Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52976
Reakcje/Polubienia
39926

Waterfox 6.6.9

6.6.9 - Security and stability improvements


Waterfox 6.6.9 includes security updates, a certificate reliability fix, and a minor performance improvement.

Security

  • Fixed multiple security vulnerabilities as described in
    Zaloguj lub Zarejestruj się aby zobaczyć!
    .
  • Fixed 3 CVEs in the JPEG-XL image decoder.

Bug Fixes

  • Certificate reliability improvements: Fixed an issue that could cause “Unknown Issuer” certificate errors on certain sites, most commonly on Linux. Waterfox now refreshes intermediate certificate data as needed to keep HTTPS sites loading securely. No new browsing data is collected; Waterfox may contact Mozilla’s certificate update endpoints to fetch missing intermediate certificates and revocation data.

Performance

  • Small performance improvement in JPEG-XL image decoding (improved LUT loading and added RGB offset dithering).
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52976
Reakcje/Polubienia
39926

r3dfox 148.0

The portable builds are fully portable, the profile directory is inside the browser folder. It does not touch appdata at all.


Requirements to use the browser on a given OS:
Vista:
Zaloguj lub Zarejestruj się aby zobaczyć!
+
Zaloguj lub Zarejestruj się aby zobaczyć!

7 RTM/SP0 and later: Should just work.


Notable bugs:
The 32 bit build is built with --disable-sandbox.
Zaloguj lub Zarejestruj się aby zobaczyć!
The 64 bit build is fine. Considering Mypal68 globally disables the sandbox, I don't think it's that bad. If this really is a big issue then please pr a fix.


Cairo/GDI backend ignores system cleartype settings and causes crashes on older versions of Windows and crashes without e10s.


New r3dfox specific changes in this build:
Not exactly r3dfox specific, but the YouTube AV1 memory leak bug should have been fixed in upstream, so this should be fixed here too for people on Windows 8 and 10.
Added new changed preferences from Librewolf.
Bumped Discord useragent override to version 148.
Compiled with a new version of
Zaloguj lub Zarejestruj się aby zobaczyć!
.


Haven't tested on XP (OCAPI) nor have I extensively stability tested.


Please let me know what bugs or issues you encounter with it.
Zaloguj lub Zarejestruj się aby zobaczyć!
 
  • Lubię to
Reactions: yyy

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52976
Reakcje/Polubienia
39926

Pale Moon 34.1.0​

  • New features:
  • Re-landed Xoroshiro128++ JavaScript PRNG to make it more robust while keeping high performance.
  • This was previously backed out due to intermittent issues and crashes.
  • Implemented JavaScript SubmitEvent support for HTML forms.
  • Implemented JavaScript requestSubmit() for HTML forms.
  • Implemented JavaScript toSorted().
  • Implemented JavaScript toReversed().
  • Implemented top-level await support for JavaScript modules. See implementation notes.
  • Implemented pointer and hover CSS media queries.
  • Enabled hardware-accelerated decoding for VP9 videos (where possible).
  • Changes/fixes:
  • Re-landed our expat library update, with fixes for large attribute parsing.
  • Updated the JPEG-XL library to 0.11.2 to pick up security and performance fixes, and applied a spot-fix for big-endian hardware.
  • Updated libtheora to 1.2.0.
  • Updated libvpx to 1.16.0 with various fixes to retain compatibility with older MacOS and PowerPC platforms.
  • Pale Moon, from this version forward, allows unencrypted websocket connections to localhost addresses even when the calling document was served encrypted.
  • Fixed an issue in the new Cascade Layers implementation causing problems with UI elements and extensions.
  • Fixed several issues with the new ICU library implementation in UXP:
  • Fixed an issue where it was returning unexpected Unicode spaces in date strings instead of standard space characters, causing problems with web scripting.
  • Fixed an issue with plural forms for Shuar, Welsh and several Slavic languages.
  • Fixed an issue with letter dots in Lithuanian.
  • Fixed an issue with word-wrapping in Tibetan.
  • Fixed an intermittent browser crash related to removing cached image data, and improved image data cache handling as a whole.
  • Further improved compatibility with Mac on PowerPC hardware.
  • Restored support for building on 32-bit MacOS 10.6.
  • Applied miscellaneous fixes for building on MacOS 10.5 (Leopard) and 10.6 (Snow Leopard).
  • Fixed run-time issues on FreeBSD 15.*.
  • Fixed an issue with applying image filters on big-endian hardware.
  • Fixed an issue preventing bundled fonts from working properly on targets other than Windows or Linux-GTK.
  • Enabled PerformanceObservers by default. See implementation notes.
  • Security issues addressed: CVE-2026-2806 (DiD), CVE-2026-2758, CVE-2026-2804, CVE-2026-2787 (DiD), CVE-2026-2757, CVE-2026-2773, CVE-2026-2779 (DiD), CVE-2026-2775, and several others that do not have a CVE designation.
  • Implementation notes:
  • Top-level await for JavaScript modules has been implemented. This allows the use of the await keyword at the top level without a wrapper to force pseudo-synchronous processing in async modules. This completes the last landmark issue of our ES2022 compatibility. Most notably, the lack of this would result in websites using certain frameworks to render completely blank. Many thanks to the maintainer of Basilisk for getting this implementation done for UXP.
  • PerformanceObservers is a web-development focused API that allows detailed timings to be recorded from web pages. While intended for debugging performance bottlenecks and similar by web developers, more and more websites have been using them in production sites (primarily for analytics but in more than a few instances also for base functionality of the websites). Pale Moon has had the option to enable them on a case-by-case basis (in Preferences -> Privacy, the "Tracking" tab) where needed, but was kept disabled by default due to the obvious privacy impact of having this API available to all sites. Unfortunately, this has become such a web compatibility issue by now that we've had to enable them by default.
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52976
Reakcje/Polubienia
39926

Waterfox 6.6.10

Security

Changes

  • Backported the fix for
    Zaloguj lub Zarejestruj się aby zobaczyć!
    , resolving a recursive deadlock in RTCRtpScriptTransform. This fix is needed for Discord and should restore voice and video functionality.
  • Added a Discord specific user agent override that reports Waterfox as Firefox 149, which should help keep Discord voice and video working correctly.

Contributors

Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52976
Reakcje/Polubienia
39926

Pale Moon 34.2.0

  • New features:
  • Implemented ES2018 Proxy ownKeys duplicate-key invariant.
  • Implemented ES2022 Error.cause property.
  • Implemented support for oklab and oklch color spaces in CSS.
  • Implemented ES2024 object.GroupBy.
  • Implemented the remainder of the ES2023 Change Array by Copy proposal (toSpliced(), with(), and TypedArray versions of toReversed(), toSorted() and with()).
  • Implemented AudioNode constructors.
  • Implemented support for nested CSS grammar.
  • Implemented the window.MathMLElement global.
  • Changes/fixes:
  • Fixed a crash related to WeakRef use.
  • Fixed stack exhaustion crashes as a result of top-level await in modules.
  • Updated our expat parser library to 2.7.4, fixing various issues.
  • Updated url.CanParse() to allow custom schemes.
  • Updated document.currentScript to align with the currently used spec.
  • Fixed a crash due to infinite recursion.
  • Fixed a crash on MacOS due to WebGL attribute arrays.
  • Fixed a crash related to pointer @media queries in CSS.
  • Fixed a crash related to the spellchecker when handling input fields in Shadow DOM.
  • Future-proofed whitespace handling in ParseDate in light of Unicode variable whitespace use.
  • Removed irrelevant plugin preferences when plugin support isn't built into the browser (non-standard builds/forks).
  • Improved support for the mimalloc memory allocator.
  • Improved support for LoongArch CPUs.
  • Added special handling for certain MacOS system fonts.
  • Removed leftover code for unsupported Itanium, 32-bit Sparc and other old architectures.
  • Added a workaround for CloudFlare image resizing, since it requires more opaque URL handling to function.
  • This workaround is controlled with the new preference network.url.cloudflare_image_resizing.enabled (default true). See implementation notes.
  • Security issues addressed: CVE-2026-4707 (DiD), CVE-2026-4690 (DiD), CVE-2026-4727 (DiD), and others without a CVE designation.
  • A note that Mozilla-relevant security issues CVE-2025-59375 and CVE-2026-4726 had already been addressed in the browser before this release.
  • Implementation notes:
  • CloudFlare offers an image resizing service to its clients, which takes a complex string in the URL to control the resizing process. The workaround implemented in this version will treat anything after /cdn-cgi/image/ as opaque path data (on all websites, considering the wide-spread nature of CloudFlare as a CDN, on many top-level domains). Without this workaround, image resizing like this does not work and results in HTTP 403 (forbidden) errors.
  • This workaround does break with our normal way of parsing URLs, so if it causes trouble with sites with this particular path prefix, try changing the preference (to false, to disable this workaround) and see if it helps, and let us know (on the forum or repo).
Zaloguj lub Zarejestruj się aby zobaczyć!
 
Do góry