From c88c1d3319dd24fa833455a2e7d96bc4585bab7f Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Fri, 15 Sep 2023 23:44:15 +0200 Subject: [PATCH] package/webp: security bump to version 1.3.2 - security fixes for lossless encoder (#603, chromium: #1420107, #1455619, CVE-2023-1999) - security fix for lossless decoder (chromium: #1479274, CVE-2023-4863) https://github.com/webmproject/libwebp/blob/v1.3.2/NEWS Signed-off-by: Fabrice Fontaine Signed-off-by: Yann E. MORIN --- package/webp/webp.hash | 2 +- package/webp/webp.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/webp/webp.hash b/package/webp/webp.hash index 969e4cd3d7..adc543059b 100644 --- a/package/webp/webp.hash +++ b/package/webp/webp.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 7bf5a8a28cc69bcfa8cb214f2c3095703c6b73ac5fba4d5480c205331d9494df libwebp-1.2.4.tar.gz +sha256 2a499607df669e40258e53d0ade8035ba4ec0175244869d1025d460562aa09b4 libwebp-1.3.2.tar.gz sha256 5aec868f669e384a22372a4e8a1a6cd7d44c64cd451f960ca69cc170d1e13acf COPYING diff --git a/package/webp/webp.mk b/package/webp/webp.mk index 38a1564a63..33cb4bd507 100644 --- a/package/webp/webp.mk +++ b/package/webp/webp.mk @@ -4,7 +4,7 @@ # ################################################################################ -WEBP_VERSION = 1.2.4 +WEBP_VERSION = 1.3.2 WEBP_SOURCE = libwebp-$(WEBP_VERSION).tar.gz WEBP_SITE = http://downloads.webmproject.org/releases/webp WEBP_LICENSE = BSD-3-Clause