UbuntuUpdates.org

Package "webp"

Name: webp

Description:

Lossy compression of digital photographic images

Latest version: 1.2.4-0.1ubuntu0.23.04.2
Release: lunar (23.04)
Level: updates
Repository: universe
Head package: libwebp
Homepage: https://developers.google.com/speed/webp/

Links


Download "webp"


Other versions of "webp" in Lunar

Repository Area Version
base universe 1.2.4-0.1build1
security universe 1.2.4-0.1ubuntu0.23.04.2

Changelog

Version: 1.2.4-0.1ubuntu0.23.04.2 2023-09-14 16:06:56 UTC

  libwebp (1.2.4-0.1ubuntu0.23.04.2) lunar-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow in BuildHuffmanTable
    - debian/patches/CVE-2023-4863.patch: fix OOB write in
      BuildHuffmanTable in src/dec/vp8l_dec.c, src/dec/vp8li_dec.h,
      src/utils/huffman_utils.c, src/utils/huffman_utils.h.
    - CVE-2023-4863

 -- Marc Deslauriers <email address hidden> Wed, 13 Sep 2023 13:56:32 -0400

Source diff to previous version
CVE-2023-4863 Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 ...

Version: 1.2.4-0.1ubuntu0.23.04.1 2023-05-16 17:11:53 UTC

  libwebp (1.2.4-0.1ubuntu0.23.04.1) lunar-security; urgency=medium

  * SECURITY UPDATE: crash and possible code execution via double free
    - debian/patches/CVE-2023-1999.patch: clear result->bw on error in
      src/enc/alpha_enc.c.
    - CVE-2023-1999

 -- Marc Deslauriers <email address hidden> Mon, 15 May 2023 12:50:25 -0400




About   -   Send Feedback to @ubuntu_updates