Skip to content

update libwebp to 1.3.2#63

Open
jzern wants to merge 1 commit into
imagemin:mainfrom
jzern:libwebp-1.3.2
Open

update libwebp to 1.3.2#63
jzern wants to merge 1 commit into
imagemin:mainfrom
jzern:libwebp-1.3.2

Conversation

@jzern

@jzern jzern commented Oct 13, 2023

Copy link
Copy Markdown

This addresses CVE-2023-4863.

Fixes: #62

This addresses CVE-2023-4863.

Additionally, Linux aarch64 and macOS arm64 binaries are added. Linux
x86 is removed as previously this was an x64 binaries; prebuilt x86
Linux binaries are no longer distributed.

The source and binaries are from:
  https://developers.google.com/speed/webp/download

Fixes: imagemin#62
Comment thread lib/index.js
.src(`${url}osx/cwebp`, 'darwin')
.src(`${url}linux/x86/cwebp`, 'linux', 'x86')
.src(`${url}osx/arm64/cwebp`, 'darwin', 'arm64')
.src(`${url}osx/x86-64/cwebp`, 'darwin', 'x86-64')

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't see any documentation in bin-wrapper about recognized architectures. These are how they're referenced in macOS and Linux, but I'm happy to change them to x64 and arm64 to match if that will work.

@jzern
jzern marked this pull request as ready for review October 13, 2023 19:07
@jzern

jzern commented Oct 13, 2023

Copy link
Copy Markdown
Author

The check failure looks unrelated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Does this suffer from the libwebp vulnerability?

1 participant