feddit.nl

3,190 readers
156 users here now

Enjoy and behave!

Rules

No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
Be respectful, especially when disagreeing. Everyone should feel welcome here.
No porn.
No Ads / Spamming.
No illegal content

Useful links

Some statistics

Usergrowth:

User-stats

Activities

Post-comment-stats

uptime

founded 2 years ago

ADMINS

tedvdb

428

UPDATE YOUR BROWSERS IMMEDIATELY. RCE VULNERABILITY DISCOVERED (nvd.nist.gov)

submitted 2 years ago by VitabytesDev to c/technology@lemmy.world

93 comments fedilink

Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

PSA: a recently-fixed image parsing vulnerability in Chrome (and things that use Chrome, such as Electron apps) is being actively exploited in the wild. install your updates! (nvd.nist.gov)

submitted 2 years ago by cypherpunks@lemmy.ml to c/security@lemmy.ml

0 comments fedilink

cross-posted from: https://lemmy.ml/post/4958656

Chrome was updated September 11

Electron updated September 12

Matrix Element Desktop updated September 15, without a changelog or advisory. (The Element update on September 13 did not include the updated electron with the fix; today's update does, according to their announcement on Matrix.)

Many/most electron apps don't receive timely security updates, so if you don't want arbitrary images to be able to get code execution you might want to stop using them.

147

PSA: a recently-fixed image parsing vulnerability in Chrome (and things that use Chrome, such as Electron apps) is being actively exploited in the wild. install your updates! (nvd.nist.gov)

submitted 2 years ago by cypherpunks@lemmy.ml to c/technology@lemmy.world

33 comments fedilink

Chrome was updated September 11

Electron updated September 12

Matrix Element Desktop updated September 15, without a changelog or advisory. (The Element update on September 13 did not include the updated electron with the fix; today's update does, according to their announcement on Matrix.)

Many/most electron apps don't receive timely security updates, so if you don't want arbitrary images to be able to get code execution you might want to stop using them.