[ALSA-2023:2078] Important: libwebp security update
Type:
security
Severity:
important
Release date:
2023-05-03
Description:
The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently. Security Fix(es): * Mozilla: libwebp: Double-free in libwebp (CVE-2023-1999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libwebp-1.2.0-6.el9_1.aarch64.rpm ac60aa1ce9131009acf6c137d00f78c9a323cfa4881093e1464c36fd22bce35d
aarch64 libwebp-devel-1.2.0-6.el9_1.aarch64.rpm f6a8492d7074870a63f23baf5bf299f1b34e4f4a4b8f1572791127e694c1037d
i686 libwebp-1.2.0-6.el9_1.i686.rpm 4192cb88df348f6963e7becc6b897e80c548fd7ed55a970ccfe0dfe0e07aeb95
i686 libwebp-devel-1.2.0-6.el9_1.i686.rpm f45f4e8ec54191ed1b58a0b5c64d74aa75edf7ea8e676f3cf5635f4ee5cbabb3
ppc64le libwebp-1.2.0-6.el9_1.ppc64le.rpm 2cf05f737395ca06292128afc7ac91fb6a965711eddcdee5437939a15b62c8da
ppc64le libwebp-devel-1.2.0-6.el9_1.ppc64le.rpm 44b2654868922eaa3924ab3cc85703467d322fdef60d2154260f92832fd618fe
s390x libwebp-1.2.0-6.el9_1.s390x.rpm bbd3325877c0b1aa5eeb874644cd460a33aed09c5532b656c37ff5d23540f384
s390x libwebp-devel-1.2.0-6.el9_1.s390x.rpm d1b813e0ed40aa7b7c705ca5663129290a91f56350664645e5b238eba4682725
x86_64 libwebp-devel-1.2.0-6.el9_1.x86_64.rpm 1ee01df7a0917cf82d83d7a4776a66335eef88d924221a002def737e4996b64e
x86_64 libwebp-1.2.0-6.el9_1.x86_64.rpm f44edbd1c7777252b7ac7840f606759b23016107a4c22a8a3bf63f66cfe18d39
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.