Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (25m)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (56d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (168d) 

2024-05-27 13:02:19 UTC Now

2021-11-03 19:19:40 UTC MAIN commitmail json YAML

firefox91: update to 91.3.0

Security Vulnerabilities fixed in Firefox ESR 91.3

    #CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets

    #CVE-2021-38504: Use-after-free in file picker dialog

    #CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode
    without notification or warning

    #CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass
    the Same-Origin-Policy on services hosted on other ports

    #MOZ-2021-0008: Use-after-free in HTTP2 Session object

    #CVE-2021-38508: Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing

    #CVE-2021-38509: Javascript alert box could have been spoofed onto an
    arbitrary domain

    #CVE-2021-38510: Download Protections were bypassed by .inetloc files on Mac
    OS

    #MOZ-2021-0007: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3

(nia)