Is Boost for Lemmy vulnerable to the webp exploit? (lemmy.world)

submitted 2 years ago by DungFu@lemmy.world to c/boostforlemmy@lemmy.world

17 comments fedilink hide all child comments

What version of libwebp does Boost use and if it is currently vulnerable, when can we expect an update to fix this issue? The affected versions of libwebp are 0.5.0 to 1.3.1.

you are viewing a single comment's thread
view the rest of the comments

[-] Max_P@lemmy.max-p.me 31 points 2 years ago

That's provided through Android itself. Just update your phone and you'll be good.

[-] DungFu@lemmy.world 7 points 2 years ago

Ah ok, I'll just stop using Boost until the October pixel update rolls out then

[-] isVeryLoud@lemmy.ca 33 points 2 years ago

You should stop using your phone entirely if you're that worried.

The vast majority of apps use the Android Web View component. No point in rolling their own, really.

[-] DungFu@lemmy.world 1 points 2 years ago

Not really, just temporarily not using apps where random people can post images that are not re-encoded. Turns out this is very few apps, but sadly every lemmy app falls under this category.

load more comments (14 replies)

this post was submitted on 01 Oct 2023

71 points (100.0% liked)

Boost For Lemmy

7536 readers

1 users here now

Community of the Android app Boost for Lemmy

founded 2 years ago

MODERATORS

rmayayo@lemmy.world