Tuesday, May 12, 2015

Mozilla Firefox Version 38.0 Released with Security Updates

Mozilla sent Version 38.0 to the release channel.  The update includes five (5) critical, five (5) high, two (two) moderate and one (1) low security updates.

Fixed in Firefox 38

  • 2015-58 -- Mozilla Windows updater can be run outside of application directory
  • 2015-57 -- Privilege escalation through IPC channel messages
  • 2015-56 -- Untrusted site hosting trusted page can intercept webchannel responses
  • 2015-55 -- Buffer overflow and out-of-bounds read while parsing MP4 video metadata
  • 2015-54 -- Buffer overflow when parsing compressed XML
  • 2015-53 -- -- Use-after-free due to Media Decoder Thread creation during shutdown
  • 2015-52 -- Sensitive URL encoded information written to Android logcat
  • 2015-51 -- Use-after-free during text processing with vertical text enabled
  • 2015-50 -- Out-of-bounds read and write in asm.js validation
  • 2015-49 -- Referrer policy ignored when links opened by middle-click and context menu
  • 2015-48 -- Buffer overflow with SVG content and CSS
  • 2015-47 -- Buffer overflow parsing H.264 video with Linux Gstreamer
  • 2015-46 -- Miscellaneous memory safety hazards (rv:38.0 / rv:31.7)

What’s New

  • New -- New tab-based preferences
  • New -- Ruby annotation support
  • New --  Base for the next ESR release.
  • Changed --  autocomplete=off is no longer supported for username/password fields
  • Changed -- URL parser avoids doing percent encoding when setting the Fragment part of the URL, and percent decoding when getting the Fragment in line with the URL spec
  • Changed -- RegExp.prototype.source now returns "(?:)" instead of the empty string for empty regular expressions
  • Changed -- Improved page load times via speculative connection warmup
  • See the Release Notes for HTML5 and Developer updates.

Known Issues

  • unresolved -- Responsive images do not update when the enclosing viewport changes


To get the update now, select "Help" from the Firefox menu at the upper left of the browser window, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.


Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

No comments: