Package firefox-esr: Information

    Source package: firefox-esr
    Version: 115.11.0-alt1
    Build time:  May 28, 2024, 05:57 PM in the task #348463
    Category: Networking/WWW
    Report package bug
    License: MPL-2.0
    Summary: The Mozilla Firefox project is a redesign of Mozilla's browser (ESR version)
    Description: 
    The Mozilla Firefox project is a redesign of Mozilla's browser component,
    written using the XUL user interface language and designed to be
    cross-platform.

    List of rpms provided by this srpm:
    firefox-esr (x86_64, i586, armh, aarch64)
    firefox-esr-config-privacy (x86_64, i586, armh, aarch64)
    firefox-esr-debuginfo (x86_64, i586, armh, aarch64)
    firefox-esr-wayland (x86_64, i586, armh, aarch64)

    Maintainer: Andrey Cherepanov


      1. /dev/shm
      2. /proc
      3. libshell
      4. fontconfig-devel
      5. libstartup-notification-devel
      6. libstdc++-devel
      7. alternatives
      8. autoconf_2.13
      9. autoconf_2.13
      10. browser-plugins-npapi-devel
      11. bzlib-devel
      12. chrpath
      13. clang15.0
      14. clang15.0-devel
      15. libvpx-devel
      16. libwireless-devel
      17. libxkbcommon-devel
      18. glibc-kernheaders-generic
      19. lld15.0-devel
      20. llvm15.0-devel
      21. gst-plugins1.0-devel
      22. gstreamer1.0-devel
      23. mozilla-common-devel
      24. nasm
      25. node
      26. python3-base
      27. pkgconfig(alsa)
      28. pkgconfig(aom)
      29. pkgconfig(bzip2)
      30. pkgconfig(cairo)
      31. pkgconfig(dav1d)
      32. pkgconfig(dbus-1)
      33. pkgconfig(dbus-glib-1)
      34. pkgconfig(dri)
      35. pkgconfig(fontconfig)
      36. pkgconfig(freetype2)
      37. pkgconfig(gio-2.0)
      38. pkgconfig(graphite2)
      39. pkgconfig(gtk+-2.0)
      40. pkgconfig(gtk+-3.0)
      41. pkgconfig(harfbuzz)
      42. pkgconfig(hunspell)
      43. pkgconfig(icu-i18n)
      44. pkgconfig(libcurl)
      45. pkgconfig(libdrm)
      46. pkgconfig(libevent)
      47. pkgconfig(libffi)
      48. pkgconfig(libjpeg)
      49. pkgconfig(libnotify)
      50. pkgconfig(libproxy-1.0)
      51. pkgconfig(libpulse)
      52. pkgconfig(libstartup-notification-1.0)
      53. libGL-devel
      54. pkgconfig(nspr) >= 4.35
      55. pkgconfig(nss) >= 3.86
      56. pkgconfig(opus)
      57. pkgconfig(pixman-1)
      58. pkgconfig(vpx)
      59. pkgconfig(x11)
      60. pkgconfig(xcomposite)
      61. pkgconfig(xcursor)
      62. pkgconfig(xdamage)
      63. pkgconfig(xext)
      64. pkgconfig(xft)
      65. pkgconfig(xi)
      66. pkgconfig(xkbcommon)
      67. pkgconfig(xrandr)
      68. pkgconfig(xscrnsaver)
      69. pkgconfig(xt)
      70. pkgconfig(xtst)
      71. pkgconfig(zlib)
      72. rpm-build-mozilla.org
      73. rpm-macros-alternatives
      74. python3(click)
      75. python3(curses)
      76. python3(hamcrest)
      77. python3(imp)
      78. libX11-devel
      79. libXScrnSaver-devel
      80. libXcomposite-devel
      81. libXcursor-devel
      82. libXdamage-devel
      83. libXext-devel
      84. libXft-devel
      85. libXi-devel
      86. libXt-devel
      87. libalsa-devel
      88. libaom-devel
      89. python3(pip)
      90. rust >= 1.65.0
      91. rust-cargo >= 1.65.0
      92. python3(setuptools)
      93. python3(sqlite3)
      94. libcairo-devel
      95. unzip
      96. libdbus-devel
      97. libfreetype-devel
      98. libgio-devel
      99. libdbus-glib-devel
      100. libjpeg-devel
      101. libdrm-devel
      102. libcurl-devel
      103. xorg-cf-files
      104. libgtk+2-devel
      105. libgtk+3-devel
      106. yasm
      107. libnotify-devel
      108. libnss-devel-static
      109. libdav1d-devel
      110. zip
      111. zlib-devel
      112. libevent-devel
      113. libpixman-devel
      114. libhunspell-devel
      115. libffi-devel
      116. libopus-devel
      117. libproxy-devel
      118. libpulseaudio-devel

    Last changed


    May 19, 2024 Pavel Vasenkov 115.11.0-alt1
    - New ESR version.
    - Security fixes
      + CVE-2024-4367 Arbitrary JavaScript execution in PDF.js
      + CVE-2024-4767 IndexedDB files retained in private browsing mode
      + CVE-2024-4768 Potential permissions request bypass via clickjacking
      + CVE-2024-4769 Cross-origin responses could be distinguished between script and non-script content-types
      + CVE-2024-4770 Use-after-free could occur when printing to PDF
      + CVE-2024-4777 Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11
    April 16, 2024 Pavel Vasenkov 115.10.0-alt1
    - New ESR version.
    - Security fixes
      + CVE-2024-3852 GetBoundName in the JIT returned the wrong object
      + CVE-2024-3854 Out-of-bounds-read after mis-optimized switch statement
      + CVE-2024-3857 Incorrect JITting of arguments led to use-after-free during garbage collection
      + CVE-2024-2609 Permission prompt input delay could expire when not in focus
      + CVE-2024-3859 Integer-overflow led to out-of-bounds-read in the OpenType sanitizer
      + CVE-2024-3861 Potential use-after-free due to AlignedBuffer self-move
      + CVE-2024-3863 Download Protections were bypassed by .xrm-ms files on Windows
      + CVE-2024-3302 Denial of Service using HTTP/2 CONTINUATION frames
      + CVE-2024-3864 Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10
    April 3, 2024 Pavel Vasenkov 115.9.1-alt1
    - New ESR version.
    - Security fixes
      + CVE-2024-0743 Crash in NSS TLS method
      + CVE-2024-2605 Windows Error Reporter could be used as a Sandbox escape vector
      + CVE-2024-2607 JIT code failed to save return registers on Armv7-A
      + CVE-2024-2608 Integer overflow could have led to out of bounds write
      + CVE-2024-2616 Improve handling of out-of-memory conditions in ICU
      + CVE-2023-5388 NSS susceptible to timing attack against RSA decryption
      + CVE-2024-2610 Improper handling of html and body tags enabled CSP nonce leakage
      + CVE-2024-2611 Clickjacking vulnerability could have led to a user accidentally granting permissions
      + CVE-2024-2612 Self referencing object could have potentially led to a use-after-free
      + CVE-2024-2614 Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9
      + CVE-2024-29944 Privileged JavaScript Execution via Event Handlers