Skip to content
NewA calmer, faster ZeroHour

Firefox will keep security-fix tests private for a week after release

Original title: Firefox security patch tests are now private for at least a week

Lobsters · securityby groups.google.com via strugee ()1 min read
AI summary · x-ai/grok-4.7Summaries by Vani AI

Sec-high and sec-moderate fixes must ship without tests until the Tuesday after a Tuesday release.

Mozilla's security team told Firefox developers to separate tests from fixes for sec-high and sec-moderate bugs and hold those tests until after the release ships. If a fix ships in a Tuesday release, tests should land no sooner than the next Tuesday. A whiteboard reminder tag can prompt a bot to follow up. The sec-approval process is unchanged for now.

Key facts
  • The change follows recent analyses and improving AI capabilities.
  • Developers can use a whiteboard tag such as [reminder-test 2026-10-20].
  • The security team says landing fixes remains disruptive and is being revised.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

1 min read at groups.google.com

As AI keeps improving, our security policies are changing in response. Based on recent analyses, we're going to ask that you return to separating tests into a separate patch from the fix for a security issue. This applies to both sec-high and sec-moderate bugs.

Lobsters · security

By groups.google.com via strugee · groups.google.com

Read the full article at Lobsters · security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.