Update your browsers, computers (exploit related)

[Spaced Out Ace]

There was an exploit recently involving FreeType. It was discovered by Google, but likely could affect anything utilizing FreeType, such as Chromium based browsers, and Linux distros. The exploit seems pretty serious (based on how some are reacting; then again, some people act like any exploit is super dangerous, so grain of salt), and everyone should update their stuff. The level of hyperbole in the video below or elsewhere discussing this exploit may be large or small, but better safe than sorry.

Here is a video talking about it, but if you'd rather look into it yourself, it is CVE-2020-15999. It seems that someone can use the exploit (if not patched) to take advantage of someone's system.



I'm sure some might respond with mockery, and if that is your response, probably best to just keep it moving.

 

[odibrom]

... for those who are not inside of this, what is an "exploit"?

 

[Spaced Out Ace]

... for those who are not inside of this, what is an "exploit"?

Something an asshole can -- wait for it -- exploit to do something nefarious to your system.

 

[odibrom]

... and what is freetype?...

 

[Spaced Out Ace]

... and what is freetype?...

https://www.freetype.org/

 

[Hollowway]

Do browsers automatically update themselves when closed and opened? I’m assuming I don’t need to download a new version of chrome, opera, etc to do this.

 

[p0ke]

Do browsers automatically update themselves when closed and opened? I’m assuming I don’t need to download a new version of chrome, opera, etc to do this.

Chrome auto-updates at least, probably all other major browsers do too.

And yeah, that's no joke - exploits are discovered all the time and basically all you can do to protect yourself from them is to stay updated...

 

[Spaced Out Ace]

I'd check your update history in the browser to verify that it has been updated the past few days.

 

[Xaios]

Firefox Master Race.

 

[Spaced Out Ace]

Firefox Master Race.

Firefox also uses FreeType from what I understand, but had an update the past few days, so I think they patched it with the FreeType update after it was revealed there was an exploit.

 

[Jeries]

... for those who are not inside of this, what is an "exploit"?

... and what is freetype?...

lol watching that exchange felt like deja vu (your posts were how I reacted while reading) ....