pagespeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From GitBox <...@apache.org>
Subject [GitHub] nberlee opened a new issue #1753: libwebp should be updated to >=0.5.2
Date Sun, 25 Feb 2018 19:12:54 GMT
nberlee opened a new issue #1753: libwebp should be updated to >=0.5.2
URL: https://github.com/apache/incubator-pagespeed-mod/issues/1753
 
 
   libwebp 0.5.1, currently used and has vulnerabilities described in CVE-2016-9085 and CVE-2016-8888
(see https://github.com/webmproject/libwebp/blob/v0.5.2/NEWS), 9085 is relevant to pagespeed,
CVE 2016-8888 is unknown to me)
   
   Updating libwebp tag from 0.5.1 to 0.5.2 could be done without code change. Updating to
0.6.1 is a bit harder

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

Mime
View raw message