In particular, although Mozilla admits that some of the memory management bugs that were fixed in Firefox 99.0 might be exploitable “with enough effort”, no working exploits are yet known.Īnd with no known exploits at all, clearly there are no known exploits that were already being used the Bad Guys, or zero-days as they’re called in the jargon.ĭespite the apparently low risk this month, all security holes bring with them some danger, or they wouldn’t be given CVE bug numbers and listed in security advisories, so we recommend updating as soon as you can.Ĭlick the Menu button (three lines) at the top right of your Firefox window, then click Help, and select About Firefox. 99.0.)įortunately, as in the April 2022 Google Android update we just wrote about that happened to arrive on the same day, there were no critical security fixes and no zero-day holes patched. (Thus, 91.8 ESR has the feature set of Firefox 91.0, plus the same 8 sets of four-weekly security patches that came out in the intervening full releases, thus aligning it security-wise with version (91+8).0, i.e. The regular version of Firefox is now 99.0, while the Extended Support Release, which gets security fixes without any feature updates, is now 91.8.0 ESR.Īdd together the first two numbers in the ESR release triplet and you should get the same value as the first number in the regular release. The once-every-four-weeks security update to Mozilla’s Firefox browser officially arrived today.

New firefox update