Mozilla Foundation developers have patched several vulnerabilities in updated versions of Firefox, Firefox ESR, and Thunderbird. The US cybersecurity agency CISA warns that attackers may misuse some of these vulnerabilities to gain control of affected systems.

Neither Firefox nor Thunderbird’s vulnerabilities are critical

in version 101 des Webbrowsers Firefox Programmers close eight vulnerabilities they categorize as high risk. Thus, four of the closed vacuoles represent medium risk and the other low risk.

In the version with long-term support, Firefox ESR 91.10, Developers Seal Seven high-risk leaks and one medium-risk leakage. Thunderbird 91.10 Equipped With fixes for eight high-risk and one medium-risk vulnerabilities.

The software developers do not classify any of the vulnerabilities as critical. But at the latest Warning from the US CISA agencywhich talks about possible takeovers of the system by malicious actors, should emphasize the urgency of the update.

Install updates quickly

Firefox and Thunderbird both have an automatic update mechanism for this. However, depending on the usage profile, it may take hours to days to find and set up the update. Users are therefore advised to check the installed version – this may also prompt to download and install the available update.

To do this, users have to open the application menu by clicking on the icon with three horizontal lines. Under “Helps” you will find the item “About Firefox”. Here the browser displays the currently installed version; If an update is available and installed, a restart of the browser may be required. To activate the new version must be carried out immediately.

In Thunderbird, the last menu item is called “About Thunderbird”. Linux users usually can’t use an integrated updater, but they have to wait for updated packages from their distribution. So you have to start the package manager and search for updates there and install them.

• Firefox: download quickly and safely from heise.de
• Thunderbird: download quickly and safely from heise.de

(DMK)