WebP: Multiple vulnerabilities

2017-01-24T00:00:00
ID GLSA-201701-61
Type gentoo
Reporter Gentoo Foundation
Modified 2017-01-24T00:00:00

Description

Background

WebP is an image format employing both lossy and lossless compression.

Description

Multiple vulnerabilities have been discovered in WebP’s gif2webp tool. Please review the CVE identifier and bug reference for details.

Impact

A remote attacker, by enticing a user to process a specially crafted file using WebP’s gif2webp tool, could possibly cause a Denial of Service condition or other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All WebP users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-libs/libwebp-0.5.2"