Package firefox-esr: Information

Binary package: firefox-esr
Version: 68.2.0-alt0.M80P.1
Architecture: x86_64
Build time:  Dec 4, 2019, 08:02 PM in the task #242089
Source package: firefox-esr
Category: Networking/WWW
Report package bug
License: MPL/GPL/LGPL
Summary: The Mozilla Firefox project is a redesign of Mozilla's browser
Description: 
The Mozilla Firefox project is a redesign of Mozilla's browser component,
written using the XUL user interface language and designed to be
cross-platform.

Maintainer: Andrey Cherepanov


Last changed


Dec. 2, 2019 Andrey Cherepanov 68.2.0-alt0.M80P.1
- Backport new version with security fixes to p8 branch.
Oct. 27, 2019 Andrey Cherepanov 68.2.0-alt1
- New ESR version (68.2.0).
- Fixed:
  + CVE-2019-15903 Heap overflow in expat library in XML_GetCurrentLineNumber
  + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB
  + CVE-2019-11758 Potentially exploitable crash due to 360 Total Security
  + CVE-2019-11759 Stack buffer overflow in HKDF output
  + CVE-2019-11760 Stack buffer overflow in WebRTC networking
  + CVE-2019-11761 Unintended access to a privileged JSONView object
  + CVE-2019-11762 document.domain-based origin isolation has same-origin-property violation
  + CVE-2019-11763 Incorrect HTML parsing results in XSS bypass technique
  + CVE-2019-11764 Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
Sept. 19, 2019 Andrey Cherepanov 68.1.0-alt1.M80P.1
- Backport context menu fix to p8 branch.