Firefox 36.0.4 (March 21, 2015):
Firefox 36.0.4 fixes for issues disclosed at HP Zero Day Initiative's Pwn2Own contest:
- Privilege escalation through SVG navigation.
Firefox 36.0.3 (March 20, 2015):
Firefox 36.0.3 fixes for issues disclosed at HP Zero Day Initiative's Pwn2Own contest:
- Code execution through incorrect JavaScript bounds checking elimination.
Firefox 36.0.1 (March 5, 2015):
Firefox 36.0.1 address the following issues:
- Disable the usage of the ANY DNS query type.
- Fixed a startup crash with EMET.
- Hello may become inactive until restart.
- Print preferences may not be preserved.
- Hello contact tabs may not be visible.
- Accept hostnames that include an underscore character ("_").
- WebGL may use significant memory with Canvas2d.
- Option -remote has been restored.
- Fixed a top crash.
Mozilla Firefox 36.0 final version is now available for download and all existing users should be able to upgrade to it automatically (Menu > Help menu > About Firefox). Firefox 36.0 include the new HTTP/2 protocol support. It also includes syncing for pinned tiles on the new tab page and the addition of the Uzbek (uz) language.
In addition, Firefox 36.0 will no longer accept certificates with 1024-bit RSA keys and no longer accept insecure RC4 ciphers if possible. The new version also address multiple vulnerabilities, some of which could allow a remote, unauthenticated attacker to completely compromise a vulnerable system. Firefox 36.0: Security fixes can be found here.
Download Firefox 36.0.x Final:
The links in this section correspond to files available for this download. Download the files appropriate for you.
What's new features in Firefox 36.0?
According to Firefox release notes, Firefox 36.0 has the following changes:
New:
- Pinned tiles on the new tab page can be synced.
- Support for the full HTTP/2 protocol. HTTP/2 enables a faster, more scalable, and more responsive web.
- Locale added: Uzbek (uz).
Changed:
- -remote option removed.
- No longer accept insecure RC4 ciphers whenever possible.
- Phasing out Certificates with 1024-bit RSA Keys.
- Shut down hangs will now show the crash reporter before exiting the program.
- Add-on Compatibility.
HTML5:
- Support for the ECMAScript 6 Symbol data type added.
- unicode-range CSS descriptor implemented.
- CSSOM-View scroll behavior implemented allowing smooth scrolling of content without custom libraries.
- object-fit and object-position implemented. Defines how and where the content of a replaced element is displayed.
- isolation CSS property implemented. Create a new stacking context to isolate groups of boxes to control which blend together.
- CSS3 will-change property implemented. Hints the browser of elements that will be modified. The browser will perform some performance optimization for these.
- Changed JavaScript 'const' semantics to conform better to the ES6 specification. The const declaration is now block-scoped and requires an initializer. It also can not be redeclared anymore.
- Improved ES6 generators for better performance.
Developer:
- Eval sources now appear in the Debugger. Debug JavaScript code that is evaluated dynamically, either as a string passed to eval() or as a string passed to the Function constructor
- DOM Promises inspection.
- Inspector: More paste options in markup view.
You can find the full changelog here.
References:
The Mozilla Blog.
HTTP/2 is Done
No comments:
Post a Comment