MozillaFirefox/tar_stamps at f2d4ae6b6ff613d051a9cb6180e8fbbbc5a3de0a34a0a10c64bf2b23336fb829 - MozillaFirefox - openSUSE Gitea

rpm/MozillaFirefox

SHA256

forked from pool/MozillaFirefox

Wolfgang Rosenauer 5b06ba2de6 - Mozilla Firefox 126.0

https://www.mozilla.org/en-US/firefox/126.0/releasenotes
  MFSA 2024-21 (bsc#1224056)
  * CVE-2024-4764 (bmo#1879093)
    Use-after-free when audio input connected with multiple consumers
  * CVE-2024-4367 (bmo#1893645)
    Arbitrary JavaScript execution in PDF.js
  * CVE-2024-4765 (bmo#1871109)
    Web application manifests could have been overwritten via
    hash collision
  * CVE-2024-4766 (bmo#1871214, bmo#1871217)
    Fullscreen notification could have been obscured on Firefox
    for Android
  * CVE-2024-4767 (bmo#1878577)
    IndexedDB files retained in private browsing mode
  * CVE-2024-4768 (bmo#1886082)
    Potential permissions request bypass via clickjacking
  * CVE-2024-4769 (bmo#1886108)
    Cross-origin responses could be distinguished between script
    and non-script content-types
  * CVE-2024-4770 (bmo#1893270)
    Use-after-free could occur when printing to PDF
  * CVE-2024-4771 (bmo#1893891)
    Failed allocation could lead to use-after-free
  * CVE-2024-4772 (bmo#1870579)
    Use of insecure rand() function to generate nonce
  * CVE-2024-4773 (bmo#1875248)
    URL bar could be cleared after network error
  * CVE-2024-4774 (bmo#1886598)
    Undefined behavior in ShmemCharMapHashEntry()

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1150

2024-05-21 08:22:00 +00:00

11 lines

342 B

Plaintext

Raw Blame History

 PRODUCT="firefox"
 CHANNEL="release"
 VERSION="126.0"
 VERSION_SUFFIX=""
 PREV_VERSION="125.0.3"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
 RELEASE_TAG="3db775a2083d15ae699bdc129ad9c51f323ace70"
 RELEASE_TIMESTAMP="20240509170740"