drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zahlenüberlauf in libwebp
Name: |
Zahlenüberlauf in libwebp |
|
ID: |
FEDORA-2013-1490 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 18 |
|
Datum: |
Mo, 4. Februar 2013, 07:44 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5127 |
|
Applikationen: |
libwebp |
|
Originalnachricht |
Name : libwebp Product : Fedora 18 Version : 0.2.1 Release : 1.fc18 URL : http://webmproject.org/ Summary : Library and tools for the WebP graphics format Description : WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently.
------------------------------------------------------------------------------- - Update Information:
Security libwebp release, where an integer overflow allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image. ------------------------------------------------------------------------------- - ChangeLog:
* Thu Dec 27 2012 Rahul Sundaram <sundaram@fedoraproject.org> - 0.2.1-1 - new upstream release 0.2.1 * Fri Dec 21 2012 Adam Tkac <atkac redhat com> - 0.1.3-3 - rebuild against new libjpeg ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #875071 - CVE-2012-5127 libwebp: Integer overflow when processing crafted WebP image https://bugzilla.redhat.com/show_bug.cgi?id=875071 ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update libwebp' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|
|
|
|