CVE-2022-34485 Mozilla developers found vulnerabilities in Firefox 101.

It is highly recommended to upgrade your installations to latest stable version as soon as possible. For Debian/Ubuntu users there are repositories with latest stable versions of Firefox and Thunderbird available. Upgrade instructions can be found here.
If you cannot upgrade or don’t want to, there are workarounds available. Details about these can be found here. In case you cannot upgrade or don’t want to, there are workarounds available. Details about these can be found here.

Upgrade to the latest stable version of Firefox and Thunderbird

The latest stable version of Firefox and Thunderbird is highly recommended, as it is much more secure than older versions. There are a number of reasons to upgrade, including the fact that they're updated more often than older versions, they have many security fixes, and they will stop working on newer versions of Debian/Ubuntu.
For Debian/Ubuntu users there are repositories with latest stable versions of Firefox and Thunderbird available. Upgrade instructions can be found here.
If you cannot upgrade or don’t want to, there are workarounds available. Details about these can be found here.

What is Firefox and Thunderbird?

Firefox is a free and open-source web browser developed by Mozilla. It is available for Windows, macOS, Linux, Android, and iOS.
Thunderbird is an email client by Mozilla and related projects that provides additional features to the email service of the same name and operates mainly on platforms such as Microsoft Windows, macOS and Linux. Thunderbird also provides support for SeaMonkey as an alternative to Firefox ESR.
Both Firefox and Thunderbird have been released under the GNU General Public License.

Upgrade to latest stable version of Thunderbird

For Debian/Ubuntu users there are repositories with latest stable versions of Firefox and Thunderbird available. Upgrade instructions can be found here.

Yandex.Browser

- Workarounds
Yandex.Browser is a standalone web browser which embeds the Mozilla Firefox ESR (Extended Support Release) browser engine and its own layout engine, Gecko. This means that Yandex.Browser does not require Mozilla Firefox or any other browser to run, and it can be used on any computer with a supported operating system. The version of Yandex.Browser available in Debian/Ubuntu is 38.0-2.

Timeline

Published on: 12/22/2022 20:15:00 UTC
Last modified on: 12/30/2022 18:14:00 UTC

References