Mozilla Firefox Version 89.0 Released With Security Updates

 

Mozilla sent Firefox Version 89.0 to the release channel today.  The update includes eight security updates of which one (1) is rated high, five (5) moderate and two (2) rated low.

 

Firefox ESR was updated to Version 78.11.

 

High

 

• #CVE-2021-29967: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.1
  
  

Moderate

 

• #CVE-2021-29960: Filenames printed from private browsing mode incorrectly retained in preferences
• #CVE-2021-29961: Firefox UI spoof using `<select>` elements and CSS scaling
• #CVE-2021-29963: Shared cookies for search suggestions in private browsing mode
• #CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message
• #CVE-2021-29966: Memory safety bugs fixed in Firefox 89
  

 

Low

 

• #CVE-2021-29959: Devices could be re-enabled without additional permission prompt
• #CVE-2021-29962: No rate-limiting for popups on Firefox for Android

 

New

Mozilla made many new changes, best viewed in the illustrated Release Notes. 

Fixed

• Colors in Firefox on macOS will no longer be saturated on wide gamut displays, untagged images are properly treated as sRGB, and colors in images tagged as sRGB will now match CSS colors.
• In full screen mode on macOS, moving your mouse to the top of the screen will no longer hide your tabs behind the system menu bar.
• Also in full screen mode on macOS, it is now possible to hide the browser toolbars for a fully immersive full screen experience. This brings macOS in line with Windows and Linux.

Update 

To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References

• Security Updates
• Release Notes
• Rapid Release Calendar
  
  

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...