-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3439-1 debian-...@lists.debian.org https://www.debian.org/lts/security/ Chris Lamb May 31, 2023 https://wiki.debian.org/LTS - -------------------------------------------------------------------------
Package : libwebp Version : 0.6.1-2+deb10u2 CVE ID : CVE-2023-1999 Debian Bug : 1035371 It was discovered that there was a potential arbitrary code execution vulnerability in libwebp, a library to support the WebP image compression format. For Debian 10 buster, this problem has been fixed in version 0.6.1-2+deb10u2. We recommend that you upgrade your libwebp packages. For the detailed security status of libwebp please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libwebp Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmR3USUACgkQHpU+J9Qx Hlgk5A//a3Qlw0G4vn1+oDWJTSlDIbDvLDo9kxgQ7QDUpU8ZZUlB4M15Tqd32WFh x045+uaZF58aQpSbhggAUp30Aluf7aX6TSyTy7BaJOrG47VfBEVr8Xt9Vn8KGJRf ra3TXfjHemDnyA/fMFIlYlt3mbp4CaWhiHvax0E/7uDIotrEmdjCRa8k0c9nECcP MR1GcI18G/o9Vyuv2mXFvB26iH6QZ5ar84YpVunEaUNdaPv/JGPFVPAew3eeOHLZ mUX3dfBG1X9DBZmgg5Fd5CIiWUfwWgh7LHN0aEVVwPj5BH7mn7Aaj6oH3kA5HflG KS3XWNbRaG2KL8Cm8h29sL9WrRJfcZPg5tz5IWLjh4gedP2TdufnqK0BmvWWUphI DbE5GjmgXgR89oq6hnzuDEkbL3rDt9Ax4bQXdf31I3KZIq2Amxu1dGAa621NUguX BhBx8TdzdgoofIDd3cqKe22iBbnBuVDERoMbOElqdPZOwzr7MgIf7/a/qc9oIYRC JXVd0gvM1oCSaSvTzunsnENpKGV7sRE8v448tJHYI7AuVv1LMVdBVJQmyk/yAXqV QLdSvuYknOhv2K/5Jvtogbkzc8F0BB+icDyrmPCVdyoh862f59YvN0MqgYD4XBSC 1cuDjdkejbF+u1gtkhGAjgs4/jnBqsBtnwMUhytKaj9HFKVYJBw= =MwwM -----END PGP SIGNATURE-----