The corrective production of firefox 101.0.1 , notable for the strengthening of Sandbox insulation on Windows platform. In the new version enabled by default, access to the API win32k (components of Win32 Gui operating at the nucleus level) from isolated content processing processes. The change was made on the eve of the competition pwn2own 2022 , which will take place on May 18-20. PWN2WN participants will demonstrate working techniques for operating previously unknown vulnerabilities and, if successful, will receive impressive rewards. For example, the size of the award for a bypass of Sandbox insulation in Firefox on the Windows platform is 100 thousand dollars.
Among other changes, the correction is mentioned by problems with showing subtitles in the mode “Picture in the mode The picture “when using Netflix and Elimination of the shortage with the inaccessibility of some commands in the window” Picture “.
Additionally reported about the addition of new requirements to rule storage facilities of root certificates Mozilla. Changes that are aimed at the decision of some long-observed breakdown with the review of certificates of TLS servers will enter into force on June 1.