{"push_id":3045819991,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"a9f31c6e5629eb3648ffb91b528bff53ef98c741","before":"b9d670d292f268edacb32ad38f953b58c092926e","commits":[{"sha":"a9f31c6e5629eb3648ffb91b528bff53ef98c741","author":{"name":"Alexey Gladkov","email":"bd53add93b49c4dff72730e05f11f1ee31074fe4@altlinux.ru"},"message":"216395: firefox-uk-63.0.1-alt1 +6 more\n\n- New version (63.0.1).\n\nfirefox-ru-63.0.1-alt1\n\n- New version (63.0.1).\n\nnss-3.40.0-alt1\n\n- New version (3.40).\n\nca-certificates-2018.11.12-alt1\n\n- mozilla: sync with nss-3.40.\n\nnspr-4.20-alt1\n\n- New stable release 4.20.\n\nfirefox-63.0.1-alt1\n\n- New release (63.0.1).\n- Fixed:\n  + CVE-2018-12391: HTTP Live Stream audio data is accessible cross-origin\n  + CVE-2018-12392: Crash with nested event loops\n  + CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript\n  + CVE-2018-12395: WebExtension bypass of domain restrictions through header rewriting\n  + CVE-2018-12396: WebExtension content scripts can execute in disallowed contexts\n  + CVE-2018-12397: Missing warning prompt when WebExtension requests local file access\n  + CVE-2018-12398: CSP bypass through stylesheet injection in resource URIs\n  + CVE-2018-12399: Spoofing of protocol registration notification bar\n  + CVE-2018-12400: Favicons are cached in private browsing mode on Firefox for Android\n  + CVE-2018-12401: DOS attack through special resource URI parsing\n  + CVE-2018-12402: SameSite cookies leak when pages are explicitly saved\n  + CVE-2018-12403: Mixed content warning is not displayed when HTTPS page loads a favicon over HTTP\n  + CVE-2018-12388: Memory safety bugs fixed in Firefox 63\n  + CVE-2018-12390: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3\n\nfirefox-kk-63.0.1-alt1\n\n- New version (63.0.1).","distinct":true,"url":"https://api.github.com/repos/vt-alt/specs/commits/a9f31c6e5629eb3648ffb91b528bff53ef98c741"}]}
{"actor":{"display_login":"vt-alt"}}