Red Hat Security AdvisoryRHSA-2023:2077
libwebp security update
Released 2023-05-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libwebp-0.3.0-11.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libwebp-devel-0.3.0-11.el7, libwebp-java-0.3.0-11.el7, libwebp-tools-0.3.0-11.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libwebp-devel-0.3.0-11.el7, libwebp-java-0.3.0-11.el7, libwebp-tools-0.3.0-11.el7
- Red Hat Enterprise Linux Server (v. 7) libwebp-0.3.0-11.el7, libwebp-0.3.0-11.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libwebp-devel-0.3.0-11.el7, libwebp-devel-0.3.0-11.el7.ppc, libwebp-java-0.3.0-11.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) libwebp-0.3.0-11.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libwebp-devel-0.3.0-11.el7, libwebp-java-0.3.0-11.el7, libwebp-tools-0.3.0-11.el7
Fixes 1 record
Priority LOW 35
There exists a use after free/double free in libwebp.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00952 · Published 2023-06-20 · Partial fix · 1.3.1, 1.3.0-8-ga486d800 CWE-416