Mozilla has released Firefox 114 and Firefox ESR 102.12.0. While the release is mostly focused on fixes and security improvements, it also includes several changes to DNS over HTTPS. DoH encrypts DNS queries, which can improve privacy and security for users. Additionally, Firefox 114 includes a number of accessibility improvements, such as better support for screen readers and improved keyboard navigation.
The new update also includes fixes for several security vulnerabilities, including a critical bug that could allow remote code execution.
What's new in Firefox 114
DNS over HTTPS
Firefox 114 moves the "DNS over HTTPS" settings from the network settings dialog to the main "Privacy and Security" section.
Besides, it adds several levels of protection based on "DNS over HTTPS":
- Default. Firefox automatically activates DoH when supported by the current provider and falls back to the local resolver in case of problems.
- Increased protection. The browser prefers the selected DoH provider, but in case of problems, it performs a fallback to the default resolver.
- Max protection: Only DoH is used and a warning is displayed in case of a rollback to the local resolver.
- Off, so only local resolver is used.
Also, there is now a user interface for managing the exceptions for DNS over HTTPS.
User interface
- Added the ability to selectively search only in the local browsing history when switching to search from the History, Library or Application menu.
- Added the ability to search for bookmarks directly from the "Bookmarks" menu.
- You can now place the button to open the bookmark menu on the toolbar.
- Added support for rearranging items in the add-ons list.
- Firefox now supports passwordless authentication using USB devices that support the FIDO2 / WebAuthn protocol on Linux, macOS and Windows 7 platforms. You can set a PIN code for activation.
- On the macOS platform, the browser can capture video from the camera in all supported resolutions, including resolutions above 1280x720.
- Pocket content recommendations are now live for users from France, Italy and Spain. To disable recommended Pocket content, use the New Tab page settings, or the
browser.newtabpage.activity-stream.feeds.topsitesoption inabout:config.
In addition to changes and bug fixes, Firefox 114 comes with 15 closed vulnerabilities. 14 vulnerabilities are marked as dangerous, of which 13 vulnerabilities (CVE-2023-34416 and CVE-2023-34417) are caused by memory problems, such as buffer overflows and access to already freed memory areas.
These issues can potentially lead to malicious code being executed when specially designed pages are opened. The remaining dangerous vulnerability CVE-2023-34414 allows clickjacking on pages with TLS certificate errors.
You can update to the latest version of Firefox by going to the About Firefox section of the browser's menu. Alternatively, you can download the installers here: https://releases.mozilla.org/pub/firefox/releases/114.0/, and here: https://www.mozilla.org/en-US/firefox/114.0/releasenotes/.
Finally, it is worth noting that the upcoming Firefox 115 will be the last version that supports Windows 7, 8 and 8.1, and macOS 10.12, 10.13 and 10.14. Mozilla plans to release Firefox 115 on July 4. Currently, it is in the Beta channel.
Support us
Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options:
A year ago I updated to Firefox ESR 102. However, I have been doing security updates on it since then. Next month I’ll go on 115 another year. So nice to move slowly forward! Everything goes too fast today!