MozillaFirefox/tar_stamps at e950884a22d4ca50c772f1ce3a85e5414e4d3fe984e99695a4df02279d9d8955 - MozillaFirefox - openSUSE Gitea

rpm/MozillaFirefox

SHA256

forked from pool/MozillaFirefox

Wolfgang Rosenauer abe4d87b4e - Mozilla Firefox 96.0

* https://www.mozilla.org/en-US/firefox/96.0/releasenotes
  MFSA 2022-01 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22750 (bmo#1566608)
    IPC passing of resource handles could have lead to sandbox
    bypass
  * CVE-2022-22749 (bmo#1705094)
    Lack of URL restrictions when scanning QR codes
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=951

2022-01-11 22:06:33 +00:00

11 lines

340 B

Plaintext

Raw Blame History

 PRODUCT="firefox"
 CHANNEL="release"
 VERSION="96.0"
 VERSION_SUFFIX=""
 PREV_VERSION="95.0.2"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
 RELEASE_TAG="fc698f2bd31f78fb8586e62c7b660a08d6971b92"
 RELEASE_TIMESTAMP="20220106144528"