Final Update (I think):

Some of the articles/writings on this are wrong and implicate libwebp 1.3.2. But having looked at the code, libwebp was fixed before 1.3.2 was released. If you have version 1.3.2 of libwebp, you should be fine. Update your operating system if you have an older version of libwebp.

Again, this doesn't affect you if you didn't compile with the 'video-ffmpeg' feature.

Again, this doesn't affect images, only videos, and maybe not even videos we can't be sure.

There will not be an updated release of gossip since this is a dynamically linked library managed by your operating system.