Friday, April 10, 2015

Vulnerabilities in Firefox fixed

Mozilla has released a new version of Firefox web browser fixing two issues of which one critical and one high (this one affecting only Firefox for Android and pre-release versions of Desktop Firefox).

Affected products are:
- Mozilla Firefox earlier than 37.0.1

Links to the security advisories with details about addressed security issues:
MFSA 2015-44 Certificate verification bypass through the HTTP/2 Alt-Svc header
MFSA 2015-43 Loading privileged content through Reader mode

Fresh versions can be obtained via inbuilt updater or by downloading from the product site.

No comments: