New version

New release (31.0).
Fixed:
66 IFRAME sandbox same-origin access through redirect
65 Certificate parsing broken by non-standard character encoding
64 Crash in Skia library when scaling high quality images
63 Use-after-free while when manipulating certificates in the trusted cache
62 Exploitable WebGL crash with Cesium JavaScript library
61 Use-after-free with FireOnStateChange event
60 Toolbar dialog customization event spoofing
59 Use-after-free in DirectWrite font handling
58 Use-after-free in Web Audio due to incorrect control message ordering
57 Buffer overflow during Web Audio buffering for playback
56 Miscellaneous memory safety hazards (rv:31.0 / rv:24.7)

New release (30.0).
Fixed:
54 Buffer overflow in Gamepad API
53 Buffer overflow in Web Audio Speex resampler
52 Use-after-free with SMIL Animation Controller
51 Use-after-free in Event Listener Manager
50 Clickjacking through cursor invisability after Flash interaction
49 Use-after-free and out of bounds issues found using Address Sanitizer
48 Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)

New release (29.0).
Fixed:
47 Debugger can bypass XrayWrappers with JavaScript
46 Use-after-free in nsHostResolve
45 Incorrect IDNA domain name matching for wildcard certificates
44 Use-after-free in imgLoader while resizing images
43 Cross-site scripting (XSS) using history navigations
42 Privilege escalation through Web Notification API
41 Out-of-bounds write in Cairo
40 Firefox for Android addressbar suppression
39 Use-after-free in the Text Track Manager for HTML video
38 Buffer overflow when using non-XBL object as XBL
37 Out of bounds read while decoding JPG images
36 Web Audio memory corruption issues
35 Privilege escalation through Mozilla Maintenance Service Installer
34 Miscellaneous memory safety hazards (rv:29.0 / rv:24.5)

New release (28.0).
Fixed:
32 Out-of-bounds write through TypedArrayObject after neutering
31 Out-of-bounds read/write through neutering ArrayBuffer objects
30 Use-after-free in TypeObject
29 Privilege escalation using WebIDL-implemented APIs
28 SVG filters information disclosure through feDisplacementMap
27 Memory corruption in Cairo during PDF font rendering
26 Information disclosure through polygon rendering in MathML
25 Firefox OS DeviceStorageFile object vulnerable to relative path escape
24 Android Crash Reporter open to manipulation
23 Content Security Policy for data: documents not preserved by session restore
22 WebGL content injection from one domain to rendering in another
21 Local file access via Open Link in new tab
20 onbeforeunload and Javascript navigation DOS
19 Spoofing attack on WebRTC permission prompt
18 crypto.generateCRMFRequest does not validate type of key
17 Out of bounds read during WAV file decoding
16 Files extracted during updates are not always read only
15 Miscellaneous memory safety hazards (rv:28.0 / rv:24.4)

New release (27.0).
Fixed:
13 Inconsistent JavaScript handling of access to Window objects
12 NSS ticket handling issues
11 Crash when using web workers with asm.js
10 Firefox default start page UI content invokable by script
09 Cross-origin information leak through web workers
08 Use-after-free with imgRequestProxy and image proccessing
07 XSLT stylesheets treated as styles in Content Security Policy
06 Profile path leaks to Android system log
04 Incorrect use of discarded images by RasterImage
03 UI selection timeout missing on download prompts
02 Clone protected content with XBL scopes
01 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)

New release (26.0).
Fixed:
117 Mis-issued ANSSI/DCSSI certificate
116 JPEG information leak
115 GetElementIC typed array stubs can be generated outside observed typesets
114 Use-after-free in synthetic mouse movement
113 Trust settings for built-in roots ignored during EV certificate validation
112 Linux clipboard information disclosure though selection paste
111 Segmentation violation when replacing ordered list elements
110 Potential overflow in JavaScript binary search algorithms
109 Use-after-free during Table Editing
108 Use-after-free in event listeners
107 Sandbox restrictions not applied to nested object elements
106 Character encoding cross-origin XSS attack
105 Application Installation doorhanger persists on navigation
104 Miscellaneous memory safety hazards (rv:26.0 / rv:24.2)

New release (25.0.1).
Fixed:
103 Miscellaneous Network Security Services (NSS) vulnerabilities

New release (25.0).
Fixed:
102 Use-after-free in HTML document templates
101 Memory corruption in workers
100 Miscellaneous use-after-free issues found through ASAN fuzzing
99 Security bypass of PDF.js checks using iframes
98 Use-after-free when updating offline cache
97 Writing to cycle collected object during image decoding
96 Improperly initialized memory and overflows in some JavaScript functions
95 Access violation with XSLT and uninitialized data
94 Spoofing addressbar though SELECT element
93 Miscellaneous memory safety hazards (rv:25.0 / rv:24.1 / rv:17.0.10)

New release (24.0).
Add gstreamer support (ALT#29454).
Fixed:
92 GC hazard with default compartments and frame chain restoration
91 User-defined properties on DOM proxies get the wrong "this" object
90 Memory corruption involving scrolling
89 Buffer overflow with multi-column, lists, and floats
88 compartment mismatch re-attaching XBL-backed nodes
87 Shared object library loading from writable location
86 WebGL Information disclosure through OS X NVIDIA graphic drivers
85 Uninitialized data in IonMonkey
84 Same-origin bypass through symbolic links
83 Mozilla Updater does not lock MAR file after signature verification
82 Calling scope for new Javascript objects can lead to memory corruption
81 Use-after-free with select element
80 NativeKey continues handling key messages after widget is destroyed
79 Use-after-free in Animation Manager during stylesheet cloning
78 Integer overflow in ANGLE library
77 Improper state in HTML5 Tree Builder with templates
76 Miscellaneous memory safety hazards (rv:24.0 / rv:17.0.9)

New release (23.0).
Fixed:
75 Local Java applets may read contents of local file system
74 Firefox full and stub installer DLL hijacking
73 Same-origin bypass with web workers and XMLHttpRequest
72 Wrong principal used for validating URI for some Javascript components
71 Further Privilege escalation through Mozilla Updater
70 Bypass of XrayWrappers using XBL Scopes
69 CRMF requests allow for code execution and XSS attacks
68 Document URI misrepresentation and masquerading
67 Crash during WAV audio file decoding
66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater
65 Buffer underflow when generating CRMF requests
64 Use after free mutating DOM during SetBody
63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)

New release (22.0).
Fixed:
62 Inaccessible updater can lead to local privilege escalation
61 Homograph domain spoofing in .com, .net and .name
60 getUserMedia permission dialog incorrectly displays location
59 XrayWrappers can be bypassed to run user defined methods in a privileged context
58 X-Frame-Options ignored when using server push with multi-part responses
57 Sandbox restrictions not applied to nested frame elements
56 PreserveWrapper has inconsistent behavior
55 SVG filters can lead to information disclosure
54 Data in the body of XHR HEAD requests leads to CSRF attacks
53 Execution of unmapped memory through onreadystatechange event
52 Arbitrary code execution within Profiler
51 Privileged content access and execution via XBL
50 Memory corruption found using Address Sanitizer
49 Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)

Add missing healthreport service (ALT#29062).
Remove extensions-noarch support.

New release (21.0).
Fixed:
48 Memory corruption found using Address Sanitizer
47 Uninitialized functions in DOMSVGZoomEvent
46 Use-after-free with video and onresize event
45 Mozilla Updater fails to update some Windows Registry entries
44 Local privilege escalation through Mozilla Maintenance Service
43 File input control has access to full path
42 Privileged access for content level constructor
41 Miscellaneous memory safety hazards (rv:21.0 / rv:17.0.6)

New release (20.0).
Fixed:
40 Out-of-bounds array read in CERT_DecodeCertPackage
39 Memory corruption while rendering grayscale PNG images
38 Cross-site scripting (XSS) using timed history navigations
37 Bypass of tab-modal dialog origin disclosure
36 Bypass of SOW protections allows cloning of protected nodes
35 WebGL crash with Mesa graphics driver on Linux
34 Privilege escalation through Mozilla Updater
33 World read and write access to app_tmp directory on Android
32 Privilege escalation through Mozilla Maintenance Service
31 Out-of-bounds write in Cairo library
30 Miscellaneous memory safety hazards (rv:20.0 / rv:17.0.5)

New release (19.0.2).
Fixed:
29 Use-after-free in HTML Editor