libwebp vulnerability

Question

Is Atlassian products, Jira and Confluence, affected by the recent libwebp exploit.

CVE-2023-5129 CVE-2023-4863

Francois Fourie_ijhj49 · Answer

Thanks Melo. I didn't see it in there either, but the last update was on the 19th, and this is more recent than that.

Melo_45tw58 · Answer

Hi @Francois Fourie,

I couldn't find these in the list, but you can check it at: https://www.atlassian.com/trust/security/advisories

I hope that helps.

Cheers,

Melo