nberlee opened a new issue #1753: libwebp should be updated to >=0.5.2 URL: https://github.com/apache/incubator-pagespeed-mod/issues/1753 libwebp 0.5.1, currently used and has vulnerabilities described in CVE-2016-9085 and CVE-2016-8888 (see https://github.com/webmproject/libwebp/blob/v0.5.2/NEWS), 9085 is relevant to pagespeed, CVE 2016-8888 is unknown to me) Updating libwebp tag from 0.5.1 to 0.5.2 could be done without code change. Updating to 0.6.1 is a bit harder
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
