EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 14·5 min read
Z.ai Security Disclosure
TL;DR
Z.ai disclosed a significant number of vulnerabilities, totaling 2,436, with 1,097 classified as critical or high severity. These vulnerabilities have been present for an average of 26.6 years, highlighting long-standing security risks in various software projects.
✦ Why It Matters
Conduct a thorough security audit of your software to identify and address long-standing vulnerabilities.
Key Takeaways
- Review and update your software security protocols immediately.
- Prioritize fixing critical and high-severity vulnerabilities.
- Implement regular security audits to catch long-standing issues.
- Stay informed about vulnerabilities affecting open-source projects.
Full Summary
Z.ai's recent security disclosure reveals a staggering 2,436 vulnerabilities, of which 1,097 are deemed critical or high severity. The vulnerabilities span a time frame of 45 years, with the oldest dating back to 1981.
On average, each vulnerability remained undetected for 26.6 years before being discovered. The severity distribution shows 107 critical, 990 high, 1,286 medium, and 53 low severity issues.
Notable vulnerabilities include a use-after-free error in the Linux kernel and a memory handling flaw in WebKit affecting Apple Safari. This extensive list underscores the importance of regular security audits and updates in software development.