this post was submitted on 03 Oct 2023
306 points (90.7% liked)

Technology

68244 readers
4073 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
306
Update now! Firefox plugs critical vulnerability that’s already being attacked (www.pcworld.com)
submitted 2 years ago by [email protected] to c/[email protected]
11 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 141 points 2 years ago* (last edited 2 years ago) (2 children)

Clickbaity title.

Mozilla has provided an update to Firefox version 118.0.1 to close a vulnerability that is already being used to attack Chrome users.

For the second time this month, Mozilla has to patch a 0-day vulnerability in Firefox that initially seemed to affect only Chrome and its derivatives.

Yes it's being exploited, yes you should update, but the vulnerability is not actively exploited in Firefox as far as we (they) know of.

[–] [email protected] 48 points 2 years ago

118.0.1 was first released on Sept 28 too, so this isn't exactly breaking news.

[–] [email protected] 21 points 2 years ago (1 children)

It should also be noted here (you know, TL;DR) that it's also fixed in:
Firefox ESR 115.3.1
Firefox Focus for Android 118.1
Firefox for Android 118.1
Thunderbird 115.3.1

https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/

[–] [email protected] 6 points 2 years ago (1 children)

And Tor Browser 12.5.5 which has backported the security fixes from Firefox ESR 115.3.1.

[–] [email protected] 3 points 2 years ago

Anyone using Tor browser should know that they should check it's updating status before using it. Thankfully it checks itself but still, stay up to date before you browse.