DSA-5497: -1 libwebp -- security update
Published Sep 13, 2023
·Updated
A buffer overflow in parsing WebP images may result in the execution of arbitrary code.
Affected Software
3 affected componentsFixes available
debian/libwebp
debian/libwebp
debian/libwebp
1.2.4-0.2+deb12u1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libwebpto a version that resolves this vulnerability.Fixed in 1.2.4-0.2+deb12u1 - Upgrade
Upgrade
libwebpto a version that resolves this vulnerability.Patch DSA-5497-1
Event History
Sep 13, 2023
Advisory Published
12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this security update?
The vulnerability ID for this security update is DSA-5497.
2
What is the severity of DSA-5497?
The severity of DSA-5497 is not mentioned in the provided information.
3
What software is affected by DSA-5497?
The software affected by DSA-5497 is libwebp on Debian systems.
4
What is the description of DSA-5497?
DSA-5497 is a security update addressing a buffer overflow vulnerability in parsing WebP images, which may result in the execution of arbitrary code.
5
How can I fix DSA-5497?
To fix DSA-5497, it is recommended to update the libwebp package to the latest available version on Debian systems.