pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: pkgsrc/www/firefox153
Module Name: pkgsrc
Committed By: gutteridge
Date: Tue Nov 10 14:09:09 UTC 2026
Modified Files:
pkgsrc/www/firefox153: Makefile distinfo
Log Message:
firefox153: update to 153.7.0
Mozilla Foundation Security Advisory 2026-127
Security Vulnerabilities fixed in Firefox ESR 153.7
Announced
November 10, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.7
#CVE-2026-124853: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component
Reporter
Mozilla
Impact
high
References
Bug 2058035
#CVE-2026-124854: Privilege escalation in the DOM: Navigation component
Reporter
Mozilla
Impact
high
References
Bug 2060230
#CVE-2026-124855: Sandbox escape in the DOM: Navigation component
Reporter
Tran Quac
Impact
high
References
Bug 2072096
#CVE-2026-124856: Incorrect boundary conditions in the Networking: HTTP component
Reporter
Mozilla
Impact
high
References
Bug 2072437
#CVE-2026-124857: Use-after-free in the Graphics: Canvas2D component
Reporter
Mozilla
Impact
high
References
Bug 2073695
#CVE-2026-124858: Use-after-free in the DOM: HTML Parser component
Reporter
Amy Burnett of OpenAI
Impact
high
References
Bug 2074172
#CVE-2026-124859: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component
Reporter
Mozilla
Impact
high
References
Bug 2074179
#CVE-2026-124860: Use-after-free in the Audio/Video component
Reporter
Mozilla
Impact
high
References
Bug 2074194
#CVE-2026-124861: Sandbox escape due to use-after-free in the Audio/Video: cubeb component
Reporter
Mozilla
Impact
high
References
Bug 2074210
#CVE-2026-124862: Use-after-free in the DOM: Core & HTML component
Reporter
Mozilla
Impact
high
References
Bug 2074220
#CVE-2026-118007: Use-after-free in the JavaScript: GC component
Reporter
Mozilla
Impact
high
References
Bug 2075296
#CVE-2026-124863: Use-after-free in the DOM: HTML Parser component
Reporter
Mozilla
Impact
high
References
Bug 2075975
#CVE-2026-124864: Sandbox escape due to use-after-free in the DOM: Service Workers component
Reporter
Mozilla
Impact
high
References
Bug 2075976
#CVE-2026-124865: Use-after-free in the Audio/Video component
Reporter
Mozilla
Impact
high
References
Bug 2076414
#CVE-2026-124866: Use-after-free in the Layout component
Reporter
Mozilla
Impact
high
References
Bug 2078993
#CVE-2026-124868: Incorrect boundary conditions in the DOM: Core & HTML component
Reporter
Mozilla
Impact
high
References
Bug 2079169
#CVE-2026-124869: Use-after-free in the DOM: Core & HTML component
Reporter
Mozilla
Impact
high
References
Bug 2079170
#CVE-2026-124870: Incorrect boundary conditions in the JavaScript: GC component
Reporter
Mozilla
Impact
high
References
Bug 2079466
#CVE-2026-124872: Use-after-free in the Cycle Collector component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2079689
#CVE-2026-124873: Invalid pointer in the DOM: Editor component
Reporter
Mozilla
Impact
high
References
Bug 2079937
#CVE-2026-124874: Same-origin policy bypass in the Networking: HTTP component
Reporter
Minseong Kim
Impact
high
References
Bug 2080420
#CVE-2026-124875: Incorrect boundary conditions in the DOM: CSS Object Model component
Reporter
Mozilla
Impact
high
References
Bug 2081380
#CVE-2026-124876: Use-after-free in the CSS Parsing and Computation component
Reporter
Mozilla
Impact
high
References
Bug 2081550
#CVE-2026-124877: Use-after-free in the Layout: Positioned component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2081939
#CVE-2026-124879: Invalid pointer in the Networking: Cache component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2081949
#CVE-2026-124880: Use-after-free in the DOM: Core & HTML component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2081966
#CVE-2026-124881: Use-after-free in the CSS Parsing and Computation component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2081980
#CVE-2026-124882: Use-after-free in the CSS Parsing and Computation component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2081982
#CVE-2026-124883: Use-after-free in the DOM: Core & HTML component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2081991
#CVE-2026-124884: Use-after-free in the JavaScript: GC component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2081994
#CVE-2026-124885: Use-after-free in the Graphics: Text component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082006
#CVE-2026-124886: Invalid pointer in the Layout: Text and Fonts component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082021
#CVE-2026-124887: Incorrect boundary conditions in the Layout: Text and Fonts component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082024
#CVE-2026-124888: Incorrect boundary conditions in the Layout: Text and Fonts component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082025
#CVE-2026-124889: Use-after-free in the CSS Parsing and Computation component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082033
#CVE-2026-124890: Use-after-free in the DOM: Core & HTML component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082039
#CVE-2026-124891: Incorrect boundary conditions in the DOM: Selection component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082075
#CVE-2026-124892: Use-after-free in the JavaScript: GC component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082083
#CVE-2026-124893: Use-after-free in the DOM: Workers component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082097
#CVE-2026-124894: Use-after-free in the Networking: Cookies component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082101
#CVE-2026-124895: Use-after-free in the Storage: localStorage & sessionStorage component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082109
#CVE-2026-124896: Invalid pointer in the Layout: Text and Fonts component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082181
#CVE-2026-124897: Use-after-free in the JavaScript: GC component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082186
#CVE-2026-124898: Use-after-free in the DOM: Editor component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082205
#CVE-2026-124899: Use-after-free in the Layout: Text and Fonts component
Reporter
OpenAI Codex Security (kylebot)
Impact
high
References
Bug 2082451
#CVE-2026-124901: Other issue in the Networking: JAR component
Reporter
dodoh4t
Impact
high
References
Bug 2083626
#CVE-2026-124902: Same-origin policy bypass due to race condition in the Audio/Video component
Reporter
dodoh4t
Impact
high
References
Bug 2083629
#CVE-2026-124903: Sandbox escape due to use-after-free in the IPC component
Reporter
Mozilla
Impact
high
References
Bug 2084673
#CVE-2026-124905: Sandbox escape in the DOM: Navigation component
Reporter
Mozilla
Impact
high
References
Bug 2086254
#CVE-2026-124906: Use-after-free in the Graphics: WebRender component
Reporter
Mozilla
Impact
high
References
Bug 2086296
#CVE-2026-124907: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component
Reporter
Mozilla
Impact
high
References
Bug 2087324
#CVE-2026-124909: Information disclosure in the Private Browsing component
Reporter
Mozilla
Impact
moderate
References
Bug 1730261
#CVE-2026-124910: Mitigation bypass in the WebExtensions component
Reporter
Armin Ebert
Impact
moderate
References
Bug 1792485
#CVE-2026-124912: Spoofing issue in the DOM: Security component
Reporter
LatticeBased
Impact
moderate
References
Bug 2025197
#CVE-2026-118019: Race condition, use-after-free in the DOM: File component
Reporter
Mozilla
Impact
moderate
References
Bug 2025386
#CVE-2026-124913: Site isolation issue in the Networking component
Reporter
Mozilla
Impact
moderate
References
Bug 2045704
#CVE-2026-124914: Site isolation issue in the DOM: Navigation component
Reporter
thegoldmandm
Impact
moderate
References
Bug 2056107
#CVE-2026-124915: Incorrect boundary conditions in the Graphics: WebGPU component
Reporter
5up3rh3i
Impact
moderate
References
Bug 2056172
#CVE-2026-124917: Sandbox escape due to use-after-free in the Widget: Gtk component
Reporter
Mozilla
Impact
moderate
References
Bug 2058648
#CVE-2026-124918: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
Reporter
Mozilla
Impact
moderate
References
Bug 2058993
#CVE-2026-124919: Privilege escalation due to use-after-free in the WebRTC: Networking component
Reporter
Mozilla
Impact
moderate
References
Bug 2061331
#CVE-2026-124922: Use-after-free in the CSS Transitions and Animations component
Reporter
Mozilla
Impact
moderate
References
Bug 2074190
#CVE-2026-118021: Sandbox escape due to use-after-free in the XPCOM component
Reporter
Mozilla
Impact
moderate
References
Bug 2076695
#CVE-2026-124924: Incorrect boundary conditions in the Graphics: WebRender component
Reporter
Mozilla
Impact
moderate
References
Bug 2076710
#CVE-2026-124926: Incorrect boundary conditions in the WebRTC component
Reporter
Mozilla
Impact
moderate
References
Bug 2077727
#CVE-2026-124927: Site isolation issue in the Graphics: WebRender component
Reporter
fakegiraffe
Impact
moderate
References
Bug 2078669
#CVE-2026-124929: Information disclosure in the Layout: Form Controls component
Reporter
Takashi Suzuki
Impact
moderate
References
Bug 2080889
#CVE-2026-118024: Use-after-free in the Graphics: Text component
Reporter
Mozilla
Impact
moderate
References
Bug 2081959
#CVE-2026-124930: Information disclosure in the Address Bar component
Reporter
Takashi Suzuki
Impact
moderate
References
Bug 2082172
#CVE-2026-124931: Same-origin policy bypass in the DOM: Core & HTML component
Reporter
Takashi Suzuki
Impact
moderate
References
Bug 2083990
#CVE-2026-124932: Use-after-free in the Graphics component
Reporter
Nguyen Tuan Hung
Impact
moderate
References
Bug 2084555
#CVE-2026-124933: Sandbox escape in the Console component
Reporter
r0keb
Impact
moderate
References
Bug 2085424
#CVE-2026-124934: Spoofing issue in the Security component
Reporter
Umar Farooq
Impact
low
References
Bug 1847625
#CVE-2026-124935: Undefined behavior in the WebRTC: Networking component
Reporter
Mozilla
Impact
low
References
Bug 2061793
#CVE-2026-124938: Mitigation bypass in the Add-ons Manager component
Reporter
Nguyen Tuan Hung
Impact
low
References
Bug 2075948
#CVE-2026-124939: JIT miscompilation in the JavaScript Engine: JIT component
Reporter
SecBuddyN, Tencent KeenLab (CodeBuddy Security)
Impact
low
References
Bug 2076663
#CVE-2026-124940: Mitigation bypass in the File Handling component
Reporter
Takashi Suzuki
Impact
low
References
Bug 2076948
#CVE-2026-124941: Information disclosure in the Security: RLBox component
Reporter
Shravan Narayan
Impact
low
References
Bug 2077405
#CVE-2026-124942: Invalid pointer in the DOM: Streams component
Reporter
Mozilla
Impact
low
References
Bug 2077728
#CVE-2026-124948: Incorrect boundary conditions, use-after-free in the Graphics component
Reporter
Mozilla
Impact
low
References
Bug 2081960
#CVE-2026-124951: Privilege escalation in the Nimbus Desktop Client component
Reporter
Mozilla
Impact
low
References
Bug 2085124
To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/firefox153/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/www/firefox153/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: pkgsrc/www/firefox153/Makefile
diff -u pkgsrc/www/firefox153/Makefile:1.11 pkgsrc/www/firefox153/Makefile:1.12
--- pkgsrc/www/firefox153/Makefile:1.11 Tue Oct 27 16:54:24 2026
+++ pkgsrc/www/firefox153/Makefile Tue Nov 10 14:09:09 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.11 2026/10/27 16:54:24 gutteridge Exp $
+# $NetBSD: Makefile,v 1.12 2026/11/10 14:09:09 gutteridge Exp $
FIREFOX_VER= ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH= 153.6
+MOZ_BRANCH= 153.7
MOZ_BRANCH_MINOR= .0esr
DISTNAME= firefox-${FIREFOX_VER}.source
Index: pkgsrc/www/firefox153/distinfo
diff -u pkgsrc/www/firefox153/distinfo:1.7 pkgsrc/www/firefox153/distinfo:1.8
--- pkgsrc/www/firefox153/distinfo:1.7 Tue Oct 27 16:54:24 2026
+++ pkgsrc/www/firefox153/distinfo Tue Nov 10 14:09:09 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.7 2026/10/27 16:54:24 gutteridge Exp $
+$NetBSD: distinfo,v 1.8 2026/11/10 14:09:09 gutteridge Exp $
-BLAKE2s (firefox-153.6.0esr.source.tar.xz) = c7471b214ec72f4b33e7a90e69a43600c4314618595c3afde132d869627f7082
-SHA512 (firefox-153.6.0esr.source.tar.xz) = 3e9f1f8e7c14d1994f4896702a50b46c1a3c7c7b696a080112f5ab3fdf0fcdd41ade4e81f9abafe2d3824cf1dfb16b5c09e5eaec12a05a733906f1483395565d
-Size (firefox-153.6.0esr.source.tar.xz) = 801903636 bytes
+BLAKE2s (firefox-153.7.0esr.source.tar.xz) = 8bdef1aa02f7cab5c064ed0d7eb385c76b15d53795dea4877daf38ffe660c8af
+SHA512 (firefox-153.7.0esr.source.tar.xz) = 40eaa7892b910d1b50f6eb534a58e2c191067af160b33691c7c6925b81217f376d39da8ef5137720cf16a6d88b8de951ac986cfb71cfaddc9dd067ee72dca0d3
+Size (firefox-153.7.0esr.source.tar.xz) = 800080060 bytes
BLAKE2s (nodejs-output-153.0.tgz) = 55a9ae8d1b743f57148a3b763bce2bc9afe2bd902f5b5d6a07a3e597c569aca1
SHA512 (nodejs-output-153.0.tgz) = 2513c4c47c9bb619a1702a36b8ec316a6c48d6b641656abf86ff33c5ae9e146721947b26a3a1af8295a005daeffb0c77e5f82f36ca9a717decc6850b3518c275
Size (nodejs-output-153.0.tgz) = 247910 bytes
Home |
Main Index |
Thread Index |
Old Index