
3 Dec
2022
3 Dec
'22
20:50
Sat, 3 Dec 2022 14:14:13 -0600 Larry Len Rainey <llrainey15@gmail.com> :
The US Cert team has advised bank of a zero day exploit on Firefox below 107. So all login attempts are blocked for Firefox less than 107.
The code from the Cert team does not provide for esr versions.
The problem is Windows machines have been compromised - not man Linux machines have. Best I can tell is a "rust based malware" can be installed on versions prior to 107. Firefox and Thunderbird 107 prevent the "rust based malware" from running.
Good to know, I've got 91.8-esr but my bank uses 2-step verification, one option in which are security questions of my own.