forked from pool/MozillaFirefox
a552e67ce1
MFSA 2019-26
* CVE-2019-11751 (bmo#1572838; Windows only)
Malicious code execution through command line parameters
* CVE-2019-11746 (bmo#1564449)
Use-after-free while manipulating video
* CVE-2019-11744 (bmo#1562033)
XSS by breaking out of title and textarea elements using innerHTML
* CVE-2019-11742 (bmo#1559715)
Same-origin policy violation with SVG filters and canvas to steal
cross-origin images
* CVE-2019-11736 (bmo#1551913, bmo#1552206; Windows only))
File manipulation and privilege escalation in Mozilla Maintenance Service
* CVE-2019-11753 (bmo#1574980; Windows only)
Privilege escalation with Mozilla Maintenance Service in custom
Firefox installation location
* CVE-2019-11752 (bmo#1501152)
Use-after-free while extracting a key value in IndexedDB
* CVE-2019-9812 (bmo#1538008, bmo#1538015)
Sandbox escape through Firefox Sync
* CVE-2019-11743 (bmo#1560495)
Cross-origin access to unload event attributes
* CVE-2019-11748 (bmo#1564588)
Persistence of WebRTC permissions in a third party context
* CVE-2019-11749 (bmo#1565374)
Camera information available without prompting using getUserMedia
* CVE-2019-11750 (bmo#1568397)
Type confusion in Spidermonkey
* CVE-2019-11738 (bmo#1452037)
Content security policy bypass through hash-based sources in directives
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=760
|
||
|---|---|---|
| _constraints | ||
| .gitattributes | ||
| .gitignore | ||
| compare-locales.tar.xz | ||
| create-tar.sh | ||
| firefox-68.1.0esr.source.tar.xz | ||
| firefox-68.1.0esr.source.tar.xz.asc | ||
| firefox-add-kde.js-in-order-to-survive-PGO-build.patch | ||
| firefox-appdata.xml | ||
| firefox-branded-icons.patch | ||
| firefox-kde.patch | ||
| firefox-mimeinfo.xml | ||
| firefox.1 | ||
| firefox.js | ||
| google-api-key | ||
| kde.js | ||
| l10n-68.1.0esr.tar.xz | ||
| mozilla-aarch64-startup-crash.patch | ||
| mozilla-api-key | ||
| mozilla-bmo1005535.patch | ||
| mozilla-bmo1463035.patch | ||
| mozilla-bmo1568145.patch | ||
| mozilla-cubeb-noreturn.patch | ||
| mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch | ||
| mozilla-fix-aarch64-libopus.patch | ||
| mozilla-get-app-id | ||
| mozilla-kde.patch | ||
| mozilla-nongnome-proxies.patch | ||
| mozilla-ntlm-full-path.patch | ||
| mozilla-openaes-decl.patch | ||
| mozilla-ppc-altivec_static_inline.patch | ||
| mozilla-reduce-rust-debuginfo.patch | ||
| mozilla-s390-bigendian.patch | ||
| mozilla-s390-context.patch | ||
| mozilla.keyring | ||
| mozilla.sh.in | ||
| MozillaFirefox-rpmlintrc | ||
| MozillaFirefox.changes | ||
| MozillaFirefox.desktop | ||
| MozillaFirefox.spec | ||
| source-stamp.txt | ||
| spellcheck.js | ||
| tar_stamps | ||