Package firefox-esr: Information

Source package: firefox-esr
Version: 45.9.0-alt0.M80P.1
Build time:  Apr 27, 2017, 02:47 PM in the task #182241
Category: Networking/WWW
Report package bug
License: MPL/GPL/LGPL
Summary: The Mozilla Firefox project is a redesign of Mozilla's browser
Description: 
The Mozilla Firefox project is a redesign of Mozilla's browser
component, written using the XUL user interface language and designed to
be cross-platform.

List of rpms provided by this srpm:
firefox-esr (x86_64, i586)
firefox-esr-debuginfo (x86_64, i586)

Maintainer: Andrey Cherepanov


    1. libalsa-devel
    2. libvpx-devel
    3. libcurl-devel
    4. libwireless-devel
    5. libshell
    6. alternatives
    7. libevent-devel
    8. pkgconfig(nspr) >= 4.12.0
    9. autoconf_2.13
    10. autoconf_2.13
    11. pkgconfig(nss) >= 3.28.1
    12. libffi-devel
    13. libstartup-notification-devel
    14. libfreetype-devel
    15. browser-plugins-npapi-devel
    16. bzlib-devel
    17. makedepend
    18. chrpath
    19. python-module-distribute
    20. libnotify-devel
    21. libnss-devel-static
    22. python-modules-compiler
    23. python-modules-json
    24. python-modules-logging
    25. python-modules-sqlite3
    26. mozilla-common-devel
    27. libgio-devel
    28. libopus-devel
    29. libGL-devel
    30. glibc-kernheaders
    31. rpm-build-mozilla.org
    32. libIDL-devel
    33. rpm-macros-alternatives
    34. gst-plugins1.0-devel
    35. libpixman-devel
    36. gstreamer1.0-devel
    37. doxygen
    38. libgtk+2-devel
    39. fontconfig-devel
    40. gcc-c++
    41. imake
    42. libproxy-devel
    43. libhunspell-devel
    44. libcairo-devel
    45. libX11-devel
    46. unzip
    47. libXScrnSaver-devel
    48. libicu-devel
    49. libXt-devel
    50. libXft-devel
    51. xorg-cf-files
    52. yasm
    53. libpulseaudio-devel
    54. libXcomposite-devel
    55. libjpeg-devel
    56. libXdamage-devel
    57. zip
    58. zlib-devel
    59. libXext-devel

Last changed


April 27, 2017 Andrey Cherepanov 45.9.0-alt0.M80P.1
- Backport new version to p8 branch
April 20, 2017 Andrey Cherepanov 45.9.0-alt1
- New ESR version
- Security fixes:
  + CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9,
  + CVE-2017-5462: DRBG flaw in NSS
  + CVE-2017-5445: Uninitialized values used while parsing
  + CVE-2017-5469: Potential Buffer overflow in flex-generated code
  + CVE-2017-5437: Vulnerabilities in Libevent library
  + CVE-2017-5448: Out-of-bounds write in ClearKeyDecryptor
  + CVE-2017-5465: Out-of-bounds read in ConvolvePixel
  + CVE-2017-5447: Out-of-bounds read during glyph processing
  + CVE-2017-5446: Out-of-bounds read when HTTP/2 DATA frames are sent with
  + CVE-2017-5444: Buffer overflow while parsing application/http-index-format
  + CVE-2017-5443: Out-of-bounds write during BinHex decoding
  + CVE-2017-5464: Memory corruption with accessibility and DOM manipulation
  + CVE-2017-5442: Use-after-free during style changes
  + CVE-2017-5441: Use-after-free with selection during scroll events
  + CVE-2017-5440: Use-after-free in txExecutionState destructor during XSLT
  + CVE-2017-5439: Use-after-free in nsTArray Length() during XSLT processing
  + CVE-2017-5438: Use-after-free in nsAutoPtr during XSLT processing
  + CVE-2017-5460: Use-after-free in frame selection
  + CVE-2017-5432: Use-after-free in text input selection
  + CVE-2017-5434: Use-after-free during focus handling
  + CVE-2017-5459: Buffer overflow in WebGL
  + CVE-2017-5461: Out-of-bounds write in Base64 encoding in NSS
  + CVE-2017-5436: Out-of-bounds write with malicious font in Graphite 2
  + CVE-2017-5435: Use-after-free during transaction processing in the editor
  + CVE-2017-5433: Use-after-free in SMIL animation functions
March 7, 2017 Andrey Cherepanov 45.8.0-alt0.M80P.1
- Backport new version to p8 branch