Path to this page:
Subject: CVS commit: pkgsrc/www/firefox68
From: Nia Alarie
Date: 2020-07-07 18:44:11
Message id: 20200707164411.7633CFB28@cvs.NetBSD.org
Log Message:
firefox68: Update to 68.10.0
For anyone curious about the delay: apparently, my ccache cache
was corrupted so the build was failing. *sigh* that won't be a problem
soon...
Security Vulnerabilities fixed in Firefox ESR 68.10
#CVE-2020-12417: Memory corruption due to missing sign-extension for
ValueTags on ARM64
#CVE-2020-12418: Information disclosure due to manipulated URL object
#CVE-2020-12419: Use-after-free in nsGlobalWindowInner
#CVE-2020-12420: Use-After-Free when trying to connect to a STUN server
#CVE-2020-12421: Add-On updates did not respect the same certificate trust
rules as software updates
Files: