Firefox Vulnerability Note

[TWPonKubuntu]

This is apparently not so malicious that it requires an immediate fix.

The Firefox fix is to be released on the next normal release date, Sept 20

http://arstechnica.com/security/2016...bility-as-tor/

Still, if you rely on a Certificate Authority, you might want to investigate sooner.

[WaltS48]

When will Ubuntu have the Firefox update available?

[TWPonKubuntu]

Ubuntu (Canonical) is usually ready within a day. Since they have had prior warning...
check for updates daily.

[TWPonKubuntu]

Ubuntu released their updates today (9/20/16) but Firefox is NOT listed.

Firefox released their update (V 49) also today. This is the version with the fix which is the topic of this thread.

You can, if you want, directly download Firefox 49 from Mozilla, or you can wait until Ubuntu processes this version into their update stream. If you directly download from Mozilla, it will PROBABLY NOT replace the Kubuntu/Ubuntu version. It will install a separate version, probably in your ~/home/xxx directory. This will work, if you want to begin using the fixed Firefox immediately.

If you are not comfortable installing Firefox outside of the distribution, then wait until it arrives in the normal Kubuntu/Update update stream. I expect this will happen soon (hopefully, crossing fingers, toes and eyes to make this happen...).

[TWPonKubuntu]

More information on the bug which required this fix (which has still not made it to the Ubuntu distribution...).

http://arstechnica.com/security/2016...w-we-know-why/

The malicious bug had a rotating attack window, making it much harder to target during periods of activity.

[TWPonKubuntu]

The Firefox update, from V 48 to V 49 came down with this morning's Kubuntu files and fixes.