{"id":"CLSA-2023-1696537325","summary":"Fix of 10 CVEs","details":"\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25009.patch: add additional check to avoid\n       read over the header\n     - CVE-2018-25009\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25010.patch: limit the filter size to not\n       exceed the image dimensions\n     - CVE-2018-25010\n   * SECURITY UPDATE: fail on multiple image chunks\n     - debian/patches/CVE-2018-25011.patch: only 1 image chunk allowed\n     - CVE-2018-25011\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25013_4.patch: wait for all threads to\n       be done in DecodeRemaining.\n     - CVE-2018-25013\n     - CVE-2018-25014\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2020-36328.patch: fix invalid check for buffer\n       size\n     - CVE-2020-36328\n   * SECURITY UPDATE: a use-after-free was found due to a thread being\n     killed too early\n     - debian/patches/CVE-2020-36329.patch: fix for thread race\n       heap-use-after-free\n     - CVE-2020-36329\n   * SECURITY UPDATE: an out-of-bounds read\n     - debian/patches/CVE-2020-36330.patch: fix riff size checks\n     - CVE-2020-36330\n   * SECURITY UPDATE: an out-of-bounds read\n     - debian/patches/CVE-2020-36331.patch: validate chunk_size\n     - CVE-2020-36331\n   * SECURITY UPDATE: a use after free/double free\n     - debian/patches/CVE-2023-1999.patch: clear result-\u003ebw on error\n     - CVE-2023-1999","modified":"2026-06-04T09:45:11.455580974Z","published":"2023-10-05T20:22:09Z","upstream":["CVE-2018-25009","CVE-2018-25010","CVE-2018-25011","CVE-2018-25013","CVE-2018-25014","CVE-2020-36328","CVE-2020-36329","CVE-2020-36330","CVE-2020-36331","CVE-2023-1999"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1696537325"}],"affected":[{"package":{"name":"libwebp-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libwebp-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1696537325.json"}},{"package":{"name":"libwebp5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libwebp5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1696537325.json"}},{"package":{"name":"libwebpdemux1","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libwebpdemux1?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1696537325.json"}},{"package":{"name":"libwebpmux1","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libwebpmux1?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1696537325.json"}},{"package":{"name":"webp","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/webp?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1696537325.json"}}],"schema_version":"1.7.5"}