=====================================================================

                               CERT-Renater

                     Note d'Information No. 2023/VULN353

_____________________________________________________________________

DATE                : 28/09/2023

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running libwebp versions prior to 1.3.2.

=====================================================================
https://groups.google.com/a/webmproject.org/g/webp-discuss/c/YhVFA45DVfM
_____________________________________________________________________


James Zern

14 sept. 2023, 04:00:37

This release has been tagged. Archives are available [1].

This release contains only one change, an important security fix for
lossless decoding. All users should upgrade. In case upgrading to
1.3.2 is not an option, the fix has been backported to the 1.0.3,
1.1.0, 1.2.0, 1.2.2, 1.2.4 and 1.3.0 branches.

 From the NEWS file:
- 9/13/2023: version 1.3.2
   This is a binary compatible release.
   * security fix for lossless decoder (chromium: #1479274, CVE-2023-4863)

[1] 
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-ios-framework.tar.gz
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-ios-framework.tar.gz.asc
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-linux-aarch64.tar.gz
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-linux-aarch64.tar.gz.asc
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-linux-x86-64.tar.gz
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-linux-x86-64.tar.gz.asc
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-mac-arm64.tar.gz
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-mac-arm64.tar.gz.asc
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-mac-x86-64.tar.gz
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-mac-x86-64.tar.gz.asc
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-windows-x64-no-wic.zip
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-windows-x64-no-wic.zip.asc
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-windows-x64.zip
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2-windows-x64.zip.asc
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2.tar.gz
https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.3.2.tar.gz.asc

=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================