ALT-PU-2023-7312: package libwebp update to version 1.3.2-alt1
Описание
This update upgrades libwebp to version 1.3.2-alt1.
Устраненные уязвимости4
Ссылки8
GHSA-94vc-p8w7-5p49
https://github.com/advisories/GHSA-94vc-p8w7-5p49GHSA-cxjf-x6jp-p7mc
https://github.com/advisories/GHSA-cxjf-x6jp-p7mcGHSA-j7hp-h8jx-5ppr
https://github.com/advisories/GHSA-j7hp-h8jx-5pprGHSA-jh2j-j4j9-crg3
https://github.com/advisories/GHSA-jh2j-j4j9-crg3GHSA-qr4w-53vh-m672
https://github.com/advisories/GHSA-qr4w-53vh-m672GHSA-w2pj-9cgh-mq2c
https://github.com/advisories/GHSA-w2pj-9cgh-mq2cGHSA-wqcr-xm43-hpqr
https://github.com/advisories/GHSA-wqcr-xm43-hpqrСвязанные уязвимости
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
There exists a use after free/double free in libwebp. An attacker can ...