Mozilla closes at least six security gaps with the new browser version Firefox 104. Updates are also available for Firefox ESR and Thunderbird.
Mozilla has released Firefox 104.0 as well as Firefox ESR 102.2 and Firefox ESR 91.13.0. The developers mainly fixed vulnerabilities and other bugs. In addition, they have prescribed moderation in the browser’s resource and energy consumption. The profiler is now integrated into the developer tools and can analyze the power consumption.
The Firefox 104 update fixes at least six security vulnerabilities, most of which Mozilla identifies as high risk. Two vulnerabilities, one of which only affects the Android browser, are classified as low risk. Mozilla only lists vulnerabilities found internally in summary form, without specifying their number. According to Mozilla, one or the other of these could potentially be exploited to inject and execute code. Attacks on Firefox vulnerabilities are currently not known – in contrast to Chrome and Safari.
What’s new in Firefox 104
Mozilla has now integrated the profiler into the developer tools. It can analyze the processor and graphics unit power consumption caused by Firefox. However, this only works under Windows 11 and Macs with an M1 processor. Firefox reduces its power and resource consumption when the browser is minimized or running in the background. This works in the same way as before with background tabs.
▶The latest security updates
FirefoxESR
Version 102.2.0 of the new Firefox ESR 102.x generation released in June received its second security update. In it, the developers have plugged at least five gaps that Mozilla also closed in Firefox 104. Internally detected memory corruption could be exploited to execute injected code.
The update to Firefox ESR 91.13.0 closes at least three vulnerabilities, all of which are considered high risk. They are among the vulnerabilities that Mozilla also fixed in Firefox 104. This is the last update for Firefox ESR 91.x. If you are still using this version branch, prepare for the switch to the new generation 102.x, which will take place in September at the latest. An updated Tor Browser for Windows, macOS and Linux, based on Firefox ESR 91.13.0, will be available soon.
Thunderbird
With the latest update for the 91.x generation of the Thunderbird mail program to version 91.13.0, the MZLA developers have eliminated at least three vulnerabilities that the mail program inherited from Firefox in particular. Firefox code is used for HTML processing, among other things. Thunderbird 102.2 is a new update for the new mailer generation introduced in June. Five or more vulnerabilities are fixed here. There are also some bug fixes. The switch from Thunderbird 91.x to 102.x via automatic update has been possible for about two weeks.
Mozilla plans to release Firefox 105 and Firefox ESR 102.3 on September 20, with Firefox 106 and Firefox ESR 102.4 to follow on October 18.
