Mozilla releases Firefox 78.0.2 security update

[harlan4096]

Mozilla released Firefox 78.0.2, a new stable version of the web browser, to the public on July 9, 2020. The new version is a security update as it fixes a security vulnerability found in the stable version of the browser.

Firefox ESR, the Extended Support Release of the browser, was updated as well. The new version is Firefox EST 78.0.2.

Mozilla released Firefox 78 Stable and Firefox 78 ESR to the public on June 30, 2020.

Tip: you can check out this guide to get a better understanding of the differences between Firefox Stable 78 and Firefox ESR 78.

Firefox users may upgrade existing installations by selecting Menu > Help > About Firefox to start the update process. Firefox downloads the update, in my case a 5 Megabyte file, and installs it. Firefox needs to be restarted after the update has been applied to complete the process.

The update will be offered automatically as well to users; the manual method speeds up the installation of the update, however.

The new version of Firefox is also available as a standalone download from the Mozilla website.

Firefox 78.0.2

Firefox 78.0.2 is a security update first and foremost. It fixes the following security issue:
 

MFSA-2020-0003: X-Frame-Options bypass using object or embed tags

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header.

Mozilla gave the vulnerability a moderate rating. A CSV has not been assigned yet.

The new stable version of Firefox includes three bug fixes besides that:

• Improved data resilience of the new address bar to better protect against data corruption (which coincidentally was the reason why Mozilla pulled Firefox 78 Stable shortly after release to address an issue that caused search provider and other corruption for some users in the browser). See here for more information.
  
• Fixed an accessibility regression in reader mode.
  
• Fixed a regression opening certain external applications (the bug report mentions Microsoft Teams, Microsoft Dynamics 365 CRM emails, and Citrix Receiver as affected). See here.
  

The next stable Firefox release is scheduled on July 28. 2020. Mozilla switched to a four-week release cycle recently.

Now You: When do you upgrade your browsers?
...

Continue Reading