What version of libwebp does Boost use and if it is currently vulnerable, when can we expect an update to fix this issue? The affected versions of libwebp are 0.5.0 to 1.3.1.

You are viewing a single thread.
View all comments View context
33 points

You should stop using your phone entirely if you’re that worried.

The vast majority of apps use the Android Web View component. No point in rolling their own, really.

permalink
report
parent
reply
1 point

Not really, just temporarily not using apps where random people can post images that are not re-encoded. Turns out this is very few apps, but sadly every lemmy app falls under this category.

permalink
report
parent
reply

Boost For Lemmy

!boostforlemmy@lemmy.world

Create post

Community of the Android app Boost for Lemmy

Community stats

  • 204

    Monthly active users

  • 622

    Posts

  • 4.4K

    Comments

Community moderators