[ubuntu/mantic-proposed] libwebp 1.2.4-0.2ubuntu1 (Accepted)

[Marc Deslauriers]

libwebp (1.2.4-0.2ubuntu1) mantic; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow in BuildHuffmanTable
    - debian/patches/CVE-2023-4863.patch: fix OOB write in
      BuildHuffmanTable in src/dec/vp8l_dec.c, src/dec/vp8li_dec.h,
      src/utils/huffman_utils.c, src/utils/huffman_utils.h.
    - CVE-2023-4863

Date: Wed, 13 Sep 2023 13:54:46 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libwebp/1.2.4-0.2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 13 Sep 2023 13:54:46 -0400
Source: libwebp
Built-For-Profiles: noudeb
Architecture: source
Version: 1.2.4-0.2ubuntu1
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 libwebp (1.2.4-0.2ubuntu1) mantic; urgency=medium
 .
   * SECURITY UPDATE: Heap buffer overflow in BuildHuffmanTable
     - debian/patches/CVE-2023-4863.patch: fix OOB write in
       BuildHuffmanTable in src/dec/vp8l_dec.c, src/dec/vp8li_dec.h,
       src/utils/huffman_utils.c, src/utils/huffman_utils.h.
     - CVE-2023-4863
Checksums-Sha1:
 6282b5fb5ef3f4e9a2e04843758b97af84f4fe12 2486 libwebp_1.2.4-0.2ubuntu1.dsc
 85e11dce5286c183624f73c72899c6dba7c0994b 12032 libwebp_1.2.4-0.2ubuntu1.debian.tar.xz
 480e920c60777fc820b707cf788221d4d76bac88 9225 libwebp_1.2.4-0.2ubuntu1_source.buildinfo
Checksums-Sha256:
 2d36a0e2a2571d9ebf77da4df7a1322486208529b485c7cb9164cb611e5974d8 2486 libwebp_1.2.4-0.2ubuntu1.dsc
 4e1faef026a13cbc9c62002519634ffdde72916478d38e510b82344e0964c163 12032 libwebp_1.2.4-0.2ubuntu1.debian.tar.xz
 55ff92680e5a91f433e3e12c4c441e54f1295eee7f12a1b9adb65115df6b4486 9225 libwebp_1.2.4-0.2ubuntu1_source.buildinfo
Files:
 e79510d0988257bc4991b8104a9ee668 2486 libs optional libwebp_1.2.4-0.2ubuntu1.dsc
 c5f8085c2b86750b86345f7b9086ab8a 12032 libs optional libwebp_1.2.4-0.2ubuntu1.debian.tar.xz
 b9bd81bf85a97600dffa1d0dbb83fb87 9225 libs optional libwebp_1.2.4-0.2ubuntu1_source.buildinfo
Original-Maintainer: Jeff Breidenbach <jab at debian.org>