WebP Vulnerability

[webmaster]

We frequently update libraries. While we accessed this to be a very low risk vulnerability, the LibWebP is already scheduled to be updated in the next release of the desktop products. Note that the copyright notice in the latest version of the LibWebP source files direct from Google still says 2010, so that isn't a specific cause for concern.

Have a good weekend.
Matt

[I am not sure why Matt, but your response to this thread was moderated and some of the foreign characters that appear in Russian spammer posts appeared in the title of your response. I replaced the title in your post and removed your response from moderation. Gary]

[Acorn]

Sneaking in under Matt's Closed Thread radar...

...the WebP vulnerability has now been patched in Xara Designer Pro+ 23.5.0.68069 SL x64 Nov 13 2023 and probably other Plus products.

Acorn

[webmaster]

Sneaking in under Matt's Closed Thread radar...

...the WebP vulnerability has not been patched in Xara Designer Pro+ 23.5.0.68069 SL x64 Nov 13 2023 and probably other Plus products.

Acorn

Please clarify

[Acorn]

Please clarify

Xara says it is now fixed so thank you.

There is no point in closing a Thread when the resolution has not been recorded. I was doing just that.

Acorn

[webmaster]

You said has NOT been 'fixed'. That is why we wanted you to clarify.

[Acorn]

You said has NOT been 'fixed'. That is why we wanted you to clarify.

My bad, 'now' was what I meant, not 'not'. Corrected in original. Sorry for my dyslexia. I type and reread but still things get past.

Acorn