Search found 2 matches

by psyca
Mon Oct 02, 2023 7:04 am
Forum: New
Topic: Security problem - old webp Plugin ( CVE-2023-4863 )
Replies: 3
Views: 633

Re: Security problem - old webp Plugin ( CVE-2023-4863 )

Are there any plans to release XNV-MP 1.5.6 with the updated lib (Hotfix update) soon?
by psyca
Mon Oct 02, 2023 6:33 am
Forum: New
Topic: Security problem - old webp Plugin ( CVE-2023-4863 )
Replies: 3
Views: 633

Security problem - old webp Plugin ( CVE-2023-4863 )

If i look in the /XnViewMP/plugins directory i see different webp.dll_s with version 1.3.0.
Since there is an security bug (buffer overflow) in versions before 1.3.2 its recommend to update the dlls.

https://nvd.nist.gov/vuln/detail/CVE-2023-4863