Red Hat Security Advisory

RHSA-2021:2260

libwebp security update

Released 2021-06-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libwebp-0.3.0-10.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) libwebp-devel-0.3.0-10.el7_9, libwebp-java-0.3.0-10.el7_9, libwebp-tools-0.3.0-10.el7_9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libwebp-devel-0.3.0-10.el7_9, libwebp-java-0.3.0-10.el7_9, libwebp-tools-0.3.0-10.el7_9
Red Hat Enterprise Linux Server (v. 7) libwebp-0.3.0-10.el7_9, libwebp-0.3.0-10.el7_9.ppc
Red Hat Enterprise Linux Server Optional (v. 7) libwebp-devel-0.3.0-10.el7_9, libwebp-devel-0.3.0-10.el7_9.ppc, libwebp-java-0.3.0-10.el7_9 +1
Red Hat Enterprise Linux Workstation (v. 7) libwebp-0.3.0-10.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) libwebp-devel-0.3.0-10.el7_9, libwebp-java-0.3.0-10.el7_9, libwebp-tools-0.3.0-10.el7_9

TI-2020-18612 CVE-2020-36329 · GHSA-mprg-gw36-367p

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02319 Published 2021-05-21 Fixed CWE-416

TI-2020-18611 CVE-2020-36328 · GHSA-jxwm-333p-5cwx

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02662 Published 2021-05-21 Fixed CWE-787

TI-2018-15238 CVE-2018-25011 · GHSA-vqgc-g267-8p6w

MEDIUM 47

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02513 Published 2021-05-21 Fixed CWE-787