QF-Test uses the WebP library for image compression in run logs and testsuites. In library versions older than 1.3.2, this library included a critical security vulnerability (CVE-2023-4863).
In the library version, which is included in QF-Test 7.0.6 and in this archive, the vulnerability has been fixed.

To protect an older version of QF-Test, proceed like this:

1. Open the QF-Test system directory of the QF-Test installation. To do this, start QF-Test, select "Help" – "About" from the QF-Test menu bar (on macOS "QF-Test" - "About QF-Test"), switch to the "System Info" tab and click the link next to "dir.version".
2. Quit all running QF-Test instances.
3. Navigate to the subdirectory bin of the QF-Test system directory.
4. Delete the directory "webp" from the "bin" subdirectory.
5. Copy the "webp" directory next to this help file into the "bin" directory.


You may need administrator privileges to perform this update.