Firefox 138.0.4/128.10.1esr (Pwn2Own Releases)

Seems like it’s worth mentioning here that as soon as the builds lands people should be upgrading.

5 Likes

Unstable: Nixpkgs PR #408236 ("firefox{,-bin}-unwrapped: 138.0.3 -> 138.0.4") progress
25.05: Nixpkgs PR #408337 ("[Backport release-25.05] firefox{,-bin}-unwrapped: 138.0.3 -> 138.0.4") progress

3 Likes

24.11: Nixpkgs PR #408350 ("[Backport release-24.11] firefox{,-bin}-unwrapped: 138.0.3 -> 138.0.4") progress

4 Likes

I have a question: I am on devedition (unrelated: to make extensions built from source with nix work) but the version is 139.0b3. How do I know wether or not I also have these fixes? I don’t think it says explicitly anywhere on mozilla’s websites, and the reports aren’t public.

They do mention though: Version 138.0.4, first offered to Release channel users on May 17, 2025
And: Version 139.0beta, first offered to Beta channel users on April 29, 2025

So it seems like 139.0beta doesn’t have the fixes, but 139.0b3 might? All kinda vague. I guess Milestones and key data for Firefox 139 says that the last merge from mozilla-central was 3 weeks ago though, so that would indicate it isn’t included.

All in all, how do I, if not using the main release train, know that I have the latest security fixes?

1 Like