💾 Archived View for bbs.geminispace.org › s › Lagrange › 5287 captured on 2023-09-28 at 16:47:43. Gemini links have been rewritten to link to archived content
-=-=-=-=-=-=-
Do you use libwebp to display webp images? Apparently there is a security flaw in the library CVE-2023-4863
2023-09-13 · 2 weeks ago · 1 🔥
I do use libwebp. A quick glance at that CVE didn't specify a library version, but I guess updating to the latest one (1.3.1) would be a good idea.
A closer look reveals that there's a fix commited for this bug on September 7th, while v1.3.1 was released on June 23rd. So better wait for the next release.
it seems that the original security announcement claimed that this was a Chrome issue only, but in krebsonsecurity they say that it affects e.g. firefox as well