Software Update: Mozilla Firefox 41.0

Mozilla has released version 41 of its web browser Firefox. In version 41, the input method editor has been improved, it is now possible to link a profile picture to the Firefox account, perfect forward secrecy encryption is now mandatory for WebRTC conversations and a lot of security vulnerabilities have been fixed. Below is the complete overview of the improvements made in version 41:

New

• Enhance IME support on Windows (Vista +) using TSF (Text Services Framework)
• Ability to set a profile picture for your Firefox Account
• Firefox Hello now includes instant messaging
• SVG images can be used as favicons
• Improved box shadow rendering performance

Changed

• WebRTC now requires perfect forward secrecy
• WARP is disabled on Windows 7
• Updates to image decoding process
• Support for running animations of ‘transform’ and ‘opacity’ on the compositor thread

HTML5

• MessageChannel and MessagePort API enabled by default
• Added support for the transform-origin property on SVG elements
• CSS Font Loading API enabled by default
• Navigator.onLine now varies with actual internet connectivity (Windows and Mac OS X only)
• Copy/Cut Web content from JavaScript to the OS clipboard with document.execCommand(“cut”/”copy”)
• Implemented cache API for querying named caches that are accessible Window, Worker, and ServiceWorker

Developer

• Removed support for binary XPCOM components in extensions, use addon SDK “system/child_process” pipe mechanism for native binaries instead
• Network requests can be exported in HAR format
• Quickly add new CSS rule with New Rule button in the Inspector
• Screenshot a node or element from markup view with the Screenshot Node context menu item
• Copy element CSS rule declarations with the Copy Rule Declaration context menu item in the Inspector
• Pseudo-Class panel in the Inspector

Fixed

• Picture element does not react to resize/viewport changes
• 2015-114 Information disclosure via the High Resolution Time API
• 2015-113 Memory safety errors in libGLES in the ANGLE graphics library
• 2015-112 Vulnerabilities found through code inspection
• 2015-111 Errors in the handling of CORS preflight request headers
• 2015-110 Dragging and dropping images exposes final URL after redirects
• 2015-109 JavaScript immutable property enforcement can be bypassed
• 2015-108 Scripted proxies can access inner window
• 2015-107 Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems
• 2015-106 Use-after-free while manipulating HTML media content
• 2015-105 Buffer overflow while decoding WebM video
• 2015-104 Use-after-free with shared workers and IndexedDB
• 2015-103 URL spoofing in reader mode
• 2015-102 Crash when using debugger with SavedStacks in JavaScript
• 2015-101 Buffer overflow in libvpx while parsing vp9 format video
• 2015-100 Arbitrary file manipulation by local user through Mozilla updater
• 2015-99 Site attribute spoofing on Android by pasting URL with unknown scheme
• 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes
• 2015-97 Memory leak in mozTCPSocket to servers
• 2015-96 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3)

The following downloads are available:
Mozilla Firefox 41.0 for Windows (English)
Mozilla Firefox 41.0 for Linux (English)
Mozilla Firefox 41.0 for OS X (English)
Mozilla Firefox 41.0 for Windows (English)
Mozilla Firefox 41.0 for Linux (English)
Mozilla Firefox 41.0 for OS X (English)
Mozilla Firefox 41.0 for Windows (Frisian)
Mozilla Firefox 41.0 for Linux (Frisian)
Mozilla Firefox 41.0 for OS X (Frisian)