Update everything

Bill Statler

US, Wed, 13 Sep 2023 14:14:08 -0400 from Bunny of Doom

If you have a computer or a tablet or a smartphone or you use a browser, just go update everything. It's faster than reading the list of all the zero-day exploit patches.

Windows
Apple iOS and ipadOS
Chrome and Chromium-based browsers
Firefox
Adobe Reader and Acrobat
umm, is that all? probably not...

Hans

Wed, 13 Sep 2023 14:16:22 -0400 from hubzilla

Ah, lucky me, I run bsd so I do not need to update

Bill Statler

Wed, 13 Sep 2023 14:30:01 -0400 from Bunny of Doom

Do you have Firefox or Chromium? You need to update.

Hans

Wed, 13 Sep 2023 15:37:30 -0400 from hubzilla

I never do that, the os does it for me

Bill Statler

Wed, 13 Sep 2023 20:10:07 -0400 from Bunny of Doom

Apologies for the scary post. I should have provided better info, but I didn't have time to dig it up earlier today.

The browser vulnerabilities all come from a buffer overflow bug in libwebp, a widely-used library that handles WebP images. This may end up affecting a lot of browsers and probably other software that displays WebP images.

Chrome, Firefox and more menaced by WebP zero day

Exploit observed in the wild against codec lib in browsers, apps

The Apple updates fix vulnerabilities that have been used to install Pegasus spyware on Apple products.

Apple Rushes to Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones

Urgent Spyware Alert! Apple patched 2 new zero-day vulnerabilities in iOS, iPadOS, and macOS devices.

The other vulnerabilities (Windows, Adobe Reader and Acrobat) are a bunch of different issues with varying severity.

Cyborg 2-A ✅

Wed, 13 Sep 2023 21:55:13 -0400 from libertious

What about FutureWave FutureSplash? Is there a rear zero attack on that?

Bill Statler

Wed, 13 Sep 2023 22:46:47 -0400 from Bunny of Doom

I had to look that one up.