LIBDEVP vulnerability

[Etienne]

Good morning,

Not sure where to post this but figured that I should here.

Is AutoIT affected by this vulnerability? Its pretty highly rated.

https://medium.com/@penquestr/libwebp-the-new-log4j-3e932b35bdcb

Thanks,

Etienne

[Jos]

What is your role in IT to ask this question here?

[Etienne]

I am a Tech 3 within Canada Revenue Agency and my team has certified AutoIT to be used within the agency.

If this is not the correct location to ask this question, possible to direct me to the proper chat?

Edited October 10, 2023 by Etienne

[Jos]

Well, reason for me asking is that I've learned never to click on a link a stranger provides just like that.

So what is the name of this vulnerability and what is it about?

I assume you are talking about LIBWEBP not LIBDEVP?

Edited October 10, 2023 by Jos

[TheDcoder]

AutoIt does not link with libwebp so I don't see how it could be effected.

[Andreik]

@TheDcoder that's what I said in a previous post but seems someone delete it. There is no native support for libwebp in AutoIt so there is no vulnerability related to AutoIt.

[TheDcoder]

@Andreik Strange, maybe @Jos can see what happened to your post?

[Andreik]

It's not that important. The fact it's still valid that libwebp it's an independent library and has nothing to do with AutoIt core.

[Etienne]

ok thanks everyone!