Update changelog

qnighy · Sep 14, 2023 · a4e1b6d · a4e1b6d
1 parent edef50e
commit a4e1b6d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,8 @@
 ## Unreleased
 
+- Changed
+  - Update bundled libwebp from 1.3.0 (with CVE-2023-4863 patch) to 1.3.2, which officially ships with the vuln fix https://github.com/qnighy/libwebp-sys2-rs/pull/24
+    - See [libwebp's release](https://groups.google.com/a/webmproject.org/g/webp-discuss/c/YhVFA45DVfM/m/hS2jI_KFAwAJ)
 - Misc
   - Check in lockfile https://github.com/qnighy/libwebp-sys2-rs/pull/22