Thursday, January 04, 2018

Mozilla Firefox Version 57.0.4 Released to Address "Meltdown" and "Spectre"


FirefoxMozilla sent Firefox Version 57.0.4 to the release channel to address the "Meltdown" and "Spectre" timing attacks.  As of this posting, the has not been an update released for Firefox ESR.*  The update includes one High security update and is discussed in the Mozilla Security Blog at Mitigations landing for new class of timing attack | Mozilla Security Blog.

*Edit Note: From Speculative execution side-channel attack ("Spectre") — Mozilla, "SharedArrayBuffer is already disabled in Firefox 52 ESR."

Security Update

  • 2018-01 -- Speculative execution side-channel attack ("Spectre")

      Update:

      To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

      References




      Remember - "A day without laughter is a day wasted."
      May the wind sing to you and the sun rise in your heart...

      No comments: