Mozilla Firefox Version 65.0 Released with Security Updates

Mozilla sent Firefox Version 65.0 to the release channel today.  Firefox ESR has been updated to Version 60.5.
The update included seven (7) security updates of which three (3) are critical, three (3) are high, and one (1) is rated low.

Critical

• CVE-2018-18500: Use-after-free parsing HTML5 stream
  

  CVE-2018-18502: Memory safety bugs fixed in Firefox 65
  

  CVE-2018-18501: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5

High

• CVE-2018-18503: Memory corruption with Audio Buffer
• CVE-2018-18504: Memory corruption and out-of-bounds read of texture client buffer
• CVE-2018-18505: Privilege escalation through IPC channel messages

Moderate

• CVE-2018-18506: Proxy Auto-Configuration file can define localhost access to be proxied

New

• Enhanced tracking protection: Simplified content blocking settings give users standard, strict, and custom options to control online trackers. A redesigned content blocking section in the site information panel (viewed by expanding the small “i” icon in the address bar) shows what Firefox detects and blocks on each website you visit. To learn more about content blocking, visit the Mozilla Blog.
  
• A better experience for multilingual users: An updated Language section in Preferences allows users to install multiple language packs and order language preferences for Firefox and websites, without having to download locale-specific versions.
  
• Support for Handoff on macOS: Continue browsing across devices. Pick up where you left off with iOS (via Firefox or Safari) on Firefox on Mac.
  
• A better video streaming experience for Windows users: Firefox now supports the next-generation, royalty-free video compression technology called AV1. Read about Mozilla’s contribution to this new open standard.
  
• Improved performance and web compatibility, with support for the WebP image format: WebP brings the same image quality as existing formats at smaller file sizes, which saves bandwidth and speeds up page load.
  

Changed

• Enhanced security for macOS, Linux, and Android users via stronger stack smashing protection which is now enabled by default for all platforms. "Stack smashing" is a common security attack in which malicious actors corrupt or take control of a vulnerable program.
  
• Firefox will now warn you when closing a window (regardless of whether you have automatic session restore enabled for restart).
  
• Easier performance management: The revamped Task Manager page found at about:performance now reports memory usage for tabs and add-ons.
  
• Improved the pop-up blocker to prevent multiple pop-up windows from being opened by websites at the same time.
  

Enterprise

• Firefox for Windows is now available with 32- and 64-bit MSI installers for easier enterprise deployments.
  

Developer

• Additional support for Flexbox: Launched a new Flexbox inspector tool that details Flexbox containers and helps debug Flex item sizes.
  
• All CSS changes made in the Rules panel are now tracked in the new Changes tab.
  
• Added support for the Storage Access API on desktop platforms.
  

Update:  To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References

• Common questions after updating Firefox
• Security Updates
• Mozilla Firefox Release Notes
• Rapid Release Calendar

Remember - "A day without laughter is a day wasted." May the wind sing to you and the sun rise in your heart...

Pale Moon Version 28.3.1 Released

Pale Moon has been updated to version 28.3.1.  This is a minor bugfix and stability release. The Linux versions will follow.

From the Release Notes:

If you are using a language pack, please make sure you have the matching version for this browser version installed. Some strings were added for Captive Portal detection (see below) and outdated language packs will cause blank preference pages.

Changes/fixes:

• Improved toolbar icon display for all DPIs on Windows.
• Disabled the IntersectionObserver API by default while we work on resolving crashes caused by it.
• Added isIntersecting to the IntersectionObserver API per specification.
• Added an option to the preferences window to enable Captive Portal detection (Advanced -> General). If your network connection regularly encounters Captive Portals (e.g. using a laptop on the road or other WiFi connections that require login or agreement to terms) then enabling this detection may make your use of such networks more convenient.
  For those worried about privacy: the detection service makes use of our own infrastructure and does not contact third parties like Apple or Google.

Download:

• Pale Moon for Windows
• Pale Moon for Linux

Update

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft Cumulative Update Released for Windows 10 Version 1809

Microsoft has released a cumulative update with non-security improvements and fixes for Windows 10 version 1809.  This update includes quality improvements with no new operating system features introduced. 

The update is available from Windows Update or the Microsoft Update Catalog.  See KB4476976 improvements and fixes.

Note:

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU.  If you are using Windows Update, the latest SSU (KB4470788) will be offered to you automatically. To get the stand-alone package for the latest SSU, go to the Microsoft Update Catalog.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...