▲ 144 ▼ PSA: a recently-fixed image parsing vulnerability in Chrome (and things that use Chrome, such as Electron apps) is being actively exploited in the wild. install your updates! (nvd.nist.gov) submitted 2 years ago by cypherpunks@lemmy.ml to c/technology@lemmy.world 33 comments fedilink hide all child comments Chrome was updated September 11 Electron updated September 12 Matrix Element Desktop updated September 15, without a changelog or advisory. (The Element update on September 13 did not include the updated electron with the fix; today's update does, according to their announcement on Matrix.) Many/most electron apps don't receive timely security updates, so if you don't want arbitrary images to be able to get code execution you might want to stop using them.
[–] hal_5700X@lemmy.world 13 points 2 years ago* (last edited 2 years ago) Firefox version 117.0.1 haves the fix. EDIT Also Tor got patched with 12.5.4. permalink fedilink source