Package: libwebp / 0.6.1-2.1+deb11u2

Metadata

Package Version Patches format
libwebp 0.6.1-2.1+deb11u2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
soname_override | (download)

src/Makefile.am | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 <short summary of the patch>
 Upstream bumped soname, but didn't break ABI. Bump them back down
 so we can avoid a package transition.
 .
 libwebp (0.6.0-1) unstable; urgency=medium
 .
   * New upstream release
big endian | (download)

imageio/webpdec.c | 8 8 + 0 - 0 !
src/dsp/alpha_processing.c | 20 20 + 0 - 0 !
src/dsp/alpha_processing_mips_dsp_r2.c | 46 46 + 0 - 0 !
src/dsp/dsp.h | 14 14 + 0 - 0 !
src/enc/picture_csp_enc.c | 37 24 + 13 - 0 !
src/utils/endian_inl_utils.h | 7 0 + 7 - 0 !
6 files changed, 112 insertions(+), 20 deletions(-)

 big endian fixes
 Webp 0.6.1 was totally busted on big endian machines. Backporting
 the fixes, which will be part of 0.6.2. Close coordination with
 upstream for this.


fix lintian warning | (download)

man/img2webp.1 | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 fix lintian warning on manpage
 Fix this lintian warning
   manpage-has-errors-from-man
   usr/share/man/man1/img2webp.1.gz 44: warning: macro `loop' not defined

security fixes.patch | (download)

src/dec/buffer_dec.c | 3 2 + 1 - 0 !
src/dec/idec_dec.c | 12 8 + 4 - 0 !
src/dec/vp8l_dec.c | 93 71 + 22 - 0 !
src/mux/muxi.h | 3 2 + 1 - 0 !
src/mux/muxread.c | 25 15 + 10 - 0 !
src/utils/quant_levels_dec_utils.c | 8 7 + 1 - 0 !
6 files changed, 105 insertions(+), 39 deletions(-)

---
CVE 2023 1999.patch | (download)

src/enc/alpha_enc.c | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 [patch] encodealphainternal: clear result->bw on error


CVE 2023 4863.patch | (download)

src/dec/vp8l_dec.c | 168 90 + 78 - 0 !
src/dec/vp8li_dec.h | 2 1 + 1 - 0 !
src/utils/huffman_utils.c | 111 92 + 19 - 0 !
src/utils/huffman_utils.h | 25 24 + 1 - 0 !
4 files changed, 207 insertions(+), 99 deletions(-)

 [patch] fix invalid incremental decoding check.