Firefox 158.0.1 revokes compromised eMudhra certificates, fixes Linux multi-monitor bug
Firefox 158.0.1 bundles the revocation of eight compromised eMudhra intermediate certificates and fixes a bug where Firefox windows opened on the wrong monitor on Linux multi-monitor setups.
Summary
Mozilla released Firefox 158.0.1 with security fixes including the revocation of eight intermediate certificates from eMudhra, a certificate authority whose private keys were compromised. The certificates were already revoked remotely via OneCRL on October 17, but this update ensures protection for users who have remote revocation disabled. The release also fixes several bugs including a Linux-specific issue where Firefox windows appeared on the wrong monitor in multi-monitor configurations.
What's fixed in Firefox 158.0.1
- Certificate revocation: Eight eMudhra intermediate certificates with compromised private keys are revoked in this build; these certificates could have been used to issue fraudulent TLS certificates for any domain
- OneCRL fallback: Users with network policies or settings that disable OneCRL background updates receive the revocation through this point release
- Linux multi-monitor fix: Resolves Firefox windows opening on the wrong monitor in multi-monitor setups
- Other fixes: Website jumping to top during text selection, built-in VPN activation failures for some users, and incorrect rendering of semi-transparent areas in some JPEG XL images
Why it matters
The certificate revocation is particularly important for enterprise and locked-down environments where OneCRL updates may be disabled. The Linux multi-monitor fix addresses a long-standing quality-of-life issue for Firefox users on desktop Linux.
Original reference: www.omgubuntu.co.uk →