Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

  • Buelldozer@lemmy.today
    link
    fedilink
    English
    arrow-up
    111
    ·
    1 年前

    This is way way wider than just browsers. Anything that can display webp images is vulnerable and that includes things like MS Teams and Twitch.

      • chameleon@kbin.social
        link
        fedilink
        arrow-up
        25
        ·
        edit-2
        1 年前

        The current advisory is in webm (VP8 specifically). The webp one was 2 weeks ago. …yeah, not a good time for web browsers lately…

        (edit: noticed OP actually did link the webp one, I thought it’d be CVE-2023-5217 because that’s being linked elsewhere)

      • Lucidlethargy@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        16
        arrow-down
        3
        ·
        edit-2
        1 年前

        WebP is currently the smallest and highest quality format accepted by browsers today. I have no idea why you think so negatively of it, but it’s irreplaceable until something better is widely adopted, and thus viable.

        It’s the best format for websites as of this exact moment.

        • CmdrShepard@lemmy.one
          link
          fedilink
          English
          arrow-up
          32
          arrow-down
          2
          ·
          1 年前

          Try linking one and sending it to someone else. I tried it and the recipient died two days later.

        • gamer@lemm.ee
          link
          fedilink
          English
          arrow-up
          18
          ·
          1 年前

          There’s some politics involved. Basically, everyone is rallying behind JPEGXL instead of WebP, but Google refuses to support JPEGXL in Chrome. The reasoning they gave is weak, so it’s assumed that they’re just trying to force the format they invented on everyone because they can.

          IIRC, performance of the two formats is similar.

        • Lantern@lemmy.world
          link
          fedilink
          English
          arrow-up
          8
          arrow-down
          1
          ·
          1 年前

          It’s a format that most major image editors don’t support. Basically, if you wanted to do anything with it, you need to first convert it to a different format. It’s the only format that has this problem.

          • ipkpjersi@lemmy.ml
            link
            fedilink
            English
            arrow-up
            4
            ·
            1 年前

            That’s fair except it’s not the only format that has this problem. There’s JPEG 2000 and AVIF which have even less image editor support.

          • glad_cat@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 年前

            I’m old enough to remember when the same argument was made for PNG files. It’s a stupid argument.

            • Lantern@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              1 年前

              WEBP is 13 years old at this point and lacks the support that PNG had 3 years into its lifetime. The benefits are marginal, and without platform support it can’t catch on. Do your research before calling someone else’s argument stupid.

        • SnowdenHeroOfOurTime@unilem.org
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          6
          ·
          1 年前

          I think most people dislike it because Google made it. Google is evil as fuck, but it’s a damn good image format, obviously so since it’s way smaller for the same visuals compared to the older formats, plus it supports transparency. Google is evil but still makes good software sometimes.

      • King@lemmy.world
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        12
        ·
        1 年前

        ? I dont like it because I’m uneducated so it’s bad, average voter

        • gamer@lemm.ee
          link
          fedilink
          English
          arrow-up
          8
          arrow-down
          25
          ·
          1 年前

          Lazy motherfuckers on this site can’t even use proper grammar when being a snarky asshole. That shit you wrote is barely coherent.

    • seaQueue@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 年前

      It’s the full disclosure of the ImageIO webp vuln from last week, this is the root cause.