casimg.blogg.se - Firefox esr download

CVE-2023-29540: Iframe sandbox bypass using redirects and sourceMappingUrls.

CVE-2023-29539: Content-Disposition filename truncation leads to Reflected File Download.

CVE-2023-29538: Directory information could have been leaked to WebExtensions.

CVE-2023-29537: Data Races in font initialization code.

CVE-2023-29536: Invalid free from JavaScript code.

CVE-2023-29535: Potential Memory Corruption following Garbage Collector compaction.

MFSA-TMP-2023-0001: Double-free in libwebp.

CVE-2023-29534: Fullscreen notification could have been obscured on Firefox for Android.

CVE-2023-29533: Fullscreen notification obscured.

CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass.CVE-2023-29531: Out-of-bound memory access in WebGL on macOS.The following 22 vulnerabilities have been addressed in Firefox version 112, out of which 10 are deemed of high importance: The deprecated U2F Javascript API is now disabled by default. The U2F protocol can still be used via the WebAuthn API. However, the U2F API can be reactivated via the 2f preset. Previously you could close a tab with the key combination Cmd/Ctrl-Shift-T. Now you can also use this keyboard shortcut to restore the previous session if there are no more closed tabs from the same session to reopen.You can now close tabs by middle-clicking items in the tab list box in the tab bar.Ubuntu Linux users can now import their browser data from the Chromium snap package. Currently, this only works if Firefox isn’t also installed as a snap package, but work is in progress to fix this!.Right-clicking a password field now shows an option to reveal the password.The following list of updates is introduced in Firefox 112: New in Firefox 112 Features and Improvements Compatibility: Windows 11, 10, 8.1, 8, 7 (32-bit and 64-bit), Linux, MacOS, iOS, and Android.

Release Date: Tuesday, April 11th, 2023.