home.social

#libvpx — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #libvpx, aggregated by home.social.

  1. BSI WID Advisories Feed @[email protected] ·

    #BSI WID-SEC-2024-1945: [NEU] [mittel] #Red #Hat #Enterprise #Linux (#libvpx): Mehrere Schwachstellen ermöglichen Denial of Service

    Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente libvpx ausnutzen, um einen Denial of Service Angriff durchzuführen.

    wid.cert-bund.de/portal/wid/se

    #bsi #red #hat #enterprise #linux #libvpx
  2. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, October 2023 Edition

    krebsonsecurity.com/2023/10/pa

    #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #apple #rapid7 #libvpx #google #amazon #wordpad
  3. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, October 2023 Edition

    krebsonsecurity.com/2023/10/pa

    #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #apple #rapid7 #libvpx #google #amazon #wordpad
  4. KrebsOnSecurity RSS @[email protected] ·

    Patch Tuesday, October 2023 Edition

    krebsonsecurity.com/2023/10/pa

    #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #apple #rapid7 #libvpx #google #amazon #wordpad
  5. dispatch @[email protected] ·

    Patch Tuesday, October 2023 Edition krebsonsecurity.com/2023/10/pa #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #patchtuesdayoctober2023 #rapidresetattack #skypeforbusiness #cve #damianmenscher #securitytools
  6. dispatch @[email protected] ·

    Patch Tuesday, October 2023 Edition krebsonsecurity.com/2023/10/pa #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #patchtuesdayoctober2023 #rapidresetattack #skypeforbusiness #cve #damianmenscher #securitytools
  7. dispatch @[email protected] ·

    Patch Tuesday, October 2023 Edition krebsonsecurity.com/2023/10/pa #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #patchtuesdayoctober2023 #rapidresetattack #skypeforbusiness #cve #damianmenscher #securitytools
  8. dispatch @[email protected] ·

    Patch Tuesday, October 2023 Edition krebsonsecurity.com/2023/10/pa #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #apple #rapid7 #libvpx #google #amazon #wordpad
  9. dispatch @[email protected] ·

    Patch Tuesday, October 2023 Edition krebsonsecurity.com/2023/10/pa #PatchTuesdayOctober2023 #RapidResetAttack #SkypeforBusiness #CVE-2023-35349 #CVE-2023-36563 #CVE-2023-36778 #CVE-2023-41763 #CVE-2023-44487 #DamianMenscher #SecurityTools #ImmersiveLabs #iPadOS17.0.3 #NatalieSilva #TimetoPatch #AdamBarnett #CloudFlare #iOS17.0.3 #microsoft #windows #Wordpad #Amazon #google #libvpx #Rapid7 #apple

    #patchtuesdayoctober2023 #rapidresetattack #skypeforbusiness #cve #damianmenscher #securitytools
  10. deltatux :donor: @[email protected] ·

    Apple releases iOS/iPad OS 17.0.3 as an emergency update to resolve an actively exploited zero day caused by a kernel vulnerability. If successful, a malicious actor can perform local privilege escalation as part of an attack chain.

    Apple also notes that they have resolved CVE-2023-5217 by updating the libvpx to 1.13.1 in iOS/iPad OS 17.0.3

    This marks the 17th zero day that Apple has addressed so far this year.

    https://www.bleepingcomputer.com/news/apple/apple-emergency-update-fixes-new-zero-day-used-to-hack-iphones/

    #infosec #cybersecurity #Apple #ios #ipados #kernel #vulnerability #CVE_2023_42824 #CVE_2023_5217 #libvpx #zeroday

    #infosec #cybersecurity #apple #ios #ipados #kernel
  11. Gonçalo Valério @[email protected] ·

    New 0-day, this time on "libvpx". Affects Chrome, Firefox and many more apps.

    arstechnica.com/security/2023/

    #security #chrome #firefox #libvpx

    #libvpx #firefox #chrome #security
  12. Michal :verified: :btw: @[email protected] ·

    Woohoo, another day, another #0day like the #libwebp one, this time in #libvpx: arstechnica.com/security/2023/

    Let the purge / patch crunch begin!

    #0day #libwebp #libvpx
  13. Michal :verified: :btw: @[email protected] ·

    Woohoo, another day, another #0day like the #libwebp one, this time in #libvpx: arstechnica.com/security/2023/

    Let the purge / patch crunch begin!

    #0day #libwebp #libvpx
  14. Michal :verified: :btw: @[email protected] ·

    Woohoo, another day, another #0day like the #libwebp one, this time in #libvpx: arstechnica.com/security/2023/

    Let the purge / patch crunch begin!

    #0day #libwebp #libvpx
  15. Michal :verified: :btw: @[email protected] ·

    Woohoo, another day, another #0day like the #libwebp one, this time in #libvpx: arstechnica.com/security/2023/

    Let the purge / patch crunch begin!

    #libvpx #libwebp #0day
  16. Michal :verified: :btw: @[email protected] ·

    Woohoo, another day, another #0day like the #libwebp one, this time in #libvpx: arstechnica.com/security/2023/

    Let the purge / patch crunch begin!

    #0day #libwebp #libvpx
  17. ComputerBase @[email protected] ·

    VP8-Videokodierung: Zero-Day-Schwachstelle betrifft weit mehr als nur Chrome computerbase.de/2023-09/vp8-vi #VP8 #Google #Chrome #Schwachstelle #libvpx

    #vp8 #google #chrome #schwachstelle #libvpx
  18. :mastodon: decio @[email protected] ·

    #CyberVeille #libwebp #libvpx

    🗒️ petit résumé / annotations surs les deux vulnérabilités basés sur les denières information disponibles au 29.09

    "CVE-2023-5217 [ ndr 𝐥𝐢𝐛𝐯𝐩𝐱 ] requires a targeted device to create media in the VP8 format.

    CVE-2023-4863 [ndr 𝐖𝐞𝐛𝐏 / 𝐥𝐢𝐛𝐰𝐞𝐛𝐏 ] could be exploited when a targeted device simply displayed a booby-trapped image."
    👇
    arstechnica.com/security/2023/

    CVE-2023-5129 ➡️ Retirée par Mitre Duplicata CVE-2023-4863
    👇
    cve.org/CVERecord?id=CVE-2023-

    ------------------------

    liste utile pour (merci @mttaggart ) suivi CVE-2023-4863 dans apps Electron
    👇
    docs.google.com/spreadsheets/d

    FAQ CVE-2023-4863 par Tenable
    👇
    tenable.com/blog/cve-2023-4106

    ------------------------

    Annonce CVE-2023-5217
    👇
    chromereleases.googleblog.com/

    #cyberveille #libwebp #libvpx
  19. IT News @[email protected] ·

    New 0-day in Chrome and Firefox will likely plague other software - Enlarge (credit: Getty Images)

    A critical zero-day vulnerabili... - arstechnica.com/?p=1972043 #security #zero-day #exploit #firefox #libwebp #biz⁢ #chrome #libvpx

    #libvpx #chrome #biz #libwebp #firefox #exploit
  20. -> @haileys.quest @[email protected] ·

    Maybe relying on one company's browser product for your entire computer is not a good idea.

    #libWebP #libVPX #Electron

    #libwebp #libvpx #electron
  21. Andres @[email protected] ·

    *Sigh*, another one of these:

    "CVE-2023-5217: Heap buffer overflow in vp8 encoding in #libvpx."
    "Google is aware that an exploit for CVE-2023-5217 exists in the wild."

    Note that because it's in an underlying (video codec) library, it's probably going to be an issue in every browser and video player and electron app; just like the prior #libwebp #security bug.

    #libvpx #libwebp #security