Summary
[78.2.0-2.0.1]
- Removed Upstream references
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
[78.2.0-2]
- Update to 78.2.0 build1
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | firefox | 0:78.2.0-2.0.1.el8_2 |
Vulnerabilities 10
-
Unscored —
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, …
-
Unscored —
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, …
-
Unscored —
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, lead…
-
Unscored —
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-…
-
Unscored —
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led t…
-
Unscored —
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting…
-
Unscored —
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mi…
-
Unscored —
The code for downloading files did not properly take care of special characters, which led to an attacker being able to…
-
Unscored —
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access …
-
Unscored —
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. …