Package firefox: Information

  • Default inline alert: A new version of the package has been build

    Task #: #345721
    Build time: Apr 24, 2024, 12:38 PM
    New version: 125.0.2-alt1
  • Default inline alert: Version in the repository: 125.0.1-alt1

Source package: firefox
Version: 95.0-alt1
Latest version according to Repology
Build time:  Dec 8, 2021, 11:35 PM in the task #291654
Category: Networking/WWW
Report package bug
License: MPL-2.0
Summary: The Mozilla Firefox project is a redesign of Mozilla's browser
Description: 
The Mozilla Firefox project is a redesign of Mozilla's browser component,
written using the XUL user interface language and designed to be
cross-platform.

List of rpms provided by this srpm:
firefox (x86_64, ppc64le, i586, armh, aarch64)
firefox-config-privacy (noarch)
firefox-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
firefox-wayland (x86_64, ppc64le, i586, armh, aarch64)

Maintainer: Alexey Gladkov



    1. python3(hamcrest)
    2. libwireless-devel
    3. alternatives
    4. /dev/shm
    5. libshell
    6. python3-base
    7. libstdc++-devel
    8. pkgconfig(alsa)
    9. pkgconfig(aom)
    10. lld12.0-devel
    11. pkgconfig(bzip2)
    12. pkgconfig(cairo)
    13. llvm12.0-devel
    14. pkgconfig(dav1d)
    15. pkgconfig(dbus-1)
    16. pkgconfig(dbus-glib-1)
    17. pkgconfig(dri)
    18. browser-plugins-npapi-devel
    19. pkgconfig(fontconfig)
    20. pkgconfig(freetype2)
    21. pkgconfig(gio-2.0)
    22. pkgconfig(graphite2)
    23. pkgconfig(gtk+-2.0)
    24. pkgconfig(gtk+-3.0)
    25. pkgconfig(harfbuzz)
    26. pkgconfig(hunspell)
    27. python3(pip)
    28. pkgconfig(icu-i18n)
    29. pkgconfig(libcurl)
    30. /proc
    31. pkgconfig(libdrm)
    32. chrpath
    33. pkgconfig(libevent)
    34. pkgconfig(libffi)
    35. clang12.0
    36. clang12.0-devel
    37. rust >= 1.56.0
    38. pkgconfig(libjpeg)
    39. rust-cargo >= 1.56.0
    40. pkgconfig(libnotify)
    41. pkgconfig(libproxy-1.0)
    42. pkgconfig(libpulse)
    43. pkgconfig(libstartup-notification-1.0)
    44. pkgconfig(nspr) >= 4.32
    45. pkgconfig(nss) >= 3.72
    46. pkgconfig(opus)
    47. pkgconfig(pixman-1)
    48. mozilla-common-devel
    49. pkgconfig(vpx)
    50. pkgconfig(x11)
    51. pkgconfig(xcomposite)
    52. pkgconfig(xcursor)
    53. pkgconfig(xdamage)
    54. pkgconfig(xext)
    55. pkgconfig(xft)
    56. pkgconfig(xi)
    57. pkgconfig(xkbcommon)
    58. pkgconfig(xrandr)
    59. pkgconfig(xscrnsaver)
    60. pkgconfig(xt)
    61. pkgconfig(zlib)
    62. nasm
    63. python3(setuptools)
    64. gst-plugins1.0-devel
    65. gstreamer1.0-devel
    66. node
    67. libnss-devel-static
    68. python3(sqlite3)
    69. rpm-build-firefox
    70. rpm-macros-alternatives
    71. unzip
    72. xorg-cf-files
    73. yasm
    74. zip

Last changed


Dec. 8, 2021 Alexey Gladkov 95.0-alt1
- New release (95.0).
- Security fixes:
  + CVE-2021-43536: URL leakage when navigating while executing asynchronous function
  + CVE-2021-43537: Heap buffer overflow when using structured clone
  + CVE-2021-43538: Missing fullscreen and pointer lock notification when requesting both
  + CVE-2021-43539: GC rooting failure when calling wasm instance methods
  + MOZ-2021-0010: Use-after-free in fullscreen objects on MacOS
  + CVE-2021-43540: WebExtensions could have installed persistent ServiceWorkers
  + CVE-2021-43541: External protocol handler parameters were unescaped
  + CVE-2021-43542: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
  + CVE-2021-43543: Bypass of CSP sandbox directive when embedding
  + CVE-2021-43544: Receiving a malicious URL as text through a SEND intent could have led to XSS
  + CVE-2021-43545: Denial of Service when using the Location API in a loop
  + CVE-2021-43546: Cursor spoofing could overlay user interface when native cursor is zoomed
  + MOZ-2021-0009: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
Nov. 19, 2021 Alexey Gladkov 94.0.2-alt1
- New release (94.0.2).
Nov. 2, 2021 Alexey Gladkov 94.0-alt1
- New release (94.0).
- Security fixes:
  + CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets
  + CVE-2021-38504: Use-after-free in file picker dialog
  + CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data
  + CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning
  + CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports
  + MOZ-2021-0003: Universal XSS in Firefox for Android via QR Code URLs
  + CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
  + MOZ-2021-0004: Web Extensions could access pre-redirect URL when their context menu was triggered by a user
  + CVE-2021-38509: Javascript alert box could have been spoofed onto an arbitrary domain
  + CVE-2021-38510: Download Protections were bypassed by .inetloc files on Mac OS
  + MOZ-2021-0005: 'Copy Image Link' context menu action could have been abused to see authentication tokens
  + MOZ-2021-0006: URL Parsing may incorrectly parse internationalized domains
  + MOZ-2021-0007: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3