head 1.23; access; symbols pkgsrc-2026Q3:1.22.0.6 pkgsrc-2026Q3-base:1.22 pkgsrc-2026Q2:1.22.0.4 pkgsrc-2026Q2-base:1.22 pkgsrc-2026Q1:1.22.0.2 pkgsrc-2026Q1-base:1.22 pkgsrc-2025Q4:1.20.0.4 pkgsrc-2025Q4-base:1.20 pkgsrc-2025Q3:1.20.0.2 pkgsrc-2025Q3-base:1.20 pkgsrc-2025Q2:1.17.0.2 pkgsrc-2025Q2-base:1.17 pkgsrc-2025Q1:1.12.0.2 pkgsrc-2025Q1-base:1.12 pkgsrc-2024Q4:1.7.0.2 pkgsrc-2024Q4-base:1.7 pkgsrc-2024Q3:1.3.0.2 pkgsrc-2024Q3-base:1.3; locks; strict; comment @# @; 1.23 date 2026.10.07.16.41.45; author abs; state Exp; branches; next 1.22; commitid 4yP0SxOVmoLF6zYG; 1.22 date 2026.01.06.16.16.39; author ryoon; state Exp; branches; next 1.21; commitid eWXW8NYGAl7iMlpG; 1.21 date 2026.01.02.15.55.32; author tnn; state Exp; branches; next 1.20; commitid lyXGqlXcpHV0NPoG; 1.20 date 2025.09.11.14.42.22; author leot; state Exp; branches; next 1.19; commitid u8n2Ud0r5rcL0jaG; 1.19 date 2025.08.24.04.51.23; author gutteridge; state Exp; branches; next 1.18; commitid 61BSgDoPK5w7kW7G; 1.18 date 2025.07.22.23.38.54; author gutteridge; state Exp; branches; next 1.17; commitid LE2hn3OASxhICN3G; 1.17 date 2025.06.24.20.26.36; author bsiegert; state Exp; branches 1.17.2.1; next 1.16; commitid 987arGHIgBmFsb0G; 1.16 date 2025.05.28.00.20.37; author gutteridge; state Exp; branches; next 1.15; commitid IdwFQb2qH5rpEBWF; 1.15 date 2025.05.21.21.10.16; author gutteridge; state Exp; branches; next 1.14; commitid a0Xl2qnLffU7NOVF; 1.14 date 2025.04.30.00.20.00; author gutteridge; state Exp; branches; next 1.13; commitid PcJk9Q8b1a3ey0TF; 1.13 date 2025.04.02.18.32.39; author gutteridge; state Exp; branches; next 1.12; commitid 6u1v0BlcRQZQuvPF; 1.12 date 2025.03.29.10.27.32; author bsiegert; state Exp; branches 1.12.2.1; next 1.11; commitid MyFrbBzbbG6xWWOF; 1.11 date 2025.03.11.02.04.12; author gutteridge; state Exp; branches; next 1.10; commitid EvpTV6XZQ6NBJAMF; 1.10 date 2025.02.04.19.19.26; author bsiegert; state Exp; branches; next 1.9; commitid w8o1tvErIpdyAbIF; 1.9 date 2025.01.07.17.26.43; author bsiegert; state Exp; branches; next 1.8; commitid M7mKpP2c9Ln0RzEF; 1.8 date 2024.12.31.04.30.50; author ryoon; state Exp; branches; next 1.7; commitid quH9eO8CdBUvNBDF; 1.7 date 2024.11.26.18.41.49; author bsiegert; state Exp; branches 1.7.2.1; next 1.6; commitid cD2H8NBgg7CeDbzF; 1.6 date 2024.10.30.16.29.42; author gutteridge; state Exp; branches; next 1.5; commitid 9XRjVm1CmRtCLHvF; 1.5 date 2024.10.10.13.55.41; author gutteridge; state Exp; branches; next 1.4; commitid s06ycAoO2dHwy7tF; 1.4 date 2024.10.03.01.48.52; author gutteridge; state Exp; branches; next 1.3; commitid YOUGsLzECbmcL9sF; 1.3 date 2024.09.18.21.24.31; author gutteridge; state Exp; branches 1.3.2.1; next 1.2; commitid 1X52KPsfkDdpKkqF; 1.2 date 2024.09.18.06.51.43; author wiz; state Exp; branches; next 1.1; commitid IZDPT98jaxQ5VfqF; 1.1 date 2024.08.18.15.02.20; author leot; state Exp; branches; next ; commitid pkIhF16uJ9OdDjmF; 1.17.2.1 date 2025.07.23.12.22.27; author maya; state Exp; branches; next 1.17.2.2; commitid wUj0OT2A6rjMQR3G; 1.17.2.2 date 2025.08.29.18.31.25; author bsiegert; state Exp; branches; next ; commitid wW4xArgmEKsCHE8G; 1.12.2.1 date 2025.04.09.05.11.33; author bsiegert; state Exp; branches; next 1.12.2.2; commitid AkU02oezyDVcQkQF; 1.12.2.2 date 2025.05.02.12.47.01; author maya; state Exp; branches; next 1.12.2.3; commitid UJapKkrr8MJCCkTF; 1.12.2.3 date 2025.05.23.21.20.49; author maya; state Exp; branches; next 1.12.2.4; commitid oFgMjXKfByo2N4WF; 1.12.2.4 date 2025.05.29.13.34.48; author maya; state Exp; branches; next ; commitid is7ZDG0kDlAd1OWF; 1.7.2.1 date 2025.01.09.18.08.20; author maya; state Exp; branches; next 1.7.2.2; commitid emgHmxSAW1y32QEF; 1.7.2.2 date 2025.02.09.18.42.41; author maya; state Exp; branches; next 1.7.2.3; commitid vxm6DSe8Skq3ePIF; 1.7.2.3 date 2025.03.13.06.36.46; author bsiegert; state Exp; branches; next ; commitid W8EZBJhInxPfbSMF; 1.3.2.1 date 2024.10.08.07.15.11; author bsiegert; state Exp; branches; next 1.3.2.2; commitid aRQxofa8dGckpPsF; 1.3.2.2 date 2024.10.11.18.05.20; author bsiegert; state Exp; branches; next 1.3.2.3; commitid 7jhVxWxraegoUgtF; 1.3.2.3 date 2024.10.31.21.15.23; author maya; state Exp; branches; next 1.3.2.4; commitid iMWsQvDiotmJjRvF; 1.3.2.4 date 2024.11.27.17.32.11; author maya; state Exp; branches; next ; commitid 45dslgDvlyAldjzF; desc @@ 1.23 log @Fix build of firefox128 with latest rust (Based on changed in firefox140) Approved by ryo @ text @$NetBSD: distinfo,v 1.22 2026/01/06 16:16:39 ryoon Exp $ BLAKE2s (firefox-128.14.0esr.source.tar.xz) = a3cc3c29528e11e4a25d67ac536bc00bdb09aaaddb21f36586e9a30a1dc412cb SHA512 (firefox-128.14.0esr.source.tar.xz) = a3cf267e82b6f5ab8b6497a62b12f85afb78fcaef6b12c43ef79564ce8270d3327a873368ce48fc018e46fef5e07339c07b9a494a5ff6c22a84099f939f6a9de Size (firefox-128.14.0esr.source.tar.xz) = 562714012 bytes BLAKE2s (nodejs-output-128.0.tgz) = a55b907ebe308948b99b9150d2530204c8fe2a5fda5ac371dd1163a6db43bcbc SHA512 (nodejs-output-128.0.tgz) = fba59ec14c43556749cac7a9233278e8dcd7779d5ba530ede67009bf1887c5d72dd31e3f440164b646738b465d852b882522caf7ed9aa4f81f53e588bdd3adec Size (nodejs-output-128.0.tgz) = 227482 bytes SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a SHA1 (patch-config_makefiles_rust.mk) = 95184af03c73ac732b6a7377efda8a0c3fc3bff2 SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49 SHA1 (patch-dom_webtransport_api_WebTransportDatagramDuplexStream.cpp) = b93b4c6367bd2fb3d1868ab7d97ca56c100be414 SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993 SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = b2adce9e65662283a11b6dcff40e95523e940045 SHA1 (patch-gfx_ots_src_name.cc) = b3ea28fa953e2918d86ece58c4f0db6a389db21f SHA1 (patch-gfx_wr_swgl_build.rs) = df6ebfaabb4d27994e59a9d0eaf12c7cf08415fb SHA1 (patch-gfx_wr_webrender_src_texture__cache.rs) = db3492d6c436d385fb76d061094ae335e5c59a75 SHA1 (patch-intl_lwbrk_LineBreaker.cpp) = 8c4d3016218ea11f0092247d17c8efc99e96e108 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3 SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 753bb4e90758f5b42a51bbc073b328de673988cf SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 63fbee04321f7ade20db4ccc1a1218b848344ce1 SHA1 (patch-js-src-jit-arm64-vixl-MozCpu-vixl.cpp) = d90fca47d79551fd74214d47f8184670b901b792 SHA1 (patch-js_public_Utility.h) = 0ae3d60c97358791b5d5dc2538f9c5969e06be45 SHA1 (patch-js_src_jit_FlushICache.cpp) = d1e611eaf7d7be22abfac6b39fbcd99df3570e47 SHA1 (patch-js_src_old-configure.in) = 589e24765615ede2c3c6abfe0b3529c5645193ed SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = 0b6505a1379fd87033e165946118c973c495ce2e SHA1 (patch-media_libpng_pngpriv.h) = 8320a1f7534ed5c4914b597bb3d6117d0060318f SHA1 (patch-media_libtheora_lib_info.c) = f6dbf536d73859a1ff78304c2e9f6a6f74dac01f SHA1 (patch-modules_fdlibm_src_math__private.h) = e20b6c23011d7123cbbd64a500eb8ce8c426620e SHA1 (patch-netwerk_protocol_http_nsHttpHandler.cpp) = 8e1d9a0746b637f5f4259e448e72172cfb08b23f SHA1 (patch-nsprpub_pr_src_pthreads_ptsynch.c) = b0d1f6a6e0eb852b0fd0238ad3f8ed3166c60a50 SHA1 (patch-python_mozbuild_mozbuild_frontend_reader.py) = 0b9136397688cef5b9c5de578192ee61ce39440b SHA1 (patch-security_nss_lib_freebl_mpi_mpi.c) = a7cd867916524770609d1c307a65b315b88456f4 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = d0454784eb72be49162f619579e060a0de3c480f SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 455be625b5de2f6f1f4b2dbb6c8cb33ca16c2583 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 4cb0e1c88dc83370024ed1aac7f75445b9f98df8 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd SHA1 (patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc) = 6909c4da9e7b3785252e5bce9be0ff47ebb87e01 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8 SHA1 (patch-third__party_python_dlmanager_check.py) = 0390376a7bb03065760a24cf7676e01042bce092 SHA1 (patch-third__party_python_jsonschema_jsonschema_validators.py) = 00cd379cf70cc27224ba328c684d94d0aa4fb4fd SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52 SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b SHA1 (patch-toolkit_moz.configure) = 1306e7ac3c3939886aff38a58dd3162e6517409b SHA1 (patch-toolkit_mozapps_installer_packager.mk) = 706635b76a7b525794aba95e95544f09e18bb662 SHA1 (patch-xpcom_base_nscore.h) = 1ac4d34d3c9e80bc1ac966c6c84cb320bc0fa1ec SHA1 (patch-xpcom_reflect_xptcall_md_unix_moz.build) = 8980398051fa16c7283acb6d323419993cce1420 @ 1.22 log @www/firefox12: Enable build with python314 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.21 2026/01/02 15:55:32 tnn Exp $ d20 1 @ 1.21 log @firefox128: backport patch @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.20 2025/09/11 14:42:22 leot Exp $ d20 1 a20 1 SHA1 (patch-intl_lwbrk_LineBreaker.cpp) = e2eaf7d66f1255ba5baf7f7edadbb1fa8cb39b13 d35 1 d44 2 @ 1.20 log @firefox128: Fix a ctype(3) abuse Noticed while visiting . PKGREVISION++ @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.19 2025/08/24 04:51:23 gutteridge Exp $ d29 1 a29 1 SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = de58daa0fd23d4fec50426602b65c9ea5862558a @ 1.19 log @firefox128: update to 128.14 Mozilla Foundation Security Advisory 2025-66 Security Vulnerabilities fixed in Firefox ESR 128.14 Announced August 19, 2025 Impact high Products Firefox ESR Fixed in Firefox ESR 128.14 #CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component Reporter Oskar Impact high Description An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. References Bug 1979527 #CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component Reporter Tom Van Goethem Impact high Description 'Same-origin policy bypass in the Graphics: Canvas2D component.' References Bug 1979782 #CVE-2025-9181: Uninitialized memory in the JavaScript Engine component Reporter Irvan Kurniawan Impact moderate Description Uninitialized memory in the JavaScript Engine component. References Bug 1977130 #CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 Reporter The Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.18 2025/07/22 23:38:54 gutteridge Exp $ d18 1 @ 1.18 log @firefox128: update to 128.13.0 Mozilla Foundation Security Advisory 2025-58 Security Vulnerabilities fixed in Firefox ESR 128.13 Announced July 22, 2025 Impact high Products Firefox ESR Fixed in Firefox ESR 128.13 #CVE-2025-8027: JavaScript engine only wrote partial return value to stack Reporter Nan Wang Impact high Description On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. References Bug 1968423 #CVE-2025-8028: Large branch table could lead to truncated instruction Reporter Gary Kwong Impact high Description On arm64, a WASM br_table instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. References Bug 1971581 #CVE-2025-8029: javascript: URLs executed on object and embed tags Reporter Mirko Brodesser Impact moderate Description Firefox executed javascript: URLs when used in object and embed tags. References Bug 1928021 #CVE-2025-8030: Potential user-assisted code execution in “Copy as cURL” command Reporter Ameen Basha M K Impact moderate Description Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. References Bug 1968414 #CVE-2025-8031: Incorrect URL stripping in CSP reports Reporter Tom Schuster Impact moderate Description The username:password part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. References Bug 1971719 #CVE-2025-8032: XSLT documents could bypass CSP Reporter Joe Turki Impact moderate Description XSLT document loading did not correctly propagate the source document which bypassed its CSP. References Bug 1974407 #CVE-2025-8033: Incorrect JavaScript state machine for generators Reporter Shaheen Fazim Impact low Description The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. References Bug 1973990 #CVE-2025-8034: Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 Reporter the Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 #CVE-2025-8035: Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 Reporter the Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.17 2025/06/24 20:26:36 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.13.0esr.source.tar.xz) = 5124b6be09d48b9e2991c0f6ab38b2120c3bdbef7f6847c8df37ceb30adcb829 SHA512 (firefox-128.13.0esr.source.tar.xz) = 9e6f3af535e0904219bcac947d458789cc43cbfaf476ac287328323662391eaaadeff57b244599acf3626a2fadc0bc41b70d07e33ca6af4412006ad01ceff034 Size (firefox-128.13.0esr.source.tar.xz) = 560782432 bytes @ 1.17 log @firefox128: update to 128.12.0 This release contains one high-impact and three medium-impact security fixes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.16 2025/05/28 00:20:37 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.12.0esr.source.tar.xz) = 65926aceb69965238ae5e2e8b0cdbbc8d7c6f8d6009e56688ebab00ff4c472ca SHA512 (firefox-128.12.0esr.source.tar.xz) = 442d0b2b6ce02adcd878975f01e86548ca8fe93840185d77a1acb41ec99440c7abfdc8757e6f30d60593dcf2c7f50563b6ea6ccd4d239beea01305615b73c359 Size (firefox-128.12.0esr.source.tar.xz) = 560934320 bytes @ 1.17.2.1 log @Pullup ticket #6994 - requested by gutteridge www/firefox128: Security fix www/firefox128-l10n: Security fix Revisions pulled up: - www/firefox128-l10n/Makefile 1.14 - www/firefox128-l10n/distinfo 1.14 - www/firefox128/Makefile 1.28 - www/firefox128/distinfo 1.18 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Jul 22 23:38:54 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.13.0 Mozilla Foundation Security Advisory 2025-58 Security Vulnerabilities fixed in Firefox ESR 128.13 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Jul 22 23:43:44 UTC 2025 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.13.0 @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (firefox-128.13.0esr.source.tar.xz) = 5124b6be09d48b9e2991c0f6ab38b2120c3bdbef7f6847c8df37ceb30adcb829 SHA512 (firefox-128.13.0esr.source.tar.xz) = 9e6f3af535e0904219bcac947d458789cc43cbfaf476ac287328323662391eaaadeff57b244599acf3626a2fadc0bc41b70d07e33ca6af4412006ad01ceff034 Size (firefox-128.13.0esr.source.tar.xz) = 560782432 bytes @ 1.17.2.2 log @Pullup ticket #7002 - requested by gutteridge www/firefox128: security fix www/firefox128-l10n: dependent update Revisions pulled up: - www/firefox128-l10n/Makefile 1.15 - www/firefox128-l10n/distinfo 1.15 - www/firefox128/Makefile 1.29 - www/firefox128/distinfo 1.19 --- Module Name: pkgsrc Committed By: gutteridge Date: Sun Aug 24 04:51:23 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.14 Mozilla Foundation Security Advisory 2025-66 Security Vulnerabilities fixed in Firefox ESR 128.14 Announced August 19, 2025 Impact high Products Firefox ESR Fixed in Firefox ESR 128.14 #CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: G= MP component Reporter Oskar Impact high Description An attacker was able to perform memory corruption in the GMP process which = processes encrypted media. This process is also heavily sandboxed, but repr= esents slightly different privileges from the=20 content process. References Bug 1979527 #CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D compone= nt Reporter Tom Van Goethem Impact high Description 'Same-origin policy bypass in the Graphics: Canvas2D component.' References Bug 1979782 #CVE-2025-9181: Uninitialized memory in the JavaScript Engine component Reporter Irvan Kurniawan Impact moderate Description Uninitialized memory in the JavaScript Engine component. References Bug 1977130 #CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR= 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, = Firefox 142 and Thunderbird 142 Reporter The Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thund= erbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 an= d Thunderbird 141. Some of these bugs showed=20 evidence of memory corruption and we presume that with enough effort some o= f these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thu= nderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 = and Thunderbird 142 --- Module Name: pkgsrc Committed By: gutteridge Date: Sun Aug 24 04:52:32 UTC 2025 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.14 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.17.2.1 2025/07/23 12:22:27 maya Exp $ d3 3 a5 3 BLAKE2s (firefox-128.14.0esr.source.tar.xz) = a3cc3c29528e11e4a25d67ac536bc00bdb09aaaddb21f36586e9a30a1dc412cb SHA512 (firefox-128.14.0esr.source.tar.xz) = a3cf267e82b6f5ab8b6497a62b12f85afb78fcaef6b12c43ef79564ce8270d3327a873368ce48fc018e46fef5e07339c07b9a494a5ff6c22a84099f939f6a9de Size (firefox-128.14.0esr.source.tar.xz) = 562714012 bytes @ 1.16 log @firefox128: update to 128.11.0 Mozilla Foundation Security Advisory 2025-44 Security Vulnerabilities fixed in Firefox ESR 128.11 Announced May 27, 2025 Impact critical Products Firefox ESR Fixed in Firefox ESR 128.11 #MFSA-TMP-2025-0001: Double-free in libvpx encoder Reporter Randell Jesup Impact critical Description A double-free could have occurred in vpx_codec_enc_init_multi after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. References Bug 1962421 #CVE-2025-5263: Error handling for script execution was incorrectly isolated from web content Reporter terjanq Impact moderate Description Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. References Bug 1960745 #CVE-2025-5264: Potential local code execution in “Copy as cURL” command Reporter Ameen Basha M K Impact moderate Description Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. References Bug 1950001 #CVE-2025-5265: Potential local code execution in “Copy as cURL” command Reporter Ameen Basha M K Impact moderate Description Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected. References Bug 1962301 #CVE-2025-5266: Script element events leaked cross-origin resource status Reporter Jakub Szymsza Impact moderate Description Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. References Bug 1965628 #CVE-2025-5267: Clickjacking vulnerability could have led to leaking saved payment card details Reporter Ameen Basha M K Impact low Description A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. References Bug 1954137 #CVE-2025-5268: Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 Reporter the Mozilla Fuzzing Team, Masayuki Nakano Impact moderate Description Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 #CVE-2025-5269: Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 Reporter Randell Jesup Impact moderate Description Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. References Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.15 2025/05/21 21:10:16 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.11.0esr.source.tar.xz) = 5f504cf8d9f9ac882b1a5cb86073177dcf62803c62de59da9f053b3bf3ff5746 SHA512 (firefox-128.11.0esr.source.tar.xz) = 80af64c1dce6d7a25111480567a3251cc2d1edce00acc4d85bbaa44590f5bbf4c0716f9490c3ab8ef1e6fc2bbabb2379029c2dee51ce477933c7a5935092d279 Size (firefox-128.11.0esr.source.tar.xz) = 558920388 bytes @ 1.15 log @firefox128: update to 128.10.1 Mozilla Foundation Security Advisory 2025-37 Security Vulnerabilities fixed in Firefox ESR 128.10.1 Announced May 17, 2025 Impact critical Products Firefox ESR Fixed in Firefox ESR 128.10.1 #CVE-2025-4918: Out-of-bounds access when resolving Promise objects Reporter Edouard Bochin and Tao Yan from Palo Alto Networks working with Trend Micro's Zero Day Initiative Impact critical Description An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. References Bug 1966612 #CVE-2025-4919: Out-of-bounds access when optimizing linear sums Reporter Manfred Paul working with Trend Micro's Zero Day Initiative Impact critical Description An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. References Bug 1966614 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.14 2025/04/30 00:20:00 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.10.1esr.source.tar.xz) = 4b2841f1f58fa688d6ed441e69e10e629464bdc23726fc9265a730d4768c613d SHA512 (firefox-128.10.1esr.source.tar.xz) = 6e7363d8cbecda1cedaf534ac10dc046b5f515399ec754492357e8a558c61ee3389f7bb90aa929dbcb4d6eba041ae1e778a0a8f90aa1e1f939eea517333b6c45 Size (firefox-128.10.1esr.source.tar.xz) = 568752664 bytes @ 1.14 log @firefox128: update to 128.10 Mozilla Foundation Security Advisory 2025-29 Security Vulnerabilities fixed in Firefox ESR 128.10 Announced April 29, 2025 Impact high Products Firefox ESR Fixed in Firefox ESR 128.10 #CVE-2025-2817: Privilege escalation in Firefox Updater Reporter Dong-uk Kim (@@justlikebono) Impact high Description Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. References Bug 1917536 #CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS Reporter un3xploitable & GF Impact high Description Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. This bug only affects Firefox for macOS. Other versions of Firefox are unaffected. References Bug 1937097 #CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames Reporter Nika Layzell Impact high Description A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. References Bug 1958350 #CVE-2025-4084: Potential local code execution in "copy as cURL" command Reporter Ameen Basha M K Impact moderate Description Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected. References Bug 1949994, 1956698, 1960198 #CVE-2025-4087: Unsafe attribute access during XPath parsing Reporter Ivan Fratric Impact moderate Description A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. References Bug 1952465 #CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 Reporter Maurice Dauer and the Mozilla Fuzzing Team Impact moderate Description Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 #CVE-2025-4093: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 Reporter Andrew McCreight Impact high Description Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. References Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.13 2025/04/02 18:32:39 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.10.0esr.source.tar.xz) = e60a8ab307cee03a6fceea3a2d047a4a5aa5e7485864b2063d4f273d16bed84e SHA512 (firefox-128.10.0esr.source.tar.xz) = c0f349cba626e6ec16ff0b52b7d21e05681acd1377fd1111992860f8079373f631ff997d833a3596c72a6d8c6e4f1d051927fa719f1d37a72553dcbd5348659c Size (firefox-128.10.0esr.source.tar.xz) = 556644356 bytes @ 1.13 log @firefox128: update to 128.9.0 Mozilla Foundation Security Advisory 2025-22 Security Vulnerabilities fixed in Firefox ESR 128.9 Announced April 1, 2025 Impact high Products Firefox ESR Fixed in Firefox ESR 128.9 #CVE-2025-3028: Use-after-free triggered by XSLTProcessor Reporter Ivan Fratric of Google Project Zero Impact high Description JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. References Bug 1941002 #CVE-2025-3029: URL Bar Spoofing via non-BMP Unicode characters Reporter Renwa Hiwa Impact moderate Description A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. References Bug 1952213 #CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 Reporter Sylvestre Ledru, Paul Bone and the Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.12 2025/03/29 10:27:32 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.9.0esr.source.tar.xz) = 658a1b8318e4a3ac9119feb3396b4a2dfbc314d2efc846db87036a1bcf873c18 SHA512 (firefox-128.9.0esr.source.tar.xz) = c0c8ac8374291cc93279064c73c17786c6f4fba7505ebc2cbd7a4ce7c82710620abdae7be15f60c43f9d10c3614fc9fd31f094e787105d528031c6f0510f7339 Size (firefox-128.9.0esr.source.tar.xz) = 562959584 bytes @ 1.12 log @firefox128: update to 128.8.1 CVE-2025-2857: Incorrect handle could lead to sandbox escapes @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.11 2025/03/11 02:04:12 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.8.1esr.source.tar.xz) = 2f1fd56a28e7e03bece18e3cab9eefcbe9e7932952b96ad050da952a66ee41d3 SHA512 (firefox-128.8.1esr.source.tar.xz) = 040c4c6667d5020569075e25cad21d019a66165cc2e05ecd386db2c1db1243473c4a1a96ca4901d734da8c7aee4761574b284afb44aff85cef071da995619157 Size (firefox-128.8.1esr.source.tar.xz) = 562110116 bytes @ 1.12.2.1 log @Pullup ticket #6954 - requested by gutteridge www/firefox128: security fix www/firefox128-l10n: dependent update Revisions pulled up: - www/firefox128-l10n/Makefile 1.9 - www/firefox128-l10n/distinfo 1.9 - www/firefox128/Makefile 1.19 - www/firefox128/distinfo 1.13 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Apr 2 18:32:39 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.9.0 Mozilla Foundation Security Advisory 2025-22 Security Vulnerabilities fixed in Firefox ESR 128.9 Announced April 1, 2025 Impact high Products Firefox ESR Fixed in Firefox ESR 128.9 #CVE-2025-3028: Use-after-free triggered by XSLTProcessor Reporter Ivan Fratric of Google Project Zero Impact high Description JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. References Bug 1941002 #CVE-2025-3029: URL Bar Spoofing via non-BMP Unicode characters Reporter Renwa Hiwa Impact moderate Description A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. References Bug 1952213 #CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 Reporter Sylvestre Ledru, Paul Bone and the Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Apr 2 18:34:03 UTC 2025 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.9.0 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.12 2025/03/29 10:27:32 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.9.0esr.source.tar.xz) = 658a1b8318e4a3ac9119feb3396b4a2dfbc314d2efc846db87036a1bcf873c18 SHA512 (firefox-128.9.0esr.source.tar.xz) = c0c8ac8374291cc93279064c73c17786c6f4fba7505ebc2cbd7a4ce7c82710620abdae7be15f60c43f9d10c3614fc9fd31f094e787105d528031c6f0510f7339 Size (firefox-128.9.0esr.source.tar.xz) = 562959584 bytes @ 1.12.2.2 log @Pullup ticket #6961 - requested by bsiegert www/firefox128: Security fix www/firefox128-l10n: Security fix Revisions pulled up: - www/firefox128-l10n/Makefile 1.10 - www/firefox128-l10n/distinfo 1.10 - www/firefox128/Makefile 1.23 - www/firefox128/distinfo 1.14 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Apr 30 00:20:01 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.10 Mozilla Foundation Security Advisory 2025-29 Security Vulnerabilities fixed in Firefox ESR 128.10 Announced April 29, 2025 Impact high Products Firefox ESR Fixed in Firefox ESR 128.10 #CVE-2025-2817: Privilege escalation in Firefox Updater Reporter Dong-uk Kim (@@justlikebono) Impact high Description Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. References Bug 1917536 #CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS Reporter un3xploitable & GF Impact high Description Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. This bug only affects Firefox for macOS. Other versions of Firefox are unaffected. References Bug 1937097 #CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames Reporter Nika Layzell Impact high Description A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. References Bug 1958350 #CVE-2025-4084: Potential local code execution in "copy as cURL" command Reporter Ameen Basha M K Impact moderate Description Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected. References Bug 1949994, 1956698, 1960198 #CVE-2025-4087: Unsafe attribute access during XPath parsing Reporter Ivan Fratric Impact moderate Description A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. References Bug 1952465 #CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 Reporter Maurice Dauer and the Mozilla Fuzzing Team Impact moderate Description Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 #CVE-2025-4093: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 Reporter Andrew McCreight Impact high Description Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. References Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Apr 30 00:22:09 UTC 2025 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.10 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.12.2.1 2025/04/09 05:11:33 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.10.0esr.source.tar.xz) = e60a8ab307cee03a6fceea3a2d047a4a5aa5e7485864b2063d4f273d16bed84e SHA512 (firefox-128.10.0esr.source.tar.xz) = c0f349cba626e6ec16ff0b52b7d21e05681acd1377fd1111992860f8079373f631ff997d833a3596c72a6d8c6e4f1d051927fa719f1d37a72553dcbd5348659c Size (firefox-128.10.0esr.source.tar.xz) = 556644356 bytes @ 1.12.2.3 log @Pullup ticket #6966 - requested by gutteridge www/firefox128: Security fix www/firefox128-l10n: Catch up with firefox128 changes Revisions pulled up: - www/firefox128-l10n/Makefile 1.11 - www/firefox128-l10n/distinfo 1.11 - www/firefox128/Makefile 1.25 - www/firefox128/distinfo 1.15 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed May 21 21:10:16 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.10.1 Mozilla Foundation Security Advisory 2025-37 Security Vulnerabilities fixed in Firefox ESR 128.10.1 Announced May 17, 2025 Impact critical Products Firefox ESR Fixed in Firefox ESR 128.10.1 #CVE-2025-4918: Out-of-bounds access when resolving Promise objects Reporter Edouard Bochin and Tao Yan from Palo Alto Networks working with Trend M= icro's Zero Day Initiative Impact critical Description An attacker was able to perform an out-of-bounds read or write on a JavaScr= ipt Promise object. References Bug 1966612 #CVE-2025-4919: Out-of-bounds access when optimizing linear sums Reporter Manfred Paul working with Trend Micro's Zero Day Initiative Impact critical Description An attacker was able to perform an out-of-bounds read or write on a JavaScr= ipt object by confusing array index sizes. References Bug 1966614 --- Module Name: pkgsrc Committed By: gutteridge Date: Thu May 22 02:31:39 UTC 2025 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.10.1 @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (firefox-128.10.1esr.source.tar.xz) = 4b2841f1f58fa688d6ed441e69e10e629464bdc23726fc9265a730d4768c613d SHA512 (firefox-128.10.1esr.source.tar.xz) = 6e7363d8cbecda1cedaf534ac10dc046b5f515399ec754492357e8a558c61ee3389f7bb90aa929dbcb4d6eba041ae1e778a0a8f90aa1e1f939eea517333b6c45 Size (firefox-128.10.1esr.source.tar.xz) = 568752664 bytes @ 1.12.2.4 log @Pullup ticket #6968 - requested by gutteridge www/firefox128: Security fix www/firefox128-l10n: Security fix Revisions pulled up: - www/firefox128-l10n/Makefile 1.12 - www/firefox128-l10n/distinfo 1.12 - www/firefox128/Makefile 1.26 - www/firefox128/distinfo 1.16 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed May 28 00:20:37 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.11.0 Mozilla Foundation Security Advisory 2025-44 Security Vulnerabilities fixed in Firefox ESR 128.11 Announced May 27, 2025 Impact critical Products Firefox ESR Fixed in Firefox ESR 128.11 #MFSA-TMP-2025-0001: Double-free in libvpx encoder Reporter Randell Jesup Impact critical Description A double-free could have occurred in vpx_codec_enc_init_multi after a faile= d allocation when initializing the encoder for WebRTC. This could have caus= ed memory corruption and a potentially=20 exploitable crash. References Bug 1962421 #CVE-2025-5263: Error handling for script execution was incorrectly isolate= d from web content Reporter terjanq Impact moderate Description Error handling for script execution was incorrectly isolated from web conte= nt, which could have allowed cross-origin leak attacks. References Bug 1960745 #CVE-2025-5264: Potential local code execution in =E2=80=9CCopy as cURL=E2= =80=9D command Reporter Ameen Basha M K Impact moderate Description Due to insufficient escaping of the newline character in the =E2=80=9CCopy = as cURL=E2=80=9D feature, an attacker could trick a user into using this co= mmand, potentially leading to local code execution on the user's=20 system. References Bug 1950001 #CVE-2025-5265: Potential local code execution in =E2=80=9CCopy as cURL=E2= =80=9D command Reporter Ameen Basha M K Impact moderate Description Due to insufficient escaping of the ampersand character in the =E2=80=9CCop= y as cURL=E2=80=9D feature, an attacker could trick a user into using this = command, potentially leading to local code execution on the=20 user's system. This bug only affects Firefox for Windows. Other versions of Firefox are un= affected. References Bug 1962301 #CVE-2025-5266: Script element events leaked cross-origin resource status Reporter Jakub Szymsza Impact moderate Description Script elements loading cross-origin resources generated load and error eve= nts which leaked information enabling XS-Leaks attacks. References Bug 1965628 #CVE-2025-5267: Clickjacking vulnerability could have led to leaking saved = payment card details Reporter Ameen Basha M K Impact low Description A clickjacking vulnerability could have been used to trick a user into leak= ing saved payment card details to a malicious page. References Bug 1954137 #CVE-2025-5268: Memory safety bugs fixed in Firefox 139, Thunderbird 139, F= irefox ESR 128.11, and Thunderbird 128.11 Reporter the Mozilla Fuzzing Team, Masayuki Nakano Impact moderate Description Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128= .10, and Thunderbird 128.10. Some of these bugs showed evidence of memory c= orruption and we presume that with enough effort=20 some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 1= 28.11, and Thunderbird 128.11 #CVE-2025-5269: Memory safety bug fixed in Firefox ESR 128.11 and Thunderbi= rd 128.11 Reporter Randell Jesup Impact moderate Description Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. Th= is bug showed evidence of memory corruption and we presume that with enough= effort this could have been exploited to run=20 arbitrary code. References Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed May 28 00:28:03 UTC 2025 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.11 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.12.2.3 2025/05/23 21:20:49 maya Exp $ d3 3 a5 3 BLAKE2s (firefox-128.11.0esr.source.tar.xz) = 5f504cf8d9f9ac882b1a5cb86073177dcf62803c62de59da9f053b3bf3ff5746 SHA512 (firefox-128.11.0esr.source.tar.xz) = 80af64c1dce6d7a25111480567a3251cc2d1edce00acc4d85bbaa44590f5bbf4c0716f9490c3ab8ef1e6fc2bbabb2379029c2dee51ce477933c7a5935092d279 Size (firefox-128.11.0esr.source.tar.xz) = 558920388 bytes @ 1.11 log @firefox128: update to 128.8.0 Mozilla Foundation Security Advisory 2025-16 Security Vulnerabilities fixed in Firefox ESR 128.8 Announced March 4, 2025 Impact critical Products Firefox ESR Fixed in Firefox ESR 128.8 #CVE-2024-43097: Overflow when growing an SkRegion's RunArray Reporter Google Android Impact critical Description In resizeToAtLeast of SkRegion.cpp, there was a possible out of bounds write due to an integer overflow References Bug 1945624 #CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free in the Browser process Reporter dalmurino Impact high Description On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. References Bug 1902309 #CVE-2025-1931: Use-after-free in WebTransportChild Reporter sherkito Impact high Description It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. References Bug 1944126 #CVE-2025-1932: Inconsistent comparator in XSLT sorting led to out-of-bounds access Reporter Ivan Fratric of Google Project Zero Impact high Description An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. References Bug 1944313 #CVE-2025-1933: JIT corruption of WASM i32 return values on 64-bit CPUs Reporter Xiangwei Zhang and kkdong of Tencent Security YUNDING LAB Impact high Description On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. References Bug 1946004 #CVE-2025-1934: Unexpected GC during RegExp bailout processing Reporter Nils Bars Impact moderate Description It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. References Bug 1942881 #CVE-2025-1935: Clickjacking the registerProtocolHandler info-bar Reporter Hafiizh Impact low Description A web page could trick a user into setting that site as the default handler for a custom URL protocol. References Bug 1866661 #CVE-2025-1936: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents Reporter Surya Dev Singh Impact low Description jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image. References Bug 1940027 #CVE-2025-1937: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 Reporter the Mozilla Fuzzing Team, Andrew McCreight Impact high Description Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 #CVE-2025-1938: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 Reporter Julien Wajsberg, the Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.10 2025/02/04 19:19:26 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.8.0esr.source.tar.xz) = d8dd898f9c73a77d849452e3ad97e7779971af3d03a0cf535099494583a4e62f SHA512 (firefox-128.8.0esr.source.tar.xz) = 7c0ef22bc14d4fa248cbae14d629174c9c967f891f4525f609760595f5a108aedf7dd804d1b63b97ec268613fa98378f4742a9b6ab562454351cf21175fdb802 Size (firefox-128.8.0esr.source.tar.xz) = 563554116 bytes @ 1.10 log @firefox128: update to 128.7.0 (security) Security Vulnerabilities fixed in Firefox ESR 128.7 #CVE-2025-1009: Use-after-free in XSLT Impact: high An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. #CVE-2025-1010: Use-after-free in Custom Highlight Impact: high An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. #CVE-2025-1011: A bug in WebAssembly code generation could result in a crash Impact: moderate A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. #CVE-2025-1012: Use-after-free during concurrent delazification Impact: moderate A race during concurrent delazification could have led to a use-after-free. #CVE-2024-11704: Potential double-free vulnerability in PKCS#7 decryption handling Impact: low A double-free issue could have occurred in sec_pkcs7_decoder_start_decrypt() when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption. #CVE-2025-1013: Potential opening of private browsing tabs in normal browsing windows Impact: low A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. #CVE-2025-1014: Certificate length was not properly checked Impact: low Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. #CVE-2025-1016: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 Impact: high Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. #CVE-2025-1017: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 Impact: moderate Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.9 2025/01/07 17:26:43 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.7.0esr.source.tar.xz) = 5eced4f74d601c93104d13e9d86e2aaee82bf3413a3d2088e05a245acfe4a354 SHA512 (firefox-128.7.0esr.source.tar.xz) = 26f9661b395b85a44b42bd72ef1ad976c614216c68f6c2dd834d0ac8b84b9c9f398b8ac550a47396995d96e6bb5fa9a50064d7f2f526bddd45aed5039ef131b8 Size (firefox-128.7.0esr.source.tar.xz) = 569300208 bytes @ 1.9 log @firefox128, firefox128-l10n: update to 128.6.0 Security Vulnerabilities fixed in Firefox ESR 128.6 #CVE-2025-0237: WebChannel APIs susceptible to confused deputy attack Impact: moderate The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. #CVE-2025-0238: Use-after-free when breaking lines in text Impact: moderate Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. #CVE-2025-0239: Alt-Svc ALPN validation failure when redirected Impact: moderate When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. #CVE-2025-0240: Compartment mismatch when parsing JavaScript JSON module Impact: moderate Parsing a JavaScript module as JSON could under some circumstances cause cross-compartment access, which may result in a use-after-free. #CVE-2025-0241: Memory corruption when using JavaScript Text Segmentation Impact: moderate When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. #CVE-2025-0242: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 Impact: high Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. #CVE-2025-0243: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 Impact: moderate Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.8 2024/12/31 04:30:50 ryoon Exp $ d3 3 a5 3 BLAKE2s (firefox-128.6.0esr.source.tar.xz) = 1be40ce84f1d9cf6c41bfcd8ad6009af04174cdfca80d60d96ac3b76e242c7ab SHA512 (firefox-128.6.0esr.source.tar.xz) = 49bce966e062766861712bd65cca46a438b339fe31598f69e4fe64da78ef6f8b4581c1d502341ef1c032aafaab2f4f88e69cb93a0b845ba7173fec277ae695b5 Size (firefox-128.6.0esr.source.tar.xz) = 563259116 bytes @ 1.8 log @www/firefox128: Update to 128.5.2 Changelog: 128.5.2: Fixed * Fixed a crash experienced by Windows users with Qihoo 360 Total Security Antivirus software installed (bug 1934258) 128.5.1: Fixed * Fixed an issue that prevented some websites from loading when using SSL Inspection. (bug 1933747) @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.7 2024/11/26 18:41:49 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.5.2esr.source.tar.xz) = 86ccc74ecc88903bba09ea1eadd37aedf0c049c0fbcbac69538084e16de924d9 SHA512 (firefox-128.5.2esr.source.tar.xz) = 1e5b6bfe63279acc8b7350c08f2767620f01b979057f50ab1952331b6efc05124f7c9530a7cc793b0f3616344334a2903fe5712bbb45418e936684d294c5530a Size (firefox-128.5.2esr.source.tar.xz) = 568751432 bytes @ 1.7 log @firefox128: update to 128.5.0 Security Vulnerabilities fixed in Firefox ESR 128.5 #CVE-2024-11691: Memory corruption in Apple GPU drivers Impact: high An attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be avoided by working around the flaw. Note: This issue only affected macOS operating systems. Other operating systems are unaffected. #CVE-2024-11692: Select list elements could be shown over another site Impact: moderate An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. #CVE-2024-11693: Download Protections were bypassed by .library-ms files on Windows Impact: moderate The executable file warning was not presented when downloading .library-ms files. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. #CVE-2024-11694: CSP Bypass and XSS Exposure via Web Compatibility Shims Impact: moderate Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. #CVE-2024-11695: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters Impact: moderate A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. #CVE-2024-11696: Unhandled Exception in Add-on Signature Verification Impact: moderate The application failed to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. #CVE-2024-11697: Improper Keypress Handling in Executable File Confirmation Dialog Impact: low When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. #CVE-2024-11698: Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS Impact: low A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click menus, resulting in a disrupted browsing experience until the browser is restarted. This bug only affects the application when running on macOS. Other operating systems are unaffected. #CVE-2024-11699: Memory safety bugs fixed in Firefox 133, Firefox ESR 128.5, and Thunderbird 128.5 Impact: high Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.6 2024/10/30 16:29:42 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.5.0esr.source.tar.xz) = fa2fd14c0688bc02109beb648b6d3971c0c3e87ec0f9807c84bc82a247ecd756 SHA512 (firefox-128.5.0esr.source.tar.xz) = ff20f18f92c5e9cd1d9eaf7c38cec61bcab2dca8dd2817519b712bc1f760b5c6e290212acf3289152764e5130e01626950b7ecd9327b2c587b24a246591afd67 Size (firefox-128.5.0esr.source.tar.xz) = 567200548 bytes @ 1.7.2.1 log @Pullup ticket #6927 - requested by bsiegert www/firefox128: security fix www/firefox128-l10n: security fix Revisions pulled up: - www/firefox128-l10n/Makefile 1.6 - www/firefox128-l10n/distinfo 1.6 - www/firefox128/Makefile 1.14 - www/firefox128/distinfo 1.9 --- Module Name: pkgsrc Committed By: bsiegert Date: Tue Jan 7 17:26:43 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128, firefox128-l10n: update to 128.6.0 Security Vulnerabilities fixed in Firefox ESR 128.6 #CVE-2025-0237: WebChannel APIs susceptible to confused deputy attack Impact: moderate The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. #CVE-2025-0238: Use-after-free when breaking lines in text Impact: moderate Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. #CVE-2025-0239: Alt-Svc ALPN validation failure when redirected Impact: moderate When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. #CVE-2025-0240: Compartment mismatch when parsing JavaScript JSON module Impact: moderate Parsing a JavaScript module as JSON could under some circumstances cause cross-compartment access, which may result in a use-after-free. #CVE-2025-0241: Memory corruption when using JavaScript Text Segmentation Impact: moderate When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. #CVE-2025-0242: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 Impact: high Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115= .18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. #CVE-2025-0243: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 Impact: moderate Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128= .5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corrupt= ion and we presume that with enough effort some of these could have been exploi= ted to run arbitrary code. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.7 2024/11/26 18:41:49 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.6.0esr.source.tar.xz) = 1be40ce84f1d9cf6c41bfcd8ad6009af04174cdfca80d60d96ac3b76e242c7ab SHA512 (firefox-128.6.0esr.source.tar.xz) = 49bce966e062766861712bd65cca46a438b339fe31598f69e4fe64da78ef6f8b4581c1d502341ef1c032aafaab2f4f88e69cb93a0b845ba7173fec277ae695b5 Size (firefox-128.6.0esr.source.tar.xz) = 563259116 bytes @ 1.7.2.2 log @Pullup ticket #6940 - requested by bsiegert www/firefox128-l10n: Security fix www/firefox128: Security fix Revisions pulled up: - www/firefox128-l10n/Makefile 1.7 - www/firefox128-l10n/distinfo 1.7 - www/firefox128/Makefile 1.15 - www/firefox128/distinfo 1.10 --- Module Name: pkgsrc Committed By: bsiegert Date: Tue Feb 4 19:19:27 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128: update to 128.7.0 (security) Security Vulnerabilities fixed in Firefox ESR 128.7 #CVE-2025-1009: Use-after-free in XSLT Impact: high An attacker could have caused a use-after-free via crafted XSLT data, leadi= ng to a potentially exploitable crash. #CVE-2025-1010: Use-after-free in Custom Highlight Impact: high An attacker could have caused a use-after-free via the Custom Highlight API= , leading to a potentially exploitable crash. #CVE-2025-1011: A bug in WebAssembly code generation could result in a cras= h Impact: moderate A bug in WebAssembly code generation could have lead to a crash. It may hav= e been possible for an attacker to leverage this to achieve code execution. #CVE-2025-1012: Use-after-free during concurrent delazification Impact: moderate A race during concurrent delazification could have led to a use-after-free. #CVE-2024-11704: Potential double-free vulnerability in PKCS#7 decryption handling Impact: low A double-free issue could have occurred in sec_pkcs7_decoder_start_decrypt(= ) when handling an error path. Under specific conditions, the same symmetric = key could have been freed twice, potentially leading to memory corruption. #CVE-2025-1013: Potential opening of private browsing tabs in normal browsi= ng windows Impact: low A race condition could have led to private browsing tabs being opened in no= rmal browsing windows. This could have resulted in a potential privacy leak. #CVE-2025-1014: Certificate length was not properly checked Impact: low Certificate length was not properly checked when added to a certificate sto= re. In practice only trusted data was processed. #CVE-2025-1016: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 Impact: high Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115= .19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. #CVE-2025-1017: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 Impact: moderate Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128= .6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corrupt= ion and we presume that with enough effort some of these could have been exploi= ted to run arbitrary code. @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (firefox-128.7.0esr.source.tar.xz) = 5eced4f74d601c93104d13e9d86e2aaee82bf3413a3d2088e05a245acfe4a354 SHA512 (firefox-128.7.0esr.source.tar.xz) = 26f9661b395b85a44b42bd72ef1ad976c614216c68f6c2dd834d0ac8b84b9c9f398b8ac550a47396995d96e6bb5fa9a50064d7f2f526bddd45aed5039ef131b8 Size (firefox-128.7.0esr.source.tar.xz) = 569300208 bytes @ 1.7.2.3 log @Pullup ticket #6948 - requested by gutteridge www/firefox128: security fix www/firefox128-l10n: dependent update Revisions pulled up: - www/firefox128-l10n/Makefile 1.8 - www/firefox128-l10n/distinfo 1.8 - www/firefox128/Makefile 1.17 - www/firefox128/distinfo 1.11 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Mar 11 02:04:12 UTC 2025 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.8.0 Mozilla Foundation Security Advisory 2025-16 Security Vulnerabilities fixed in Firefox ESR 128.8 Announced March 4, 2025 Impact critical Products Firefox ESR Fixed in Firefox ESR 128.8 #CVE-2024-43097: Overflow when growing an SkRegion's RunArray Reporter Google Android Impact critical Description In resizeToAtLeast of SkRegion.cpp, there was a possible out of bounds write due to an integer overflow References Bug 1945624 #CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free in the Browser process Reporter dalmurino Impact high Description On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. References Bug 1902309 #CVE-2025-1931: Use-after-free in WebTransportChild Reporter sherkito Impact high Description It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. References Bug 1944126 #CVE-2025-1932: Inconsistent comparator in XSLT sorting led to out-of-bounds access Reporter Ivan Fratric of Google Project Zero Impact high Description An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. References Bug 1944313 #CVE-2025-1933: JIT corruption of WASM i32 return values on 64-bit CPUs Reporter Xiangwei Zhang and kkdong of Tencent Security YUNDING LAB Impact high Description On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. References Bug 1946004 #CVE-2025-1934: Unexpected GC during RegExp bailout processing Reporter Nils Bars Impact moderate Description It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. References Bug 1942881 #CVE-2025-1935: Clickjacking the registerProtocolHandler info-bar Reporter Hafiizh Impact low Description A web page could trick a user into setting that site as the default handler for a custom URL protocol. References Bug 1866661 #CVE-2025-1936: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents Reporter Surya Dev Singh Impact low Description jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image. References Bug 1940027 #CVE-2025-1937: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 Reporter the Mozilla Fuzzing Team, Andrew McCreight Impact high Description Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 #CVE-2025-1938: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 Reporter Julien Wajsberg, the Mozilla Fuzzing Team Impact high Description Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Mar 11 02:25:25 UTC 2025 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.8.0 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.7.2.2 2025/02/09 18:42:41 maya Exp $ d3 3 a5 3 BLAKE2s (firefox-128.8.0esr.source.tar.xz) = d8dd898f9c73a77d849452e3ad97e7779971af3d03a0cf535099494583a4e62f SHA512 (firefox-128.8.0esr.source.tar.xz) = 7c0ef22bc14d4fa248cbae14d629174c9c967f891f4525f609760595f5a108aedf7dd804d1b63b97ec268613fa98378f4742a9b6ab562454351cf21175fdb802 Size (firefox-128.8.0esr.source.tar.xz) = 563554116 bytes @ 1.6 log @firefox128: update to 128.4.0 Fixes for Mozilla Foundation Security Advisory 2024-56 CVE-2024-10458: Permission leak via embed or object elements CVE-2024-10459: Use-after-free in layout with accessibility CVE-2024-10460: Confusing display of origin for external protocol handler prompt CVE-2024-10461: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response CVE-2024-10462: Origin of permission prompt could be spoofed by long URL CVE-2024-10463: Cross origin video frame leak CVE-2024-10464: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10465: Clipboard "paste" button persisted across tabs CVE-2024-10466: DOM push subscription message could hang Firefox CVE-2024-10467: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.5 2024/10/10 13:55:41 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.4.0esr.source.tar.xz) = 7f17d3d1549964fb8dac1d89b67d6a884cf7db29b7d2f6aabaa2b82ac264a5e8 SHA512 (firefox-128.4.0esr.source.tar.xz) = e720b1f993926d73f5a5727648f753176ac2fd093fb0b71393946bbc5919ce5fc7b88b82960bd1aa427b5663c7f659828dc6702485fc0c1e7a6961571c67faa3 Size (firefox-128.4.0esr.source.tar.xz) = 558619512 bytes @ 1.5 log @firefox128: update to 128.3.1 * Fixes for mfsa2024-51, also known as CVE-2024-9680. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.4 2024/10/03 01:48:52 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.3.1esr.source.tar.xz) = c9ff7c347389bd747654ee3b3d3e443589b617ec7a372f89f10cf9dcdc7347d5 SHA512 (firefox-128.3.1esr.source.tar.xz) = c5c1a2e951e0dbb1259a0f77a26b8678bfa4a4c7e909f8fcd5c6d0f807625926824ed235e114d9bab5e289232efaaf4c6691764db64860161ebc9bece9200f0c Size (firefox-128.3.1esr.source.tar.xz) = 562947536 bytes @ 1.4 log @firefox128: update to 128.3.0 * Fixes for mfsa2024-47, also known as: CVE-2024-9392, CVE-2024-9393, CVE-2024-9394, CVE-2024-8900, CVE-2024-9396, CVE-2024-9397, CVE-2024-9398, CVE-2024-9399, CVE-2024-9400, CVE-2024-9401, CVE-2024-9402 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2024/09/18 21:24:31 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-128.3.0esr.source.tar.xz) = 94c2c3122aa865c2724a9202411bf96b173c9ca169471cc5b5cb8a862ae2f3cb SHA512 (firefox-128.3.0esr.source.tar.xz) = 3c6ef272c0fb653d030fe3f7f72aa0e1097b1c6759556166815cde15465330f988b3bc23df4b4eb753daee930edbb1ef72145273cb29d0952bd9d7c547050f9b Size (firefox-128.3.0esr.source.tar.xz) = 560960556 bytes @ 1.3 log @firefox128: update to 128.2.0 * Fixes for mfsa2024-40, also known as: CVE-2024-8381, CVE-2024-8382, CVE-2024-8383, CVE-2024-8384, CVE-2024-8385, CVE-2024-8386, CVE-2024-8387 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2024/09/18 06:51:43 wiz Exp $ d3 3 a5 3 BLAKE2s (firefox-128.2.0esr.source.tar.xz) = 09e25789b5fd5ee88eefad149cb7ae13e8d2ae48a5a8a922556d8b625dfc756c SHA512 (firefox-128.2.0esr.source.tar.xz) = 9a689929f6f86d795ea2c0318bb78f77f72a552f40715a1108dbd6361b0dedc3aaf049f1883424012459899607067d5a8374d895564591ec6679a1ce80708d7d Size (firefox-128.2.0esr.source.tar.xz) = 560831528 bytes @ 1.3.2.1 log @Pullup ticket #6901 - requested by gutteridge www/firefox128: security fix www/firefox128-l10n: dependent update Revisions pulled up: - www/firefox128-l10n/Makefile 1.3 - www/firefox128-l10n/distinfo 1.3 - www/firefox128/Makefile 1.3 - www/firefox128/distinfo 1.4 --- Module Name: pkgsrc Committed By: gutteridge Date: Thu Oct 3 01:48:53 UTC 2024 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.3.0 * Fixes for mfsa2024-47, also known as: CVE-2024-9392, CVE-2024-9393, CVE-2024-9394, CVE-2024-8900, CVE-2024-9396, CVE-2024-9397, CVE-2024-9398, CVE-2024-9399, CVE-2024-9400, CVE-2024-9401, CVE-2024-9402 --- Module Name: pkgsrc Committed By: gutteridge Date: Thu Oct 3 01:50:04 UTC 2024 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.3.0 @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (firefox-128.3.0esr.source.tar.xz) = 94c2c3122aa865c2724a9202411bf96b173c9ca169471cc5b5cb8a862ae2f3cb SHA512 (firefox-128.3.0esr.source.tar.xz) = 3c6ef272c0fb653d030fe3f7f72aa0e1097b1c6759556166815cde15465330f988b3bc23df4b4eb753daee930edbb1ef72145273cb29d0952bd9d7c547050f9b Size (firefox-128.3.0esr.source.tar.xz) = 560960556 bytes @ 1.3.2.2 log @Pullup ticket #6907 - requested by gutteridge www/firefox128: security fix Revisions pulled up: - www/firefox128/Makefile 1.4 - www/firefox128/distinfo 1.5 --- Module Name: pkgsrc Committed By: gutteridge Date: Thu Oct 10 13:55:41 UTC 2024 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.3.1 * Fixes for mfsa2024-51, also known as CVE-2024-9680. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3.2.1 2024/10/08 07:15:11 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.3.1esr.source.tar.xz) = c9ff7c347389bd747654ee3b3d3e443589b617ec7a372f89f10cf9dcdc7347d5 SHA512 (firefox-128.3.1esr.source.tar.xz) = c5c1a2e951e0dbb1259a0f77a26b8678bfa4a4c7e909f8fcd5c6d0f807625926824ed235e114d9bab5e289232efaaf4c6691764db64860161ebc9bece9200f0c Size (firefox-128.3.1esr.source.tar.xz) = 562947536 bytes @ 1.3.2.3 log @Pullup ticket #6911 - requested by gutteridge Security fix Revisions pulled up: - www/firefox128/Makefile 1.6 - www/firefox128/distinfo 1.6 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Oct 30 16:29:43 UTC 2024 Modified Files: pkgsrc/www/firefox128: Makefile distinfo Log Message: firefox128: update to 128.4.0 Fixes for Mozilla Foundation Security Advisory 2024-56 CVE-2024-10458: Permission leak via embed or object elements CVE-2024-10459: Use-after-free in layout with accessibility CVE-2024-10460: Confusing display of origin for external protocol handler prompt CVE-2024-10461: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response CVE-2024-10462: Origin of permission prompt could be spoofed by long URL CVE-2024-10463: Cross origin video frame leak CVE-2024-10464: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10465: Clipboard "paste" button persisted across tabs CVE-2024-10466: DOM push subscription message could hang Firefox CVE-2024-10467: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3.2.2 2024/10/11 18:05:20 bsiegert Exp $ d3 3 a5 3 BLAKE2s (firefox-128.4.0esr.source.tar.xz) = 7f17d3d1549964fb8dac1d89b67d6a884cf7db29b7d2f6aabaa2b82ac264a5e8 SHA512 (firefox-128.4.0esr.source.tar.xz) = e720b1f993926d73f5a5727648f753176ac2fd093fb0b71393946bbc5919ce5fc7b88b82960bd1aa427b5663c7f659828dc6702485fc0c1e7a6961571c67faa3 Size (firefox-128.4.0esr.source.tar.xz) = 558619512 bytes @ 1.3.2.4 log @Pullup ticket #6918 - requested by bsiegert www/firefox128: Security fix www/firefox128-l10n: Security fix Revisions pulled up: - www/firefox128-l10n/Makefile 1.4 - www/firefox128-l10n/distinfo 1.4 - www/firefox128/Makefile 1.11 - www/firefox128/distinfo 1.7 - www/firefox128/files/node-wrapper.sh 1.2 --- Module Name: pkgsrc Committed By: bsiegert Date: Tue Nov 26 18:41:50 UTC 2024 Modified Files: pkgsrc/www/firefox128: Makefile distinfo pkgsrc/www/firefox128/files: node-wrapper.sh Log Message: firefox128: update to 128.5.0 Security Vulnerabilities fixed in Firefox ESR 128.5 #CVE-2024-11691: Memory corruption in Apple GPU drivers Impact: high An attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be avoided by working around the flaw. Note: This issue only affected macOS operating systems. Other operating systems are unaffected. #CVE-2024-11692: Select list elements could be shown over another site Impact: moderate An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. #CVE-2024-11693: Download Protections were bypassed by .library-ms files on Windows Impact: moderate The executable file warning was not presented when downloading .library-ms files. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. #CVE-2024-11694: CSP Bypass and XSS Exposure via Web Compatibility Shims Impact: moderate Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. #CVE-2024-11695: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters Impact: moderate A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. #CVE-2024-11696: Unhandled Exception in Add-on Signature Verification Impact: moderate The application failed to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. #CVE-2024-11697: Improper Keypress Handling in Executable File Confirmation Dialog Impact: low When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. #CVE-2024-11698: Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS Impact: low A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click menus, resulting in a disrupted browsing experience until the browser is restarted. This bug only affects the application when running on macOS. Other operating systems are unaffected. #CVE-2024-11699: Memory safety bugs fixed in Firefox 133, Firefox ESR 128.5, and Thunderbird 128.5 Impact: high Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. --- Module Name: pkgsrc Committed By: bsiegert Date: Tue Nov 26 18:43:00 UTC 2024 Modified Files: pkgsrc/www/firefox128-l10n: Makefile distinfo Log Message: firefox128-l10n: update to 128.5.0 This updates the translation for the latest Firefox ESR release. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3.2.3 2024/10/31 21:15:23 maya Exp $ d3 3 a5 3 BLAKE2s (firefox-128.5.0esr.source.tar.xz) = fa2fd14c0688bc02109beb648b6d3971c0c3e87ec0f9807c84bc82a247ecd756 SHA512 (firefox-128.5.0esr.source.tar.xz) = ff20f18f92c5e9cd1d9eaf7c38cec61bcab2dca8dd2817519b712bc1f760b5c6e290212acf3289152764e5130e01626950b7ecd9327b2c587b24a246591afd67 Size (firefox-128.5.0esr.source.tar.xz) = 567200548 bytes @ 1.2 log @firefox128: fix build with latest cbindgen @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.1 2024/08/18 15:02:20 leot Exp $ d3 3 a5 3 BLAKE2s (firefox-128.1.0esr.source.tar.xz) = 281774e06fb58430bd45aab1ce9600e4f9aa8ba5784f96988620131da7ac5bf4 SHA512 (firefox-128.1.0esr.source.tar.xz) = 8055a7f83acf0cab6124ba5809aff1c082e81a0d30ff318ec719f8fd3f4af9aa60e2094c1abd6c981193d751075a9569370176e20e50f3c1959fe27a15511388 Size (firefox-128.1.0esr.source.tar.xz) = 561953208 bytes a34 2 SHA1 (patch-servo_components_style__traits_values.rs) = c9a7ee7d96dd67ab2c7fe3c3e9175a199bea5130 SHA1 (patch-servo_ports_geckolib_cbindgen.toml) = ac8e2f3187b8faea74c6c6767de744860e27fd4d @ 1.1 log @www: Import firefox128-128.1.0 Mozilla Firefox is a free, open-source and cross-platform web browser for Windows, Linux, MacOS X and many other operating systems. It is fast and easy to use, and offers many advantages over other web browsers, such as tabbed browsing and the ability to block pop-up windows. Firefox also offers excellent bookmark and history management, and it can be extended by developers using industry standards such as XML, CSS, JavaScript, C++, etc. Many extensions are available. Note: Due to upstream's trademark policies, this package identifies as "Nightly" rather than "Firefox" by default. This package provides Firefox 128 Extended Support Release. Based on www/firefox{,115} and packaged by myself in pkgsrc-wip. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.535 2024/08/01 15:41:09 ryoon Exp $ d35 2 @