Firefox ESR 128.6: The Bug-Squashing Spree of 2025!
Firefox ESR 128.6 fixes security vulnerabilities that include WebChannel API’s confused deputy attack, use-after-free crashes, ALPN validation failures, compartment mismatches in JSON parsing, and memory corruption during text segmentation. Each could lead to moderate chaos, like a digital slapstick skit, but now everything’s patched up.
Hot Take:
Firefox ESR 128.6 is here to save the day, or at least prevent your computer from turning into a hot mess of vulnerabilities! Seems like Mozilla’s New Year’s resolution is to patch things up—literally. From confused deputies to memory that’s more forgetful than your grandpa, this update is patching up those pesky moderate-level security gaps. Rest easy, your browsing experience just got a little less “exciting.”
Key Points:
- Firefox ESR 128.6 addresses five moderate security vulnerabilities.
- WebChannel API can no longer play confused deputy with your privileges.
- Use-after-free bug in text line-breaking fixed to prevent crashes.
- Alt-Svc ALPN now properly validates certificates during redirections.
- Memory corruption issues in JavaScript text segmentation have been resolved.