this post was submitted on 03 Oct 2023
306 points (90.9% liked)

Technology

59111 readers
5968 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
306
Update now! Firefox plugs critical vulnerability that’s already being attacked (www.pcworld.com)
submitted 1 year ago by [email protected] to c/[email protected]
13 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 143 points 1 year ago* (last edited 1 year ago) (2 children)

Clickbaity title.

Mozilla has provided an update to Firefox version 118.0.1 to close a vulnerability that is already being used to attack Chrome users.

For the second time this month, Mozilla has to patch a 0-day vulnerability in Firefox that initially seemed to affect only Chrome and its derivatives.

Yes it's being exploited, yes you should update, but the vulnerability is not actively exploited in Firefox as far as we (they) know of.

[–] [email protected] 49 points 1 year ago (1 children)

118.0.1 was first released on Sept 28 too, so this isn't exactly breaking news.

[–] [email protected] 14 points 1 year ago (1 children)

I was wondering if this happend again so soon, since I already updated last week.

[–] [email protected] 5 points 1 year ago

Last time this story was posted, this was two updates ago. So unless you haven't upvoted in months, it's a non-issue.

[–] [email protected] 25 points 1 year ago (1 children)

It should also be noted here (you know, TL;DR) that it's also fixed in:
Firefox ESR 115.3.1
Firefox Focus for Android 118.1
Firefox for Android 118.1
Thunderbird 115.3.1

https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/

[–] [email protected] 7 points 1 year ago (1 children)

And Tor Browser 12.5.5 which has backported the security fixes from Firefox ESR 115.3.1.

[–] [email protected] 3 points 1 year ago

Anyone using Tor browser should know that they should check it's updating status before using it. Thankfully it checks itself but still, stay up to date before you browse.