WebP is an image format employing both lossy and lossless compression.
Multiple vulnerabilities have been discovered in WebP’s gif2webp tool. Please review the CVE identifier and bug reference for details.
A remote attacker, by enticing a user to process a specially crafted file using WebP’s gif2webp tool, could possibly cause a Denial of Service condition or other unspecified impacts.
There is no known workaround at this time.
All WebP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libwebp-0.5.2"