diff options
| author | Sergei Lukin <sergej.lukin@gmail.com> | 2017-01-26 12:18:24 +0000 |
|---|---|---|
| committer | Natanael Copa <ncopa@alpinelinux.org> | 2017-01-27 12:22:20 +0000 |
| commit | 51afc2749fc20a76c9a7e9958338c809e3f99083 (patch) | |
| tree | 5c3db00aae89abbaee9ed5800069546306b261f6 /testing/libspectre/ghostscript-api.patch | |
| parent | 48e584605b6216241b9c5165701caf60a50eee4c (diff) | |
| download | aports-51afc2749fc20a76c9a7e9958338c809e3f99083.tar.bz2 aports-51afc2749fc20a76c9a7e9958338c809e3f99083.tar.xz | |
community/firefox-esr: security upgrade to 45.7.0 - fixes #6746
CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and Firefox ESR 45.7
CVE-2017-5375: Excessive JIT code allocation allows bypass of ASLR and DEP
CVE-2017-5376: Use-after-free in XSL
CVE-2017-5378: Pointer and frame data leakage of Javascript objects
CVE-2017-5380: Potential use-after-free during DOM manipulations
CVE-2017-5383: Location bar spoofing with unicode characters
CVE-2017-5386: WebExtensions can use data: protocol to affect other extensions
CVE-2017-5390: Insecure communication methods in Developer Tools JSON viewer
CVE-2017-5396: Use-after-free with Media Decoder
Diffstat (limited to 'testing/libspectre/ghostscript-api.patch')
0 files changed, 0 insertions, 0 deletions