Basilisk 2023.09.12 Released!

[Basilisk-Dev]

Basilisk 2023.09.12 has been released!

This release uses the same UXP platform version as Pale Moon 32.4.0

The autoupdate service does not currently support FreeBSD, aarch64 Linux, and macOS builds so a manual update is required on these operating systems.

See the release notes for more information.

See the downloads page to download the update.

[adoxa]

2023.07.18 (64-bit) is telling me it's up to date (Win10).

[TTraveler]

Downloading & Manually Updating worked perfectly as always on Windows 10....Thanks

[Basilisk-Dev]

It does appear that previous Windows builds aren't autoupdating as mentioned earlier in this thread. I'll take a look at the autoupdate server to verify it's working and verify my .mozconfig flags were right.

For now if you're using Windows builds you will need to manually update.

Update: It appears that the Windows builds were compiled with incorrect configuration options. I am working on compiling new builds now.

[Basilisk-Dev]

New Windows builds have been uploaded and Windows autoupdates are verified working again. Links on the site have been updated to point to the new builds as well.

Sorry for any inconvenience this may have caused.

[Shadow]

Is the webp fix included (commit pointer suggests not but what do I know) or are you not concerned about this webp thing? I'm only concerned because the Pale Moon dev seemed like he was so it feels like a big deal with the point release.

I'd like to disable them entirely in all honesty and there is a config entry in firefox (I think roytam implemented it too) to do so but with that said I believe it's actually beyond feasible to even do so now. I have modified image.http.accept but there are so many different iterations of it and not really having a full grasp understanding, despite reading about it, it is all a bit confusing.

[Basilisk-Dev]

Is the webp fix included (commit pointer suggests not but what do I know) or are you not concerned about this webp thing? I'm only concerned because the Pale Moon dev seemed like he was so it feels like a big deal with the point release.

This release uses the same underlying UXP version as Pale Moon 32.4.0, so no it doesn't have the fix in it.

I'm planning to release a version with the WebP fix either tomorrow or this weekend, I won't have time today to do so due to work obligations.

From what I can gather (I'm just guessing here based on piecing together information from several articles so I may be wrong) someone taking advantage of the WebP exploit has to explicitly target your browser engine. So for example if the exploit targets the Blink rendering engine, then all Chromium and Electron based applications are affected. Mozilla said that they haven't seen anyone actively using this exploit to specifically target the Gecko engine. Due to that, it's definitely concerning, but I'm not as concerned as if I were Google or Mozilla as we're a much smaller target for hackers.

[fatboy]

Thank You for the update, Basilisk and UXP are becoming better with each release. So cool!

I just wanted to chime in that my Basilisk install on Debian 12 managed to auto-update by itself, and the update went flawlessly.