Photon OS 5.0: Libwebp PHSA-2023-5.0-0097

An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libwebp PHSA-2023-4.0-0478

An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0478. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libwebp PHSA-2023-5.0-0061

An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0061. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

libwebp:imageio_fuzzer: Use-of-uninitialized-value in my_error_exit

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=6206133828648960 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: imageiofuzzer Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libwebp:[email protected]: Use-of-uninitialized-value in my_error_exit

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=4980066560311296 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

OPENSUSE-SU-2024:11011-1 libwebp-devel-1.2.0-1.4 on GA media

These are all security issues fixed in the libwebp-devel-1.2.0-1.4 package on the GA media of openSUSE Tumbleweed...

PT-2024-41381

Name of the Vulnerable Software and Affected Versions libwebp-devel versions 1.2.0 through 1.4 Description The issue concerns security problems that have been fixed in the libwebp-devel package. Recommendations For versions 1.2.0 through 1.4, update the libwebp-devel package to a version outside ...

CLSA-2024-1717678054 libwebp: Fix of CVE-2023-4863

CVE-2023-4863: fix OOB write in BuildHuffmanTable...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2024-1689)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : libwebp (EulerOS-SA-2024-1689)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform a...

EulerOS Virtualization 3.0.6.6 : libwebp (EulerOS-SA-2024-1656)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform a...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2024-1656)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : libwebp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libwebp: use of uninitialized value in ReadSymbol CVE-2018-25014 - A heap-based buffer overflow was found...

RHEL 6 : libwebp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 - Rejected reason: This CVE ID has been rejecte...

libwebp bug fix and enhancement update

An update is available for libwebp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.3...

Fedora 40 : libwebp (2023-d5faede1d6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d5faede1d6 advisory. Automatic update for libwebp-1.3.1-3.fc40. Changelog Wed Sep 13 2023 Boudhayan Bhattacharya - 1.3.1-3 - Add patch for CVE-2023-4863 ref rhbz2238543 Tenable h...

ROS-20240404-15

A vulnerability in the libwebp library is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to write data outside of the buffer boundaries through a crafted HTML page. HTML page...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2024-1429)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2024-1401)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.0 : libwebp (EulerOS-SA-2024-1429)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform a...