Red Hat Security Advisory

RHSA-2021:2354

libwebp security update

Released 2021-06-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libwebp-1.0.0-3.el8_4, libwebp-devel-1.0.0-3.el8_4

TI-2020-18612 CVE-2020-36329 · GHSA-mprg-gw36-367p

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02319 Published 2021-05-21 Fixed CWE-416

TI-2020-18611 CVE-2020-36328 · GHSA-jxwm-333p-5cwx

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02662 Published 2021-05-21 Fixed CWE-787

TI-2018-15238 CVE-2018-25011 · GHSA-vqgc-g267-8p6w

MEDIUM 47

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02513 Published 2021-05-21 Fixed CWE-787