[ubuntu/mantic-proposed] libwebp 1.2.4-0.1ubuntu1 (Accepted)

[Marc Deslauriers]

libwebp (1.2.4-0.1ubuntu1) mantic; urgency=medium

  * SECURITY UPDATE: crash and possible code execution via double free
    - debian/patches/CVE-2023-1999.patch: clear result->bw on error in
      src/enc/alpha_enc.c.
    - CVE-2023-1999

Date: Mon, 15 May 2023 12:50:25 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libwebp/1.2.4-0.1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 15 May 2023 12:50:25 -0400
Source: libwebp
Built-For-Profiles: noudeb
Architecture: source
Version: 1.2.4-0.1ubuntu1
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 libwebp (1.2.4-0.1ubuntu1) mantic; urgency=medium
 .
   * SECURITY UPDATE: crash and possible code execution via double free
     - debian/patches/CVE-2023-1999.patch: clear result->bw on error in
       src/enc/alpha_enc.c.
     - CVE-2023-1999
Checksums-Sha1:
 9aba2d3d70477326057f63b474413088cc81db8e 2483 libwebp_1.2.4-0.1ubuntu1.dsc
 ad4a4b373d94cfa374fc952d3555f46544a553a2 8228 libwebp_1.2.4-0.1ubuntu1.debian.tar.xz
 c6d3d0fafb30f02507153096045b72e39c79fdf6 9075 libwebp_1.2.4-0.1ubuntu1_source.buildinfo
Checksums-Sha256:
 1e6f20c00a925002158d5b6144d56779ef5b27ee499d18abbb13bf12f8206d4d 2483 libwebp_1.2.4-0.1ubuntu1.dsc
 6d9c389629d476ff469accf0dfa16460cb1766672cf8f7d26a4793a659e02748 8228 libwebp_1.2.4-0.1ubuntu1.debian.tar.xz
 03ac98b0f8c4dd49a0ae574d7ea76892dc1753ff52d27cdbd841874815819dbf 9075 libwebp_1.2.4-0.1ubuntu1_source.buildinfo
Files:
 6a21556f535cf12cda8f2901f7c1f7e8 2483 libs optional libwebp_1.2.4-0.1ubuntu1.dsc
 d0e37b3b03604fb47747d360dca8cf6f 8228 libs optional libwebp_1.2.4-0.1ubuntu1.debian.tar.xz
 e17653a32b0787795cd42575c0ca9cff 9075 libs optional libwebp_1.2.4-0.1ubuntu1_source.buildinfo
Original-Maintainer: Jeff Breidenbach <jab at debian.org>