head	1.5;
access;
symbols
	pkgsrc-2026Q3:1.3.0.2
	pkgsrc-2026Q3-base:1.3;
locks; strict;
comment	@# @;


1.5
date	2026.10.13.13.11.04;	author gutteridge;	state Exp;
branches;
next	1.4;
commitid	ri3pC4oIopNsKjZG;

1.4
date	2026.09.29.13.03.44;	author gutteridge;	state Exp;
branches;
next	1.3;
commitid	47SoyBnBwkMk9wXG;

1.3
date	2026.09.15.13.20.42;	author gutteridge;	state Exp;
branches
	1.3.2.1;
next	1.2;
commitid	icMiMWt0FLguHIVG;

1.2
date	2026.09.01.16.09.24;	author gutteridge;	state Exp;
branches;
next	1.1;
commitid	0KprwsdUo0Pu4WTG;

1.1
date	2026.08.27.01.23.15;	author gutteridge;	state Exp;
branches;
next	;
commitid	jHXIs10wmSYxkdTG;

1.3.2.1
date	2026.10.03.16.52.44;	author bsiegert;	state Exp;
branches;
next	;
commitid	JckcdmVTfyEBi3YG;


desc
@@


1.5
log
@firefox153: update to 153.5

Mozilla Foundation Security Advisory 2026-108

Security Vulnerabilities fixed in Firefox ESR 153.5

Announced
October 13, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.5
Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.

#CVE-2026-109704: Privilege escalation in the Application Update component

Reporter
Noel
Impact
high
References

Bug 2037979
#CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

Reporter
Mozilla
Impact
high
References

Bug 2040905
#CVE-2026-109706: Use-after-free in the Storage: IndexedDB component

Reporter
Mozilla
Impact
high
References

Bug 2053649
#CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component

Reporter
Mozilla
Impact
high
References

Bug 2059150
#CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component

Reporter
Mozilla
Impact
high
References

Bug 2059151
#CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component

Reporter
Yaqoub Aldurayhim
Impact
high
References

Bug 2067976
#CVE-2026-109710: Use-after-free in the Graphics: Text component

Reporter
Mozilla
Impact
high
References

Bug 2068338
#CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component

Reporter
Mozilla
Impact
high
References

Bug 2068344
#CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component

Reporter
Mozilla
Impact
high
References

Bug 2068420
#CVE-2026-109713: Use-after-free in the Crash Reporting component

Reporter
locust1b
Impact
high
References

Bug 2068421
#CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2073267
#CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2073269
#CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component

Reporter
Mozilla
Impact
high
References

Bug 2073647
#CVE-2026-109718: Use-after-free in the XML component

Reporter
Mozilla
Impact
high
References

Bug 2073692
#CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component

Reporter
Shu Takahashi of Velcore Consulting Inc.
Impact
high
References

Bug 2073969
#CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2074160
#CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2074161
#CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2074164
#CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2074171
#CVE-2026-109724: Use-after-free in the DOM: Core & HTML component

Reporter
Mozilla
Impact
high
References

Bug 2074193
#CVE-2026-109725: Use-after-free in the DOM: Core & HTML component

Reporter
Mozilla
Impact
high
References

Bug 2074208
#CVE-2026-109726: Use-after-free in the SVG component

Reporter
Mozilla
Impact
high
References

Bug 2074212
#CVE-2026-109727: Use-after-free in the Audio/Video component

Reporter
Mozilla
Impact
high
References

Bug 2074213
#CVE-2026-109728: Use-after-free in the DOM: Animation component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2074625
#CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component

Reporter
Tomer Fichman
Impact
high
References

Bug 2074632
#CVE-2026-109730: Integer overflow in the Graphics component

Reporter
Robert Longson
Impact
high
References

Bug 2074896
#CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2075436
#CVE-2026-109732: Use-after-free in the DOM: Streams component

Reporter
Mozilla
Impact
high
References

Bug 2075998
#CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component

Reporter
Amy Burnett of OpenAI
Impact
high
References

Bug 2076269
#CVE-2026-109734: Mitigation bypass in the DOM: Security component

Reporter
Mirko Brodesser
Impact
moderate
References

Bug 1926318
#CVE-2026-109736: Frame poisoning in the Layout component

Reporter
Mozilla
Impact
moderate
References

Bug 2029784
#CVE-2026-109737: Mitigation bypass in the Enterprise Policies component

Reporter
Souma Ohsawa
Impact
moderate
References

Bug 2044525
#CVE-2026-109738: Use-after-free in the Audio/Video: Playback component

Reporter
Mozilla
Impact
moderate
References

Bug 2047722
#CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Reporter
Mozilla
Impact
moderate
References

Bug 2057113
#CVE-2026-109741: Use-after-free in the Storage: Bucket File System component

Reporter
Mozilla
Impact
moderate
References

Bug 2058651
#CVE-2026-109742: Information disclosure in the PDF Viewer component

Reporter
Mozilla
Impact
moderate
References

Bug 2058800
#CVE-2026-109743: Privilege escalation in the Panning and Zooming component

Reporter
Mozilla
Impact
moderate
References

Bug 2059195
#CVE-2026-109744: Other issue in the DOM: File component

Reporter
Mozilla
Impact
moderate
References

Bug 2059211
#CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component

Reporter
Mozilla
Impact
moderate
References

Bug 2061784
#CVE-2026-109782: Mitigation bypass in the File Handling component

Reporter
Abdulrahman Alzahrani
Impact
moderate
References

Bug 2067465
#CVE-2026-109751: Information disclosure in the Networking component

Reporter
Mozilla
Impact
moderate
References

Bug 2068372
#CVE-2026-109752: Use-after-free in the DOM: Workers component

Reporter
Mozilla
Impact
moderate
References

Bug 2068407
#CVE-2026-109753: Incorrect boundary conditions in the Layout component

Reporter
Mozilla
Impact
moderate
References

Bug 2068441
#CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component

Reporter
Mozilla
Impact
moderate
References

Bug 2068443
#CVE-2026-109756: Privilege escalation in the DOM: Navigation component

Reporter
Mozilla
Impact
moderate
References

Bug 2069258
#CVE-2026-109757: Sandbox escape due to race condition in the Networking component

Reporter
Yaqoub Aldurayhim
Impact
moderate
References

Bug 2069910
#CVE-2026-109759: Site isolation issue in the Networking component

Reporter
Myungyong Lee
Impact
moderate
References

Bug 2070252
#CVE-2026-109760: Mitigation bypass in the Networking: HTTP component

Reporter
Myungyong Lee
Impact
moderate
References

Bug 2070633
#CVE-2026-109762: Incorrect boundary conditions in the SVG component

Reporter
Mozilla
Impact
moderate
References

Bug 2072438
#CVE-2026-109763: Mitigation bypass in the File Handling component

Reporter
Riku Bamba
Impact
moderate
References

Bug 2072501
#CVE-2026-109764: Mitigation bypass in the Enterprise Policies component

Reporter
HyeonSeung Kim
Impact
moderate
References

Bug 2073382
#CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component

Reporter
Shu Takahashi of Velcore Consulting Inc.
Impact
moderate
References

Bug 2073396
#CVE-2026-109766: Mitigation bypass in the Enterprise Policies component

Reporter
Souma Ohsawa
Impact
moderate
References

Bug 2074406
#CVE-2026-109767: Information disclosure in the Networking component

Reporter
Mozilla
Impact
moderate
References

Bug 2074963
#CVE-2026-109783: Mitigation bypass in the File Handling component

Reporter
Mozilla
Impact
moderate
References

Bug 2075533
#CVE-2026-109770: Spoofing issue in the DOM: Web Serial component

Reporter
Mozilla
Impact
low
References

Bug 2059230
#CVE-2026-109775: Denial-of-service in the WebRTC component

Reporter
Shu Takahashi of Velcore Consulting Inc.
Impact
low
References

Bug 2068255
#CVE-2026-109776: Race condition in the XPCOM component

Reporter
Mozilla
Impact
low
References

Bug 2069395
#CVE-2026-109777: Information disclosure in the Storage: IndexedDB component

Reporter
Shu Takahashi of Velcore Consulting Inc.
Impact
low
References

Bug 2069638
#CVE-2026-109778: Privilege escalation in the WebExtensions component

Reporter
Mozilla
Impact
low
References

Bug 2070547
#CVE-2026-109781: Denial-of-service in the Printing: Output component

Reporter
Nguyen Thanh Nguyen
Impact
low
References

Bug 2072852
@
text
@$NetBSD: distinfo,v 1.4 2026/09/29 13:03:44 gutteridge Exp $

BLAKE2s (firefox-153.5.0esr.source.tar.xz) = 9cd6556c9accb9f9cdbdfbcae1a934e7de4b5ae9394a93a5ceb8d545f8124a0a
SHA512 (firefox-153.5.0esr.source.tar.xz) = 9acb8d1a4b241767e39da36d6f520d4edaae0f237f311496beeed10e2383cf399b0af11cac6984d425b620af0ecba3e67808637ec74733c7d23186d0dd2bd5d4
Size (firefox-153.5.0esr.source.tar.xz) = 801858032 bytes
BLAKE2s (nodejs-output-153.0.tgz) = 55a9ae8d1b743f57148a3b763bce2bc9afe2bd902f5b5d6a07a3e597c569aca1
SHA512 (nodejs-output-153.0.tgz) = 2513c4c47c9bb619a1702a36b8ec316a6c48d6b641656abf86ff33c5ae9e146721947b26a3a1af8295a005daeffb0c77e5f82f36ca9a717decc6850b3518c275
Size (nodejs-output-153.0.tgz) = 247910 bytes
SHA1 (patch-browser_app_profile_firefox.js) = f111e03a9c70b6ad5ba64bf95d45302b9256687a
SHA1 (patch-build_gn__processor.py) = 078f773104bf4c1b30584564aefe365db6ba6daf
SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
SHA1 (patch-config_gcc-stl-wrapper.template.h) = f2d19349e2e93c0f82db0a76124103e6ae6bba9d
SHA1 (patch-config_makefiles_rust.mk) = 25eb2d4c99ace2b215917490f28ceb90ab90145f
SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49
SHA1 (patch-dom_canvas_WebGLMethodDispatcher.h) = 78f6e44116a939615523339fb73ac93f40777749
SHA1 (patch-dom_media_mediacapabilities_MediaCapabilitiesValidation.cpp) = 2f471067387bb63d530ba1299f0542d3b3a785b6
SHA1 (patch-dom_media_webrtc_libwebrtc__overrides_moz.build) = a2ff7cf1e6aaf888ee78581d89c7e658f46c3fcd
SHA1 (patch-dom_webtransport_api_WebTransportDatagramDuplexStream.cpp) = b93b4c6367bd2fb3d1868ab7d97ca56c100be414
SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993
SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = b2adce9e65662283a11b6dcff40e95523e940045
SHA1 (patch-gfx_ots_src_name.cc) = 35ae5b2689eae8fab1ea351612f3628c14001f9e
SHA1 (patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp) = 3eb9855e20fe8b7784a9620fce4ffb96f4736f82
SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3
SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = ee40764b100728d8fb73b8c6f1251456e368bd53
SHA1 (patch-ipc_glue_ForkServer.cpp) = 91d3141795ba19c27c6e46fc205f97bfef1fdd6c
SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 00bd08bb68b9aad3c4478c8849b53341da4a0d29
SHA1 (patch-js-src-jit-arm64-vixl-MozCpu-vixl.cpp) = d90fca47d79551fd74214d47f8184670b901b792
SHA1 (patch-js_public_Utility.h) = bb5464a0398b91693ab362e6b9b06d48429b9e7d
SHA1 (patch-js_src_editline_editline.c) = ba44a33cc19d19aeaa777548ac74fc7144ea7d70
SHA1 (patch-js_src_intgemm_moz.build) = 460d64d188e145dae2a917cef116e0483d86552e
SHA1 (patch-js_src_jit_FlushICache.cpp) = f5d1fcb391c36a29fb71a78dbf731ee6a1cb17b6
SHA1 (patch-js_src_jit_arm64_vixl_Registers-vixl.h) = 0e64f5b7ebc92ba12949181f78f716d88adcb67e
SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba
SHA1 (patch-js_src_vm_TypedArrayObject-inl.h) = e7913c8d4b2b05b67040baa64dae62d6ba40390e
SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = d0bdc30d23447bd56185eb9dc5c86de591f9cc02
SHA1 (patch-media_libpng_pngpriv.h) = ee952a703ee08e8ff2269c7178e55e00b12faa29
SHA1 (patch-memory_build_mozjemalloc__types.h) = af87ef935653cb845a6b702af2f5645a6ada27db
SHA1 (patch-mozglue_misc_Now.cpp) = 760724be1bdc4ca6e19edaf2c8df6dd84192d93f
SHA1 (patch-netwerk_protocol_http_nsHttpHandler.cpp) = 67493b4635041d21ff9fbfda80b3197fed542a26
SHA1 (patch-nsprpub_pr_src_pthreads_ptsynch.c) = 753fd4d62088c870aefe7c4b739286259848446e
SHA1 (patch-python_mozbuild_mozbuild_backend_recursivemake.py) = 5be4183d9075f5a3a3c6b3e0338473af185fb50e
SHA1 (patch-python_sites_build.txt) = f03f059bbe79bfdf7f1db5475279edb3c9d6ebed
SHA1 (patch-python_sites_mach.txt) = f1568a4a7e65a6811e97f8c9c76148c9cdb7e02a
SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.cc) = b1067a6804470f7e365f347683b7d505853fd799
SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_vdso__support.cc) = f9c44d0d6fd952296f23c24f56053958b30d8e5c
SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
SHA1 (patch-third__party_libwebrtc_modules_audio__device_audio__device__impl.cc) = 127284a1a9b6e12581d325f5a5aadae443b0e57b
SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = da85f4a3e22c4a346f1f8e87ecdc62bf8c0bddd7
SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 89f8f8eb5dcb877e0c70120f742050f1b32676fb
SHA1 (patch-third__party_libwebrtc_modules_portal_portal__gn_moz.build) = 87fe72745f7a01596b8be70d618491387e1aaa36
SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = a4b04c390f93ffbc79e049f532251bfa00376eff
SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 9f1e606242b2ab2625dabc06f25b593f4721d387
SHA1 (patch-third__party_libwebrtc_modules_video__capture_video__capture__internal__impl__gn_moz.build) = 2a214979769cbf57b1d534610e524138aac7fc2b
SHA1 (patch-third__party_libwebrtc_modules_video__capture_video__capture__options.cc) = e15f7e365ef6d57cd262f920f49c4d73f3a13305
SHA1 (patch-third__party_libwebrtc_rtc__base_memory__usage.cc) = a831145ba15b30d30c6e6e216b574d416253ed4a
SHA1 (patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc) = 6909c4da9e7b3785252e5bce9be0ff47ebb87e01
SHA1 (patch-third__party_libwebrtc_rtc__base_platform__thread__types.cc) = 8ae75100775037347008d168eedc151e0e993b0f
SHA1 (patch-third__party_python_dlmanager_check.py) = 69054522d8ced8cb47e65e5a8b1a87ed5ce6708e
SHA1 (patch-third__party_rust_mtu_src_bindings_netbsd.rs) = dc28ab3a4b6a5bee76ea6fd2485e34b9d6f1b195
SHA1 (patch-third__party_sqlite3_ext_moz.build) = 4d94ea324617a20b3524016dd02fb717e518ece1
SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52
SHA1 (patch-third__party_wasm2c_src_c-writer.cc) = 38eb2ee0e00722aa1380540b83648b43723719aa
SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988
SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = 5fec8a65fb5528f97fc7da863fbf950f4bc25597
SHA1 (patch-toolkit_moz.configure) = 1306e7ac3c3939886aff38a58dd3162e6517409b
SHA1 (patch-toolkit_mozapps_installer_packager.mk) = c77481a1f8fe1e237b7fe87e3e586ca886ac1d3d
SHA1 (patch-xpcom_base_nscore.h) = 1ac4d34d3c9e80bc1ac966c6c84cb320bc0fa1ec
SHA1 (patch-xpcom_reflect_xptcall_md_unix_moz.build) = 8980398051fa16c7283acb6d323419993cce1420
@


1.4
log
@firefox153: update to 153.4

Mozilla Foundation Security Advisory 2026-100
Security Vulnerabilities fixed in Firefox ESR 153.4

Announced
    September 29, 2026
Impact
    high
Products
    Firefox ESR
Fixed in

        Firefox ESR 153.4

Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component

Reporter
    Mozilla
Impact
    high

References

    Bug 2047721

#CVE-2026-100757: Use-after-free in the Widget component

Reporter
    Mohamed Mbarek
Impact
    high

References

    Bug 2049352

#CVE-2026-100758: Sandbox escape in the DOM: Navigation component

Reporter
    Mozilla
Impact
    high

References

    Bug 2049792

#CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component

Reporter
    Mozilla
Impact
    high

References

    Bug 2054736

#CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058017

#CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component

Reporter
    Yaqoub Aldurayhim
Impact
    high

References

    Bug 2059404

#CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component

Reporter
    Mozilla
Impact
    high

References

    Bug 2061399

#CVE-2026-100766: Information disclosure in the Networking: JAR component

Reporter
    Mozilla
Impact
    high

References

    Bug 2061526

#CVE-2026-100767: Use-after-free in the Networking: Cache component

Reporter
    Mozilla
Impact
    high

References

    Bug 2063680

#CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component

Reporter
    Tomer Fichman
Impact
    high

References

    Bug 2067190

#CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068322

#CVE-2026-100771: Undefined behavior in the DOM: Streams component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068336

#CVE-2026-100772: Use-after-free in the DOM: Core & HTML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068340

#CVE-2026-100773: Use-after-free in the Storage: IndexedDB component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068346

#CVE-2026-100774: Use-after-free in the DOM: Core & HTML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068351

#CVE-2026-100775: Sandbox escape in the Graphics component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068367

#CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068374

#CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068375

#CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068406

#CVE-2026-100779: Use-after-free in the XSLT component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068417

#CVE-2026-100780: Use-after-free in the DOM: Core & HTML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068422

#CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068434

#CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068456

#CVE-2026-100783: Uninitialized memory in the Audio/Video component

Reporter
    5up3rh3i
Impact
    high

References

    Bug 2069804

#CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component

Reporter
    5up3rh3i
Impact
    high

References

    Bug 2070264

#CVE-2026-100785: Use-after-free in the DOM: Core & HTML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2071064

#CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component

Reporter
    Mozilla
Impact
    high

References

    Bug 2071067

#CVE-2026-100787: Sandbox escape in the XUL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2071068

#CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component

Reporter
    Mozilla
Impact
    high

References

    Bug 2072413

#CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component

Reporter
    Mozilla
Impact
    high

References

    Bug 2072429

#CVE-2026-100790: Use-after-free in the XSLT component

Reporter
    Mozilla
Impact
    high

References

    Bug 2072432

#CVE-2026-100791: Use-after-free in the DOM: Core & HTML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2072433

#CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component

Reporter
    Mozilla
Impact
    high

References

    Bug 2072467

#CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component

Reporter
    Amy Burnett of OpenAI
Impact
    high

References

    Bug 2073266

#CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2028871

#CVE-2026-96869: Information disclosure in the Networking component

Reporter
    Carlo Di Dato
Impact
    moderate

References

    Bug 2041248

#CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2050542

#CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2055694

#CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2056767

#CVE-2026-100801: Privilege escalation in the DLL Services component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2057112

#CVE-2026-100803: Same-origin policy bypass in the WebExtensions component

Reporter
    Yaqoub Aldurayhim
Impact
    moderate

References

    Bug 2057988

#CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2060408

#CVE-2026-100807: Privilege escalation in the DOM: Service Workers component

Reporter
    Khanh Nguyen
Impact
    moderate

References

    Bug 2062740

#CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component

Reporter
    WinD39
Impact
    moderate

References

    Bug 2063488

#CVE-2026-100809: Same-origin policy bypass in the DevTools component

Reporter
    Finn Westendorf
Impact
    moderate

References

    Bug 2063658

#CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component

Reporter
    Yaqoub Aldurayhim
Impact
    moderate

References

    Bug 2067973

#CVE-2026-100812: Denial-of-service in the Graphics component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2068335

#CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2068385

#CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2068404

#CVE-2026-100816: Site isolation issue in the DOM: Networking component

Reporter
    Rintaro Kawasugi
Impact
    moderate

References

    Bug 2068648

#CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2069399

#CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2071069

#CVE-2026-100820: Privilege escalation in the Address Bar component

Reporter
    Tran Quac
Impact
    moderate

References

    Bug 2071645

#CVE-2026-100821: Site isolation issue in the Panning and Zooming component

Reporter
    Nguyen Thanh Nguyen
Impact
    moderate

References

    Bug 2071784

#CVE-2026-100822: Spoofing issue in the Networking: HTTP component

Reporter
    Tomoya Nakanishi
Impact
    low

References

    Bug 2051115

#CVE-2026-100824: Privilege escalation in the Places component

Reporter
    Mozilla
Impact
    low

References

    Bug 2054767

#CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component

Reporter
    x0e
Impact
    low

References

    Bug 2057465

#CVE-2026-100826: Denial-of-service in the Storage: StorageManager component

Reporter
    Mozilla
Impact
    low

References

    Bug 2059222

#CVE-2026-100828: Mitigation bypass in the Bookmarks & History component

Reporter
    Rintaro Kawasugi
Impact
    low

References

    Bug 2066019

#CVE-2026-100829: Mitigation bypass in the DOM: Security component

Reporter
    Rintaro Kawasugi
Impact
    low

References

    Bug 2066321

#CVE-2026-100830: Mitigation bypass in the DOM: Navigation component

Reporter
    Finn Westendorf
Impact
    low

References

    Bug 2066770

#CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component

Reporter
    Mozilla
Impact
    low

References

    Bug 2067172
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.3 2026/09/15 13:20:42 gutteridge Exp $
d3 3
a5 3
BLAKE2s (firefox-153.4.0esr.source.tar.xz) = 5cff0c4b06a94dcd63b0ef203d1e47b29c6399a0fe15e20dfc882eb0bb60bca8
SHA512 (firefox-153.4.0esr.source.tar.xz) = 79e1f2a0f8c4d156c80b8f4c580aa944600d49cc811f961a3eca251113241638991fda94ccb74a44df9030f643586c41686861333288f13793e621a262a1b131
Size (firefox-153.4.0esr.source.tar.xz) = 801731048 bytes
@


1.3
log
@firefox153: update to 153.3

Mozilla Foundation Security Advisory 2026-93
Security Vulnerabilities fixed in Firefox ESR 153.3

Announced
    September 15, 2026
Impact
    high
Products
    Firefox ESR
Fixed in

        Firefox ESR 153.3

Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component

Reporter
    devdharan9424@@gmail.com
Impact
    high

References

    Bug 2056051

#CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2057121

#CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058064

#CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058065

#CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058066

#CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058067

#CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058068

#CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058069

#CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    high

References

    Bug 2058078

#CVE-2026-92015: Privilege escalation in the WebExtensions component

Reporter
    Quy Pham
Impact
    high

References

    Bug 2060235

#CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component

Reporter
    Mozilla
Impact
    high

References

    Bug 2061245

#CVE-2026-92016: Use-after-free in the Disability Access APIs component

Reporter
    Mozilla
Impact
    high

References

    Bug 2061327

#CVE-2026-92017: Privilege escalation in the DOM: Service Workers component

Reporter
    Mozilla
Impact
    high

References

    Bug 2061777

#CVE-2026-92018: Sandbox escape in the DOM: Core & HTML component

Reporter
    Quy Pham
Impact
    high

References

    Bug 2064287

#CVE-2026-92019: Mitigation bypass in the Remote Settings Client component

Reporter
    Shu Takahashi
Impact
    high

References

    Bug 2065636

#CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Reporter
    Rintaro Kawasugi
Impact
    high

References

    Bug 2066329

#CVE-2026-92022: Use-after-free in the DOM: HTML Parser component

Reporter
    Seohyeon Maeng
Impact
    high

References

    Bug 2068059

#CVE-2026-92023: Use-after-free in the XML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068342

#CVE-2026-92024: Use-after-free in the SVG component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068354

#CVE-2026-92025: Use-after-free in the DOM: Navigation component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068361

#CVE-2026-92026: Use-after-free in the Networking component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068378

#CVE-2026-92027: Use-after-free in the DOM: Streams component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068433

#CVE-2026-92028: Use-after-free in the DOM: Core & HTML component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068440

#CVE-2026-92029: Use-after-free in the SVG component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068445

#CVE-2026-92038: Mitigation bypass in the Remote Settings Client component

Reporter
    Mozilla
Impact
    high

References

    Bug 2068952

#CVE-2026-92039: Mitigation bypass in the DOM: Notifications component

Reporter
    tiebuchen
Impact
    moderate

References

    Bug 2001265

#CVE-2026-92041: Mitigation bypass in the DOM: Networking component

Reporter
    Atsushi Sada
Impact
    moderate

References

    Bug 2029482

#CVE-2026-92042: Race condition in the DOM: Content Processes component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2049342

#CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2050150

#CVE-2026-92044: Information disclosure in the Networking: HTTP component

Reporter
    Gee-netics
Impact
    moderate

References

    Bug 2051466

#CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2054622

#CVE-2026-92030: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

Reporter
    anas cherni
Impact
    moderate

References

    Bug 2058417

#CVE-2026-92046: Use-after-free in the Graphics component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2058618

#CVE-2026-92047: Privilege escalation in the Crash Reporting component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2059021

#CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2061235

#CVE-2026-92049: Use-after-free in the Widget: Win32 component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2061295

#CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2061499

#CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2061503

#CVE-2026-92054: Privilege escalation in the Memory component

Reporter
    Amy Burnett of OpenAI
Impact
    moderate

References

    Bug 2062551

#CVE-2026-92055: Privilege escalation in the DevTools component

Reporter
    Finn Westendorf
Impact
    moderate

References

    Bug 2063652

#CVE-2026-92056: Use-after-free in the Graphics: Text component

Reporter
    r00tdaddy
Impact
    moderate

References

    Bug 2065346

#CVE-2026-92057: Mitigation bypass in the Enterprise Policies component

Reporter
    Shu Takahashi
Impact
    moderate

References

    Bug 2065646

#CVE-2026-92031: Information disclosure in the Graphics: ImageLib component

Reporter
    Qi Qin
Impact
    moderate

References

    Bug 2067971

#CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2068437

#CVE-2026-92058: Use-after-free in the Graphics component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2068438

#CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component

Reporter
    Mozilla
Impact
    moderate

References

    Bug 2068442

#CVE-2026-92060: Use-after-free in the Internationalization component

Reporter
    Mozilla
Impact
    low

References

    Bug 2027336

#CVE-2026-92062: Privilege escalation in the Session Restore component

Reporter
    Mozilla
Impact
    low

References

    Bug 2054670

#CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Reporter
    Mozilla
Impact
    low

References

    Bug 2057990

#CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Reporter
    Mozilla
Impact
    low

References

    Bug 2058018

#CVE-2026-92067: Use-after-free in the Widget: Gtk component

Reporter
    Mozilla
Impact
    low

References

    Bug 2058664

#CVE-2026-92068: Site isolation issue in the Reader Mode component

Reporter
    Mozilla
Impact
    low

References

    Bug 2058790

#CVE-2026-92069: Spoofing issue in the DOM: Navigation component

Reporter
    Mozilla
Impact
    low

References

    Bug 2059196

#CVE-2026-92070: Information disclosure in the Networking component

Reporter
    Mohamed Mbarek
Impact
    low

References

    Bug 2060220

#CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Reporter
    Mozilla
Impact
    low

References

    Bug 2061231

#CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component

Reporter
    Mozilla
Impact
    low

References

    Bug 2061257

#CVE-2026-92073: Privilege escalation in the Enterprise Policies component

Reporter
    Tyler Maclachlan
Impact
    low

References

    Bug 2062527

#CVE-2026-92074: Mitigation bypass in the Popup Blocker component

Reporter
    Finn Westendorf
Impact
    low

References

    Bug 2063539

#CVE-2026-92075: Mitigation bypass in the Networking component

Reporter
    Takeshi Kaneko
Impact
    low

References

    Bug 2063814

#CVE-2026-92076: Incorrect boundary conditions in the Networking component

Reporter
    Mozilla
Impact
    low

References

    Bug 2064026

#CVE-2026-92077: Denial-of-service in the SVG component

Reporter
    sak
Impact
    low

References

    Bug 2064601

#CVE-2026-92078: Denial-of-service in the Security component

Reporter
    Dominik Bay
Impact
    low

References

    Bug 2066736

#CVE-2026-92079: Mitigation bypass in the Widget: Win32 component

Reporter
    barbarossa404
Impact
    low

References

    Bug 2067531
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.2 2026/09/01 16:09:24 gutteridge Exp $
d3 3
a5 3
BLAKE2s (firefox-153.3.0esr.source.tar.xz) = 8e18dde67b90030e4ea0d8404e2a446e8da0bb71320d23671eb017c03ab0c6e3
SHA512 (firefox-153.3.0esr.source.tar.xz) = 56a5e092f0aba91febf01d227e8068520513f632d09c5ffbad4cbb2de307d9066425f353a1b7fcf5648733e02a9b17cfc9aaed5e39d7562a6b143b1c9827a668
Size (firefox-153.3.0esr.source.tar.xz) = 804997520 bytes
d65 1
a65 1
SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b
@


1.3.2.1
log
@Pullup ticket #7260 - requested by gutteridge
www/firefox153: security fix
www/firefox153-l10n: dependent update

Revisions pulled up:
- www/firefox153-l10n/Makefile                                  1.4
- www/firefox153-l10n/distinfo                                  1.4
- www/firefox153/Makefile                                       1.7
- www/firefox153/distinfo                                       1.4
- www/firefox153/patches/patch-toolkit_components_terminator_nsTerminator.cpp 1.2

---
   Module Name:    pkgsrc
   Committed By:   gutteridge
   Date:           Tue Sep 29 13:03:44 UTC 2026

   Modified Files:
           pkgsrc/www/firefox153: Makefile distinfo
           pkgsrc/www/firefox153/patches:
               patch-toolkit_components_terminator_nsTerminator.cpp

   Log Message:
   firefox153: update to 153.4

   Mozilla Foundation Security Advisory 2026-100
   Security Vulnerabilities fixed in Firefox ESR 153.4

   Announced
       September 29, 2026
   Impact
       high
   Products
       Firefox ESR
   Fixed in

           Firefox ESR 153.4

   Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
   #CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2047721

   #CVE-2026-100757: Use-after-free in the Widget component

   Reporter
       Mohamed Mbarek
   Impact
       high

   References

       Bug 2049352

   #CVE-2026-100758: Sandbox escape in the DOM: Navigation component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2049792

   #CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2054736

   #CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2058017

   #CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component

   Reporter
       Yaqoub Aldurayhim
   Impact
       high

   References

       Bug 2059404

   #CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2061399

   #CVE-2026-100766: Information disclosure in the Networking: JAR component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2061526

   #CVE-2026-100767: Use-after-free in the Networking: Cache component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2063680

   #CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component

   Reporter
       Tomer Fichman
   Impact
       high

   References

       Bug 2067190

   #CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068322

   #CVE-2026-100771: Undefined behavior in the DOM: Streams component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068336

   #CVE-2026-100772: Use-after-free in the DOM: Core & HTML component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068340

   #CVE-2026-100773: Use-after-free in the Storage: IndexedDB component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068346

   #CVE-2026-100774: Use-after-free in the DOM: Core & HTML component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068351

   #CVE-2026-100775: Sandbox escape in the Graphics component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068367

   #CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068374

   #CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068375

   #CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068406

   #CVE-2026-100779: Use-after-free in the XSLT component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068417

   #CVE-2026-100780: Use-after-free in the DOM: Core & HTML component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068422

   #CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068434

   #CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2068456

   #CVE-2026-100783: Uninitialized memory in the Audio/Video component

   Reporter
       5up3rh3i
   Impact
       high

   References

       Bug 2069804

   #CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component

   Reporter
       5up3rh3i
   Impact
       high

   References

       Bug 2070264

   #CVE-2026-100785: Use-after-free in the DOM: Core & HTML component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2071064

   #CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2071067

   #CVE-2026-100787: Sandbox escape in the XUL component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2071068

   #CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2072413

   #CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2072429

   #CVE-2026-100790: Use-after-free in the XSLT component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2072432

   #CVE-2026-100791: Use-after-free in the DOM: Core & HTML component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2072433

   #CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component

   Reporter
       Mozilla
   Impact
       high

   References

       Bug 2072467

   #CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component

   Reporter
       Amy Burnett of OpenAI
   Impact
       high

   References

       Bug 2073266

   #CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2028871

   #CVE-2026-96869: Information disclosure in the Networking component

   Reporter
       Carlo Di Dato
   Impact
       moderate

   References

       Bug 2041248

   #CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2050542

   #CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2055694

   #CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2056767

   #CVE-2026-100801: Privilege escalation in the DLL Services component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2057112

   #CVE-2026-100803: Same-origin policy bypass in the WebExtensions component

   Reporter
       Yaqoub Aldurayhim
   Impact
       moderate

   References

       Bug 2057988

   #CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2060408

   #CVE-2026-100807: Privilege escalation in the DOM: Service Workers component

   Reporter
       Khanh Nguyen
   Impact
       moderate

   References

       Bug 2062740

   #CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component

   Reporter
       WinD39
   Impact
       moderate

   References

       Bug 2063488

   #CVE-2026-100809: Same-origin policy bypass in the DevTools component

   Reporter
       Finn Westendorf
   Impact
       moderate

   References

       Bug 2063658

   #CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component

   Reporter
       Yaqoub Aldurayhim
   Impact
       moderate

   References

       Bug 2067973

   #CVE-2026-100812: Denial-of-service in the Graphics component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2068335

   #CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2068385

   #CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2068404

   #CVE-2026-100816: Site isolation issue in the DOM: Networking component

   Reporter
       Rintaro Kawasugi
   Impact
       moderate

   References

       Bug 2068648

   #CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2069399

   #CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component

   Reporter
       Mozilla
   Impact
       moderate

   References

       Bug 2071069

   #CVE-2026-100820: Privilege escalation in the Address Bar component

   Reporter
       Tran Quac
   Impact
       moderate

   References

       Bug 2071645

   #CVE-2026-100821: Site isolation issue in the Panning and Zooming component

   Reporter
       Nguyen Thanh Nguyen
   Impact
       moderate

   References

       Bug 2071784

   #CVE-2026-100822: Spoofing issue in the Networking: HTTP component

   Reporter
       Tomoya Nakanishi
   Impact
       low

   References

       Bug 2051115

   #CVE-2026-100824: Privilege escalation in the Places component

   Reporter
       Mozilla
   Impact
       low

   References

       Bug 2054767

   #CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component

   Reporter
       x0e
   Impact
       low

   References

       Bug 2057465

   #CVE-2026-100826: Denial-of-service in the Storage: StorageManager component

   Reporter
       Mozilla
   Impact
       low

   References

       Bug 2059222

   #CVE-2026-100828: Mitigation bypass in the Bookmarks & History component

   Reporter
       Rintaro Kawasugi
   Impact
       low

   References

       Bug 2066019

   #CVE-2026-100829: Mitigation bypass in the DOM: Security component

   Reporter
       Rintaro Kawasugi
   Impact
       low

   References

       Bug 2066321

   #CVE-2026-100830: Mitigation bypass in the DOM: Navigation component

   Reporter
       Finn Westendorf
   Impact
       low

   References

       Bug 2066770

   #CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component

   Reporter
       Mozilla
   Impact
       low

   References

       Bug 2067172

---
   Module Name:    pkgsrc
   Committed By:   gutteridge
   Date:           Tue Sep 29 13:05:45 UTC 2026

   Modified Files:
           pkgsrc/www/firefox153-l10n: Makefile distinfo

   Log Message:
   firefox153-l10n: update to 153.4
@
text
@d1 1
a1 1
$NetBSD$
d3 3
a5 3
BLAKE2s (firefox-153.4.0esr.source.tar.xz) = 5cff0c4b06a94dcd63b0ef203d1e47b29c6399a0fe15e20dfc882eb0bb60bca8
SHA512 (firefox-153.4.0esr.source.tar.xz) = 79e1f2a0f8c4d156c80b8f4c580aa944600d49cc811f961a3eca251113241638991fda94ccb74a44df9030f643586c41686861333288f13793e621a262a1b131
Size (firefox-153.4.0esr.source.tar.xz) = 801731048 bytes
d65 1
a65 1
SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = 5fec8a65fb5528f97fc7da863fbf950f4bc25597
@


1.2
log
@firefox153: update to 153.2

Mozilla Foundation Security Advisory 2026-85
Security Vulnerabilities fixed in Firefox ESR 153.2

Announced
    September 1, 2026
Impact
    high
Products
    Firefox ESR
Fixed in

        Firefox ESR 153.2

#CVE-2026-75874: Sandbox escape in the Remote Settings Client component

Reporter
    crixer
Impact
    high

References

    Bug 2039972

#CVE-2026-84118: Use-after-free in the JavaScript: GC component

Reporter
    x0e
Impact
    high

References

    Bug 2057457

#CVE-2026-84119: Sandbox escape due to use-after-free in the DOM: Navigation component

Reporter
    Yaqoub Aldurayhim
Impact
    high

References

    Bug 2057817

#CVE-2026-84120: Use-after-free in the Audio/Video component

Reporter
    Ukyo Akai
Impact
    high

References

    Bug 2058911

#CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security component

Reporter
    Yaqoub Aldurayhim
Impact
    high

References

    Bug 2059018

#CVE-2026-84122: Use-after-free in the Audio/Video component

Reporter
    Hyeonjun Ahn
Impact
    high

References

    Bug 2059965

#CVE-2026-84123: Privilege escalation due to use-after-free in the Graphics: WebGPU component

Reporter
    Yaqoub Aldurayhim
Impact
    high

References

    Bug 2060047

#CVE-2026-84124: Use-after-free in the DOM: Core & HTML component

Reporter
    Hyeonjun Ahn
Impact
    high

References

    Bug 2061110

#CVE-2026-84125: Use-after-free in the DOM: Core & HTML component

Reporter
    Yaqoub Aldurayhim
Impact
    high

References

    Bug 2063871

#CVE-2026-74952: Privilege escalation in the Application Update component

Reporter
    Tomoya Nakanishi
Impact
    moderate

References

    Bug 2021757

#CVE-2026-84129: Site isolation issue in the DOM: Navigation component

Reporter
    Yaqoub Aldurayhim
Impact
    moderate

References

    Bug 2055028

#CVE-2026-84130: Information disclosure in the Graphics: WebGPU component

Reporter
    5up3rh3i
Impact
    moderate

References

    Bug 2057834

#CVE-2026-84131: Privilege escalation due to invalid pointer in the Graphics component

Reporter
    navapon
Impact
    moderate

References

    Bug 2060008

#CVE-2026-84132: Information disclosure in the Networking: HTTP component

Reporter
    Shu Takahashi
Impact
    moderate

References

    Bug 2063020

#CVE-2026-84133: Site isolation issue in the DOM: Push Subscriptions component

Reporter
    pakhunov.anton.n
Impact
    low

References

    Bug 2032388

#CVE-2026-84134: Other issue in the Profile Backup component

Reporter
    5up3rh3i
Impact
    low

References

    Bug 2044882

#CVE-2026-84136: Other issue in the DOM: Navigation component

Reporter
    Apentota
Impact
    low

References

    Bug 2048699

#CVE-2026-84137: Spoofing issue in the DOM: Core & HTML component

Reporter
    Riski Muhammad Ivan
Impact
    low

References

    Bug 2051146

#CVE-2026-84139: Clickjacking issue in the DOM: Events component

Reporter
    Long Nguyen
Impact
    low

References

    Bug 2060153

#CVE-2026-84140: Site isolation issue in the DOM: Navigation component

Reporter
    Mohamed Mbarek
Impact
    low

References

    Bug 2063780

#CVE-2026-84141: Integer overflow in the Graphics: ImageLib component

Reporter
    nguyentuanhung1149
Impact
    low

References

    Bug 2063994

#CVE-2026-84143: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15

Reporter
    Jan de Mooij, Tom Ritter and the Mozilla Fuzzing Team
Impact
    high

Description

Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
References

    High Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15
    Moderate Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15
    Low Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15

#CVE-2026-84144: Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2

Reporter
    Leo Tenenbaum, Tom Ritter and the Mozilla Fuzzing Team
Impact
    high

Description

Internally found bugs present in Firefox 154 and Firefox ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
References

    High Severity internally found bugs fixed in Firefox 155 and Firefox ESR 153.2
    Moderate Severity internally found bugs fixed in Firefox 155 and Firefox ESR 153.2
    Low Severity internally found bugs fixed in Firefox 155 and Firefox ESR 153.2

#CVE-2026-84145: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

Reporter
    Leo Tenenbaum, Tom Ritter and the Mozilla Fuzzing Team
Impact
    high

Description

Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
References

    High Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40
    Moderate Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40
    Low Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.1 2026/08/27 01:23:15 gutteridge Exp $
d3 3
a5 3
BLAKE2s (firefox-153.2.0esr.source.tar.xz) = 3457f7e0f25e3a1f39403d5b0bed9ed1b933ce3f4b098b3d8ef55417a58c42df
SHA512 (firefox-153.2.0esr.source.tar.xz) = a8cd4784bb52ca89c0fe37404e894c044f6145c62e9fcdeffe621fde81ae4602078be575e26c90d83e5e47f26675d3ee897cd6a20027d09d4ba7d0e785ce39bc
Size (firefox-153.2.0esr.source.tar.xz) = 807705672 bytes
@


1.1
log
@firefox153: import Firefox 153.1 as www/firefox153

Mozilla Firefox is a free, open-source and cross-platform web browser
for Windows, Linux, MacOS X and many other operating systems.

It is fast and easy to use, and offers many advantages over other web
browsers, such as tabbed browsing and the ability to block pop-up
windows.

Firefox also offers excellent bookmark and history management, and it
can be extended by developers using industry standards such as XML,
CSS, JavaScript, C++, etc. Many extensions are available.

Note: Due to upstream's trademark policies, this package identifies as
"Nightly" rather than "Firefox" by default.

This package provides Firefox 153 Extended Support Release.
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.590 2026/08/14 12:26:11 ryoon Exp $
d3 3
a5 3
BLAKE2s (firefox-153.1.0esr.source.tar.xz) = ca9970e33602b727db1a1453ecb9541197d467f28afbe7b449f0498bfd722635
SHA512 (firefox-153.1.0esr.source.tar.xz) = 0e5be18878a1bb8575d4ff03b499a092663fcd1779a05b59b82a8b663a3d7047cf3d6f971faeb3d1262f83b23022a703a2033e8ea38bcbd9c85f44bdd35d86c1
Size (firefox-153.1.0esr.source.tar.xz) = 801285696 bytes
@