OPENSUSE-SU-2024:13595-1 python310-imagecodecs-2024.1.1-1.1 on GA media

These are all security issues fixed in the python310-imagecodecs-2024.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Bundled libwebp in imagecodecs vulnerable

imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 previously CVE-2023-4863. imagecodecs v2023.9.18 upgrades the bundled libwebp binary to v1.3.2...

GHSA-94VC-P8W7-5P49 Bundled libwebp in imagecodecs vulnerable

imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 previously CVE-2023-4863. imagecodecs v2023.9.18 upgrades the bundled libwebp binary to v1.3.2...

aicscytoparam (>=0.1.1 <=0.1.2), aicsimageio (>=3.3.6 <=3.3.7) +45 more potentially affected by CVE-2023-4863 +1 more via imagecodecs (>=2019.12.31 <=2023.7.10)

imagecodecs PYPI version =2019.12.31, =0.1.1, =3.3.6, =1.10.0, =0.1.13, =1.2.9, =1.1.0, =1.1.15, =1.2.0, =2.0.0, =0.1.1, =0.4.0, =0.1.1, =2021.11.20, =2022.9.26 and more Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:GHSA-94VC-P8W7-5P49...

PYSEC-2023-174

imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 previously CVE-2023-4863. imagecodecs v2023.9.18 upgrades the bundled libwebp binary to v1.3.2...

aicscytoparam (>=0.1.1 <=0.1.2), aicsimageio (>=3.3.6 <=3.3.7) +45 more potentially affected by CVE-2023-4863 +1 more via imagecodecs (>=2019.12.31 <=2023.7.10)

imagecodecs PYPI version =2019.12.31, =0.1.1, =3.3.6, =1.10.0, =0.1.13, =1.2.9, =1.1.0, =1.1.15, =1.2.0, =2.0.0, =0.1.1, =0.4.0, =0.1.1, =2021.11.20, =2022.9.26 and more Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2023-174...

PYSEC-2023-174

imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 previously CVE-2023-4863. imagecodecs v2023.9.18 upgrades the bundled libwebp binary to v1.3.2...