-
140.12.0-103 Stable
kinbot released this
2026年07月05日 12:13:23 +02:00 | 0 commits to main since this releaseSummary
- ui: Add the original Colorways theme pack (#38)
- Browser now comes with a set of built-in monochromatic color schemes to choose from
- The new built-in themes are tucked away separately at the bottom of
about:addons#themesin order to keep default view uncluttered.
- Improve support for using DOM Push without a remote push service,
- ui: Hide irrelevant Mozilla Firefox links under Help app menu.
- ui: Fix version display and release notes links on "Help -> About..." app menu.
- Konform Browser will no longer attempt to override or extend uBlock Origin (or any other add-on) configuration.
- Fixes where user filter list configuration could unexpectedly be overwritten on upgrade.
- QuickSuggest feature (disabled by default) can no longer change its behavior depending on estimated user geolocation.
Lifted fix from Firefox Rapid Release
- Bug 2047467 - Update vendored mp4parse-rust to b693c7e4a91d. (FF154)
- Fixes multiple cases where video or audio would play incorrectly or not at all.
- Includes changes from:
- Bug 1967030: Video fails to play: "Decode metadata failed" (FF141)
- Bug 1711882: Firefox doesn't play xHE-AAC content (mp4a.40.42) (FF143)
- Bug 2014827 (FF149)
- Bug 2017699 (FF149)
- Bug 2044320: Parse MP4 metadata failed with mp4 containing two adjacent colr boxes (FF153)
- If you are having unexpected media playback issues with video or audio that plays fine in either Firefox or an older Konform Browser version, please open an issue.
Lifted bugfixes pending for Firefox ESR 140.13.0
- Bug 2050657: ensure numbers are consistent as JSNumbers (FF140)
- Bug 2050990: Call JS_NumberValue in ClientWebGLContext.cpp (FF140)
- Bug 2049523: Make ToJSValue for float consistent with double (FF140)
- Bug 2045396: Abort parser that otherwise could trigger the running of script when it shouldn't (FF140)
- Bug 2029761: Handle large values returned by strnlen as an error (FF140)
- Bug 2045414: be consistent with the promise resolve/reject handling (FF140)
- Bug 2037770: Honor iframe sandbox flags when handling pdf.js downloads (FF140)
- Bug 2027519: [devtools] Use the real source url for sourcemap resolution (FF140)
- Bug 2045604: Don't leak the static doc via the relevant global of the context. (FF140)
- Bug 2045454: Clamp length of regexp captures array for dollar substitution (FF140)
- Bug 2013230: Use strnlen in mozilla::PrintfTarget::cvt_s (FF140)
- Bug 2031768: Validate Principals in CookieStore (FF140)
- Bug 2036591: Use origin attributes in FailDelayManager (FF140)
- Bug 2043820: Reject javascript URI in nsDocShellLoadState (FF140)
- update HSTS HPKP remote-settings tld-suffixes ct-logs
Preset updates
- BF ✳️: Enable DOM Push (but leave Push connection unchanged)
- JMIW 🦊: Enable DOM Push connection
Installing
Source release
The provided source release is a ready-to-build browser with prepatched Firefox sources.
Use Konform Browser git sources directly to make custom builds.
SeeBUILD.mdfor details.Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser
Binary packages
Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.
Instructions
If you are on
arm64, replacex86_64as appropriate in downloads and filenames.Release PGP key
konform-cb-ci.pgp-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G 94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b 1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0 aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N IT0rng2rbFCjhZrNmcBV6URfD3Pf/go= =7IDH -----END PGP PUBLIC KEY BLOCK-----Debian/apt-based
To receive future updates and install, run:
sudo apt -U install extrepo && \ sudo extrepo enable konform-browser && \ sudo apt -U install konform-browserThis will enable Konform apt repository.
For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-103-linux-x86_64-deb.deb ./konform-browser-140.12.0-103-linux-x86_64-deb.deb sudo apt-get install ./konform-browser-140.12.0-103-linux-x86_64-deb.debFedora/rpm-based
To receive future updates, configure Konform rpm repository and then run
sudo dnf install konform-browser.⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in
Signature verification failederror due to mismatching PGP key. See #20 for status and fix.For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-103-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-103-linux-x86_64-rpm.rpm sudo dnf install ./konform-browser-140.12.0-103-linux-x86_64-rpm.rpmArch Linux
See
konform-browser/Arch.Alpine Linux
See the
Alpine Linux package registry.Tarball
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-103-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-103-linux-x86_64-package.tar.xz tar -xvf ./konform-browser-140.12.0-103-linux-x86_64-package.tar.xzDownloads
-
konform-browser-140.12.0-103.source.tar.gz
11 downloads ·
2026年07月05日 12:13:37 +02:00 · 1,023 MiB -
konform-browser-140.12.0-103.source.tar.gz.sha256sum
2 downloads ·
2026年07月05日 12:13:37 +02:00 · 109 B -
konform-browser-140.12.0-103.source.tar.gz.sha512sum
0 downloads ·
2026年07月05日 12:13:38 +02:00 · 173 B -
konform-browser-140.12.0-103.source.tar.gz.sig
2 downloads ·
2026年07月05日 12:13:38 +02:00 · 119 B
- ui: Add the original Colorways theme pack (#38)
-
140.12.0-103rc2 Pre-release
kinbot released this
2026年07月05日 08:12:56 +02:00 | 0 commits to main since this releaserelease candidate for testers
Downloads
-
konform-browser-140.12.0-103rc2.source.tar.gz.sha256sum
1 download ·
2026年07月05日 08:13:07 +02:00 · 112 B -
konform-browser-140.12.0-103rc2.source.tar.gz.sha512sum
0 downloads ·
2026年07月05日 08:13:07 +02:00 · 176 B -
konform-browser-140.12.0-103rc2.source.tar.gz.sig
1 download ·
2026年07月05日 08:13:07 +02:00 · 119 B
-
konform-browser-140.12.0-103rc2.source.tar.gz.sha256sum
-
140.12.0-103rc1 Pre-release
kinbot released this
2026年07月04日 10:14:27 +02:00 | 18 commits to main since this releaserelease candidate for testers
Downloads
-
konform-browser-140.12.0-103rc1.source.tar.gz.sha256sum
0 downloads ·
2026年07月04日 10:14:39 +02:00 · 112 B -
konform-browser-140.12.0-103rc1.source.tar.gz.sha512sum
0 downloads ·
2026年07月04日 10:14:39 +02:00 · 176 B -
konform-browser-140.12.0-103rc1.source.tar.gz.sig
0 downloads ·
2026年07月04日 10:14:39 +02:00 · 119 B
-
konform-browser-140.12.0-103rc1.source.tar.gz.sha256sum
-
140.12.0-102 Stable
kinbot released this
2026年06月29日 14:58:31 +02:00 | 30 commits to main since this releaseSummary
- Make Konform Browser defaults into actual browser defaults. (#33)
- In previous versions, the browser would read its defaults from a shipped librewolf.cfg file for its base defaults. If this file was missing or corrupt, it would fall back to Firefox defaults.
- Konform Browser base preferences are now actual defaults.
- Aforementioned configuration file is still read from at startup for backward-compatibility but is now delivered empty.
- ui: Tweaks and improvements to the sidebar (#36)
- Fixes and improvements to newtabpage and its related components (#37)
- Default new tab page is now blank. To get the search bar back, change to "Homepage" under
about:preferences:#home. - Homepage can no longer trigger background network requests. Previously this could happen if user customized their Homepage to include "Shortcuts" or "Recent activity". This should no longer happen.
- Default new tab page is now blank. To get the search bar back, change to "Homepage" under
- ui: Picture of cute fox mascot are now absent
- fix: Fix errors being logged in browser console when searching with formfill disabled
- ui: New tab groups will no longer be created by drag-and-dropping tabs onto each other.
- Preference
browser.tabs.dragDrop.createGroup.enabledre-enables the feature.
- Preference
(削除) Konform Browser will no longer attempt to override or extend uBlock Origin (or any other add-on) configuration. (削除ここまで)(fixed in140.12.0-103)- fix: Properly set default preference
privacy.partition.network_state.connection_with_proxy- Strict enforcement of proxy configuration is already in place on deeper level. This pref is being set as defense-in-depth measure to protect against potential related bugs.
- ui: Fix rendering of detailed preset view under about:welcome.
- presets: Webcompat interventions will now be enabled when choosing
✳️ Basic Functionalityor🦊 Just Make It Workpresets. Otherwise it remains disabled. - Removal of calls to telemetry subsystems
- fix: Profile backup restore is now properly handling backups where profile telemetry is absent.
Ported change from Waterfox
Uplifted changes from Firefox Rapid Release:
- Bug 2020730: add setting "Drag tabs together to create tag groups" (FF150)
- Bug 2005628: create preference to disable drag-and-drop creation of tab groups (FF150)
- Bug 2021765: Ignore the thumbnails folder not existing in PageThumbs.worker.js (FF149)
- Bug 1996813: Change network.trr.retry_on_recoverable_errors to false and cycle connections when confirmation fails (FF147)
See commit log for details.
Installing
Source release
The provided source release is a ready-to-build browser with prepatched Firefox sources.
Use Konform Browser git sources directly to make custom builds.
SeeBUILD.mdfor details.Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser
Binary packages
Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.
Instructions
If you are on
arm64, replacex86_64as appropriate in downloads and filenames.Release PGP key
konform-cb-ci.pgp-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G 94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b 1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0 aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N IT0rng2rbFCjhZrNmcBV6URfD3Pf/go= =7IDH -----END PGP PUBLIC KEY BLOCK-----Debian/apt-based
To receive future updates and install, run:
sudo apt -U install extrepo && \ sudo extrepo enable konform-browser && \ sudo apt -U install konform-browserThis will enable Konform apt repository.
For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-102-linux-x86_64-deb.deb ./konform-browser-140.12.0-102-linux-x86_64-deb.deb sudo apt-get install ./konform-browser-140.12.0-102-linux-x86_64-deb.debFedora/rpm-based
To receive future updates, configure Konform rpm repository and then run
sudo dnf install konform-browser.⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in
Signature verification failederror due to mismatching PGP key. See #20 for status and fix.For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-102-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-102-linux-x86_64-rpm.rpm sudo dnf install ./konform-browser-140.12.0-102-linux-x86_64-rpm.rpmArch Linux
See
konform-browser/Arch.Alpine Linux
See the
Alpine Linux package registry.Tarball
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-102-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-102-linux-x86_64-package.tar.xz tar -xvf ./konform-browser-140.12.0-102-linux-x86_64-package.tar.xzDownloads
-
konform-browser-140.12.0-102.source.tar.gz
10 downloads ·
2026年06月29日 14:58:41 +02:00 · 1,023 MiB -
konform-browser-140.12.0-102.source.tar.gz.sha256sum
2 downloads ·
2026年06月29日 14:58:42 +02:00 · 109 B -
konform-browser-140.12.0-102.source.tar.gz.sha512sum
0 downloads ·
2026年06月29日 14:58:42 +02:00 · 173 B -
konform-browser-140.12.0-102.source.tar.gz.sig
2 downloads ·
2026年06月29日 14:58:42 +02:00 · 119 B
- Make Konform Browser defaults into actual browser defaults. (#33)
-
140.12.0-101 Stable
kinbot released this
2026年06月22日 14:49:30 +02:00 | 73 commits to main since this releaseSummary
- Remove and reduce calling into unnecessary telemetry and Nimbus subsystems
- Improved efficiency and reduced resource usage by less busywork and bookeeping.
- Glean DB is no longer written to disk.
- Removes spurious log errors from now inactive
ExtensionTelemetry
- fix: race-condition in Picture-in-Picture component
- Fixes error in js console on video mouseOut event.
- fix: Remove potential of certain browser system http requests bypassing configured proxy
- Disable "Wallpaper" feature and widgets on homepage which is unfortunately buggy and depends on internet connection.
Improvements to RemoteSettings integration
RemoteSettingsClient.getsyncIfEmptyparameter is nowfalseby default.- Less collections will now not be pre-emptively remotely fetched over network without explicit sync.
- Disable polling of unused activity-stream feeds
- Allow
RemoteSettingsClient.synchronizeto use existing local data even when network offline. - Failing to fetch initial startup bundle due to network error is now handled as "empty result" instead of "error"
- Reduce background polling of
hijack-blocklists(for search engine and ml model censorship) and associated background busywork for homepage search. - fix: Add rs-blocker restrictions validation for codepaths that previously did not observe them
- As previously, fetching from RemoteSettings is gated by preferences
librewolf.services.settings.allowedCollections(online) andlibrewolf.services.settings.allowedCollectionsFromDump(local) - In a future version, these will be renamed to
services.settings.allowedCollectionsandlibrewolf.services.settings.allowedCollectionsFromDump.
- As previously, fetching from RemoteSettings is gated by preferences
- Allow loading translation data from local dumps regardless of timestamp.
- Introduce pref
services.settings.server.attachments- When not set to empty, requests using the configured RS server (set with
services.settings.server) will use this endpoint instead of performing service discovery of CDN endpoints before proceeding.
- When not set to empty, requests using the configured RS server (set with
- Force all network requests to use configured HTTP proxy, if any, removing potential for proxy bypasses.
- Improve logging by consistent use of logging facilities.
- Remove "Unreachable code" warning
Multi-Account Containers lite
- security: Add a URL validation for the confirmation page
- note: Konform Browser users were already less at risk thanks to the
"network.http.addonOriginBehavior"fix for Bug 1405971.
- note: Konform Browser users were already less at risk thanks to the
Uplifted changes from Firefox Rapid Release:
- Bug 2039463: Fix UBSan function-type-mismatch for fGetString (FF152)
- Bug 2036932: Fix nsSocketTransport2 DNS result field data races (FF152)
- Bug 2036931: Fix CookiePersistentStorage::mCorruptFlag data race (FF152)
- Bug 2036898: Fix nsSocketTransportService2::mKeepaliveEnabledPref data race (FF152)
- Bug 2036907: Fix WebTransportSessionBase::mListener data race (FF152)
- Bug 2036666: Fix UrlClassifierFeatureBase mTables/mHosts (FF152)
- Bug 2036895: Fix Dashboard::mEnableLogging data race (FF152)
- Bug 2035907: wasm: Align WasmTableObject::growImpl with Instance::tableGrow. (FF152)
- Bug 2034816: Change some ImmPtr uses to ImmGCPtr. (FF152)
- Bug 2025960: Use nsMainThreadPtrHandle in WorkerDebugger runnables. (FF152)
- Bug 2021955: drop extra channels when out of downmixer's capability. (FF152)
- Bug 1767455 (FF152)
Uplifted changes from upcoming Firefox esr-140 branch:
- Bug 2044612: Use ClientInfo for font loading in Worker (FF140)
- Bug 2041902: For WebTransport require a ClientInfo (FF140)
- repo-update HSTS HPKP remote-settings tld-suffixes ct-logs
Developer-facing changes
- Potentiallty breaking for builders:
scripts/librewolf-patches.pyhas been renamed toscripts/apply-patches.py - Files copied over verbatim from Konform Browser source git repo to source archive have been moved to matching locations.
- Repo clean-up, some minor fixes and improvements to build and develpoment scripts, restructuring and preparing for ESR153. See git log for details.
Installing
Source release
The provided source release is a ready-to-build browser with prepatched Firefox sources.
Use Konform Browser git sources directly to make custom builds.
SeeBUILD.mdfor details.Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser
Binary packages
Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.
Instructions
If you are on
arm64, replacex86_64as appropriate in downloads and filenames.Release PGP key
konform-cb-ci.pgp-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G 94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b 1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0 aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N IT0rng2rbFCjhZrNmcBV6URfD3Pf/go= =7IDH -----END PGP PUBLIC KEY BLOCK-----Debian/apt-based
To receive future updates and install, run:
sudo apt -U install extrepo && \ sudo extrepo enable konform-browser && \ sudo apt -U install konform-browserThis will enable Konform apt repository.
For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-101-linux-x86_64-deb.deb ./konform-browser-140.12.0-101-linux-x86_64-deb.deb sudo apt-get install ./konform-browser-140.12.0-101-linux-x86_64-deb.debFedora/rpm-based
To receive future updates, configure Konform rpm repository and then run
sudo dnf install konform-browser.⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in
Signature verification failederror due to mismatching PGP key. See #20 for status and fix.For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-101-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-101-linux-x86_64-rpm.rpm sudo dnf install ./konform-browser-140.12.0-101-linux-x86_64-rpm.rpmArch Linux
See
konform-browser/Arch.Alpine Linux
See the
Alpine Linux package registry.Tarball
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-101-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-101-linux-x86_64-package.tar.xz tar -xvf ./konform-browser-140.12.0-101-linux-x86_64-package.tar.xzDownloads
-
konform-browser-140.12.0-101.source.tar.gz
25 downloads ·
2026年06月22日 14:49:41 +02:00 · 1,022 MiB -
konform-browser-140.12.0-101.source.tar.gz.sha256sum
2 downloads ·
2026年06月22日 14:49:41 +02:00 · 109 B -
konform-browser-140.12.0-101.source.tar.gz.sha512sum
0 downloads ·
2026年06月22日 14:49:41 +02:00 · 173 B -
konform-browser-140.12.0-101.source.tar.gz.sig
1 download ·
2026年06月22日 14:49:41 +02:00 · 119 B
- Remove and reduce calling into unnecessary telemetry and Nimbus subsystems
-
140.12.0-100 Stable
kinbot released this
2026年06月11日 03:44:43 +02:00 | 124 commits to main since this releaseSummary
- Latest security- and bug fixes have been pulled in from upstream Firefox 140.12.0 ESR release.
- Closes security vulnerabilities described in MFSA2026-58.
- new git commits
- ui: Extend WebGL configuration with a couple of toggles
- fix: Replace leftover legacy vendor strings in UI and localisations
- fix: add missing document.ico, document_pdf.svg resources
- further disable inert Glean telemetry subsystem
- remove unnecessary filesystem activity for persisting and reading hardcoded identifiers
- fix: graceful remoteless initialization of QuickSuggest feature
Build changes
- Root directory path inside release source-tarball is now of format:
konform-browser-140.12.0-100/.- Developers and users building from source may need to update their tooling.
- Remove unused inherited legacy tooling integration files like
.github/,.mcp.json, etc. - make: Support beta upstream builds.
- make: Support running on mounted directories and reusing source state.
- build: Allow empty and
# commentedlines inassets/patches.txt - security: Check in Mozilla Releases PGP pubkey.
Uplifted changes from Firefox Rapid Release:
- security: Backport "framebusting protection" fixes
- Bug 1419501: Require user interaction for cross-origin iframe window.top.location navigation (FF144,BB15)
- Bug 2006600: Keep track of dismissed popup-blocker notifications (FF148)
- Bug 1873716: Handle about:blank iframes that do fingerprinting (FF148)
- Bug 2001668: Make framebusting pref independent of pop-up blocking (FF150)
- Bug 2025170: Pass correct report index for blocked popups (FF151)
- Bug 1980594: Use
CanvasUtils::ImageExtractioninstead ofbool usePlaceholder. (FF143) - Bug 1917607: Introduce random noises to WebGLRendering when ResistFingerprinting enabled (FF145)
- Bug 2005273: Add additional known canvas fingerprinting text and aliases (FF148)
- Bug 2004797: Only call UpdateContext when creating a new context in OffscreenCanvas (FF148)
- Bug 1976287: Sanitize WebGL Vendor to an allowlisted set of names (FF148)
- Bug 2001160: Null check aOffscreenCanvas's owner global in ImageExtractionResult (FF148)
- Bug 2003504: Bug 1880429, clear source browsing context early, if possible (FF150,BB15)
- Bug 1992585: Set AppLinks intent selector to null. (FF150,BB15)
- Bug 2022746: Convert pointer to boolean instead of comparing with 0 (FF150,BB15)
- Bug 2024238: GMP i420 validation fix (FF150,BB15)
- Bug 2024760: Handle WebSocketChannel::IsPersistentFramePtr correctly (FF150,BB15)
- Bug 2025281: Cleanup MediaIPCUtils. (FF150,BB15)
- Bug 2026297: gfx/2d/FilterNodeSoftware bounds check fix (FF150,BB15)
- Bug 2026601: Taint reset streams (FF150,BB15)
- Bug 2027287: gfx/ycbcr/scale_yuv_argb bounds check fix (FF150,BB15)
- Bug 2029446: Don't create frames for elements that are not allowed in an svg-glyphs document (FF150,BB15)
- Bug 2029699: Simplify InlineBackgroundData handling. (FF150,BB15)
- Bug 2030385: Fix non-contiguous nsIContentAnalysisResponse::Action serializer (FF151)
- Bug 2029281: Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74 (FF151)
- Bug 2027276: Use size_t when inflating UTF8 (FF151)
- Bug 2025947: Check data corruption in script decompression (FF151)
- Bug 2025942: Fix off-by-one in a LogModuleManager::PrintFmt check (FF151)
- Bug 2025888: Make IncrementalTokenizer read entire buffer (FF151)
- Bug 2025877: OffScreenCanvas validation (FF151)
- Bug 2025434: Return early in ClearKey (FF151)
- Bug 2025346: Create RemoteObjectProxy properly (FF151)
- Bug 1940116: Ignore clicks shortly after extension popup closes (FF151)
- Bug 2024665: Make nsIReplacedHttpResponse non-scriptable (FF151)
- Bug 2027308: Fix handling of empty text leaves (FF151)
- Bug 2027310: improve thread coordination in ShowProtectedAuthPrompt (FF151)
- Bug 2025968: Don't allow fragmenting a MiddleCroppingBlockFrame (FF151)
- Bug 2024443: Make CryptoKey::GetAlgorithm more idiomatic (FF151)
- Bug 2024260: nsRequestObserverProxy cleanup (FF151)
- Bug 2024244: Make socket transport hold a reference to TLSServerConnectionInfo (FF151)
- Bug 2023943: Make CookieNotification::GetOperation ID clone the ID (FF151)
- Bug 2021222: Cancel SpeechSynthesis when the page navigates away (FF151)
Uplifted changes from Tor BaseBrowser
- BB 30541: Disable WebGL readPixel() for web content when ResistFingerprinting enabled
- BB 43323: Expose a stable asset from chrome://
- Best we can do of current situation is spoofing plausible existing fingerprint..
Installing
Source release
The provided source release is a ready-to-build browser with prepatched Firefox sources.
Use Konform Browser git sources directly to make custom builds.
SeeBUILD.mdfor details.Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser
Binary packages
Prebuilt packages produced by Codeberg CI are (soon) available at Codeberg Packages for your convenience.
Instructions
If you are on
arm64, replacex86_64as appropriate in downloads and filenames.Release PGP key
konform-cb-ci.pgp-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G 94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b 1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0 aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N IT0rng2rbFCjhZrNmcBV6URfD3Pf/go= =7IDH -----END PGP PUBLIC KEY BLOCK-----Debian/apt-based
To receive future updates and install, run:
sudo apt -U install extrepo && \ sudo extrepo enable konform-browser && \ sudo apt -U install konform-browserThis will enable Konform apt repository.
For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-100-linux-x86_64-deb.deb ./konform-browser-140.12.0-100-linux-x86_64-deb.deb sudo apt-get install ./konform-browser-140.12.0-100-linux-x86_64-deb.debFedora/rpm-based
To receive future updates, configure Konform rpm repository and then run
sudo dnf install konform-browser.⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in
Signature verification failederror due to mismatching PGP key. See #20 for status and fix.For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-100-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-100-linux-x86_64-rpm.rpm sudo dnf install ./konform-browser-140.12.0-100-linux-x86_64-rpm.rpmArch Linux
See
konform-browser/Arch.Alpine Linux
See the
Alpine Linux package registry.Tarball
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-100-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-100-linux-x86_64-package.tar.xz tar -xvf ./konform-browser-140.12.0-100-linux-x86_64-package.tar.xzDownloads
-
konform-browser-140.12.0-100.source.tar.gz
0 downloads ·
2026年06月22日 16:18:11 +02:00 · 1,022 MiB -
konform-browser-140.12.0-100.source.tar.gz.sha256sum
0 downloads ·
2026年06月22日 16:18:13 +02:00 · 109 B -
konform-browser-140.12.0-100.source.tar.gz.sha512sum
0 downloads ·
2026年06月22日 16:18:14 +02:00 · 173 B -
konform-browser-140.12.0-100.source.tar.gz.sig
0 downloads ·
2026年06月22日 16:18:16 +02:00 · 119 B
- Latest security- and bug fixes have been pulled in from upstream Firefox 140.12.0 ESR release.
-
140.12.0-100rc3 Pre-release
kinbot released this
2026年06月10日 14:29:54 +02:00 | 129 commits to main since this releasesecurity staging release
Summary
- The latest security- and bug fixes have been pulled in from staged Firefox 140.12.0 ESR BUILD1
- Firefox 140.12.0 ESR release notes (pending publication)
- new git commits
- fix: Replace leftover legacy vendor strings in UI and localisations
- ui: Extend WebGL configuration with a couple of toggles
Build changes
- Root directory path inside release source-tarball is now of format:
konform-browser-140.12.0-100/.- Developers and users building from source may need to update their tooling.
- Remove unused inherited legacy tooling integration files like
.github/etc. - make: Support beta upstream builds.
- make: Support running on mounted directories and reusing source state.
- build: Allow empty and
# commentedlines inassets/patches.txt - security: Check in Mozilla Releases PGP pubkey.
Uplifted changes from Firefox Rapid Release:
- security: Backport "framebusting protection" fixes
- Bug 1419501: Require user interaction for cross-origin iframe window.top.location navigation (FF144,BB15)
- Bug 2006600: Keep track of dismissed popup-blocker notifications (FF148)
- Bug 1873716: Handle about:blank iframes that do fingerprinting (FF148)
- Bug 2001668: Make framebusting pref independent of pop-up blocking (FF150)
- Bug 2025170: Pass correct report index for blocked popups (FF151)
- Bug 1980594: Use
CanvasUtils::ImageExtractioninstead ofbool usePlaceholder. (FF143) - Bug 1917607: Introduce random noises to WebGLRendering when ResistFingerprinting enabled (FF145)
- Bug 2005273: Add additional known canvas fingerprinting text and aliases (FF148)
- Bug 2004797: Only call UpdateContext when creating a new context in OffscreenCanvas (FF148)
- Bug 1976287: Sanitize WebGL Vendor to an allowlisted set of names (FF148)
- Bug 2001160: Null check aOffscreenCanvas's owner global in ImageExtractionResult (FF148)
- Bug 2003504: Bug 1880429, clear source browsing context early, if possible (FF150,BB15)
- Bug 1992585: Set AppLinks intent selector to null. (FF150,BB15)
- Bug 2022746: Convert pointer to boolean instead of comparing with 0 (FF150,BB15)
- Bug 2024238: GMP i420 validation fix (FF150,BB15)
- Bug 2024760: Handle WebSocketChannel::IsPersistentFramePtr correctly (FF150,BB15)
- Bug 2025281: Cleanup MediaIPCUtils. (FF150,BB15)
- Bug 2026297: gfx/2d/FilterNodeSoftware bounds check fix (FF150,BB15)
- Bug 2026601: Taint reset streams (FF150,BB15)
- Bug 2027287: gfx/ycbcr/scale_yuv_argb bounds check fix (FF150,BB15)
- Bug 2029446: Don't create frames for elements that are not allowed in an svg-glyphs document (FF150,BB15)
- Bug 2029699: Simplify InlineBackgroundData handling. (FF150,BB15)
- Bug 2030385: Fix non-contiguous nsIContentAnalysisResponse::Action serializer (FF151)
- Bug 2029281: Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74 (FF151)
- Bug 2027276: Use size_t when inflating UTF8 (FF151)
- Bug 2025947: Check data corruption in script decompression (FF151)
- Bug 2025942: Fix off-by-one in a LogModuleManager::PrintFmt check (FF151)
- Bug 2025888: Make IncrementalTokenizer read entire buffer (FF151)
- Bug 2025877: OffScreenCanvas validation (FF151)
- Bug 2025434: Return early in ClearKey (FF151)
- Bug 2025346: Create RemoteObjectProxy properly (FF151)
- Bug 1940116: Ignore clicks shortly after extension popup closes (FF151)
- Bug 2024665: Make nsIReplacedHttpResponse non-scriptable (FF151)
- Bug 2027308: Fix handling of empty text leaves (FF151)
- Bug 2027310: improve thread coordination in ShowProtectedAuthPrompt (FF151)
- Bug 2025968: Don't allow fragmenting a MiddleCroppingBlockFrame (FF151)
- Bug 2024443: Make CryptoKey::GetAlgorithm more idiomatic (FF151)
- Bug 2024260: nsRequestObserverProxy cleanup (FF151)
- Bug 2024244: Make socket transport hold a reference to TLSServerConnectionInfo (FF151)
- Bug 2023943: Make CookieNotification::GetOperation ID clone the ID (FF151)
- Bug 2021222: Cancel SpeechSynthesis when the page navigates away (FF151)
Uplifted changes from Tor BaseBrowser
Downloads
-
konform-browser-140.12.0-100rc3.source.tar.gz.sha256sum
1 download ·
2026年06月10日 14:40:54 +02:00 · 112 B -
konform-browser-140.12.0-100rc3.source.tar.gz.sha512sum
0 downloads ·
2026年06月10日 14:40:55 +02:00 · 176 B -
konform-browser-140.12.0-100rc3.source.tar.gz.sig
0 downloads ·
2026年06月10日 14:40:55 +02:00 · 119 B
- The latest security- and bug fixes have been pulled in from staged Firefox 140.12.0 ESR BUILD1
-
140.12.0-100rc2 Pre-release
kinbot released this
2026年06月10日 05:20:26 +02:00 | 140 commits to main since this releasesecurity staging release
Summary
- The latest security- and bug fixes have been pulled in from staged Firefox 140.12.0 ESR BUILD1
- Firefox 140.12.0 ESR release notes (pending publication)
- new git commits
- fix: Replace leftover legacy vendor strings in UI and source
- ui: Extend WebGL configuration with a couple of toggles
Build changes
- Root directory path inside release source-tarball is now of format:
konform-browser-140.12.0-100/.- Developers and users building from source may need to update their tooling.
- Remove unused inherited legacy tooling integration files like
.github/etc. - make: Support beta upstream builds.
- make: Support running on mounted directories and reusing source state.
- build: Allow empty and
# commentedlines inassets/patches.txt - security: Check in Mozilla Releases PGP pubkey.
Uplifted changes from Firefox Rapid Release:
- Backport framebusting protection
- Bug 2006600: Keep track of dismissed popup-blocker notifications (FF148)
- Bug 1873716: Handle about:blank iframes that do fingerprinting (FF148)
- Bug 2001668: Make framebusting pref independent of pop-up blocking (FF150)
- Bug 2025170: Pass correct report index for blocked popups (FF151)
- Bug 1419501: require user interaction for cross-origin iframe window.top.location navigation (FF144,BB15)
- Bug 2030385: Fix non-contiguous nsIContentAnalysisResponse::Action serializer (FF151)
- Bug 2029281: Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74 (FF151)
- Bug 2027276: Use size_t when inflating UTF8 (FF151)
- Bug 2025947: Check data corruption in script decompression (FF151)
- Bug 2025942: Fix off-by-one in a LogModuleManager::PrintFmt check (FF151)
- Bug 2025888: Make IncrementalTokenizer read entire buffer (FF151)
- Bug 2025877: OffScreenCanvas validation (FF151)
- Bug 2025434: Return early in ClearKey (FF151)
- Bug 2025346: Create RemoteObjectProxy properly (FF151)
- Bug 1940116: Ignore clicks shortly after extension popup closes (FF151)
- Bug 2024665: Make nsIReplacedHttpResponse non-scriptable (FF151)
- Bug 2027308: Fix handling of empty text leaves (FF151)
- Bug 2027310: improve thread coordination in ShowProtectedAuthPrompt (FF151)
- Bug 2025968: Don't allow fragmenting a MiddleCroppingBlockFrame (FF151)
- Bug 2024443: Make CryptoKey::GetAlgorithm more idiomatic (FF151)
- Bug 2024260: nsRequestObserverProxy cleanup (FF151)
- Bug 2024244: Make socket transport hold a reference to TLSServerConnectionInfo (FF151)
- Bug 2023943: Make CookieNotification::GetOperation ID clone the ID (FF151)
- Bug 2021222: Cancel SpeechSynthesis when the page navigates away (FF151)
- Bug 2005273: Add additional known canvas fingerprinting text and aliases (FF148)
- Bug 2004797: Only call UpdateContext when creating a new context in OffscreenCanvas (FF148)
- Bug 1980594: Use
CanvasUtils::ImageExtractioninstead ofbool usePlaceholder. (FF143) - Bug 1976287: Sanitize WebGL Vendor to an allowlisted set of names (FF148)
- Bug 2001160: Null check aOffscreenCanvas's owner global in ImageExtractionResult (FF148)
- Bug 1917607: Introduce random noises to WebGLRendering when ResistFingerprinting enabled (FF145)
Uplifted changes from Tor BaseBrowser
Downloads
-
konform-browser-140.12.0-100rc2.source.tar.gz.sha256sum
1 download ·
2026年06月10日 05:26:29 +02:00 · 112 B -
konform-browser-140.12.0-100rc2.source.tar.gz.sha512sum
0 downloads ·
2026年06月10日 05:26:29 +02:00 · 176 B -
konform-browser-140.12.0-100rc2.source.tar.gz.sig
0 downloads ·
2026年06月10日 05:26:29 +02:00 · 119 B
- The latest security- and bug fixes have been pulled in from staged Firefox 140.12.0 ESR BUILD1
-
140.12.0-100rc1 Pre-release
kinbot released this
2026年06月10日 01:11:56 +02:00 | 141 commits to main since this releasestaging release for testers
Downloads
-
konform-browser-140.12.0-100rc1.source.tar.gz.sha256sum
1 download ·
2026年06月10日 01:18:34 +02:00 · 112 B -
konform-browser-140.12.0-100rc1.source.tar.gz.sha512sum
0 downloads ·
2026年06月10日 01:18:34 +02:00 · 176 B -
konform-browser-140.12.0-100rc1.source.tar.gz.sig
1 download ·
2026年06月10日 01:18:34 +02:00 · 119 B
-
konform-browser-140.12.0-100rc1.source.tar.gz.sha256sum
-
140.11.0-102 Stable
kinbot released this
2026年05月30日 07:20:38 +02:00 | 192 commits to main since this releaseSummary
- feat(ui): Add configuration toggles for WakeLocks. This controls whether scripts on web pages can keep device awake and prevent screenblanking without playing media.
- ui: Add
javascript.options.main_process_disable_jitunder JIT toggle - ui: Add
webgl.enable-webglunder WebGL toggle - fix: Remove unused probing of power states originally used for telemetry
- fix: Preserve changes to settings for Tracking Protection and History between browser restarts.
- feat: Allow disabling and uninstalling Multi-Account Containers like normal addons by moving it from
systemtodistribution.- Container Tabs functionality can now be fully disabled from Tabs section under
about:preferences#general. - Disabling the addon is sufficient for fully disabling it and the feature. If you uninstall it and later want it back, clear preference
extensions.installedDistroAddon.@testpilot-containersunderabout:configand restart browser.
- Container Tabs functionality can now be fully disabled from Tabs section under
- ui: Fix inconsistencies around addon installation and upgrades
about:addons: Do not display warning about already installed addon being unsigned if it's installed viasystem,distributionorenterprise-policy.about:addons: Hide controls for remotely updating unsigned addons lacking remote updates.- Revoke special privileges for "recommended" addons from Mozilla to bypass third-party installation prompt.
about:welcome: Extend presets to better account for imported profiles
Fasttrack changes from Firefox ESR140
- Bug 1983032: Don't revert PDF handler at every startup.
- Bug 2041887: Fix compatibility with fontconfig 2.18.
- Bug 2031577: Skip active entries when evicting cache.
- Bug 2041408: Make sure URL is valid after deserialization
- Sync preloaded HSTS HPKP remote-settings tld-suffixes ct-logs.
Presets preference changes
Purely Private 🔒- Disable DOM Push (
dom.push.enabled=false) - Disable DOM battery API (
dom.battery.enabled=false) - Set Cookie Banner handling to try rejecting cookies but never accept (
cookiebanners.service.mode=1) - Block webapps from preventing screen blanking (
dom.screenwakelock.enabled=false) - Prevent prefetching over HTTPS for TRR/DoT/DoH (
network.dns.disablePrefetchFromHTTPS=true) - Enable First-Party Isolation to prevent leaking of third-party cookies (
privacy.firstparty.isolate=true). - Enable ResistFingerprinting (
privacy.resistFingerprinting=true) - Enable Enhanced Tracking Protection (
privacy.trackingprotection.enabled=true) - Set Tracking Protection Mode to strict
- Disable WebGL2 (
webgl.enable-webgl2=false)
- Disable DOM Push (
Core Security 🛡️- Set Cookie Banner handling to try rejecting cookies but never accept (
cookiebanners.service.mode=1) - Enable Enhanced Tracking Protection (
privacy.trackingprotection.enabled=true) - Set Tracking Protection Mode to strict
- Enable ResistFingerprinting (
privacy.resistFingerprinting=true)
- Set Cookie Banner handling to try rejecting cookies but never accept (
Just Make It Work 🦊- Disable Cookie Banner handling (
cookiebanners.bannerClicking.enabled=false,cookiebanners.cookieInjector.enabled=false) - Enable (but still don't expose) DOM Battery module (
dom.battery.enabled=true) - Allow webapps to prevent screen blanking (
dom.screenwakelock.enabled=true) - Enable prefetching over HTTPS for TRR/DoT/DoH (
network.dns.disablePrefetchFromHTTPS=false) - Disable First-Party Isolation (
privacy.firstparty.isolate=false). - Disable ResistFingerprinting (
privacy.resistFingerprinting=false) - Enable WebGL2 (
webgl.enable-webgl2=true)
- Disable Cookie Banner handling (
Default preference changes
- privacy:
network.dns.disablePrefetchFromHTTPS=true - privacy:
security.csp.reporting.enabled=false - security:
dom.battery.enabled=false - security:
dom.screenwakelock.enabled=false(screen still kept awake when playing media) - fix: Update
privacy.query_stripping.strip_listwith changes from Brave Browser. - security:
webgl.enable-webgl2=false - security:
privacy.fingerprintingProtection.remoteOverrides.enabled=false - security: Revoke special privileges for Mozilla domains
- telemetry:
telemetry.fog.init_on_shutdown=false - privacy:
webgl.enable-debug-renderer-info=false
Installing
Source release
The provided source release is a ready-to-build browser with prepatched Firefox sources.
Use Konform Browser git sources directly to make custom builds.
SeeBUILD.mdfor details.Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser
Binary packages
Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.
Instructions
ð HTML version
If you are on
arm64, replacex86_64as appropriate in downloads and filenames.Release PGP key
konform-cb-ci.pgp-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G 94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b 1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0 aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N IT0rng2rbFCjhZrNmcBV6URfD3Pf/go= =7IDH -----END PGP PUBLIC KEY BLOCK-----Debian/apt-based
To receive future updates and install, run:
sudo apt -U install extrepo && \ sudo extrepo enable konform-browser && \ sudo apt -U install konform-browserThis will enable Konform apt repository.
For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.11.0-102-linux-x86_64-deb.deb ./konform-browser-140.11.0-102-linux-x86_64-deb.deb sudo apt-get install ./konform-browser-140.11.0-102-linux-x86_64-deb.debFedora/rpm-based
To receive future updates, configure Konform rpm repository and then run
sudo dnf install konform-browser.â ï ̧ There is a known issue with the instructions for Codeberg RPM repository resulting in
Signature verification failederror due to mismatching PGP key. See #20 for status and fix.For a one-off manual installation:
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.11.0-102-linux-x86_64-rpm.rpm.sig ./konform-browser-140.11.0-102-linux-x86_64-rpm.rpm sudo dnf install ./konform-browser-140.11.0-102-linux-x86_64-rpm.rpmArch Linux
See
konform-browser/Arch.Alpine Linux
See the
Alpine Linux package registry.Tarball
sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.11.0-102-linux-x86_64-package.tar.xz.sig ./konform-browser-140.11.0-102-linux-x86_64-package.tar.xz tar -xvf ./konform-browser-140.11.0-102-linux-x86_64-package.tar.xzDownloads
-
konform-browser-140.11.0-102.source.tar.gz
5 downloads ·
2026年05月30日 07:20:49 +02:00 · 1,023 MiB -
konform-browser-140.11.0-102.source.tar.gz.sha256sum
2 downloads ·
2026年05月30日 07:20:49 +02:00 · 103 B -
konform-browser-140.11.0-102.source.tar.gz.sig
2 downloads ·
2026年05月30日 07:20:49 +02:00 · 119 B