Package firefox-esr: Information

Source package: firefox-esr
Version: 52.4.0-alt1
Build time:  Sep 30, 2017, 01:14 PM in the task #189704
Category: Networking/WWW
Report package bug
License: MPL/GPL/LGPL
Summary: The Mozilla Firefox project is a redesign of Mozilla's browser
Description: 
The Mozilla Firefox project is a redesign of Mozilla's browser
component, written using the XUL user interface language and designed to
be cross-platform.

List of rpms provided by this srpm:
firefox-esr (x86_64, i586)
firefox-esr-debuginfo (x86_64, i586)

Maintainer: Andrey Cherepanov


    1. doxygen
    2. libgtk+2-devel
    3. libgtk+3-devel
    4. libproxy-devel
    5. imake
    6. libpulseaudio-devel
    7. libhunspell-devel
    8. libcairo-devel
    9. libX11-devel
    10. libjpeg-devel
    11. libXScrnSaver-devel
    12. fontconfig-devel
    13. libXcomposite-devel
    14. libXdamage-devel
    15. libvpx-devel
    16. libXext-devel
    17. libXft-devel
    18. libXt-devel
    19. libcurl-devel
    20. libwireless-devel
    21. libalsa-devel
    22. libshell
    23. gcc-c++
    24. libevent-devel
    25. libffi-devel
    26. libstartup-notification-devel
    27. alternatives
    28. libfreetype-devel
    29. makedepend
    30. autoconf_2.13
    31. autoconf_2.13
    32. rpm-build-mozilla.org
    33. rpm-macros-alternatives
    34. pkgconfig(nspr) >= 4.15
    35. pkgconfig(nss) >= 3.31.0
    36. browser-plugins-npapi-devel
    37. bzlib-devel
    38. mozilla-common-devel
    39. libgio-devel
    40. chrpath
    41. unzip
    42. libGL-devel
    43. libIDL-devel
    44. libnotify-devel
    45. libnss-devel-static
    46. gstreamer1.0-devel
    47. glibc-kernheaders
    48. gst-plugins1.0-devel
    49. python-module-distribute
    50. python-modules-compiler
    51. libopus-devel
    52. libpixman-devel
    53. python-modules-json
    54. python-modules-logging
    55. python-modules-sqlite3
    56. xorg-cf-files
    57. yasm
    58. zip
    59. zlib-devel

Last changed


Sept. 29, 2017 Andrey Cherepanov 52.4.0-alt1
- New ESR version (52.4.0)
- Fixes:
  + CVE-2017-7793 Use-after-free with Fetch API
  + CVE-2017-7818 Use-after-free during ARIA array manipulation
  + CVE-2017-7819 Use-after-free while resizing images in design mode
  + CVE-2017-7824 Buffer overflow when drawing and validating elements with ANGLE
  + CVE-2017-7805 Use-after-free in TLS 1.2 generating handshake hashes
  + CVE-2017-7814 Blob and data URLs bypass phishing and malware protection warnings
  + CVE-2017-7825 OS X fonts render some Tibetan and Arabic unicode characters as spaces
  + CVE-2017-7823 CSP sandbox directive did not create a unique origin
  + CVE-2017-7810 Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
Aug. 8, 2017 Andrey Cherepanov 52.3.0-alt1
- New ESR version (52.3.0)
- Security fixes:
  + CVE-2017-7798: XUL injection in the style editor in devtools
  + CVE-2017-7800: Use-after-free in WebSockets during disconnection
  + CVE-2017-7801: Use-after-free with marquee during window resizing
  + CVE-2017-7809: Use-after-free while deleting attached editor DOM node
  + CVE-2017-7784: Use-after-free with image observers
  + CVE-2017-7802: Use-after-free resizing image elements
  + CVE-2017-7785: Buffer overflow manipulating ARIA attributes in DOM
  + CVE-2017-7786: Buffer overflow while painting non-displayable SVG
  + CVE-2017-7753: Out-of-bounds read with cached style data and pseudo-elements
  + CVE-2017-7787: Same-origin policy bypass with iframes through page reloads
  + CVE-2017-7807: Domain hijacking through AppCache fallback
  + CVE-2017-7792: Buffer overflow viewing certificates with an extremely long OID
  + CVE-2017-7804: Memory protection bypass through WindowsDllDetourPatcher
  + CVE-2017-7791: Spoofing following page navigation with data: protocol and modal alerts
  + CVE-2017-7782: WindowsDllDetourPatcher allocates memory without DEP protections
  + CVE-2017-7803: CSP containing 'sandbox' improperly applied
  + CVE-2017-7779: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3
July 11, 2017 Andrey Cherepanov 52.2.1-alt1
- New ESR version (52.2.1)