Spectre Meltdown

[ndebord]

Will the next release of SeaMonkey offer a solution? Such as adopting a performance-timing resolution to prevent timing-based hardware-specific attacks as Basilisk does.

[WaltS48]

Will the next release of SeaMonkey offer a solution? Such as adopting a performance-timing resolution to prevent timing-based hardware-specific attacks as Basilisk does.

Last I heard, SeaMonkey 2.49.2 based on ESR 52.6.0 should be available in 2-3 weeks after ESR 52.6.0 is released.

[ndebord]

Will the next release of SeaMonkey offer a solution? Such as adopting a performance-timing resolution to prevent timing-based hardware-specific attacks as Basilisk does.

Last I heard, SeaMonkey 2.49.2 based on ESR 52.6.0 should be available in 2-3 weeks after ESR 52.6.0 is released.

WaltS48,

Thanks, wasn't sure that Fx would backport fixes to ESR 52.

P.S. Saw this over in the Firefox forum: "Update [January 4, 2018]: We have released the two timing-related mitigations described above with Firefox 57.0.4, Beta and Developers Edition 58.0b14, and Nightly 59.0a1 dated “2018-01-04” and later. Firefox 52 ESR does not support SharedArrayBuffer and is less at risk; the performance.now() mitigations will be included in the regularly scheduled Firefox 52.6 ESR release on January 23, 2018"

[ElTxolo]

Will the next release of SeaMonkey offer a solution? Such as adopting a performance-timing resolution to prevent timing-based hardware-specific attacks ...

https://www.mozilla.org/security/advisories/mfsa2018-01/


SharedArrayBuffer is already disabled in Firefox 52 ESR.




From the https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/


Update [January 4, 2018]: We have released the two timing-related mitigations described above with Firefox 57.0.4, Beta and Developers Edition 58.0b14, and Nightly 59.0a1 dated “2018-01-04” and later. Firefox 52 ESR does not support SharedArrayBuffer and is less at risk; the performance.now() mitigations will be included in the regularly scheduled Firefox 52.6 ESR release on January 23, 2018

[ndebord]

Thanks, like the links.

[ElTxolo]

Thanks, like the links.