MozillaFirefox/firefox-124.0.1.source.tar.xz.asc
Wolfgang Rosenauer 90db4db449 - Mozilla Firefox 124.0.1
https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/
  MFSA 2024-15 (bsc#1221850)
  * CVE-2024-29943 (bmo#1886849)
    Out-of-bounds access via Range Analysis bypass
  * CVE-2024-29944 (bmo#1886852)
    Privileged JavaScript Execution via Event Handlers
  Mozilla Firefox 124.0
  https://www.mozilla.org/en-US/firefox/124.0/releasenotes/
  MFSA 2024-12 (bsc#1221327)
  * CVE-2024-2605 (bmo#1872920)
    Windows Error Reporter could be used as a Sandbox escape vector
  * CVE-2024-2606 (bmo#1879237)
    Mishandling of WASM register values
  * CVE-2024-2607 (bmo#1879939)
    JIT code failed to save return registers on Armv7-A
  * CVE-2024-2608 (bmo#1880692)
    Integer overflow could have led to out of bounds write
  * CVE-2023-5388 (bmo#1780432)
    NSS susceptible to timing attack against RSA decryption
  * CVE-2024-2609 (bmo#1866100)
    Permission prompt input delay could expire when not in focus
  * CVE-2024-2610 (bmo#1871112)
    Improper handling of html and body tags enabled CSP nonce leakage
  * CVE-2024-2611 (bmo#1876675)
    Clickjacking vulnerability could have led to a user accidentally
    granting permissions
  * CVE-2024-2612 (bmo#1879444)
    Self referencing object could have potentially led to a use-
    after-free

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1140
2024-03-22 16:21:08 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=7WuV
-----END PGP SIGNATURE-----