ich🙏iel - tchncs

webp, ich bin begeistert.

Öffentliche Dienstmeldung (via)

ZL;NG: Webp hat gerade einen 0-Tag-Käfer am Hals, aktualisieren Sie einmal alle Ihre Weichware.
(Nein wirklich, das geht einmal quer durch den Softwarestack, Browser, Dateivorschaubilder im OS, ImageMagick, etc. pp.)

The WebP 0day

Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image library, and it had a familiar warning attached: "Google

Isosceles Blog