Packages
- libwebp - Lossy compression of digital photographic images.
Details
It was discovered that libwebp incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a
specially crafted image file, a remote attacker could use this issue to
cause libwebp to crash, resulting in a denial of service, or possibly
execute arbitrary code.
It was discovered that libwebp incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a
specially crafted image file, a remote attacker could use this issue to
cause libwebp to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 23.04 lunar | libwebp7 – 1.2.4-0.1ubuntu0.23.04.2 | ||
| libwebpdemux2 – 1.2.4-0.1ubuntu0.23.04.2 | |||
| libwebpmux3 – 1.2.4-0.1ubuntu0.23.04.2 | |||
| 22.04 LTS jammy | libwebp7 – 1.2.2-2ubuntu0.22.04.2 | ||
| libwebpdemux2 – 1.2.2-2ubuntu0.22.04.2 | |||
| libwebpmux3 – 1.2.2-2ubuntu0.22.04.2 | |||
| 20.04 LTS focal | libwebp6 – 0.6.1-2ubuntu0.20.04.3 | ||
| libwebpdemux2 – 0.6.1-2ubuntu0.20.04.3 | |||
| libwebpmux3 – 0.6.1-2ubuntu0.20.04.3 | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.