Package firefox: Information

The Mozilla Firefox project is a redesign of Mozilla's browser component,
written using the XUL user interface language and designed to be
cross-platform.
- New release (85.0).
- Security fixes:
  + CVE-2021-23953: Cross-origin information leakage via redirected PDF requests
  + CVE-2021-23954: Type confusion when using logical assignment operators in JavaScript switch statements
  + CVE-2021-23955: Clickjacking across tabs through misusing requestPointerLock
  + CVE-2021-23956: File picker dialog could have been used to disclose a complete directory
  + CVE-2021-23957: Iframe sandbox could have been bypassed on Android via the intent URL scheme
  + CVE-2021-23958: Screen sharing permission leaked across tabs
  + CVE-2021-23959: Cross-Site Scripting in error pages on Firefox for Android
  + CVE-2021-23960: Use-after-poison for incorrectly redeclared JavaScript variables during GC
  + CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage
  + CVE-2021-23962: Use-after-poison in <code>nsTreeBodyFrame::RowCountChanged</code>
  + CVE-2021-23963: Permission prompt inaccessible after asking for additional permissions
  + CVE-2021-23964: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7
  + CVE-2021-23965: Memory safety bugs fixed in Firefox 85
- New release (84.0.2).
- Security fixes:
  + CVE-2020-16044: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk
- Add firefox GNOME Shell search provider.
- Enable smooth scrolling option.
- New release (84.0.1).
- No longer requires autoconf_2.13 to build.

Package firefox: Information

Last changed