Summary
[1.0.0-5]
- Added fixes for rhbz#1956853, rhbz#1956856, rhbz#1956868, rhbz#1956917
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libwebp | 0:1.0.0-5.el8 |
| Oracle Linux · 8 | libwebp-devel | 0:1.0.0-5.el8 |
Vulnerabilities 8
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
-
Unscored —
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign.…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The …
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memo…