Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

libwebp.dll security vulnerability #183

Open
juddpatterson opened this issue Nov 19, 2024 · 0 comments
Open

libwebp.dll security vulnerability #183

juddpatterson opened this issue Nov 19, 2024 · 0 comments

Comments

@juddpatterson
Copy link

Describe the bug
I reached out via email a couple months ago, but thought it would be useful to log an issue and share an update as well. The libwebp.dll provided with v2.0.7 of USGS Metadata Wizard is older than 1.3.2 and has a security flaw announced in September 2023.

IT within the National Park Service started selectively flagging and removing USGS Metadata Wizard installs, but may soon block installations until a fix is deployed. Is upgrading to a newer version of this dll (or removing it entirely) a possibility? Thanks so much for your support of this great metadata tool!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant