forked from pool/MozillaFirefox
c9ea1238e9
MFSA 2022-47 (bsc#1205270)
* CVE-2022-45403 (bmo#1762078)
Service Workers might have learned size of cross-origin media files
* CVE-2022-45404 (bmo#1790815)
Fullscreen notification bypass
* CVE-2022-45405 (bmo#1791314)
Use-after-free in InputStream implementation
* CVE-2022-45406 (bmo#1791975)
Use-after-free of a JavaScript Realm
* CVE-2022-45407 (bmo#1793314)
Loading fonts on workers was not thread-safe
* CVE-2022-45408 (bmo#1793829)
Fullscreen notification bypass via windowName
* CVE-2022-45409 (bmo#1796901)
Use-after-free in Garbage Collection
* CVE-2022-45410 (bmo#1658869)
ServiceWorker-intercepted requests bypassed SameSite cookie policy
* CVE-2022-45411 (bmo#1790311)
Cross-Site Tracing was possible via non-standard override headers
* CVE-2022-45412 (bmo#1791029)
Symlinks may resolve to partially uninitialized buffers
* CVE-2022-45413 (bmo#1791201)
SameSite=Strict cookies could have been sent cross-site via
intent URLs
* CVE-2022-40674 (bmo#1791598)
Use-after-free vulnerability in expat
* CVE-2022-45415 (bmo#1793551)
Downloaded file may have been saved with malicious extension
* CVE-2022-45416 (bmo#1793676)
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1019
|
||
|---|---|---|
| _constraints | ||
| .gitattributes | ||
| .gitignore | ||
| create-tar.sh | ||
| firefox-107.0.source.tar.xz | ||
| firefox-107.0.source.tar.xz.asc | ||
| firefox-appdata.xml | ||
| firefox-branded-icons.patch | ||
| firefox-kde.patch | ||
| firefox-mimeinfo.xml | ||
| firefox-search-provider.ini | ||
| firefox.1 | ||
| firefox.js | ||
| google-api-key | ||
| l10n-107.0.tar.xz | ||
| mozilla-aarch64-startup-crash.patch | ||
| mozilla-api-key | ||
| mozilla-bmo531915.patch | ||
| mozilla-bmo849632.patch | ||
| mozilla-bmo998749.patch | ||
| mozilla-bmo1005535.patch | ||
| mozilla-bmo1504834-part1.patch | ||
| mozilla-bmo1504834-part3.patch | ||
| mozilla-bmo1512162.patch | ||
| mozilla-bmo1568145.patch | ||
| mozilla-buildfixes.patch | ||
| mozilla-fix-aarch64-libopus.patch | ||
| mozilla-fix-top-level-asm.patch | ||
| mozilla-get-app-id | ||
| mozilla-kde.patch | ||
| mozilla-libavcodec58_91.patch | ||
| mozilla-nongnome-proxies.patch | ||
| mozilla-ntlm-full-path.patch | ||
| mozilla-pgo.patch | ||
| mozilla-reduce-rust-debuginfo.patch | ||
| mozilla-s390-context.patch | ||
| mozilla-s390x-skia-gradient.patch | ||
| mozilla-silence-no-return-type.patch | ||
| mozilla.keyring | ||
| mozilla.sh.in | ||
| MozillaFirefox-rpmlintrc | ||
| MozillaFirefox.changes | ||
| MozillaFirefox.desktop | ||
| MozillaFirefox.spec | ||
| one_swizzle_to_rule_them_all.patch | ||
| spellcheck.js | ||
| svg-rendering.patch | ||
| tar_stamps | ||