Manfred Hollstein
78e8532cd1
* Fixed: Various security fixes. - Mozilla Firefox ESR 140.1.0 https://www.mozilla.org/security/advisories/mfsa2025-59 MFSA 2025-59 (boo#1246664) * CVE-2025-8027 (bmo#1968423) JavaScript engine only wrote partial return value to stack * CVE-2025-8028 (bmo#1971581) Large branch table could lead to truncated instruction * CVE-2025-8029 (bmo#1928021) javascript: URLs executed on object and embed tags * CVE-2025-8036 (bmo#1960834) DNS rebinding circumvents CORS * CVE-2025-8037 (bmo#1964767) Nameless cookies shadow secure cookies * CVE-2025-8030 (bmo#1968414) Potential user-assisted code execution in “Copy as cURL” command * CVE-2025-8031 (bmo#1971719) Incorrect URL stripping in CSP reports * CVE-2025-8032 (bmo#1974407) XSLT documents could bypass CSP * CVE-2025-8038 (bmo#1808979) CSP frame-src was not correctly enforced for paths * CVE-2025-8039 (bmo#1970997) Search terms persisted in URL bar * CVE-2025-8033 (bmo#1973990) Incorrect JavaScript state machine for generators * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422) Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998) Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961) Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/firefox-esr?expand=0&rev=63
27 lines
777 B
Diff
27 lines
777 B
Diff
# HG changeset patch
|
|
# User msirringhaus@suse.de
|
|
# Date 1558442998 -7200
|
|
# Tue May 21 14:49:58 2019 +0200
|
|
# Node ID 386083b58d8558141901d796ec6919a4aba7ad3a
|
|
# Parent 76b747f7d113bddbb8593184d81e1bfe5fd51af0
|
|
bsc#991344 - Rpi3: Firefox crashes after a few seconds of usage
|
|
bmo#1302554 - ARM/AARCH64: Firefox crashes on NULL nsIChannel** result pointer in nsIOService::NewChannelFromURIWithProxyFlagsInternal()
|
|
|
|
diff --git a/netwerk/base/nsIOService.cpp b/netwerk/base/nsIOService.cpp
|
|
--- a/netwerk/base/nsIOService.cpp
|
|
+++ b/netwerk/base/nsIOService.cpp
|
|
@@ -1159,7 +1159,13 @@ nsresult nsIOService::NewChannelFromURIW
|
|
}
|
|
}
|
|
|
|
+#if defined(__aarch64__)
|
|
+ if (result) {
|
|
+ channel.forget(result);
|
|
+ }
|
|
+#else
|
|
channel.forget(result);
|
|
+#endif
|
|
return NS_OK;
|
|
}
|
|
|