Package firefox-esr: Information

    Binary package: firefox-esr
    Version: 91.4.0-alt0.c9.1
    Architecture: ppc64le
    Build time:  Jan 12, 2022, 08:49 PM in the task #292448
    Source package: firefox-esr
    Category: Networking/WWW
    Report package bug
    License: MPL-2.0
    Summary: The Mozilla Firefox project is a redesign of Mozilla's browser (ESR version)
    Description: 
    The Mozilla Firefox project is a redesign of Mozilla's browser component,
    written using the XUL user interface language and designed to be
    cross-platform.

    Maintainer: Andrey Cherepanov


    Last changed


    Dec. 8, 2021 Andrey Cherepanov 91.4.0-alt0.c9.1
    - Backport new version with security fixes.
    Dec. 6, 2021 Andrey Cherepanov 91.4.0-alt1
    - New ESR version.
    - Security fixes:
      + CVE-2021-43536 URL leakage when navigating while executing asynchronous function
      + CVE-2021-43537 Heap buffer overflow when using structured clone
      + CVE-2021-43538 Missing fullscreen and pointer lock notification when requesting both
      + CVE-2021-43539 GC rooting failure when calling wasm instance methods
      + CVE-2021-43541 External protocol handler parameters were unescaped
      + CVE-2021-43542 XMLHttpRequest error codes could have leaked the existence of an external protocol handler
      + CVE-2021-43543 Bypass of CSP sandbox directive when embedding
      + CVE-2021-43545 Denial of Service when using the Location API in a loop
      + CVE-2021-43546 Cursor spoofing could overlay user interface when native cursor is zoomed
    Nov. 18, 2021 Andrey Cherepanov 91.3.0-alt1.c9.1
    - Backport new ESR major version to c9 branch.
    - Disable telemetry by default.