WebP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebP, the worst of which could allow a remote attacker to cause a Denial of Service condition. webp 2017-01-24 2017-01-24 598208 remote 0.5.2 0.5.2

WebP is an image format employing both lossy and lossless compression.

Multiple vulnerabilities have been discovered in WebP’s gif2webp tool. Please review the CVE identifier and bug reference for details.

A remote attacker, by enticing a user to process a specially crafted file using WebP’s gif2webp tool, could possibly cause a Denial of Service condition or other unspecified impacts.

There is no known workaround at this time.

All WebP users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libwebp-0.5.2" CVE-2016-9085 b-man b-man