17
Pict-rs updated to 0.4.3 (lemmy.cafe)
submitted 1 year ago by Illecors@lemmy.cafe to c/general@lemmy.cafe
3 comments fedilink hide all child comments

The main feature being a fix the really nasty libwebp vulnerability.

top 3 comments
sorted by: hot top controversial new old
[-] Shadow@lemmy.ca 1 points 1 year ago* (last edited 1 year ago)

Where did you find a changelog for pict-rs? I can't find anywhere that lists details on 0.4.3, there don't seem to have been release notes published.

I don't think there's a fix for cve-2023-4863 in here. https://git.asonix.dog/asonix/pict-rs/commits/tag/v0.4.3

[-] Illecors@lemmy.cafe 1 points 1 year ago* (last edited 1 year ago)

https://git.asonix.dog/asonix/pict-rs/releases/tag/v0.4.3

I think the fix was in libwebp, which got pulled with the rebuild of the image.

[-] Shadow@lemmy.ca 1 points 1 year ago

Thanks!

this post was submitted on 26 Sep 2023
17 points (100.0% liked)

General Lemmy.Cafe

217 readers
1 users here now

General site

founded 1 year ago
MODERATORS
Illecors@lemmy.cafe