rpm/mozjs102
SHA256
1
0
Fork 0
forked from pool/mozjs102
Code Pull Requests Activity
mozjs102/firefox-102.7.0esr.source.tar.xz

4 lines
134 B
Plaintext
Raw Normal View History

Accepting request 1058990 from GNOME:Next - Update to version 102.7.0: + Various stability, functionality, and security fixes. + CVE-2022-46871: libusrsctp library out of date. + CVE-2023-23598: Arbitrary file read from GTK drag and drop on Linux. + CVE-2023-23599: Malicious command could be hidden in devtools output on Windows. + CVE-2023-23601: URL being dragged from cross-origin iframe into same tab triggers navigation. + CVE-2023-23602: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers. + CVE-2022-46877: Fullscreen notification bypass. + CVE-2023-23603: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive. + CVE-2023-23605: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7. OBS-URL: https://build.opensuse.org/request/show/1058990 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/mozjs102?expand=0&rev=13
2023-01-19 08:53:02 +00:00
version https://git-lfs.github.com/spec/v1
oid sha256:a7a4603417fcb42ec37f2cff9034280ce2ec772c0a5fc500fada4286ba3114aa
size 479538092
Copy Permalink