We need a browser written in managed lang
Even if it means some perf drop, modern hardware will get it back in X years, but safety will be significantly improved
Mozilla fixes Firefox zero-day actively exploited in attacks
11–20 of 151 posts
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#12Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#13Fixed many months ago just being made public now, according to the bug tracker. Why a 7 month delay?
I didn't get the ESR 128.3.1 update until yesterday.
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#14Fixed many months ago just being made public now, according to the bug tracker. Why a 7 month delay?
Why the need for patch releases then like 128.3.1?
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#15[flagged]
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#16[flagged]
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#17Fixed many months ago just being made public now, according to the bug tracker. Why a 7 month delay?
What are you talking about?
The fix was released today, and FF says they received the report 25 hours before that: https://infosec.exchange/@attackanddefense/11328207943028074...
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#18Fixed many months ago just being made public now, according to the bug tracker. Why a 7 month delay?
"Fixed in Firefox 131.0.2" which was released 21 hours ago? (https://ftp.mozilla.org/pub/firefox/releases/131.0.2/)
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#19Redhat bugzilla has a tiny bit more info about dates (looks like very recent?) and is public:
https://bugzilla.redhat.com/show_activity.cgi?id=2317442
and likely affects Thunderbird as well by the looks of things.
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#20We need a browser written in managed lang Even if it means some perf drop, modern hardware will get it back in X years, but safety will be significantly improved
Why managed when it could be in Rust and have both performance and safety?
The Servo shouldn't have ever been laid off. Yes, I'm aware a team is working on it now, but it isn't up to the same speed and enthusiasm as it was when funded by Mozilla, is it?