Fixed in Firefox 28

MFSA 2014-32    Out-of-bounds write through TypedArrayObject after neutering
MFSA 2014-31    Out-of-bounds read/write through neutering ArrayBuffer objects
MFSA 2014-30    Use-after-free in TypeObject
MFSA 2014-29    Privilege escalation using WebIDL-implemented APIs
MFSA 2014-28    SVG filters information disclosure through feDisplacementMap
MFSA 2014-27    Memory corruption in Cairo during PDF font rendering
MFSA 2014-26    Information disclosure through polygon rendering in MathML
MFSA 2014-25    Firefox OS DeviceStorageFile object vulnerable to relative path escape
MFSA 2014-24    Android Crash Reporter open to manipulation
MFSA 2014-23    Content Security Policy for data: documents not preserved by session restore
MFSA 2014-22    WebGL content injection from one domain to rendering in another
MFSA 2014-21    Local file access via Open Link in new tab
MFSA 2014-20    onbeforeunload and Javascript navigation DOS
MFSA 2014-19    Spoofing attack on WebRTC permission prompt
MFSA 2014-18    crypto.generateCRMFRequest does not validate type of key
MFSA 2014-17    Out of bounds read during WAV file decoding
MFSA 2014-16    Files extracted during updates are not always read only
MFSA 2014-15    Miscellaneous memory safety hazards (rv:28.0 / rv:24.4)

Looks like Java 8 is here.

"The Java Platform, Standard Edition 8 (Java SE 8) is a major feature release. It contains new features and enhancements in many functional areas. Java SE 8 delivers enhanced developer productivity and significant application performance increases through reduced boilerplate code, improved collections and annotations, simpler parallel programming models and more efficient use of modern, multi-core processors".

We've long advocated dumping java.   I don't have it on any of my systems, nor do I miss it.

For those who have, and really need/use it, I guess that means it's time for the "major" update. 

http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html