When an MBI Clone update fixes a security vulnerability, we describe it here: affected versions, fixed version, severity and what you need to do.
Published advisories
No security advisory has been published to date.
What each advisory states
- Its identifier, in the form MBI-YYYY-NN (the year, then a sequence number within the year), and the CVE reference of the vulnerability when it has one.
- Its date of publication, and the date it was updated if it changes.
- The affected versions and the fixed version.
- The severity: critical, high, medium or low, with its CVSS score when it has been calculated.
- What can happen, without any detail that would help exploit the vulnerability.
- What you need to do: install the fixed version and, in the meantime, any useful precautions.
- Thanks to the person who reported it, with their consent.
How you are informed
A version that fixes a security vulnerability is announced in MBI Clone by the “Important update” banner on the home screen: “Install” downloads it, checks its signature and installs it. Its advisory is published on this page at the same time, or a little later, to give workshops time to install it. When a vulnerability is already being exploited, we also notify subscribers by email. Updates are included in the subscription; the Security and support page states how long each version receives them.
Reporting a vulnerability
Do you think you have found a security vulnerability in MBI Clone, its servers or this website? The Report a vulnerability page explains how to tell us.