MozillaFirefox/firefox-72.0.1.source.tar.xz.asc
Wolfgang Rosenauer 31f1b363df - Mozilla Firefox 72.0.1
- Mozilla Firefox 72.0
  * block fingerprinting scripts by default
  * new notification pop-ups
  * Picture-in-picture video
  MFSA 2020-01
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17020 (bmo#1597645)
    Content Security Policy not applied to XSL stylesheets applied
    to XML documents
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17023 (bmo#1590001) (fixed in NSS FIXME)
    NSS may negotiate TLS 1.2 or below after a TLS 1.3
    HelloRetryRequest had been sent
  * CVE-2019-17024 (bmo#1507180,bmo#1595470,bmo#1598605,bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
  * CVE-2019-17025 (bmo#1328295,bmo#1328300,bmo#1590447,bmo#1590965
    bmo#1595692,bmo#1597321,bmo#1597481)
    Memory safety bugs fixed in Firefox 72
- update create-tar.sh to skip compare-locales
- requires NSPR 4.24 and NSS 3.48
- removed usage of browser-plugins convention for NPAPI plugins
  from start wrapper and changed the RPM macro to the
  /usr/$LIB/mozilla/plugins location (boo#1160302)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=793
2020-01-08 11:59:18 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=DaZO
-----END PGP SIGNATURE-----