Package firefox-esr: Information

    Source package: firefox-esr
    Version: 52.3.0-alt0.M80C.1
    Build time:  Sep 20, 2017, 12:04 PM in the task #188433
    Category: Networking/WWW
    Report package bug
    License: MPL/GPL/LGPL
    Summary: The Mozilla Firefox project is a redesign of Mozilla's browser
    Description: 
    The Mozilla Firefox project is a redesign of Mozilla's browser
    component, written using the XUL user interface language and designed to
    be cross-platform.

    List of rpms provided by this srpm:
    firefox-esr (x86_64, i586)
    firefox-esr-debuginfo (x86_64, i586)

    Maintainer: Andrey Cherepanov


      1. libfreetype-devel
      2. glibc-kernheaders
      3. libstartup-notification-devel
      4. makedepend
      5. libGL-devel
      6. gst-plugins1.0-devel
      7. libIDL-devel
      8. gstreamer1.0-devel
      9. libgio-devel
      10. mozilla-common-devel
      11. doxygen
      12. libnotify-devel
      13. pkgconfig(nspr) >= 4.15
      14. pkgconfig(nss) >= 3.31.0
      15. libnss-devel-static
      16. libX11-devel
      17. libXScrnSaver-devel
      18. libXcomposite-devel
      19. libXdamage-devel
      20. libXext-devel
      21. libXft-devel
      22. libgtk+2-devel
      23. libXt-devel
      24. libgtk+3-devel
      25. libopus-devel
      26. fontconfig-devel
      27. imake
      28. libhunspell-devel
      29. libalsa-devel
      30. rpm-build-mozilla.org
      31. rpm-macros-alternatives
      32. gcc-c++
      33. python-module-distribute
      34. libjpeg-devel
      35. libcairo-devel
      36. libpixman-devel
      37. python-modules-compiler
      38. python-modules-json
      39. python-modules-logging
      40. python-modules-sqlite3
      41. unzip
      42. libproxy-devel
      43. libcurl-devel
      44. xorg-cf-files
      45. yasm
      46. libvpx-devel
      47. zip
      48. zlib-devel
      49. libevent-devel
      50. libpulseaudio-devel
      51. alternatives
      52. autoconf_2.13
      53. autoconf_2.13
      54. browser-plugins-npapi-devel
      55. bzlib-devel
      56. chrpath
      57. libshell
      58. libffi-devel
      59. libwireless-devel

    Last changed


    Sept. 19, 2017 Andrey Cherepanov 52.3.0-alt0.M80C.1
    - Backport new version to c8 branch
    Aug. 8, 2017 Andrey Cherepanov 52.3.0-alt1
    - New ESR version (52.3.0)
    - Security fixes:
      + CVE-2017-7798: XUL injection in the style editor in devtools
      + CVE-2017-7800: Use-after-free in WebSockets during disconnection
      + CVE-2017-7801: Use-after-free with marquee during window resizing
      + CVE-2017-7809: Use-after-free while deleting attached editor DOM node
      + CVE-2017-7784: Use-after-free with image observers
      + CVE-2017-7802: Use-after-free resizing image elements
      + CVE-2017-7785: Buffer overflow manipulating ARIA attributes in DOM
      + CVE-2017-7786: Buffer overflow while painting non-displayable SVG
      + CVE-2017-7753: Out-of-bounds read with cached style data and pseudo-elements
      + CVE-2017-7787: Same-origin policy bypass with iframes through page reloads
      + CVE-2017-7807: Domain hijacking through AppCache fallback
      + CVE-2017-7792: Buffer overflow viewing certificates with an extremely long OID
      + CVE-2017-7804: Memory protection bypass through WindowsDllDetourPatcher
      + CVE-2017-7791: Spoofing following page navigation with data: protocol and modal alerts
      + CVE-2017-7782: WindowsDllDetourPatcher allocates memory without DEP protections
      + CVE-2017-7803: CSP containing 'sandbox' improperly applied
      + CVE-2017-7779: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3
    July 11, 2017 Andrey Cherepanov 52.2.1-alt1
    - New ESR version (52.2.1)