ELA-878-1 libwebp security update

double free

2023-06-26
Packagelibwebp
Version0.5.2-1+deb9u2 (stretch)
Related CVEs CVE-2023-1999


Double free which may result in denial of service was fixed in the libwebp image compression library.



For Debian 9 stretch, these problems have been fixed in version 0.5.2-1+deb9u2.

We recommend that you upgrade your libwebp packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.