Package firefox: Information

The Mozilla Firefox project is a redesign of Mozilla's browser component,
written using the XUL user interface language and designed to be
cross-platform.
- New release (70.0.1).
- Builtin ru, kk, uk locales.
- New release (70.0).
- Fixed:
  + CVE-2018-6156: Heap buffer overflow in FEC processing in WebRTC
  + CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber
  + CVE-2019-11757: Use-after-free when creating index updates in IndexedDB
  + CVE-2019-11759: Stack buffer overflow in HKDF output
  + CVE-2019-11760: Stack buffer overflow in WebRTC networking
  + CVE-2019-11761: Unintended access to a privileged JSONView object
  + CVE-2019-11762: document.domain-based origin isolation has same-origin-property violation
  + CVE-2019-11763: Incorrect HTML parsing results in XSS bypass technique
  + CVE-2019-11765: Incorrect permissions could be granted to a website
  + CVE-2019-17000: CSP bypass using object tag with data: URI
  + CVE-2019-17001: CSP bypass using object tag when script-src 'none' is specified
  + CVE-2019-17002: upgrade-insecure-requests was not being honored for links dragged and dropped
  + CVE-2019-11764: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- New release (69.0.2).

Package firefox: Information

Last changed