2 ms·

A warning and a fix within two days of releasing the affected version. I appreciate this team’s transparency and priorities.

• sp332 7y ago
  Well, it also affected 68 ESR which was released in July, so detection wasn't that fast.
  • zamadatix 7y ago
    And it likely existed many years before that but these were the only 2 active versions to get a patch.
• beezle 7y ago
  They could be more transparent by saying exactly which Firefox versions are affected, which is an accepted norm. Unfortunately, this is not the first time users have been left guessing.
  • dmix 7y ago
    It just says "Firefox and Firefox ESR" are affected... no versions published there https://www.mozilla.org/en-US/security/advisories/mfsa2020-03/ https://www.mozilla.org/en-US/security/advisories/mfsa2020-0... I assume some research into IonJIT will be done to see where it was introduced but by the sounds of what it does it could have been long ago.
    • beatgammit 7y ago
      Those are the only two maintained versions of Firefox, so it makes complete sense for their report to be limited to those two. It seems a bit useless to go back and find the point in time where it first appeared, but I guess it could be interesting.