Multiple vulnerabilities have been discovered in WebP, the worst of which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libwebp | * | < 1.3.1_p20230908 | >= 1.3.1_p20230908 |
WebP is an image format employing both lossy and lossless compression.
Multiple vulnerabilities have been discovered in WebP. Please review the CVE identifiers referenced below for details.
Please review the CVE identifiers referenced below for details.
There is no known workaround at this time.
All WebP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libwebp-1.3.1_p20230908"
Multiple vulnerabilities have been discovered in WebP, the worst of which could allow a remote attacker to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libwebp | * | < 0.5.2 | >= 0.5.2 |
WebP is an image format employing both lossy and lossless compression.
Multiple vulnerabilities have been discovered in WebP’s gif2webp tool. Please review the CVE identifier and bug reference for details.
A remote attacker, by enticing a user to process a specially crafted file using WebP’s gif2webp tool, could possibly cause a Denial of Service condition or other unspecified impacts.
There is no known workaround at this time.
All WebP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libwebp-0.5.2"
An integer overflow vulnerability in WebP could lead to arbitrary code execution or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libwebp | * | < 0.2.1 | >= 0.2.1 |
WebP is a lossy image compression format.
An integer overflow flaw has been found in WebP.
A remote attacker could entice a user to open a specially crafted image in an application linked against WebP, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All WebP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libwebp-0.2.1"