Skip to content

Conversation

@jzern
Copy link

@jzern jzern commented Oct 13, 2023

This addresses CVE-2023-4863.

Fixes: #62

This addresses CVE-2023-4863.

Additionally, Linux aarch64 and macOS arm64 binaries are added. Linux
x86 is removed as previously this was an x64 binaries; prebuilt x86
Linux binaries are no longer distributed.

The source and binaries are from:
  https://developers.google.com/speed/webp/download

Fixes: imagemin#62
.src(`${url}osx/cwebp`, 'darwin')
.src(`${url}linux/x86/cwebp`, 'linux', 'x86')
.src(`${url}osx/arm64/cwebp`, 'darwin', 'arm64')
.src(`${url}osx/x86-64/cwebp`, 'darwin', 'x86-64')
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't see any documentation in bin-wrapper about recognized architectures. These are how they're referenced in macOS and Linux, but I'm happy to change them to x64 and arm64 to match if that will work.

@jzern jzern marked this pull request as ready for review October 13, 2023 19:07
@jzern
Copy link
Author

jzern commented Oct 13, 2023

The check failure looks unrelated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Does this suffer from the libwebp vulnerability?

1 participant