz#2238543 * Thu Jul 20 2023 Fedora Release Engineering - 1.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2238543 - CVE-2023-4863: Heap buffer overflow in WebP https://bugzilla.redhat.com/show_bug.cgi?id=2238543

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-3388038193' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: libwebp
Product: Fedora 37
Version: 1.3.1
Release: 3.fc37
URL: https://www.webmproject.org/
Summary: Library and tools for the WebP graphics format

Topics%20covered

Topics Covered

security advisory Fedora moderate severity heap overflow libwebp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here