MozillaFirefox/firefox-72.0.1.source.tar.xz.asc

- Mozilla Firefox 72.0.1 - Mozilla Firefox 72.0 * block fingerprinting scripts by default * new notification pop-ups * Picture-in-picture video MFSA 2020-01 * CVE-2019-17016 (bmo#1599181) Bypass of @namespace CSS sanitization during pasting * CVE-2019-17017 (bmo#1603055) Type Confusion in XPCVariant.cpp * CVE-2019-17020 (bmo#1597645) Content Security Policy not applied to XSL stylesheets applied to XML documents * CVE-2019-17022 (bmo#1602843) CSS sanitization does not escape HTML tags * CVE-2019-17023 (bmo#1590001) (fixed in NSS FIXME) NSS may negotiate TLS 1.2 or below after a TLS 1.3 HelloRetryRequest had been sent * CVE-2019-17024 (bmo#1507180,bmo#1595470,bmo#1598605,bmo#1601826) Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 * CVE-2019-17025 (bmo#1328295,bmo#1328300,bmo#1590447,bmo#1590965 bmo#1595692,bmo#1597321,bmo#1597481) Memory safety bugs fixed in Firefox 72 - update create-tar.sh to skip compare-locales - requires NSPR 4.24 and NSS 3.48 - removed usage of browser-plugins convention for NPAPI plugins from start wrapper and changed the RPM macro to the /usr/$LIB/mozilla/plugins location (boo#1160302) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=793 2020-01-08 11:59:18 +00:00			`-----BEGIN PGP SIGNATURE-----`

			`iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl4VMBAACgkQ8aZmj7t9`
			`Vy6o4w//X6MCxFHfcDI0f2E3zXcfQOqGyRKOQer4tjQaz00M3fNvua0q6wHpQWga`
			`jpfZfAdospevuo1RNVR1qWdwRDoQjFPYEewtaKEKppBCG+WTD0zHRBOkuJERgbl3`
			`zjPAmn58oVS3Vcysl1q31Z643cQ0cZesMvFEUDgH4oo/OEOK9j+xh71o58tW+R7B`
			`KobSCwYwD9Fl7Jg9+9OafrvuxBye4D5iiNMWqn3hmNeB/2t/TD0xgc7GlvLsMphA`
			`ZCfe3JPyWTo3pe2Go6IqSBTTNtiy1kKIlwZF/07Wxwq1T8EkfSse6Gv3pyAcLHVK`
			`vgSg3LBQhLVLjXIvOQiv4iMtmIV3A+fsxjTk/NXBdNt15pDQqsWeLuGyDPQOgROL`
			`KTkS46z3fc4EwH+6WePTH8YBagKTPyMcHmi4i4cKD0dewWkbom5WTIejlTCscn9S`
			`3yagduYExhX/xReAmWaC65lLcopaBaaI2IsjK2BiINU+OPhnruGMfOoFs1iUcpYs`
			`5/Q6DQJnzRho/2J0Gbq1+hyn92ZcxuEvsTmgBtRVIexZd6BKDFMyya5QvHhxgaBr`
			`V5eDo/lj9kLpryFsCKkZWsjcvPDESXhMlDidHFOGYHWBdUqrDOEjXsTk4SgAeTl4`
			`Vh0Lx8XWBE+/y5ey217UCQVnm4SMkS5lZpjt0jl/17BkgnCZJro=`
			`=DaZO`
			`-----END PGP SIGNATURE-----`