Next | Query returned 18 messages, browsing 1 to 10 | Previous

History of commit frequency

CVS Commit History:


   2023-08-28 08:46:34 by Nia Alarie | Files touched by this commit (59) | Package removed
Log message:
Remove www/firefox91

We were keeping this around for screen recording support, which
is now supported and stable in 102 ESR.
   2022-09-06 17:38:35 by Nia Alarie | Files touched by this commit (4) | Package updated
Log message:
firefox91: update to 91.13.0

Security Vulnerabilities fixed in Firefox ESR 91.13

    #CVE-2022-38472: Address bar spoofing via XSLT error handling

    #CVE-2022-38473: Cross-origin XSLT Documents would have inherited the
    parent's permissions

    #CVE-2022-38478: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
   2022-08-09 15:39:28 by Nia Alarie | Files touched by this commit (5) | Package updated
Log message:
firefox91: update to 91.12.0. Fix building with latest cbindgen.

                  Mozilla Foundation Security Advisory 2022-29

Security Vulnerabilities fixed in Firefox ESR 91.12

    #CVE-2022-36319: Mouse Position spoofing with CSS transforms

    #CVE-2022-36318: Directory indexes for bundled resources reflected URL
    parameters
   2022-07-22 10:16:40 by Nia Alarie | Files touched by this commit (4) | Package updated
Log message:
firefox91: update to 91.11.0

                  Mozilla Foundation Security Advisory 2022-25

Security Vulnerabilities fixed in Firefox ESR 91.11

    #CVE-2022-34479: A popup window could be resized in a way to overlay the
    address bar with web content

    #CVE-2022-34470: Use-after-free in nsSHistory

    #CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI

    #CVE-2022-34481: Potential integer overflow in ReplaceElementsAt

    #CVE-2022-31744: CSP bypass enabling stylesheet injection

    #CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being
    blocked

    #CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a
    prompt

    #CVE-2022-2200: Undesired attributes could be set as part of prototype
    pollution

    #CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR
    91.11
   2022-06-14 11:17:20 by Nia Alarie | Files touched by this commit (4) | Package updated
Log message:
firefox91: update to 91.10.0

Security Vulnerabilities fixed in Firefox ESR 91.10

    #CVE-2022-31736: Cross-Origin resource's length leaked

    #CVE-2022-31737: Heap buffer overflow in WebGL

    #CVE-2022-31738: Browser window spoof using fullscreen mode

    #CVE-2022-31739: Attacker-influenced path traversal when saving downloaded
    files

    #CVE-2022-31740: Register allocation problem in WASM on arm64

    #CVE-2022-31741: Uninitialized variable leads to invalid memory read

    #CVE-2022-31742: Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin information

    #CVE-2022-31747: Memory safety bugs fixed in Firefox 101 and Firefox ESR
    91.10
   2022-05-16 23:21:29 by Nia Alarie | Files touched by this commit (2)
Log message:
firefox91-l10n: sync with firefox91
   2022-04-10 15:43:44 by Nia Alarie | Files touched by this commit (4) | Package updated
Log message:
firefox91: update to 91.8.0

Security Vulnerabilities fixed in Firefox ESR 91.8

#CVE-2022-1097: Use-after-free in NSSToken objects

#CVE-2022-28281: Out of bounds write due to unexpected WebAuthN Extensions

#CVE-2022-1196: Use-after-free after VR Process destruction

#CVE-2022-28282: Use-after-free in DocumentL10n::TranslateDocument

#CVE-2022-28285: Incorrect AliasSet used in JIT Codegen

#CVE-2022-28286: iframe contents could be rendered outside the border

#CVE-2022-24713: Denial of Service via complex regular expressions

#CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8
   2022-03-10 17:28:30 by Nia Alarie | Files touched by this commit (2)
Log message:
firefox91-l10n: sync with firefox91
   2022-02-21 04:51:53 by Nia Alarie | Files touched by this commit (2)
Log message:
firefox91-l10n: sync with firefox91
   2022-01-26 14:39:12 by Ryo ONODERA | Files touched by this commit (2)
Log message:
firefox91-l10n: Update to 91.5.0

* Sync with www/firefox91-91.5.0.

Next | Query returned 18 messages, browsing 1 to 10 | Previous