MozillaFirefox/firefox-130.0.1.source.tar.xz.asc
Wolfgang Rosenauer d5ecca7d59 - Mozilla Firefox 132.0.1
* Fixed issues causing intermittent video playback problems on
    some sites. (bmo#1928484, bmo#1928798)
- remove KDE integration patches
  - mozilla-kde.patch
  - firefox-kde.patch
  on KDE use these settings instead
  widget.use-xdg-desktop-portal.file-picker=1
  widget.use-xdg-desktop-portal.mime-handler=1
  (those are set by the latest branding package as well)

- Mozilla Firefox 132.0
  https://www.mozilla.org/en-US/firefox/132.0/releasenotes
  MFSA 2024-55 (bsc#1231879)
  * CVE-2024-10458 (bmo#1921733)
    Permission leak via embed or object elements
  * CVE-2024-10459 (bmo#1919087)
    Use-after-free in layout with accessibility
  * CVE-2024-10460 (bmo#1912537)
    Confusing display of origin for external protocol handler prompt
  * CVE-2024-10461 (bmo#1914521)
    XSS due to Content-Disposition being ignored in
    multipart/x-mixed-replace response
  * CVE-2024-10462 (bmo#1920423)
    Origin of permission prompt could be spoofed by long URL
  * CVE-2024-10463 (bmo#1920800)
    Cross origin video frame leak
  * CVE-2024-10468 (bmo#1914982)
    Race conditions in IndexedDB
  * CVE-2024-10464 (bmo#1913000)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1184
2024-11-05 10:48:26 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=udmq
-----END PGP SIGNATURE-----