Mozilla says a new Firefox security bug is under active attack

Post by dmix » Sat, Jan 11, 2020, 10:58 PM UTC

beezle wrote: post #69

andrei_says_ wrote: post #23

A warning and a fix within two days of releasing the affected version. I appreciate this team’s transparency and priorities.

They could be more transparent by saying exactly which Firefox versions are affected, which is an accepted norm. Unfortunately, this is not the first time users have been left guessing.

It just says "Firefox and Firefox ESR" are affected... no versions published there https://www.mozilla.org/en-US/security/advisories/mfsa2020-0...

I assume some research into IonJIT will be done to see where it was introduced but by the sounds of what it does it could have been long ago.

Post by beatgammit » Sun, Jan 12, 2020, 5:07 AM UTC

dmix wrote: post #71

beezle wrote: post #69

Earlier quoted context omitted.

They could be more transparent by saying exactly which Firefox versions are affected, which is an accepted norm. Unfortunately, this is not the first time users have been left guessing.

It just says "Firefox and Firefox ESR" are affected... no versions published there https://www.mozilla.org/en-US/security/advisories/mfsa2020-0... I assume some research into IonJIT will be done to see where it was introduced but by the sounds of what it does it could have been long ago.

Those are the only two maintained versions of Firefox, so it makes complete sense for their report to be limited to those two. It seems a bit useless to go back and find the point in time where it first appeared, but I guess it could be interesting.

Re: Mozilla says a new Firefox security bug is under active attack

Re: Mozilla says a new Firefox security bug is under active attack