Skip to content
OpenAdvisories
High ELSA-2023-2076 1 CVE

Important: libwebp security update (Oracle Linux 8)

Published May 2, 2023 · Updated May 2, 2023

Ecosystem: Oracle Linux

Summary

[1.0.0-8]
- Added fix for mzbz#1819244

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 libwebp 0:1.0.0-8.el8_7
Oracle Linux · 8 libwebp-devel 0:1.0.0-8.el8_7

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-1999 Public exploit

    Use after free in libwebp

    There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encode…

    Chromium libwebp thunderbird mozjs38 Debian Ubuntu Azure Linux Alpine