secondlife / jira-archive

2 stars 0 forks source link

[BUG-232398] [Improvement] CEF version is severely out of date and needs updating to offer security from exploits. #9680

Open sl-service-account opened 2 years ago

sl-service-account commented 2 years ago

Information

The CEF version in the viewer has been at version 91 for years despite updates offered each year. This problem has been brought up in the Server, CC and OS meetings several times this year over certain content creators allegedly capitalizing on exploits that have already been patched in later versions.

Since the Maint 1 viewer bug fixes are media themed, can we please update the CEF version to the industry stable version at least?

Thanks.

Original Jira Fields | Field | Value | | ------------- | ------------- | | Issue | BUG-232398 | | Summary | [Improvement] CEF version is severely out of date and needs updating to offer security from exploits. | | Type | New Feature Request | | Priority | Unset | | Status | Accepted | | Resolution | Triaged | | Reporter | Lucia Nightfire (lucia.nightfire) | | Created at | 2022-07-22T13:15:01Z | | Updated at | 2023-11-09T21:56:25Z | ``` { 'Build Id': 'unset', 'Business Unit': ['Platform'], 'Date of First Response': '2022-07-27T13:20:58.947-0500', 'How would you like the feature to work?': 'The CEF version in the viewer has been at version 91 for years despite updates offered each year. This problem has been brought up in the Server, CC and OS meetings several times this year over certain content creators allegedly capitalizing on exploits that have already been patched in later versions.\r\n\r\nSince the Maint 1 viewer bug fixes are media themed, can we please update the CEF version to the industry stable version at least?\r\n\r\nThanks.', 'ReOpened Count': 0.0, 'Severity': 'Unset', 'Target Viewer Version': 'viewer-development', 'Why is this feature important to you? How would it benefit the community?': '?', } ```
sl-service-account commented 2 years ago

Kyle Linden commented at 2022-07-27T18:20:59Z

Thank you for the suggestion. We may implement some version of this at a future date.

sl-service-account commented 10 months ago

Kyle Linden commented at 2023-11-09T21:56:25Z

CEF updated with https://releasenotes.secondlife.com/viewer/6.6.16.6566955269.html