Tuesday, March 14, 2023

Mozilla Firefox Version 111.0 Released with Security Updates

 FirefoxMozilla sent Firefox Version 111.0 to the release channel today.  The update includes nineteen security updates of which seven (7) are rated high and six (6) rated moderate.

Firefox ESR was updated to Version 102.9.

High

#CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android

#CVE-2023-25748: Fullscreen Notification could have been hidden by window prompts on Android

#CVE-2023-25749: Firefox for Android may have opened third-party apps without a prompt

#CVE-2023-25750: Potential ServiceWorker cache leak during private browsing mode

#CVE-2023-25751: Incorrect code generation during JIT compilation

#CVE-2023-28176: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9

#CVE-2023-28177: Memory safety bugs fixed in Firefox 111


Moderate


#CVE-2023-28160: Redirect to Web Extension files may have leaked local path

#CVE-2023-28164: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation

#CVE-2023-28161: One-time permissions granted to a local file were extended to other local files loaded in the same tab

#CVE-2023-28162: Invalid downcast in Worklets

#CVE-2023-25752: Potential out-of-bounds when accessing throttled streams

#CVE-2023-28163: Windows Save As dialog resolved environment variables 


New

  • Windows native notifications are now enabled.
  • Firefox Relay users can now opt-in to create Relay email masks directly from the Firefox credential manager. You must be signed in with your Firefox Account.
  • We’ve added two new locales: Silhe Friulian (fur) and Sardinian (sc).
Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References:



Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

No comments: