You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@pagespeed.apache.org by GitBox <gi...@apache.org> on 2018/02/25 19:12:54 UTC

[GitHub] nberlee opened a new issue #1753: libwebp should be updated to >=0.5.2

nberlee opened a new issue #1753: libwebp should be updated to >=0.5.2
URL: https://github.com/apache/incubator-pagespeed-mod/issues/1753
 
 
   libwebp 0.5.1, currently used and has vulnerabilities described in CVE-2016-9085 and CVE-2016-8888 (see https://github.com/webmproject/libwebp/blob/v0.5.2/NEWS), 9085 is relevant to pagespeed, CVE 2016-8888 is unknown to me)
   
   Updating libwebp tag from 0.5.1 to 0.5.2 could be done without code change. Updating to 0.6.1 is a bit harder

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services