this post was submitted on 03 Oct 2023
311 points (90.8% liked)

Technology

59204 readers
3042 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s@lemmy.world
L3s@fry.gs
L4s@fry.gs
L4s@lemmy.world
enu@lemmy.world
311
Update now! Firefox plugs critical vulnerability that’s already being attacked (www.pcworld.com)
submitted 1 year ago by Geert@lemmy.world to c/technology@lemmy.world
13 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] EyesEyesBaby@lemmy.world 145 points 1 year ago* (last edited 1 year ago) (2 children)

Clickbaity title.

Mozilla has provided an update to Firefox version 118.0.1 to close a vulnerability that is already being used to attack Chrome users.

For the second time this month, Mozilla has to patch a 0-day vulnerability in Firefox that initially seemed to affect only Chrome and its derivatives.

Yes it's being exploited, yes you should update, but the vulnerability is not actively exploited in Firefox as far as we (they) know of.

[–] GigglyBobble@kbin.social 50 points 1 year ago (1 children)

118.0.1 was first released on Sept 28 too, so this isn't exactly breaking news.

[–] TrustingZebra@lemmy.one 14 points 1 year ago (1 children)

I was wondering if this happend again so soon, since I already updated last week.

[–] Hyperreality@kbin.social 5 points 1 year ago

Last time this story was posted, this was two updates ago. So unless you haven't upvoted in months, it's a non-issue.

[–] such_lettuce7970@kbin.social 25 points 1 year ago (1 children)

It should also be noted here (you know, TL;DR) that it's also fixed in:
Firefox ESR 115.3.1
Firefox Focus for Android 118.1
Firefox for Android 118.1
Thunderbird 115.3.1

https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/

[–] limewire@lemmy.mywire.xyz 7 points 1 year ago (1 children)

And Tor Browser 12.5.5 which has backported the security fixes from Firefox ESR 115.3.1.

[–] thisbenzingring@lemmy.sdf.org 3 points 1 year ago

Anyone using Tor browser should know that they should check it's updating status before using it. Thankfully it checks itself but still, stay up to date before you browse.