Mozilla sent Firefox Version 124.0 to the release channel. Firefox ESR was updated to Version 115.9.
The update includes eleven security updates of which six (6) are rated high, four (4) are rated moderate, and one (1) is rated low.
High
#CVE-2024-2605: Windows Error Reporter could be used as a Sandbox escape vector
#CVE-2024-2606: Mishandling of WASM register values
#CVE-2024-2607: JIT code failed to save return registers on Armv7-A
#CVE-2024-2608: Integer overflow could have led to out of bounds write
#CVE-2024-2614: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9
#CVE-2024-2615: Memory safety bugs fixed in Firefox 124
Moderate
#CVE-2023-5388: NSS susceptible to timing attack against RSA decryption
#CVE-2024-2609: Permission prompt input delay could expire when not in focus
#CVE-2024-2610: Improper handling of html and body tags enabled CSP nonce leakage
Low
#CVE-2024-2612: Self referencing object could have potentially led to a use-after-free
New
Caret browsing mode now also works in the PDF viewer. (Learn more)
In Firefox View, open tabs can now be sorted by either recent activity or tab order. Recent activity is the default setting.
Firefox now populates the Windows taskbar jump list more efficiently, which should allow for a smoother overall browsing experience.
Firefox on Mac now uses the macOS fullscreen API for all types of fullscreen windows. This should better match the expected macOS user experience for fullscreen spaces, menubar and the Dock.
As of Firefox 124, Qwant's availability has been expanded to all languages in the France region along with Belgium, Italy, Netherlands, Spain, and Switzerland.
Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox." Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.
References
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
No comments:
Post a Comment