Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52289
Reakcje/Polubienia
39564

Waterfox 6.6.9

6.6.9 - Security and stability improvements


Waterfox 6.6.9 includes security updates, a certificate reliability fix, and a minor performance improvement.

Security

  • Fixed multiple security vulnerabilities as described in
    Zaloguj lub Zarejestruj się aby zobaczyć!
    .
  • Fixed 3 CVEs in the JPEG-XL image decoder.

Bug Fixes

  • Certificate reliability improvements: Fixed an issue that could cause “Unknown Issuer” certificate errors on certain sites, most commonly on Linux. Waterfox now refreshes intermediate certificate data as needed to keep HTTPS sites loading securely. No new browsing data is collected; Waterfox may contact Mozilla’s certificate update endpoints to fetch missing intermediate certificates and revocation data.

Performance

  • Small performance improvement in JPEG-XL image decoding (improved LUT loading and added RGB offset dithering).
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52289
Reakcje/Polubienia
39564

r3dfox 148.0

The portable builds are fully portable, the profile directory is inside the browser folder. It does not touch appdata at all.


Requirements to use the browser on a given OS:
Vista:
Zaloguj lub Zarejestruj się aby zobaczyć!
+
Zaloguj lub Zarejestruj się aby zobaczyć!

7 RTM/SP0 and later: Should just work.


Notable bugs:
The 32 bit build is built with --disable-sandbox.
Zaloguj lub Zarejestruj się aby zobaczyć!
The 64 bit build is fine. Considering Mypal68 globally disables the sandbox, I don't think it's that bad. If this really is a big issue then please pr a fix.


Cairo/GDI backend ignores system cleartype settings and causes crashes on older versions of Windows and crashes without e10s.


New r3dfox specific changes in this build:
Not exactly r3dfox specific, but the YouTube AV1 memory leak bug should have been fixed in upstream, so this should be fixed here too for people on Windows 8 and 10.
Added new changed preferences from Librewolf.
Bumped Discord useragent override to version 148.
Compiled with a new version of
Zaloguj lub Zarejestruj się aby zobaczyć!
.


Haven't tested on XP (OCAPI) nor have I extensively stability tested.


Please let me know what bugs or issues you encounter with it.
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
52289
Reakcje/Polubienia
39564

Pale Moon 34.1.0​

  • New features:
  • Re-landed Xoroshiro128++ JavaScript PRNG to make it more robust while keeping high performance.
  • This was previously backed out due to intermittent issues and crashes.
  • Implemented JavaScript SubmitEvent support for HTML forms.
  • Implemented JavaScript requestSubmit() for HTML forms.
  • Implemented JavaScript toSorted().
  • Implemented JavaScript toReversed().
  • Implemented top-level await support for JavaScript modules. See implementation notes.
  • Implemented pointer and hover CSS media queries.
  • Enabled hardware-accelerated decoding for VP9 videos (where possible).
  • Changes/fixes:
  • Re-landed our expat library update, with fixes for large attribute parsing.
  • Updated the JPEG-XL library to 0.11.2 to pick up security and performance fixes, and applied a spot-fix for big-endian hardware.
  • Updated libtheora to 1.2.0.
  • Updated libvpx to 1.16.0 with various fixes to retain compatibility with older MacOS and PowerPC platforms.
  • Pale Moon, from this version forward, allows unencrypted websocket connections to localhost addresses even when the calling document was served encrypted.
  • Fixed an issue in the new Cascade Layers implementation causing problems with UI elements and extensions.
  • Fixed several issues with the new ICU library implementation in UXP:
  • Fixed an issue where it was returning unexpected Unicode spaces in date strings instead of standard space characters, causing problems with web scripting.
  • Fixed an issue with plural forms for Shuar, Welsh and several Slavic languages.
  • Fixed an issue with letter dots in Lithuanian.
  • Fixed an issue with word-wrapping in Tibetan.
  • Fixed an intermittent browser crash related to removing cached image data, and improved image data cache handling as a whole.
  • Further improved compatibility with Mac on PowerPC hardware.
  • Restored support for building on 32-bit MacOS 10.6.
  • Applied miscellaneous fixes for building on MacOS 10.5 (Leopard) and 10.6 (Snow Leopard).
  • Fixed run-time issues on FreeBSD 15.*.
  • Fixed an issue with applying image filters on big-endian hardware.
  • Fixed an issue preventing bundled fonts from working properly on targets other than Windows or Linux-GTK.
  • Enabled PerformanceObservers by default. See implementation notes.
  • Security issues addressed: CVE-2026-2806 (DiD), CVE-2026-2758, CVE-2026-2804, CVE-2026-2787 (DiD), CVE-2026-2757, CVE-2026-2773, CVE-2026-2779 (DiD), CVE-2026-2775, and several others that do not have a CVE designation.
  • Implementation notes:
  • Top-level await for JavaScript modules has been implemented. This allows the use of the await keyword at the top level without a wrapper to force pseudo-synchronous processing in async modules. This completes the last landmark issue of our ES2022 compatibility. Most notably, the lack of this would result in websites using certain frameworks to render completely blank. Many thanks to the maintainer of Basilisk for getting this implementation done for UXP.
  • PerformanceObservers is a web-development focused API that allows detailed timings to be recorded from web pages. While intended for debugging performance bottlenecks and similar by web developers, more and more websites have been using them in production sites (primarily for analytics but in more than a few instances also for base functionality of the websites). Pale Moon has had the option to enable them on a case-by-case basis (in Preferences -> Privacy, the "Tracking" tab) where needed, but was kept disabled by default due to the obvious privacy impact of having this API available to all sites. Unfortunately, this has become such a web compatibility issue by now that we've had to enable them by default.
Zaloguj lub Zarejestruj się aby zobaczyć!
 
Do góry