Update your Firefox browser now, there's an emergency patch you'll want

[Eugene]

Source: The Verge

Update your Firefox browser now, there’s an emergency patch you’ll want

Hackers are actually exploiting this zero-day flaw, a researcher warns

By Sean Hollister Jun 18, 2019, 5:44pm EDT

Are you running Firefox version 67.0.3 or Firefox ESR 60.7.1? If the answer is “no,” or you’re not sure, maybe just update your web browser now. Firefox maker Mozilla is warning (via ZDNet) that the browser has a zero-day flaw that’s actively being exploited in the wild — you don’t see that every day — and it has issued an emergency patch that can let you plug that hole right now.

Here’s the full description of the issue:

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw.

Updating Firefox can be as easy as restarting the browser, though you can also tap the hamburger icon on the upper-right hand corner, type “Update” into the search box and hit that “Restart to update Firefox” button to be sure.

-snip-

Read more: https://www.theverge.com/2019/6/18/18684272/firefox-zero-day-flaw-browser-attacks-crypto-patch

______________________________________________________________________

Related:
• Mozilla Foundation Security Advisory 2019-18 (Mozilla)
• Mozilla patches Firefox zero-day abused in the wild (ZDNet)

[Lithos]

1. I think 67.0.3 fixed it

https://www.mozilla.org/en-US/firefox/67.0.3/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew

67.0.3 came out today.

[mr_lebowski]

2. Yeah, message is a bit unclear ... 67.0.3 is what you WANT to be updated to

If you're behind that number, you should update.

And if you're quite a bit behind that, you may have to restart a few times.

To see where you're at, version-wise, hit the hamburger, options, then scroll down to Firefox Update section.

[deek]

3. thank you nt

.

[trueblue2007]

4. I GUESS I'LL DO IT. i have an old edition cuz i didn't like what they did to the newer version

[AllyCat]

5. Hamburger icon?

Huh?

[phylny]

8. Upper right-hand side, three horizontal lines.

[AllyCat]

10. Ohhhh....thanks.

I was really looking for a hamburger!

[Blecht]

6. Thanks. NT

[LittleGirl]

7. Click, Help and then About

tells you what version you're using too. There's an update button there too.
Thanks for the heads up!

[PDittie]

9. It's Time to Switch to a Privacy Browser

There's a new battleground in the browser wars: user privacy. Firefox just made its Enhanced Tracking Protection a default feature, Apple continues to pile privacy-focused features into its Safari browser, and people are more aware than ever before of the sort of information they can reveal every time they set a digital footprint on the web.

If you want to push back against online tracking, you've got several options to pick from when choosing a default browser. These are the browsers that put user privacy high on the list of their priorities.

https://www.wired.com/story/privacy-browsers-duckduckgo-ghostery-brave/