Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update libwebp to 1.3.2 #63

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Conversation

jzern
Copy link

@jzern jzern commented Oct 13, 2023

This addresses CVE-2023-4863.

Fixes: #62

This addresses CVE-2023-4863.

Additionally, Linux aarch64 and macOS arm64 binaries are added. Linux
x86 is removed as previously this was an x64 binaries; prebuilt x86
Linux binaries are no longer distributed.

The source and binaries are from:
  https://developers.google.com/speed/webp/download

Fixes: imagemin#62
.src(`${url}osx/cwebp`, 'darwin')
.src(`${url}linux/x86/cwebp`, 'linux', 'x86')
.src(`${url}osx/arm64/cwebp`, 'darwin', 'arm64')
.src(`${url}osx/x86-64/cwebp`, 'darwin', 'x86-64')
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't see any documentation in bin-wrapper about recognized architectures. These are how they're referenced in macOS and Linux, but I'm happy to change them to x64 and arm64 to match if that will work.

@jzern jzern marked this pull request as ready for review October 13, 2023 19:07
@jzern
Copy link
Author

jzern commented Oct 13, 2023

The check failure looks unrelated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Does this suffer from the libwebp vulnerability?
1 participant