Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Fedora 38: FEDORA-2023-c4fa8a204d Critical: libwebp Heap Overflow

fedora
Calendar Grey September 15, 2023
Dist Fedora Esm H88
Ubuntu release for libjpeg fixes critical buffer overflow via patch for CVE-2023-6532. Safeguard your device today.
Backport fix for CVE-2023-4863.

Summary

WebP is an image format that does lossy compression of digital

photographic images. WebP consists of a codec based on VP8, and a

container based on RIFF. Webmasters, web developers and browser

developers can use WebP to compress, archive and distribute digital

images more efficiently.

Update Information:

Backport fix for CVE-2023-4863.

Topics%20covered

Topics Covered

security advisory Fedora update information heap overflow libwebp

Change Log

* Wed Sep 13 2023 Boudhayan Bhattacharya - 1.3.1-3 - Add patch for CVE-2023-4863 ref rhbz#2238543 * Thu Jul 20 2023 Fedora Release Engineering - 1.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2238543 - CVE-2023-4863: Heap buffer overflow in WebP https://bugzilla.redhat.com/show_bug.cgi?id=2238543

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-c4fa8a204d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libwebp
Product: Fedora 38
Version: 1.3.1
Release: 3.fc38
URL: https://www.webmproject.org/
Summary: Library and tools for the WebP graphics format

Topics%20covered

Topics Covered

security advisory Fedora update information heap overflow libwebp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here