69
Is Boost for Lemmy vulnerable to the webp exploit? (lemmy.world)
submitted 2 years ago by to c/boostforlemmy@lemmy.world
17 comments fedilink hide all child comments
 

What version of libwebp does Boost use and if it is currently vulnerable, when can we expect an update to fix this issue? The affected versions of libwebp are 0.5.0 to 1.3.1.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] 3 points 2 years ago (1 child)

That's dependent on carriers in a fair few cases or phone manufacturers in others. A lot of budget phones don't get timely security patches.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [+] 1 point 2 years ago (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [โ€“] 2 points 2 years ago*

    I'm sure it can. The question is, will it. Part of the reason Google started updating apps on their side and removing feature updates from Android was because carriers and service providers weren't quick to update anything including security updates. It's one of the big selling points of the pixel line of phones. RCS is a very good example. The main cell providers did not want to take on RCS messaging and went as far as trying to make their own fork. They've done this with wallet apps back in the day as well.

    https://9to5google.com/2019/10/25/us-carriers-rcs-android-initiative/

    https://www.engadget.com/amp/2019-10-18-google-verizon-t-mobile-pixel-4-rcs-messaging.html

    https://www.idropnews.com/news/att-t-mobile-and-verizon-have-given-up-on-their-imessage-killer/156434/

  • permalink
  • fedilink
  • source
  • parent