Lucene search
RedHatRHSA-2023:5309HistorySep 20, 2023 - 6:41 a.m.
(RHSA-2023:5309) Important: libwebp security update
2023-09-2006:41:26
access.redhat.com
35
libwebp
webp format
security update
heap buffer overflow
riff container
image compression
0.68 Medium
EPSS
Percentile
97.9%
The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.
Security Fix(es):
- libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | i686 | libwebp-debugsource | < 1.0.0-8.el8_8.1 | libwebp-debugsource-1.0.0-8.el8_8.1.i686.rpm |
| RedHat | 8 | aarch64 | libwebp-java-debuginfo | < 1.0.0-8.el8_8.1 | libwebp-java-debuginfo-1.0.0-8.el8_8.1.aarch64.rpm |
| RedHat | 8 | s390x | libwebp-debugsource | < 1.0.0-8.el8_8.1 | libwebp-debugsource-1.0.0-8.el8_8.1.s390x.rpm |
| RedHat | 8 | aarch64 | libwebp-tools-debuginfo | < 1.0.0-8.el8_8.1 | libwebp-tools-debuginfo-1.0.0-8.el8_8.1.aarch64.rpm |
| RedHat | 8 | x86_64 | libwebp-tools-debuginfo | < 1.0.0-8.el8_8.1 | libwebp-tools-debuginfo-1.0.0-8.el8_8.1.x86_64.rpm |
| RedHat | 8 | s390x | libwebp-devel | < 1.0.0-8.el8_8.1 | libwebp-devel-1.0.0-8.el8_8.1.s390x.rpm |
| RedHat | 8 | x86_64 | libwebp-debugsource | < 1.0.0-8.el8_8.1 | libwebp-debugsource-1.0.0-8.el8_8.1.x86_64.rpm |
| RedHat | 8 | ppc64le | libwebp | < 1.0.0-8.el8_8.1 | libwebp-1.0.0-8.el8_8.1.ppc64le.rpm |
| RedHat | 8 | i686 | libwebp-debuginfo | < 1.0.0-8.el8_8.1 | libwebp-debuginfo-1.0.0-8.el8_8.1.i686.rpm |
| RedHat | 8 | aarch64 | libwebp-debugsource | < 1.0.0-8.el8_8.1 | libwebp-debugsource-1.0.0-8.el8_8.1.aarch64.rpm |
Related
nessus
nessus
RHEL 8 : thunderbird (RHSA-2023:5186)
2023-09-18 00:00:00
CentOS 7 : firefox (RHSA-2023:5197)
2023-12-22 00:00:00
RHEL 8 : libwebp (RHSA-2023:5309)
2023-09-20 00:00:00
redhat
redhat
(RHSA-2023:5197) Important: firefox security update
2023-09-18 12:54:43
(RHSA-2023:5188) Important: thunderbird security update
2023-09-18 12:53:08
(RHSA-2023:5189) Important: libwebp security update
2023-09-18 12:53:09
osv
osv
CVE-2023-4863
2023-09-12 15:15:24
Important: libwebp security update
2023-10-06 22:58:06
Bundled libwebp in imagecodecs vulnerable
2023-10-05 00:07:46
ubuntucve
ubuntucve
CVE-2023-5129
2023-09-25 00:00:00
kaspersky
kaspersky
KLA60726 DoS vulnerability in Mozilla Firefox ESR
2023-09-12 00:00:00
KLA60725 DoS vulnerability in Mozilla Thunderbird
2023-09-12 00:00:00
KLA60727 DoS vulnerability in Mozilla Firefox
2023-09-12 00:00:00
attackerkb
attackerkb
CVE-2023-5129
2023-09-25 00:00:00
CVE-2023-4863
2023-09-12 00:00:00
mozilla
mozilla
github
github
Bundled libwebp in Pillow vulnerable
2023-10-05 00:06:58
Bundled libwebp in imagecodecs vulnerable
2023-10-05 00:07:46
prion
prion
Open redirect
2023-09-25 21:15:00
Heap overflow
2023-09-12 15:15:00
rocky
rocky
thunderbird security update
2023-10-06 22:57:16
libwebp security update
2023-10-06 22:58:06
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2023-40) - Linux
2023-09-13 00:00:00
Fedora: Security Advisory for libwebp (FEDORA-2023-2a0668fe43)
2023-10-01 00:00:00
Fedora: Security Advisory for libwebp (FEDORA-2023-e692a72898)
2023-10-16 00:00:00
alpinelinux
alpinelinux
CVE-2023-5129
2023-09-25 21:15:16
CVE-2023-4863
2023-09-12 15:15:24
cnvd
cnvd
Google libwebp open source library remote code execution vulnerability
2023-09-27 00:00:00
redhatcve
redhatcve
CVE-2023-5129
2023-09-27 17:55:08
f5
f5
K000137054 : libwebp vulnerabilities CVE-2023-4863 and CVE-2023-5129
2023-09-29 00:00:00
cve
cve
CVE-2023-5129
2023-09-25 21:15:16
CVE-2023-4863
2023-09-12 15:15:24
talosblog
talosblog
The security pitfalls of social media sites offering ID-based authentication
2023-09-28 18:00:11
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0657
2023-09-28 00:00:00
debiancve
debiancve
CVE-2023-5129
2023-09-25 21:15:00
CVE-2023-4863
2023-09-12 15:15:24
fedora
fedora
[SECURITY] Fedora 38 Update: firefox-118.0.1-4.fc38
2023-10-06 01:31:45
[SECURITY] Fedora 37 Update: firefox-118.0.1-7.fc37
2023-10-10 01:33:42
[SECURITY] Fedora 39 Update: libwebp-1.3.1-3.fc39
2023-09-15 19:54:26
redos
redos
ROS-20240404-15
2024-04-04 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2023-09-19 00:00:00
libwebp security update
2023-09-19 00:00:00
libwebp security update
2023-09-20 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2023-09-14 02:32:34
freebsd
freebsd
graphics/webp heap buffer overflow
2023-09-12 00:00:00
paloalto
paloalto
Impact of libwebp Vulnerability CVE-2023-4863
2023-10-02 23:40:00
cvelist
cvelist
CVE-2023-4863
2023-09-12 14:24:59
mageia
mageia
Updated libwebp packages fix a security vulnerability
2023-10-03 13:53:29
cgr
cgr
CVE-2023-4863 vulnerabilities
2024-05-19 03:07:16
hp
hp
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Google Chrome
2023-09-21 05:22:51
hivepro
hivepro
Google Addresses Fourth Zero-Day Flaw Exploited by Attackers Wildly
2023-09-12 13:05:09
amazon
amazon
Important: qt5-qtimageformats
2023-11-09 19:19:00
debian
debian
[SECURITY] [DLA 3569-1] thunderbird security update
2023-09-17 09:42:58
[SECURITY] [DSA 5497-1] libwebp security update
2023-09-13 21:07:56
ibm
ibm
almalinux
almalinux
Important: thunderbird security update
2023-09-19 00:00:00
cloudfoundry
cloudfoundry
USN-6369-1: libwebp vulnerability | Cloud Foundry
2023-10-12 00:00:00