Changes between Version 2 and Version 4 of Ticket #6583


Ignore:
Timestamp:
07/03/2015 10:16:30 AM (9 years ago)
Author:
Fernando de Oliveira
Comment:

Now 39.0.

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #6583

    • Property Milestone hold → 7.8
    • Property Summary firefox-38.0.6 (place holder) → firefox-39.0
    • Property Priority normal → high

  • Ticket #6583 – Description

    v2 v4  
     1[https://ftp.mozilla.org/pub/firefox/releases/39.0/source/firefox-39.0.source.tar.bz2]
    12
    2 == Wait for next ''regular'' release (see #comment:1). ==
     3[https://ftp.mozilla.org/pub/firefox/releases/39.0/MD5SUMS]
    34
     5md5sum: 34d9841bc9b8a85aaf06e311cf1cb263
    46
    5 [https://ftp.mozilla.org/pub/firefox/releases/38.0.6/source/firefox-38.0.6.source.tar.bz2]
     7[https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox39]
    68
    7 [https://ftp.mozilla.org/pub/firefox/releases/38.0.6/MD5SUMS]
     9{{{
     10 Fixed in Firefox 39
    811
    9 md5sum: 4dabcc02d89757d1bf92b9d40a6070a1
     12  • Critical
     13    2015-66 Vulnerabilities found through code inspection
     14    2015-65 Use-after-free in workers while using XMLHttpRequest
     15    2015-63 Use-after-free in Content Policy due to microtask execution
     16    error
     17    2015-59 Miscellaneous memory safety hazards (rv:39.0 / rv:31.8 /
     18    rv:38.1)
    1019
    11 [https://www.mozilla.org/en-US/firefox/38.0.6/releasenotes/]
     20  • High
     21    2015-69 Privilege escalation in PDF.js
     22    2015-61 Type confusion in Indexed Database Manager
    1223
    13 Notes not yet available.
     24  • Moderate
     25    2015-71 NSS incorrectly permits skipping of ServerKeyExchange
     26    2015-70 NSS accepts export-length DHE keys with regular DHE cipher
     27    suites
     28    2015-67 Key pinning is ignored when overridable errors are
     29    encountered
     30    2015-64 ECDSA signature validation fails to handle some signatures
     31    correctly
     32    2015-62 Out-of-bound read while computing an oscillator rendering
     33    range in Web Audio
     34    2015-60 Local files or privileged URLs in pages can be opened into
     35    new tabs
     36
     37  • Low
     38    2015-68 OS X crash reports may contain entered key press information
     39}}}
     40
     41[https://www.mozilla.org/en-US/firefox/39.0/releasenotes/]
     42
     43{{{
     44
     45What’s New
     46
     47  • New
     48    Share Hello URLs with social networks
     49    Project Silk: Smoother animation and scrolling (Mac OS X)
     50    Support for 'switch' role in ARIA 1.1 (web accessibility)
     51    SafeBrowsing malware detection lookups enabled for downloads (Mac OS
     52    X and Linux)
     53    Support for new Unicode 8.0 skin tone emoji
     54
     55  • Changed
     56    Removed support for insecure SSLv3 for network communications
     57    Disable use of RC4 except for temporarily whitelisted hosts
     58    The malware detection service for downloads now covers common Mac
     59    file types (Bug 1138721)
     60    Performance of displaying dashed lines is improved (Mac OS X) (Bug
     61    1123019)
     62
     63  • HTML5
     64    List-style-type now accepts a string value
     65    Enable the Fetch API for network requests from dedicated, shared and
     66    service workers
     67    Cascading of CSS transitions and animations now matches the current
     68    spec
     69    Implement <link rel="preconnect">allowing anticipation of a future
     70    connection without revealing any information
     71    Added support for CSS Scroll Snap Points
     72
     73  • Developer
     74    Drag and drop enabled for nodes in Inspector markup view
     75    Webconsole input history persists even after closing the toolbox
     76    Cubic bezier tooltip now shows a gallery of timing-function presets
     77    for use with CSS animations
     78    localhost is now available offline for WebSocket connections
     79
     80  • Fixed
     81    Improve performance for IPv6 fallback to IPv4
     82    Fix incomplete downloads being marked as complete by detecting
     83    broken HTTP1.1 transfers
     84    The Security state indicator on a page now correctly ignores loads
     85    caused by previous pages
     86    Fixed an issue where a Hello conversation window would sometimes
     87    fail to open
     88    A regression that could lead to Flash not displaying has been fixed
     89    Update to NSS 3.19.2
     90    Various security fixes
     91}}}