libwebp vulnerability

update / patch all the things