Package firefox-esr: Information

Source package: firefox-esr
Version: 115.8.0-alt1
Latest version according to Repology
Build time:  Feb 22, 2024, 04:26 PM in the task #341225
Category: Networking/WWW
Report package bug
License: MPL-2.0
Summary: The Mozilla Firefox project is a redesign of Mozilla's browser (ESR version)
Description: 
The Mozilla Firefox project is a redesign of Mozilla's browser component,
written using the XUL user interface language and designed to be
cross-platform.

List of rpms provided by this srpm:
firefox-esr (x86_64, i586, armh, aarch64)
firefox-esr-config-privacy (x86_64, i586, armh, aarch64)
firefox-esr-debuginfo (x86_64, i586, armh, aarch64)
firefox-esr-wayland (x86_64, i586, armh, aarch64)

Maintainer: Andrey Cherepanov



    1. /dev/shm
    2. /proc
    3. alternatives
    4. autoconf_2.13
    5. autoconf_2.13
    6. browser-plugins-npapi-devel
    7. bzlib-devel
    8. chrpath
    9. clang15.0
    10. clang15.0-devel
    11. glibc-kernheaders-generic
    12. gst-plugins1.0-devel
    13. gstreamer1.0-devel
    14. fontconfig-devel
    15. libGL-devel
    16. libcairo-devel
    17. libnotify-devel
    18. libnss-devel-static
    19. python3(click)
    20. python3(curses)
    21. libcurl-devel
    22. libdav1d-devel
    23. python3(hamcrest)
    24. python3(imp)
    25. python3(setuptools)
    26. python3(sqlite3)
    27. libdbus-devel
    28. libdbus-glib-devel
    29. libdrm-devel
    30. libopus-devel
    31. python3(pip)
    32. libevent-devel
    33. libffi-devel
    34. python3-base
    35. rust >= 1.65.0
    36. rpm-build-mozilla.org
    37. libfreetype-devel
    38. rust-cargo >= 1.65.0
    39. libwireless-devel
    40. libxkbcommon-devel
    41. rpm-macros-alternatives
    42. libgio-devel
    43. lld15.0-devel
    44. llvm15.0-devel
    45. libpixman-devel
    46. mozilla-common-devel
    47. nasm
    48. node
    49. libproxy-devel
    50. unzip
    51. libpulseaudio-devel
    52. pkgconfig(alsa)
    53. pkgconfig(aom)
    54. pkgconfig(bzip2)
    55. pkgconfig(cairo)
    56. pkgconfig(dav1d)
    57. pkgconfig(dbus-1)
    58. pkgconfig(dbus-glib-1)
    59. pkgconfig(dri)
    60. pkgconfig(fontconfig)
    61. pkgconfig(freetype2)
    62. pkgconfig(gio-2.0)
    63. pkgconfig(graphite2)
    64. pkgconfig(gtk+-2.0)
    65. pkgconfig(gtk+-3.0)
    66. pkgconfig(harfbuzz)
    67. pkgconfig(hunspell)
    68. pkgconfig(icu-i18n)
    69. pkgconfig(libcurl)
    70. pkgconfig(libdrm)
    71. pkgconfig(libevent)
    72. pkgconfig(libffi)
    73. pkgconfig(libjpeg)
    74. pkgconfig(libnotify)
    75. pkgconfig(libproxy-1.0)
    76. pkgconfig(libpulse)
    77. libgtk+2-devel
    78. libgtk+3-devel
    79. xorg-cf-files
    80. yasm
    81. zip
    82. zlib-devel
    83. pkgconfig(libstartup-notification-1.0)
    84. pkgconfig(nspr) >= 4.35
    85. pkgconfig(nss) >= 3.86
    86. pkgconfig(opus)
    87. pkgconfig(pixman-1)
    88. pkgconfig(vpx)
    89. pkgconfig(x11)
    90. pkgconfig(xcomposite)
    91. pkgconfig(xcursor)
    92. pkgconfig(xdamage)
    93. pkgconfig(xext)
    94. pkgconfig(xft)
    95. pkgconfig(xi)
    96. pkgconfig(xkbcommon)
    97. pkgconfig(xrandr)
    98. pkgconfig(xscrnsaver)
    99. pkgconfig(xt)
    100. pkgconfig(xtst)
    101. pkgconfig(zlib)
    102. libhunspell-devel
    103. libshell
    104. libjpeg-devel
    105. libstartup-notification-devel
    106. libstdc++-devel
    107. libvpx-devel
    108. libX11-devel
    109. libXScrnSaver-devel
    110. libXcomposite-devel
    111. libXcursor-devel
    112. libXdamage-devel
    113. libXext-devel
    114. libXft-devel
    115. libXi-devel
    116. libXt-devel
    117. libalsa-devel
    118. libaom-devel

Last changed


Feb. 21, 2024 Pavel Vasenkov 115.8.0-alt1
- New ESR version.
- Security fixes
  + CVE-2024-1546 Out-of-bounds memory read in networking channels
  + CVE-2024-1547 Alert dialog could have been spoofed on another site
  + CVE-2024-1548 Fullscreen Notification could have been hidden by select element
  + CVE-2024-1549 Custom cursor could obscure the permission dialog
  + CVE-2024-1550 Mouse cursor re-positioned unexpectedly could have led to unintended permission grants
  + CVE-2024-1551 Multipart HTTP Responses would accept the Set-Cookie header in response parts
  + CVE-2024-1552 Incorrect code generation on 32-bit ARM devices
  + CVE-2024-1553 Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8
Feb. 6, 2024 Alexey Sheplyakov 115.7.0-alt2
- Reverted malicious upstream commit
  https://hg.mozilla.org/integration/autoland/rev/a03a9c72d1db3716adffc6968cfb6eb43c6fcd74
  which forces firefox to autoremove yandex, mail.ru, vk search extensions.
  Note: reverting that (and some similar) commit is a necessary condition to
  make firefox obey the search engine settings specified in policies.json.
  Alas it might be not enough. The problem is that firefox is tightly
  integrated with services provided by Mozilla corporation, such as bookmark
  sync, telemetry, captive portal detection, you name it. Reportedly a similar
  malware has been deployed there, thus yandex search extension (or in fact any
  extension) can be removed remotely (that is, without user consent) if the user
  is signed in into mozilla account, sends telemetry data to mozilla, etc.
  Perhaps it's time to make unmozilla firefox (similarly to ungoogled chromium).
- policies.json: use yandex search by default (Closes: #43516).
Feb. 4, 2024 Pavel Vasenkov 115.7.0-alt1
- New ESR version.
- Security fixes
  + CVE-2024-0741 Out of bounds write in ANGLE
  + CVE-2024-0742 Failure to update user input timestamp
  + CVE-2024-0746 Crash when listing printers on Linux
  + CVE-2024-0747 Bypass of Content Security Policy when directive unsafe-inline was set
  + CVE-2024-0749 Phishing site popup could show local origin in address bar
  + CVE-2024-0750 Potential permissions request bypass via clickjacking
  + CVE-2024-0751 Privilege escalation through devtools
  + CVE-2024-0753 HSTS policy on subdomain could bypass policy of upper domain
  + CVE-2024-0755 Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7