Hi, upstream recently fixed two pwn2own vulnerabilities: https://www.mozilla.org/en-US/security/advisories/mfsa2015-28/ (CVE-2015-0818) https://www.mozilla.org/en-US/security/advisories/mfsa2015-29/ (CVE-2015-0819)
*** This bug has been marked as a duplicate of bug 544056 ***