1 -------------------------------------------------------------------

     2 Fri Mar  8 06:16:48 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>

     3 

     4 - Mozilla Firefox 123.0.1

     5   * Fixed the *Firefox Translation* language indicator in the

     6     address bar displaying a colored square icon instead of the

     7     language code icon. (bmo#1879415)

     8   * Fixed a regression with the `onChange` event not firing when

     9     clearing the value of a `textarea` HTML field.

    10     (bmo#1881457)

    11   * Fixed a regression in the JavaScript JIT engine incorrectly

    12     inlining strings in some cases. (bmo#1882386)

    13   * Fixed: Fixed low contrast of text when selecting rows in the

    14     Developer tools' Storage panel. (bmo#1877090)

    15 

    16 -------------------------------------------------------------------

    17 Thu Feb 22 11:02:39 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>

    18 

    19 - Mozilla Firefox 123.0

    20   https://www.mozilla.org/en-US/firefox/123.0/releasenotes/

    21   MFSA 2024-05 (bsc#1220048)

    22   * CVE-2024-1546 (bmo#1843752)

    23     Out-of-bounds memory read in networking channels

    24   * CVE-2024-1547 (bmo#1877879)

    25     Alert dialog could have been spoofed on another site

    26   * CVE-2024-1554 (bmo#1816390)

    27     fetch could be used to effect cache poisoning

    28   * CVE-2024-1548 (bmo#1832627)

    29     Fullscreen Notification could have been hidden by select element

    30   * CVE-2024-1549 (bmo#1833814)

    31     Custom cursor could obscure the permission dialog

    32   * CVE-2024-1550 (bmo#1860065)

    33     Mouse cursor re-positioned unexpectedly could have led to

    34     unintended permission grants

    35   * CVE-2024-1551 (bmo#1864385)

    36     Multipart HTTP Responses would accept the Set-Cookie header

    37     in response parts

    38   * CVE-2024-1555 (bmo#1873223)

    39     SameSite cookies were not properly respected when opening a

    40     website from an external browser

    41   * CVE-2024-1556 (bmo#1870414)

    42     Invalid memory access in the built-in profiler

    43   * CVE-2024-1552 (bmo#1874502)

    44     Incorrect code generation on 32-bit ARM devices

    45   * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498, bmo#1872296,

    46     bmo#1873521, bmo#1873577, bmo#1873597, bmo#1873866, bmo#1874080,

    47     bmo#1874740, bmo#1875795, bmo#1875906, bmo#1876425, bmo#1878211,

    48     bmo#1878286)

    49     Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,

    50     and Thunderbird 115.8

    51   * CVE-2024-1557 (bmo#1746471, bmo#1848829, bmo#1864011, bmo#1869175,

    52     bmo#1869455, bmo#1869938, bmo#1871606)

    53     Memory safety bugs fixed in Firefox 123

    54 - requires NSS 3.97

    55