Security
Security
Multiple vulnerabilities have been discovered in WebP, the worst of which could allow a remote attacker to cause a Denial of Service condition.
| Package | media-libs/libwebp on all architectures |
|---|---|
| Affected versions | < 0.5.2 |
| Unaffected versions | >= 0.5.2 |
WebP is an image format employing both lossy and lossless compression.
Multiple vulnerabilities have been discovered in WebP’s gif2webp tool. Please review the CVE identifier and bug reference for details.
A remote attacker, by enticing a user to process a specially crafted file using WebP’s gif2webp tool, could possibly cause a Denial of Service condition or other unspecified impacts.
There is no known workaround at this time.
All WebP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libwebp-0.5.2"
Release date
January 24, 2017
Latest revision
January 24, 2017: 3
Severity
normal
Exploitable
remote
Bugzilla entries