Alarm raised over Mozilla VPN client for Linux

stapp · Aug 5, 2023

A security engineer at Linux distro maker SUSE has published an advisory for a flaw in the Mozilla VPN client for Linux that has yet to be addressed in a publicly released fix because the disclosure process went off the rails.
In a post to the Openwall security mailing list, Matthias Gerstner describes a broken authentication check in Mozilla VPN client v2.14.1, released on May 30.
Click to expand...

https://www.theregister.com/2023/08/04/mozilla_vpn_linux_flaw/

stapp · Aug 8, 2023

Updated to add
"We acknowledge that our communication regarding this bug report could have been more precise, given our commitment to be responsive and collaborative partners," a Mozilla spokesperson said in a statement to The Register.
"We have been working to implement improvements to address the issue, and as a result, will advance the timing of this fix in a special release of 2.16.1 for Linux on August 11th, 2023."
Click to expand...

https://www.theregister.com/2023/08/04/mozilla_vpn_linux_flaw/

bellgamin · Aug 27, 2023

@stapp -- Aloha! Long time no see.

@ whoever - did the Aug 11 fix take place as scheduled?

stapp · Aug 27, 2023

According to the last post here the fix was made available.

https://bugzilla.mozilla.org/show_bug.cgi?id=1831318

Glad to see you here @bellgamin ... and safe.

Log in or Sign up

Alarm raised over Mozilla VPN client for Linux

stapp Global Moderator

stapp Global Moderator

bellgamin Registered Member

stapp Global Moderator

Log in or Sign up

Alarm raised over Mozilla VPN client for Linux

stapp Global Moderator

stapp Global Moderator

bellgamin Registered Member

stapp Global Moderator

Useful Searches