OPENSUSE-SU-2024:11011-1 libwebp-devel-1.2.0-1.4 on GA media

These are all security issues fixed in the libwebp-devel-1.2.0-1.4 package on the GA media of openSUSE Tumbleweed...

PT-2024-41381

Name of the Vulnerable Software and Affected Versions libwebp-devel versions 1.2.0 through 1.4 Description The issue concerns security problems that have been fixed in the libwebp-devel package. Recommendations For versions 1.2.0 through 1.4, update the libwebp-devel package to a version outside ...

Amazon Linux 2023 : libwebp, libwebp-devel, libwebp-java (ALAS2023-2023-355)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-355 advisory. With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. The ReadHuffmanCodes function allocates the HuffmanCode buffer with a size that comes from an array of...

Amazon Linux 2023 : libwebp, libwebp-devel, libwebp-java (ALAS2023-2023-185)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-185 advisory. A double-free in libwebp could have led to memory corruption and a potentially exploitable crash. CVE-2023-1999 Tenable has extracted the preceding description block directly from the tested product...