UbuntuUpdates.org

Package "webp"

Name: webp

Description:

Lossy compression of digital photographic images
Latest version: 1.2.2-2ubuntu0.22.04.2
Release: jammy (22.04)
Level: security
Repository: universe
Head package: libwebp
Homepage: https://developers.google.com/speed/webp/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "webp"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "webp" in Jammy

Repository Area Version
base universe 1.2.2-2
updates universe 1.2.2-2ubuntu0.22.04.2

Changelog

Version: 1.2.2-2ubuntu0.22.04.2 2023-09-16 07:07:30 UTC

  libwebp (1.2.2-2ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow in BuildHuffmanTable
    - debian/patches/CVE-2023-4863.patch: fix OOB write in
      BuildHuffmanTable in src/dec/vp8l_dec.c, src/dec/vp8li_dec.h,
      src/utils/huffman_utils.c, src/utils/huffman_utils.h.
    - CVE-2023-4863

 -- Marc Deslauriers <email address hidden> Wed, 13 Sep 2023 13:57:14 -0400
Source diff to previous version
CVE-2023-4863 Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 ...

Version: 1.2.2-2ubuntu0.22.04.1 2023-05-16 17:11:46 UTC

  libwebp (1.2.2-2ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: crash and possible code execution via double free
    - debian/patches/CVE-2023-1999.patch: clear result->bw on error in
      src/enc/alpha_enc.c.
    - CVE-2023-1999

 -- Marc Deslauriers <email address hidden> Mon, 15 May 2023 12:55:45 -0400


About   -   Send Feedback to @ubuntu_updates