Package firefox: Information

The Mozilla Firefox project is a redesign of Mozilla's browser component,
written using the XUL user interface language and designed to be
cross-platform.
- Backport new version to p9 branch.
- Decrease weight in alternatives.
- Build with bundled icu.
- Allow sideloading app and system unsigned addons.
- Fix bogus timestamp in changelog.
- New release (80.0.1).
- New release (80.0).
- Security fixes:
  + CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
  + CVE-2020-15664: Attacker-induced prompt for extension installation
  + CVE-2020-12401: Timing-attack on ECDSA signature generation
  + CVE-2020-6829: P-384 and P-521 vulnerable to an electro-magnetic side channel attack on signature generation
  + CVE-2020-12400: P-384 and P-521 vulnerable to a side channel attack on modular inversion
  + CVE-2020-15665: Address bar not reset when choosing to stay on a page after the beforeunload dialog is shown
  + CVE-2020-15666: MediaError message property leaks cross-origin response status
  + CVE-2020-15667: Heap overflow when processing an update file
  + CVE-2020-15668: Data Race when reading certificate information
  + CVE-2020-15670: Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

Package firefox: Information

Last changed