Path to this page:
Subject: CVS commit: pkgsrc/www/palemoon
From: Nia Alarie
Date: 2024-09-13 15:48:17
Message id: 20240913134817.D3818FC74@cvs.NetBSD.org
Log Message:
palemoon: Update to 33.3.1
v33.3.1 (2024-09-10)
This is a minor security and bugfix update.
Changes/fixes:
* Backed out support for FFmpeg 7.0/libavcodec 61 (Linux) due to it
causing a major regression in WebAudio (broken on all platforms). This
is being worked on to re-land at a later date.
* Restricted the NotifyPaintEvent interface to chrome code only; there
is no reason (other than potential tracking/fingerprinting) to have
this accessible from content.
* Fixed a potentially exploitable issue in JavaScript (FetchName).
* Fixed a code correctness issue in XPConnect when creating sandboxes.
DiD
* Added a warning for using externally handled usenet protocols.
* Security issues addressed: CVE-2024-8383 and CVE-2024-8381.
Files: