ALAS2023-2023-358


Amazon Linux 2023 Security Advisory: ALAS2023-2023-358
Advisory Released Date: 2023-10-03
Advisory Updated Date: 2025-09-09
Severity: Low

Issue Overview:
No CVE associated with this advisory

Affected Packages:

libwebp


Issue Correction:
Run dnf update libwebp --releasever 2023.2.20231002 or dnf update --advisory ALAS2023-2023-358 --releasever 2023.2.20231002 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:
aarch64:
    libwebp-debuginfo-1.2.4-1.amzn2023.0.5.aarch64
    libwebp-java-debuginfo-1.2.4-1.amzn2023.0.5.aarch64
    libwebp-devel-1.2.4-1.amzn2023.0.5.aarch64
    libwebp-java-1.2.4-1.amzn2023.0.5.aarch64
    libwebp-tools-1.2.4-1.amzn2023.0.5.aarch64
    libwebp-debugsource-1.2.4-1.amzn2023.0.5.aarch64
    libwebp-1.2.4-1.amzn2023.0.5.aarch64
    libwebp-tools-debuginfo-1.2.4-1.amzn2023.0.5.aarch64

src:
    libwebp-1.2.4-1.amzn2023.0.5.src

x86_64:
    libwebp-debuginfo-1.2.4-1.amzn2023.0.5.x86_64
    libwebp-java-debuginfo-1.2.4-1.amzn2023.0.5.x86_64
    libwebp-tools-debuginfo-1.2.4-1.amzn2023.0.5.x86_64
    libwebp-1.2.4-1.amzn2023.0.5.x86_64
    libwebp-devel-1.2.4-1.amzn2023.0.5.x86_64
    libwebp-java-1.2.4-1.amzn2023.0.5.x86_64
    libwebp-tools-1.2.4-1.amzn2023.0.5.x86_64
    libwebp-debugsource-1.2.4-1.amzn2023.0.5.x86_64

Changelog:

2025-09-09: CVE-2023-4863 was removed from this advisory.

2025-09-09: The severity of this advisory has been changed from important to low.