Package firefox-esr: Information

Mozilla Firefox is an open-source web browser, designed
for standards compliance, performance and portability.
- Fix "new version means new blank profile" (Closes: #57602)
  + thanks NixOS guys, see http://github.com/NixOS/nixpkgs/pull/119849
- Get yandex search back through default policy
  (Closes: #45190; see also: #43516; thanks Ruslan Gilfanov).
- New ESR version.
- Security fixes:
  + CVE-2026-0877 Mitigation bypass in the DOM: Security component
  + CVE-2026-0878 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
  + CVE-2026-0879 Sandbox escape due to incorrect boundary conditions in the Graphics component
  + CVE-2026-0880 Sandbox escape due to integer overflow in the Graphics component
  + CVE-2026-0882 Use-after-free in the IPC component
  + CVE-2025-14327 Spoofing issue in the Downloads Panel component
  + CVE-2026-0883 Information disclosure in the Networking component
  + CVE-2026-0884 Use-after-free in the JavaScript Engine component
  + CVE-2026-0885 Use-after-free in the JavaScript: GC component
  + CVE-2026-0886 Incorrect boundary conditions in the Graphics component
  + CVE-2026-0887 Clickjacking issue, information disclosure in the PDF Viewer component
  + CVE-2026-0890 Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
  + CVE-2026-0891 Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147

Package firefox-esr: Information

Last changed