libwebp-1.0.0-8.el8.1

エラータID: AXSA:2023-6428:05

Release date: 
Monday, September 25, 2023 - 01:54
Subject: 
libwebp-1.0.0-8.el8.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-4863
Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libwebp-1.0.0-8.el8.1.src.rpm
    MD5: 3d823c0c05c0e7fbb20af441a261dc17
    SHA-256: f9c3cb571ad88921875320dca364a3601971584f0ba7c699e0afc73e4a90e081
    Size: 3.87 MB

Asianux Server 8 for x86_64
  1. libwebp-1.0.0-8.el8.1.i686.rpm
    MD5: eec9303ad0ec2920ee2fcb249debe049
    SHA-256: 28745bec171155fb01e5d48120e81bac94e65eba8b3553e1803a4186424d0fb1
    Size: 292.41 kB
  2. libwebp-1.0.0-8.el8.1.x86_64.rpm
    MD5: 18ca36ee84c764cb1ac0a6cbcef13825
    SHA-256: 432e37682356ce5a19a69e6aee69a8a51a06401748305e070cf231d9a043b697
    Size: 272.55 kB
  3. libwebp-devel-1.0.0-8.el8.1.i686.rpm
    MD5: 720d53ded70d21438549737019b80662
    SHA-256: d0a18e06ec4d7f99d782cdac6e2ba7d7ee8cc1b5a3793cf948d1cb8a0c2f7943
    Size: 36.49 kB
  4. libwebp-devel-1.0.0-8.el8.1.x86_64.rpm
    MD5: 534f5592c3aa0abde164df10a780ffb2
    SHA-256: 3def26d57dd24fbaa601db2e2f7b168d755a34542fd0877241f37fa16f6b3d15
    Size: 36.50 kB