High ELSA-2021-2260 3 CVEs

Important: libwebp security update (Oracle Linux 7)

Published Jun 8, 2021 · Updated Jun 8, 2021

Ecosystem: Oracle Linux

Summary

[0.3.0-10]
- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 7	libwebp	0:0.3.0-10.el7_9
Oracle Linux · 7	libwebp-devel	0:0.3.0-10.el7_9
Oracle Linux · 7	libwebp-java	0:0.3.0-10.el7_9
Oracle Linux · 7	libwebp-tools	0:0.3.0-10.el7_9

Vulnerabilities 3

Unscored —

CVE-2018-25011

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2020-36328

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is pos…

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2020-36329

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early…

libwebp libwebp Debian Ubuntu

May 21, 2021