IFirefox 102 sele ikhutshiwe kwaye ezi ziindaba zayo

Inkqubo ye- ukukhutshwa kwenguqulelo entsha ukusuka kwisikhangeli sewebhu esidumileyo Firefox 102 inguqulelo apho olunye utshintsho kunye nophuculo lwenziwe, ukongeza kwizinto ezintsha kunye nokulungiswa kwebug, kwiFirefox 102 isusiwe 22 vulnerabilities, apho 5 ziphawulwe njengeyingozi.

Ukuba sesichengeni I-CVE-2022-34479 ivumela ukubonisa i-popup kwi-Linux engaphezulu kwebar yedilesi. (inokusetyenziswa ukulinganisa ujongano lwebrawuza eyidummy elahlekisa umsebenzisi, umz. iphishing).

Ukuba sesichengeni I-CVE-2022-34468 ivumela ukujikelezwa kwezithintelo ze-CSP ethintela ikhowudi yeJavaScript ekubeni isetyenziswe kwi-iframe nge "javascript:" URI link substitution.

5 obunye ubuthathaka (ishwankathelwe kwi-CVE-2022-34485, i-CVE-2022-34485, kunye ne-CVE-2022-34484) zibangelwa ziingxaki zenkumbulo, ezifana nokuphuphuma kwesikhuseli kunye nofikelelo kwiindawo zememori esele zikhululwe. Le miba inokukhokelela ekuphunyezweni kwekhowudi enobungozi xa amaphepha enziwe ngokukodwa evulwa.

Iindaba eziphambili kwiFirefox 102

Kolu guqulelo lutsha lweFirefox 102 oluzisiweyo, i ukwenzeka ukucima ukuvula okuzenzekelayo kwephaneli ngolwazi malunga neefayile ezikhutshelweyo ekuqaleni kokhuphelo olutsha ngalunye.

Olunye utshintsho olwahlukileyo kukuba ukhuseleko olongeziweyo ekulandeleni inguqu kwamanye amaphepha ngokuseta iiparamitha kwi-URL. Ukukhuselwa kuncitshiswe ekususeni iiparameters ezisetyenziselwa ukulandelela (ezifana ne-utm_source) kwi-URL kwaye iyasebenza xa imowudi engqongqo yokuthintela ugaxekile yenziwe kwizicwangciso (Ukhuseleko lokuTrack oluPhumelelweyo -> olungqongqo) okanye xa isiza sivula kwimowudi yokukhangela yabucala. . Ngokuzikhethela, Ukususwa kungenziwa kwakhona ngokusebenzisa izicwangciso privacy.query_stripping.enabled in about:config.

Imo yoMfanekiso-kwiMfanekiso ibonelela ngezihlokwanaNdibukele iividiyo ezivela kwiHBO Max, iFunimation, Dailymotion, Tubi, Disney + Hotstar kunye neSonyLIV. Ngaphambili, imibhalo engezantsi yayiboniswe kuphela kwiYouTube, iPrime Video, Netflix, kunye nesayithi ezisebenzisa i-WebVTT (i-Web Video Text Track) ifomathi.

KwiFirefox ye-Android, xa ugcwalisa iifom ngolwazi lwekhadi letyala, isicelo esahlukileyo senziwe ukugcina ulwazi olufakwe kwifomu yenkqubo yokuzalisa ngokuzenzekelayo.

Ukongeza, kukwagxininiswa ukuba umba obangele ukuphazamiseka xa kuvulwa ikhibhodi yesikrini ukuba ibhodi eqhotyoshwayo iqulethe isixa esikhulu sedatha yalungiswa, kwaye umba obangele ukuba iFirefox ime xa itshintsha phakathi kwezicelo nayo yalungiswa.

Ngokuphathelele ukuphuculwa konjiniyela, sinokuyifumana loo nto Udibaniso lwe-CSP lunikiwe (Umgaqo-nkqubo woKhuseleko-Mxholo) kunye neWebAssembly, ekuvumela ukuba usebenzise izithintelo zeCSP kwiWebAssembly. Uxwebhu ekuye kwacinywa kulo ushicilelo nge-CSP ngoku aluyi kuphumeza i-WebAssembly bytecode ukuba iparamitha 'engakhuselekanga' okanye 'i-wasm-engakhuselekanga-eval' ayimiselwanga.

Imibuzo yemidiya ye-CSS izalisekisa ipropati yohlaziyo, ekuvumela ukuba ubophe umyinge wohlaziyo wolwazi oluxhaswa sisixhobo semveliso.

Kwiiplagi ezixhasa uguqulelo lwesibini lwe-manifest, ufikelelo kwi-Scripting API inikezelwe, ekuvumela ukuba usebenzise izikripthi kumxholo weesayithi, endaweni kwaye ususe i-CSS, kwaye ulawule ukugawulwa kwemibhalo yokucubungula.

Olunye utshintsho ezibalaseleyo:

• Imisebenzi yokuguqula isandi isiwe kwinkqubo eyahlukileyo kunye nebhokisi yesanti eqinile.
• KwiLinux, kuyenzeka ukusebenzisa inkonzo ye-Geoclue DBus ukumisela indawo.
• Ukuboniswa okuphuculweyo kwamaxwebhu ePDF kwimowudi yokuchasana okuphezulu.
• Indawo engekho mgangathweni Window.sidebar, enikezwe kuphela kwiFirefox, icwangciselwe ukususwa.
• Kujongano lomphuhlisi wewebhu kwisithuba soMhleli weSimbo, kukho inkxaso yokucoca isimbo samaphepha ngamagama.

Uyifaka njani okanye uyihlaziya njani inguqulelo entsha yeFirefox kwiLinux?

Abasebenzisi beFirefox abangakhubazekanga uhlaziyo oluzenzekelayo baya kufumana uhlaziyo ngokuzenzekelayo. Abo bangafuni ukulinda ukuba yenzeke banokukhetha Imenyu> Uncedo> Malunga neFirefox emva kokumiselwa ngokusesikweni ukuze kuqaliswe uhlaziyo olusebenzayo lwesikhangeli sewebhu.

Isikrini esivula ukubonisa uguqulelo olusebenzayo ngoku lwesikhangeli sewebhu kwaye siqhuba itshekhi yohlaziyo, ukuba ukusebenza kuyenziwa.

Olunye ukhetho lokuhlaziya, ewe ungumsebenzisi woBuntu, iLinux Mint okanye enye into evela ku-Ubuntu, ungafaka okanye uhlaziye kule nguqulo intsha ngoncedo lwe-PPA yesikhangeli.

Oku kungongezwa kwinkqubo ngokuvula i-terminal kunye nokwenza lo mthetho ulandelayo kuyo:

sudo add-apt-repository ppa:ubuntu-mozilla-security/ppa -y 
sudo apt-get update
sudo apt install firefox

Kwindaba ye Abasebenzisi beArch Linux kunye neziphumo,baleka nje kwisiphelo sendlela:

sudo pacman -Syu

Okanye ukufaka kunye:

sudo pacman -S firefox

Gqibela kwabo bakhetha ukusebenzisa iiphakheji ze-Snap, baya kuba nakho ukufaka uguqulelo olutsha ngokuvula i-terminal kwaye bachwetheze kuyo

sudo snap install firefox

Okokugqibela, unokufumana isikhangeli kunye nendlela yamvanje yofakelo eyongezwe "Flatpak". Kule nto kufuneka babe nenkxaso kolu hlobo lwepakeji.

Ukufakwa kwenziwa ngokuchwetheza:

flatpak install flathub org.mozilla.firefox

ukuba Zonke ezinye izinto ezihanjiswa yiLinux zinokukhuphela iiphakheji yokubini kusuka eli khonkco lilandelayo.