The Firefox/Mozilla Thread

[trium 0]

ff v81.0.2

13. october 2020

Fixed

• Fixed an incompatibility with Twitter.com manifesting itself with the intermittent display of a network protocol violation error page

[trium 0]

ff v82.0

20. october 2020

New

• With this release, Firefox introduces a number of improvements that make watching videos more delightful:

  • the Picture-In-Picture button has a new look and position, making it easier for you to find and use the feature.
  • Picture-In-Picture now has a keyboard shortcut for Mac users (Option + Command + Shift + Right bracket) that works before you start playing the video.
  • For Windows users, Firefox now uses DirectComposition for hardware decoded video, which will improve CPU and GPU usage during video playback, improving battery life.

• Firefox is faster than ever with improved performance on both page loads and start up time:

  • Websites that use flexbox-based layouts load 20% faster than before;
  • Restoring a session is 17% quicker, meaning you can more quickly pick up where you left off;
  • For Windows users, opening new windows got quicker by 10%.

• You can now explore new articles when you save a webpage to Pocket from the Firefox toolbar.

• WebRender continues to roll out to more Firefox users on Windows.

Fixed

• Screen reader features which report paragraphs now correctly report paragraphs in Firefox instead of lines.

• Various security fixes

Changed

• Credit card auto-fill is now more accessible with the card type, and the card number in the card editor now available to screen readers.

• Printing dialog errors for invalid form entries are now reported to screen readers.

Developer

Developer Information

• MediaSession API has been enabled by default which allows web authors to provide custom behaviors for standard media playback interactions, giving them more options than ever.

• DevTools now shows server side events in the Network panel. This allows a server to send new data to a web page at any time allowing developers to see events they previously couldn't and help with lower-level troubleshooting.

[trium 0]

ff v78.4.0 esr

20. october 2020

Fixed

• Various stability, functionality, and security fixes

Quote

Security Vulnerabilities fixed in Firefox ESR 78.4

Announced October 20, 2020

Impact high

Products Firefox ESR

Fixed in

• Firefox ESR 78.4

#CVE-2020-15969: Use-after-free in usersctp

Reporter Mark Wodrich of Google

Impact high

Description

A use-after-free bug in the usersctp library was reported upstream. We assume this could have led to memory corruption and a potentially exploitable crash.

References

• Bug 1666570
• [sctplab] upstream usrsctp fix

#CVE-2020-15683: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4

Reporter Mozilla developers and community

Impact high

Description

Mozilla developers and community members Jason Kratzer, Simon Giesecke, Philipp, and Christian Holler reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

References

• Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4