4 ms·
When searching HN about any posts on issues in libwebp nothing comes up. Please do not assume that everyone has the same context as you when it comes to the su
by MrDresden 3y ago
When searching HN about any posts on issues in libwebp nothing comes up.
Please do not assume that everyone has the same context as you when it comes to the subject matter that you start a thread on.
Preferably include a link to a source where the issues mentioned are listed/discussed.
- mmsc 3y agoI've updated OP.
- garblegarble 3y agoI believe they are referring to CVE-2023-4863[1], see the fix commit[2] in libwebp. I imagine the issue would also impact Electron, which might be the actual reason for blocking the format if they use that for some/all of their client apps (assuming the OP's claim is correct, I don't use it so can't check myself), because I'd like to think they could push out a back-end deployment quickly. 1: https://nvd.nist.gov/vuln/detail/CVE-2023-4863 https://nvd.nist.gov/vuln/detail/CVE-2023-4863 2: https://chromium.googlesource.com/webm/libwebp/+/902bc91 https://chromium.googlesource.com/webm/libwebp/+/902bc91