USN-6078-2: libwebp vulnerability
USN-6078-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Irvan Kurniawan discovered that libwebp incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause libwebp to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this libwebp vulnerability?
The vulnerability ID for this libwebp vulnerability is USN-6078-2.
What software is affected by this vulnerability?
The libwebp5, libwebpdemux1, and libwebpmux1 packages on Ubuntu 16.04 are affected by this vulnerability.
What is the severity of the libwebp vulnerability?
The severity of the libwebp vulnerability is not provided in the information.
How can I fix the libwebp vulnerability?
To fix the libwebp vulnerability, you should update the libwebp5, libwebpdemux1, and libwebpmux1 packages to version 0.4.4-1ubuntu0.1~esm2 or later.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Ubuntu security website: [USN-6078-1](https://ubuntu.com/security/notices/USN-6078-1) and [USN-6078-2](https://ubuntu.com/security/notices/USN-6078-2).