{"id":"CLSA-2023-1697016696","summary":"Fix CVE(s): CVE-2023-4863, CVE-2023-4836","details":"\n   * SECURITY UPDATE: Heap buffer overflow\n     - debian/patches/CVE-2023-4863-pre.patch: prepare sources to be patched\n     - debian/patches/CVE-2023-4863-1.patch: first, BuildHuffmanTable() is\n       called to check if the data is valid. If it is and the table is not big\n       enough, more memory is allocated. This will make sure that valid (but\n       unoptimized because of unbalanced codes) streams are still decodable.\n     - debian/patches/CVE-2023-4863-2.patch: fix memory error\n     - debian/patches/CVE-2023-4863-3.patch: remove unused code\n     - debian/patches/CVE-2023-4863-4.patch: fix pointer offset int overflow\n     - CVE-2023-4836","modified":"2026-06-04T10:04:10.056918796Z","published":"2023-10-11T09:31:40Z","upstream":["CVE-2023-4836","CVE-2023-4863"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1697016696"}],"affected":[{"package":{"name":"libwebp-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwebp-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1697016696.json"}},{"package":{"name":"libwebp6","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwebp6?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1697016696.json"}},{"package":{"name":"libwebpdemux2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwebpdemux2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1697016696.json"}},{"package":{"name":"libwebpmux3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwebpmux3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1697016696.json"}},{"package":{"name":"webp","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/webp?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1697016696.json"}}],"schema_version":"1.7.5"}