Path to this page:
Subject: CVS commit: pkgsrc/www/firefox38
From: Ryo ONODERA
Date: 2016-03-12 04:47:20
Message id: 20160312034720.9D37CFBB7@cvs.NetBSD.org
Log Message:
Update to 38.7.0
Changelog:
Fixed in Firefox ESR 38.7
2016-37 Font vulnerabilities in the Graphite 2 library
2016-35 Buffer overflow during ASN.1 decoding in NSS
2016-34 Out-of-bounds read in HTML parser following a failed allocation
2016-31 Memory corruption with malicious NPAPI plugin
2016-28 Addressbar spoofing though history navigation and Location protocol \
property
2016-27 Use-after-free during XML transformations
2016-25 Use-after-free when using multiple WebRTC data channels
2016-24 Use-after-free in SetBody
2016-23 Use-after-free in HTML5 string parser
2016-21 Displayed page address can be overridden
2016-20 Memory leak in libstagefright when deleting an array during MP4 \
processing
2016-17 Local file overwriting and potential privilege escalation through \
CSP reports
2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)
2015-136 Same-origin policy violation using performance.getEntries and \
history navigation
2015-81 Use-after-free in MediaStream playback
Files: