- Bugfix: the new status bar code in 24.4.0 had a bug, preventing the downloads panel/window from opening when clicking on the download status indicator. There may have been a few other, similar small usability bugs in the same code that have now been fixed.
- Feature update: Selecting "Warn me when closing multiple tabs" in the Options window will now apply both to closing a window and closing other tabs in the tab bar.
- bug #940714 - Add an RAII class to make synchronous raster image decoding safer.
- bug #896268 - Use a stateless approach to synchronous image decoding. (security fix)
- bug #982909 - Consistently use inner window when calling OpenJS. (security fix)
- bug #982957 - Fix crash if certain sweeps run out of memory. (security fix)
- bug #982906 - Remove option for security bypass in URI building. (security fix)
- bug #982974 - Be paranoid about neutering ArrayBuffer objects. (security fix)