Package firefox: Information

Mozilla Firefox is an open-source web browser, designed
for standards compliance, performance and portability.
- Bumped release for LoongArch rebuild
- Support LoongArch architecture (lp64d ABI):
  + libwebrtc: adjusted build_config.h for LoongArch
  + spec: use GNU linker on LoongArch (lld for LoongArch is not ready
    yet as of LLVM 17)
- New version (126.0).
- Security fixes:
  + CVE-2024-4764: Use-after-free when audio input connected with multiple consumers
  + CVE-2024-4367: Arbitrary JavaScript execution in PDF.js
  + CVE-2024-4765: Web application manifests could have been overwritten via hash collision
  + CVE-2024-4766: Fullscreen notification could have been obscured on Firefox for Android
  + CVE-2024-4767: IndexedDB files retained in private browsing mode
  + CVE-2024-4768: Potential permissions request bypass via clickjacking
  + CVE-2024-4769: Cross-origin responses could be distinguished between script and non-script content-types
  + CVE-2024-4770: Use-after-free could occur when printing to PDF
  + CVE-2024-4771: Failed allocation could lead to use-after-free
  + CVE-2024-4772: Use of insecure rand() function to generate nonce
  + CVE-2024-4773: URL bar could be cleared after network error
  + CVE-2024-4774: Undefined behavior in ShmemCharMapHashEntry()
  + CVE-2024-4775: Invalid memory access in the built-in profiler
  + CVE-2024-4776: Window may remain disabled after file dialog is shown in full-screen
  + CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11
  + CVE-2024-4778: Memory safety bugs fixed in Firefox 126

Package firefox: Information

Last changed