Multiple vulnerabilities have been discovered in WebP, the worst of which could allow a remote attacker to cause a Denial of Service condition.
|Package||media-libs/libwebp on all architectures|
|Affected versions||< 0.5.2|
|Unaffected versions||>= 0.5.2|
WebP is an image format employing both lossy and lossless compression.
Multiple vulnerabilities have been discovered in WebP’s gif2webp tool. Please review the CVE identifier and bug reference for details.
A remote attacker, by enticing a user to process a specially crafted file using WebP’s gif2webp tool, could possibly cause a Denial of Service condition or other unspecified impacts.
There is no known workaround at this time.
All WebP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libwebp-0.5.2"
January 24, 2017
January 24, 2017: 3