Mozilla has released Firefox 158.0.1, addressing the compromise of eight eMudhra digital certificates.
This update ensures that the certificate revocations, previously managed via OneCRL, are fully enforced, protecting users who have disabled automatic updates.
Beyond security, the release includes fixes for VPN activation, JPEG XL transparency, and display issues on Linux.
Protection against counterfeit certificates
The most serious issue addressed by the new version concerns the revocation of eight digital certificates from the eMudhra authority. Digital certificates act as identities that confirm that a website is indeed who it claims to be.
Because the digital keys for these certificates were exposed, third parties could potentially use them to spoof websites. Mozilla had already revoked these certificates on October 17th through a mechanism that automatically updates in the background. With the new version, the revocation is built directly into the browser, offering additional protection even for users who have disabled automatic security updates.
Additional improvements
The update also resolves several issues that some users may have noticed:
READ ALSO
Eight eMudhra digital certificates found compromised
- Fixed a bug where the page would automatically scroll to the top when selecting text.
- Resolved an issue that prevented the built-in VPN service from being enabled.
- Fixed an issue with the display of windows on Linux computers using multiple monitors.
- Fixed brightness and transparency issues when viewing images in JPEG XL format.
Most users will receive the update automatically. Specifically, users in a Linux Snap environment receive the upgrade automatically in the background.
G
Hacks.gr on Google
Set it as your preferred source for cybersecurity updates.
Preferred source
