this post was submitted on 29 Sep 2023
404 points (95.1% liked)

Technology

59223 readers
3330 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s@lemmy.world
L3s@fry.gs
L4s@fry.gs
L4s@lemmy.world
enu@lemmy.world
404
UPDATE YOUR BROWSERS IMMEDIATELY. RCE VULNERABILITY DISCOVERED (nvd.nist.gov)
submitted 1 year ago by VitabytesDev@feddit.nl to c/technology@lemmy.world
93 comments fedilink hide all child comments
 

Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

you are viewing a single comment's thread
view the rest of the comments
[–] Bipta@kbin.social 15 points 1 year ago (2 children)

As far as I'm aware this does affect Android and is not currently fixed. It's expected to be fixed in the October security patch.

This is just my memory of reading weeks ago. Someone else may know better.

[–] 9point6@lemmy.world 9 points 1 year ago (1 children)

The Android webview is updated through the play store as of a few years ago

[–] Bipta@kbin.social 4 points 1 year ago

I believe the libwebp is implemented at the OS level. Again someone else may know better.

[–] TakingOnWater@lemmy.world 1 points 1 year ago

So if the phone gets a security update for this at the OS level, should we theoretically be safe to use apps with any sort of browser functionality? Like some apps that don't update, or are no longer being maintained, etc