Page 1 of 9

MX 15 Repository: The firefox thread

Posted: Sat Oct 17, 2015 12:58 pm
by mmikeinsantarosa
firefox-41.0.2 is now available for download.
Starting from version-41.0.1 and with future releases, you'll get a couple extra bookmarks for you favorite distro (nice job steveo!) :happy:

From softpedia
Just a few moments ago, Mozilla published a second hotfix release for its latest stable Mozilla Firefox 41.0 web browser patching a single vulnerability that could allow a malicious web page to access private data from other origins.

The Mozilla Firefox 41.0.2 update has been released earlier today, October 15, for GNU/Linux, Microsoft Windows, and Mac OS X computer operating systems. According to Mozilla, Firefox 41.0.2 is here to fix a single issue, a high impact vulnerability in the fetch() API (Application Programming Interface), which was not capable of implementing the CORS (Cross-Origin Resource Sharing) specification.
Check out the softpedia site for more.

Mike

Re: MX 15 Repository: The firefox thread

Posted: Wed Nov 04, 2015 9:39 pm
by mmikeinsantarosa
firefox-42.0 is now available for download from the main repo
What's new in this release:
Private Browsing with Tracking Protection blocks certain Web elements that could be used to record your behavior across sites
Control Center that contains site security and privacy controls
Indicator added to tabs that play audio with one-click muting
WebRTC improvements: IPV6 support
Preferences for controlling ICE candidate generation and IP exposure
Hooks for extensions to allow/deny createOffer/Answer
Improved ability for applications to monitor and control which devices are used in getUserMedia
Login Manager improvements:
Improved heuristics to save usernames and passwords
Edit and show all logins in line, Copy/Paste usernames/passwords from the Context menu
Migration imports your passwords to Firefox from Google Chrome for Windows and Internet Explorer; import anytime from the Login Manager
For more information check out the mozilla site.

Re: MX 15 Repository: The firefox thread

Posted: Thu Dec 17, 2015 5:15 pm
by mmikeinsantarosa
firefox 43.0 is available for download from the main repo.
What's new:
Private Browsing with Tracking Protection offers choice of blocking additional trackers
Improved API support for m4v video playback
Firefox 64-bit for Windows is now available via the Firefox download page
Users can choose search suggestions from the Awesome Bar
On-screen keyboard displayed on selecting input field on devices running Windows 8 or greater
Firefox Health Report has switched to use the same data collection mechanism as telemetry

What's fixed:
Eyedropper tool does not work as expected when page is zoomed

Security fixes:
2015-149 Cross-site reading attack through data and view-source URIs
2015-148 Privilege escalation vulnerabilities in WebExtension APIs
2015-147 Integer underflow and buffer overflow processing MP4 metadata in libstagefright
2015-146 Integer overflow in MP4 playback in 64-bit versions
2015-145 Underflow through code inspection
2015-144 Buffer overflows found through code inspection
2015-143 Linux file chooser crashes on malformed images due to flaws in Jasper library
2015-142 DOS due to malformed frames in HTTP/2
2015-141 Hash in data URI is incorrectly parsed
2015-140 Cross-origin information leak through web workers error events
2015-139 Integer overflow allocating extremely large textures
2015-138 Use-after-free in WebRTC when datachannel is used after being destroyed
2015-137 Firefox allows for control characters to be set in cookies
2015-136 Same-origin policy violation using perfomance.getEntries and history navigation
2015-135 Crash with JavaScript variable assignment with unboxed objects
2015-134 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5)
Check out the mozilla site for more info - mike

Re: MX 15 Repository: The firefox thread

Posted: Sun Dec 27, 2015 8:12 pm
by mmikeinsantarosa
firefox-43.0.2 is now available for download from the main repo.

What's fixed:
2015-149 Cross-site reading attack through data and view-source URIs
2015-148 Privilege escalation vulnerabilities in WebExtension APIs
2015-147 Integer underflow and buffer overflow processing MP4 metadata in libstagefright
2015-146 Integer overflow in MP4 playback in 64-bit versions
2015-145 Underflow through code inspection
2015-144 Buffer overflows found through code inspection
2015-143 Linux file chooser crashes on malformed images due to flaws in Jasper library
2015-142 DOS due to malformed frames in HTTP/2
2015-141 Hash in data URI is incorrectly parsed
2015-140 Cross-origin information leak through web workers error events
2015-139 Integer overflow allocating extremely large textures
2015-138 Use-after-free in WebRTC when datachannel is used after being destroyed
2015-137 Firefox allows for control characters to be set in cookies
2015-136 Same-origin policy violation using perfomance.getEntries and history navigation
2015-135 Crash with JavaScript variable assignment with unboxed objects
2015-134 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5)
This is good for MEPIS 11, 12 MX-14 & 15. - mike

Re: MX 15 Repository: The firefox thread

Posted: Tue Dec 29, 2015 4:00 am
by lucky9
I'm having some freezes pretty regularly. I go to Science Daily and try and middle-click to open in a new tab and it freezes. Sometimes I can right-click and open a new window. MX15_64 running KDE.

Re: MX 15 Repository: The firefox thread

Posted: Tue Dec 29, 2015 11:45 am
by mmikeinsantarosa
lucky9 wrote:I'm having some freezes pretty regularly. I go to Science Daily and try and middle-click to open in a new tab and it freezes. Sometimes I can right-click and open a new window. MX15_64 running KDE.
I'm working on 43.0.3. Maybe it'll help.
Could you paste any link you're having problems with in this thread so I can check?

thanks

Re: MX 15 Repository: The firefox thread

Posted: Tue Dec 29, 2015 3:17 pm
by lucky9
Using a middle-click this link always freezes FF:

http://www.sciencedaily.com/videos/ce6d ... b8e2e6.htm

A right-click and open in a New Window will also freeze FF.

Re: MX 15 Repository: The firefox thread

Posted: Tue Dec 29, 2015 3:21 pm
by Eadwine Rose
Just tested this here, and 43.0.2 doesn't freeze on me on either occasion.

Re: MX 15 Repository: The firefox thread

Posted: Tue Dec 29, 2015 3:31 pm
by lucky9
My Firefox 43.0.2 is a default upgrade from our CR from whatever ships with the original 64 bit .iso. (I do not have Flash installed. Using Shockwave Flash for FF.)

Re: MX 15 Repository: The firefox thread

Posted: Tue Dec 29, 2015 3:34 pm
by Eadwine Rose
So is mine.