Firefox 127.0.2 release now available

[1PW]

Hello All:

Version 102.0.1, first offered to Release channel users on July 6, 2022.

https://www.mozilla.org/firefox/102.0.1/releasenotes/

Quote

Fixed

• Various stability fixes

• Fixed bookmark shortcut creation by dragging to Windows File Explorer and dropping partially broken (bug 1774683)

• Fixed bookmarks sidebar flashing white when opened in dark mode (bug 1776157)

• Fixed multilingual spell checking not working with content in both English and a non-Latin alphabet (bug 1773802)

• Developer tools: Fixed an issue where the console output keep getting scrolled to the bottom when the last visible message is an evaluation result (bug 1776262)

• Fixed Delete cookies and site data when Firefox is closed checkbox getting disabled on startup (bug 1777419)

No security fixes - just a few regressions, etc.

Thank you.

Edited July 6, 2022 by 1PW

[1PW]

Hello All:

Version 103.0, first offered to Release channel users on July 26, 2022.

https://www.mozilla.org/firefox/103.0/releasenotes/

Spoiler

New

• Improved responsiveness on macOS during periods of high CPU load by switching to a modern lock API.

• Do you always forget something? Required fields are now highlighted in PDF forms.

• Improved performance on high-refresh rate monitors (120Hz+).

• Enjoying Picture-in-Picture subtitles feature? It just got better: you can now change subtitles font size directly from the PiP window. Additionally, PiP subtitles are now available at Funimation, Dailymotion, Tubi, Hotstar, and SonyLIV.

• Buttons in the Tabs toolbar can now be reached with Tab, Shift+Tab, and Arrow keys. View this article for additional details.

• Windows' "Make text bigger" accessibility setting now affects all the UI and content pages, rather than only applying to system font sizes.

• Rejoice! You can now conveniently access Firefox, which will now be pinned to the Windows taskbar during installation on Windows 10 and 11. (This will also allow for Firefox to be launched quicker after installing.)

 

Fixed

• Non-breaking spaces are now preserved—preventing automatic line breaks—when copying text from a form control.

• Fixed WebGL performance issues on NVIDIA binary drivers via DMA-Buf on Linux.

• Fixed an issue in which Firefox startup could be significantly slowed down by the processing of Web content local storage. This had the greatest impact on users with platter hard drives and significant local storage.

• Various security fixes.

 

Changed

• Removed a configuration option to allow SHA-1 signatures in certificates: SHA-1 signatures in certificates—long since determined to no longer be secure enough—are now not supported.

https://www.mozilla.org/en-US/security/advisories/mfsa2022-28/

8 Security fixes - 2 high, 4 moderate and 2 low:

Spoiler

Mozilla Foundation Security Advisory 2022-28

Security Vulnerabilities fixed in Firefox 103

Announced

July 26, 2022

Impact

moderate

Products

Firefox

Fixed in

• Firefox 103

#CVE-2022-36319: Mouse Position spoofing with CSS transforms

Reporter

Irvan Kurniawan

Impact

moderate

Description

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed.

References

• Bug 1737722

#CVE-2022-36317: Long URL would hang Firefox for Android

Reporter

Irwan

Impact

moderate

Description

When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this could lead to a permanent Denial of Service.
This bug only affects Firefox for Android. Other operating systems are unaffected.

References

• Bug 1759951

#CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters

Reporter

Gijs Kruitbosch

Impact

moderate

Description

When visiting directory listings for chrome:// URLs as source text, some parameters were reflected.

References

• Bug 1771774

#CVE-2022-36314: Opening local <code>.lnk</code> files could cause unexpected network loads

Reporter

akucybersec

Impact

moderate

Description

When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system.
This bug only affects Firefox for Windows. Other operating systems are unaffected.*

References

• Bug 1773894

#CVE-2022-36315: Preload Cache Bypasses Subresource Integrity

Reporter

Hiroshige Hayashizaki

Impact

low

Description

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata.

References

• Bug 1762520

#CVE-2022-36316: Performance API leaked whether a cross-site resource is redirecting

Reporter

Jannis Rautenstrauch

Impact

low

Description

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect.

References

• Bug 1768583

#CVE-2022-36320: Memory safety bugs fixed in Firefox 103

Reporter

Mozilla developers and community

Impact

high

Description

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

References

• Memory safety bugs fixed in Firefox 103

#CVE-2022-2505: Memory safety bugs fixed in Firefox 103 and 102.1

Reporter

Mozilla developers and community

Impact

high

Description

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

References

• Memory safety bugs fixed in Firefox 103

Thank you.

Edited July 26, 2022 by 1PW

[AdvancedSetup]

Bad timing. I just checked my version before heading to sleep at 3:30 AM and there was no update. Now there is. 😄

 

[David H. Lipman]

                                                                                                                         

[1PW]

Hello All:

Version 103.0.1, first offered to Release channel users on August 1, 2022

http://Version 103.0.1, first offered to Release channel users on August 1, 2022

Spoiler

New

• Enabled hardware acceleration on newer AMD cards.

Fixed

• Fixed a crash on Firefox shutdown caused by a bug in the audio manager.

Thank you.

[1PW]

Hello All:

Version 103.0.2, first offered to Release channel users on August 9, 2022.

https://www.mozilla.org/en-US/firefox/103.0.2/releasenotes/

Three (3) fixes.

Spoiler

Fixed

• Fixed menu shortcuts for users of the JAWS screen reader.

• Fixed an occasional non-overridable certificate error when accessing device configuration pages.

• Fixed an issue with Picture-in-Picture displaying in fullscreen on macOS.

Thank you.

[1PW]

Hello All:

Version 104.0, first offered to Release channel users on August 23, 2022

https://www.mozilla.org/en-US/firefox/104.0/releasenotes/

Spoiler

New

• Subtitles are now available for Disney+ in Picture-in-Picture.

• Firefox now supports both the scroll-snap-stop property as well as re-snapping. You can use the scroll-snap-stop property's always and normal values to specify whether or not to pass the snap points, even when scrolling fast. Re-snapping tries to keep the last snap position after any content/layout changes.

• The Firefox profiler can analyze the power usage of a website (Apple M1 and Windows 11 only).

  

• The Firefox UI itself will now be throttled for performance and battery usage when minimized or occluded, in the same way, background tabs are.

Fixed

• The highlight color is preserved correctly after typing Enter in the mail composer of Yahoo Mail and Outlook.

• After bypassing the https-only error page navigating back would take you to the error page that was previously dismissed. Back now takes you to the previous site that was visited.

• Paste unformatted shortcut (shift+ctrl/cmd+v) now works in plain text contexts, such as input and text area.

• Various security fixes.

 

6 Security Vulnerabilities Fixed: 4 High and 2 low:

https://www.mozilla.org/en-US/security/advisories/mfsa2022-33/

Thank you.

 

Edited August 23, 2022 by 1PW

[1PW]

Hello All:

Version 104.0.1, first offered to Release channel users on August 30, 2022

https://www.mozilla.org/en-US/firefox/104.0.1/releasenotes/

Fixed

• Addresses an issue with YouTube video playback that was affecting some users.

Thank you.

[sten2]

Version 104.0.2, first offered to Release channel users on September 6, 2022.

 

Fixed:

• Fixed a bug making it impossible to use touch or a stylus to drag the scrollbar on pages (bug 1787361).

• Fixed an issue causing some users to crash in out-of-memory conditions (bug 1774155).

• Fixed an issue that would sometimes affect video & audio playback when loaded via a cross-origin iframe src attribute (bug 1781759).

• Fixed an issue that would sometimes affect video & audio playback when served with Content-Security-Policy: sandbox (bug 1781063).

https://www.mozilla.org/en-US/firefox/104.0.2/releasenotes/

Edited September 6, 2022 by AdvancedSetup
Modified and removed lengthy campaign URL link

[sten2]

Version 105.0, first offered to Release channel users on September 20, 2022

Fixed:

• Stability on Windows is significantly improved as Firefox handles low-memory situations much better.

• Touchpad scrolling on macOS was made more accessible by reducing unintended diagonal scrolling opposite of the intended scroll axis.

• Firefox is less likely to run out of memory on Linux and performs more efficiently for the rest of the system when memory runs low.

• Various security fixes.

https://www.mozilla.org/en-US/firefox/105.0/releasenotes/

[sten2]

Version 105.0.1, first offered to Release channel users on September 23, 2022

Fixed: Reverted focus behavior for new windows back to the content area instead of the address bar (bug 1784692)

https://www.mozilla.org/en-US/firefox/105.0.1/releasenotes/

[1PW]

Hello All:

Version 105.0.2, first offered to Release channel users on October 4, 2022

Five (5) fixes.

Spoiler

Fixed

• Fixed poor contrast on various menu items with certain themes on Linux systems (bug 1792063)

• Fixed the scrollbar appearing on the wrong side of select elements in right-to-left locales (bug 1791219)

• Fixed a possible deadlock when loading some sites in Troubleshoot Mode (bug 1786259)

• Fixed a bug causing some dynamic appearance changes to appear when expected (bug 1786521)

• Fixed a bug causing theme styling to not be properly applied to sidebars for some add-ons in Private Browsing Mode (bug 1787543)

Thank you.

[1PW]

Hello All:

Version 105.0.3, first offered to Release channel users on October 7, 2022

Quote

Fixed

• Mitigated frequent crashes for Windows users with Avast or AVG Antivirus software installed (bug 1794064)

Thank you.

[sten2]

Hello All:

Version 106.0

https://www.mozilla.org/en-US/firefox/106.0/releasenotes/

Fixed:

• Various security fixes.

 

[1PW]

Hello All:

Version 106.0.1, first offered to Release channel users on October 20, 2022

Quote

Fixed

• Addresses a crash experienced by users with AMD Zen 1 CPUs. (bug 1796126)

Thank you.

[David H. Lipman]

Already ?            

[AdvancedSetup]

Yes, there was an AMD crash fix

 

[1PW]

Hello All:

Version 106.0.2, first offered to Release channel users on October 26, 2022

Quote

Fixed

• Fix missing content on some PDF forms (bug 1794351).

• Fix column width for the Notification sub-panel in Settings (bug 1793558).

• Fix a browser freeze with accessibility enabled on some sites such as the Proxmox Web UI (bug 1793748).

• Fix page reloading not working with Firefox View and not refreshing synced data (bug 1792680 and bug 1794474).

• Fix browser not opening if installed from the Windows Store (Bug 1796391).

Thank you.

[1PW]

Hello All:

Version 106.0.3, first offered to Release channel users on October 31, 2022

Quote

Fixed

• Fix a startup crash for some users on Windows (bug 1797464).

• Fixed an incompatibility with the new Windows 11 22H2 Suggested Actions feature resulting in hangs when copying text on a web page (bug 1774285).

Thank you.

[AdvancedSetup]

43 minutes ago, 1PW said:

Hello All:

Version 106.0.3, first offered to Release channel users on October 31, 2022

Thank you.

Might need to archive the main first post. Never intended to make a running version history of Firefox. Nothing wrong with it, but the top one is starting to get kind of long now.

Thanks for report @1PW

 

[1PW]

Hello @AdvancedSetup:

Would it be appropriate to ask the Invision Community folk to make it possible to limit those update notations to the last X (adjustable) entries? Or perhaps allow those entries to be within a Spoiler?

Over 34K views for this thread ain't too shabby...

Thank you.

 

[AdvancedSetup]

We can code it as we've done in their own software updates section. Either way its a lot of work that I'm not sure if it's truly worth the effort or not. Most people have automatic updating enabled on Firefox so at some point it should force the update for most users

 

[nukecad]

Why not just close this thread and start afresh with a new one?

PS. I never used to have automatic updating of Firefox enabled, but as they now seem to be pushing the updates out at least weekly I've turned it on.

[sten2]

These section is from the beginning regarding the Malwarebytes Browserguard add ons in Firefox,i which one could ask for help with issues and so on. We could keep this thread for this,and have a separate thread regarding Firefox itself and its uppdate history.

Personally,i have automatic updating enabled on Firefox.

Edited November 1, 2022 by sten2

[alvarnell]

Although I do find this discussion item useful as it often is the first notification I receive regarding updates (dispite having that option enabled in Firefox itself), I have to wonder why it appears to be the only non-Malwarebytes software that gets such attention? So I have to agree with @sten2 that it's off-topic for this forum and should either be moved to it's own forum or simply dropped altogether.

Edited November 3, 2022 by alvarnell