[Buildroot] [git commit branch/2023.02.x] package/webp: security bump to version 1.3.2
Peter Korsgaard
peter at korsgaard.com
Sun Sep 24 19:17:43 UTC 2023
commit: https://git.buildroot.net/buildroot/commit/?id=702f3f4fae8e0ac4a3559e0da83778cc74d3a172
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/2023.02.x
- security fixes for lossless encoder (#603, chromium: #1420107,
#1455619, CVE-2023-1999)
- security fix for lossless decoder (chromium: #1479274,
CVE-2023-4863)
https://github.com/webmproject/libwebp/blob/v1.3.2/NEWS
Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998 at free.fr>
(cherry picked from commit c88c1d3319dd24fa833455a2e7d96bc4585bab7f)
Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
---
package/webp/webp.hash | 2 +-
package/webp/webp.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/webp/webp.hash b/package/webp/webp.hash
index 969e4cd3d7..adc543059b 100644
--- a/package/webp/webp.hash
+++ b/package/webp/webp.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 7bf5a8a28cc69bcfa8cb214f2c3095703c6b73ac5fba4d5480c205331d9494df libwebp-1.2.4.tar.gz
+sha256 2a499607df669e40258e53d0ade8035ba4ec0175244869d1025d460562aa09b4 libwebp-1.3.2.tar.gz
sha256 5aec868f669e384a22372a4e8a1a6cd7d44c64cd451f960ca69cc170d1e13acf COPYING
diff --git a/package/webp/webp.mk b/package/webp/webp.mk
index 38a1564a63..33cb4bd507 100644
--- a/package/webp/webp.mk
+++ b/package/webp/webp.mk
@@ -4,7 +4,7 @@
#
################################################################################
-WEBP_VERSION = 1.2.4
+WEBP_VERSION = 1.3.2
WEBP_SOURCE = libwebp-$(WEBP_VERSION).tar.gz
WEBP_SITE = http://downloads.webmproject.org/releases/webp
WEBP_LICENSE = BSD-3-Clause
More information about the buildroot
mailing list