[teruakohatu]

> but all browsers, and non-browser software too

It is a libwebp vuln right? So anyone that does not link to libwebp is or may be ok.

[jandrese]

Yeah, but once you fix the library the system should be safe. Well, except for all of the snaps and docker containers and whatnot. Those will need to be updated as well.

[tedunangst]

Pretty long tail of apps that shell out to imagemagick to convert stuff, too.

[not2b]

A security update for libwebp has been shipped by the major Linux distros.