Path to this page:
Subject: CVS commit: pkgsrc/www
From: Nia Alarie
Date: 2022-04-10 15:43:44
Message id: 20220410134344.39899FB24@cvs.NetBSD.org
Log Message:
firefox91: update to 91.8.0
Security Vulnerabilities fixed in Firefox ESR 91.8
#CVE-2022-1097: Use-after-free in NSSToken objects
#CVE-2022-28281: Out of bounds write due to unexpected WebAuthN Extensions
#CVE-2022-1196: Use-after-free after VR Process destruction
#CVE-2022-28282: Use-after-free in DocumentL10n::TranslateDocument
#CVE-2022-28285: Incorrect AliasSet used in JIT Codegen
#CVE-2022-28286: iframe contents could be rendered outside the border
#CVE-2022-24713: Denial of Service via complex regular expressions
#CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8
Files: