head 1.7; access; symbols pkgsrc-2026Q3:1.3.0.2 pkgsrc-2026Q3-base:1.3; locks; strict; comment @# @; 1.7 date 2026.10.27.16.54.24; author gutteridge; state Exp; branches; next 1.6; commitid Atvn7UpEvOYSw81H; 1.6 date 2026.10.21.04.11.26; author gutteridge; state Exp; branches; next 1.5; commitid rI7xMdETfZv1vi0H; 1.5 date 2026.10.13.13.11.04; author gutteridge; state Exp; branches; next 1.4; commitid ri3pC4oIopNsKjZG; 1.4 date 2026.09.29.13.03.44; author gutteridge; state Exp; branches; next 1.3; commitid 47SoyBnBwkMk9wXG; 1.3 date 2026.09.15.13.20.42; author gutteridge; state Exp; branches 1.3.2.1; next 1.2; commitid icMiMWt0FLguHIVG; 1.2 date 2026.09.01.16.09.24; author gutteridge; state Exp; branches; next 1.1; commitid 0KprwsdUo0Pu4WTG; 1.1 date 2026.08.27.01.23.15; author gutteridge; state Exp; branches; next ; commitid jHXIs10wmSYxkdTG; 1.3.2.1 date 2026.10.03.16.52.44; author bsiegert; state Exp; branches; next 1.3.2.2; commitid JckcdmVTfyEBi3YG; 1.3.2.2 date 2026.10.18.14.46.05; author maya; state Exp; branches; next 1.3.2.3; commitid YMspnp0g4Xig7YZG; 1.3.2.3 date 2026.10.21.17.47.45; author maya; state Exp; branches; next 1.3.2.4; commitid IAudyN5ol9OB1n0H; 1.3.2.4 date 2026.11.03.06.55.16; author bsiegert; state Exp; branches; next ; commitid hymQ3nHdGNhRZY1H; desc @@ 1.7 log @firefox153: update to 153.6 Mozilla Foundation Security Advisory 2026-120 Security Vulnerabilities fixed in Firefox ESR 153.6 Announced October 27, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.6 Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. #CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component Reporter satyamasd Impact high References Bug 2046558 #CVE-2026-117861: Sandbox escape in the DOM: Navigation component Reporter Mozilla Impact high References Bug 2053240 #CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component Reporter Mozilla Impact high References Bug 2054644 #CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component Reporter Mozilla Impact high References Bug 2056783 #CVE-2026-117864: Sandbox escape in the Form Manager component Reporter Mozilla Impact high References Bug 2058614 #CVE-2026-117865: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact high References Bug 2058653 #CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2059011 #CVE-2026-117867: Use-after-free in the Layout component Reporter Mozilla Impact high References Bug 2059110 #CVE-2026-117868: Sandbox escape in the DOM: Networking component Reporter Yaqoub Aldurayhim Impact high References Bug 2059961 #CVE-2026-117869: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068362 #CVE-2026-117870: Use-after-free in the JavaScript Engine component Reporter Mozilla Impact high References Bug 2068395 #CVE-2026-117871: Invalid pointer in the Graphics component Reporter Mozilla Impact high References Bug 2068400 #CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component Reporter Mozilla Impact high References Bug 2068410 #CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component Reporter Mozilla Impact high References Bug 2071733 #CVE-2026-117874: Use-after-free in the Internationalization component Reporter Mozilla Impact high References Bug 2073685 #CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow component Reporter Mozilla Impact high References Bug 2073686 #CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component Reporter Amy Burnett of OpenAI Impact high References Bug 2074167 #CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component Reporter Mozilla Impact high References Bug 2074209 #CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component Reporter Amy Burnett of OpenAI Impact high References Bug 2075431 #CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component Reporter Amy Burnett of OpenAI Impact high References Bug 2075432 #CVE-2026-117880: Use-after-free in the XML component Reporter Mozilla Impact high References Bug 2075996 #CVE-2026-117881: Use-after-free in the DOM: Core & HTML component Reporter Amy Burnett of OpenAI Impact high References Bug 2076267 #CVE-2026-117882: Use-after-free in the Layout component Reporter Amy Burnett of OpenAI Impact high References Bug 2076268 #CVE-2026-117883: Use-after-free in the DOM: HTML Parser component Reporter Amy Burnett of OpenAI Impact high References Bug 2076271 #CVE-2026-117884: Use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2076410 #CVE-2026-117885: Use-after-free in the Layout: Grid component Reporter Mozilla Impact high References Bug 2076983 #CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component Reporter tsui Impact high References Bug 2077162 #CVE-2026-117887: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2077385 #CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component Reporter Minseong Kim Impact high References Bug 2078649 #CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component Reporter Mozilla Impact high References Bug 2078727 #CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT component Reporter Mozilla Impact high References Bug 2078749 #CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component Reporter Mozilla Impact high References Bug 2078837 #CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component Reporter Mozilla Impact high References Bug 2078902 #CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component Reporter Mozilla Impact high References Bug 2078946 #CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling component Reporter Mozilla Impact high References Bug 2078983 #CVE-2026-117895: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2078994 #CVE-2026-117896: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079032 #CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component Reporter Mozilla Impact high References Bug 2079036 #CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component Reporter Mozilla Impact high References Bug 2079040 #CVE-2026-117899: Use-after-free in the Networking: HTTP component Reporter Mozilla Impact high References Bug 2079046 #CVE-2026-117900: Use-after-free in the DOM: Editor component Reporter Mozilla Impact high References Bug 2079053 #CVE-2026-117901: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079054 #CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component Reporter Mozilla Impact high References Bug 2079057 #CVE-2026-117903: Use-after-free in the Audio/Video component Reporter Mozilla Impact high References Bug 2079058 #CVE-2026-117904: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact high References Bug 2079059 #CVE-2026-117905: Use-after-free in the Audio/Video: Playback component Reporter Mozilla Impact high References Bug 2079061 #CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component Reporter Mozilla Impact high References Bug 2079062 #CVE-2026-117907: Use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2079068 #CVE-2026-117908: Use-after-free in the Graphics: ImageLib component Reporter Mozilla Impact high References Bug 2079069 #CVE-2026-117909: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact high References Bug 2079155 #CVE-2026-117910: Invalid pointer in the JavaScript Engine component Reporter Mozilla Impact high References Bug 2079156 #CVE-2026-117911: Use-after-free in the Audio/Video: Playback component Reporter Mozilla Impact high References Bug 2079171 #CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computation component Reporter Takashi Suzuki Impact high References Bug 2079209 #CVE-2026-117913: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2079252 #CVE-2026-117914: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2079253 #CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and Inline component Reporter Mozilla Impact high References Bug 2079255 #CVE-2026-117916: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2079257 #CVE-2026-117917: Invalid pointer in the Graphics: WebRender component Reporter Nguyen Tuan Hung Impact high References Bug 2079301 #CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2079676 #CVE-2026-117919: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079677 #CVE-2026-117920: Use-after-free in the DOM: HTML Parser component Reporter Mozilla Impact high References Bug 2079681 #CVE-2026-117921: Use-after-free in the CSS Parsing and Computation component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2079687 #CVE-2026-117922: Use-after-free in the Networking: WebSockets component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2079692 #CVE-2026-117923: Use-after-free in the Audio/Video component Reporter Mozilla Impact high References Bug 2079781 #CVE-2026-117924: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2079783 #CVE-2026-117925: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079786 #CVE-2026-117926: Incorrect boundary conditions in the SVG component Reporter Mozilla Impact high References Bug 2079924 #CVE-2026-117927: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2080102 #CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and Computation component Reporter Minseong Kim Impact high References Bug 2081280 #CVE-2026-117929: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2081549 #CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081953 #CVE-2026-117931: Use-after-free in the DOM: Events component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081969 #CVE-2026-117932: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081975 #CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081976 #CVE-2026-117934: Use-after-free in the Layout component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081977 #CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082000 #CVE-2026-117936: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082001 #CVE-2026-117937: Invalid pointer in the JavaScript Engine component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082005 #CVE-2026-117938: Use-after-free in the Layout component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082009 #CVE-2026-117939: Use-after-free in the XML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082030 #CVE-2026-117940: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082031 #CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082044 #CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: JIT component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082047 #CVE-2026-117943: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082061 #CVE-2026-117944: Use-after-free in the Layout component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082064 #CVE-2026-117945: Incorrect boundary conditions in the XML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082076 #CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082092 #CVE-2026-117947: Use-after-free in the XML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082100 #CVE-2026-117948: Use-after-free in the SVG component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082112 #CVE-2026-117949: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082118 #CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082127 #CVE-2026-117951: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082130 #CVE-2026-117952: Uninitialized memory in the Networking component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082139 #CVE-2026-117953: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082199 #CVE-2026-117954: Use-after-free in the Layout: Positioned component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082450 #CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly component Reporter Mozilla Impact moderate References Bug 2043044 #CVE-2026-100801: Privilege escalation in the DLL Services component Reporter Mozilla Impact moderate References Bug 2057112 #CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component Reporter Mozilla Impact moderate References Bug 2058659 #CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component Reporter Mozilla Impact moderate References Bug 2061508 #CVE-2026-117958: Site isolation issue in the Networking: HTTP component Reporter Mozilla Impact moderate References Bug 2061509 #CVE-2026-117959: Site isolation issue in the DOM: Service Workers component Reporter Muhammad Ali Impact moderate References Bug 2067292 #CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component Reporter Mohamed Mbarek Impact moderate References Bug 2067647 #CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and Fonts component Reporter Mozilla Impact moderate References Bug 2068458 #CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component Reporter Mozilla Impact moderate References Bug 2072411 #CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers component Reporter Mozilla Impact moderate References Bug 2073660 #CVE-2026-117964: Use-after-free in the Panning and Zooming component Reporter Mozilla Impact moderate References Bug 2074199 #CVE-2026-117965: Same-origin policy bypass in the Address Bar component Reporter Takashi Suzuki Impact moderate References Bug 2075126 #CVE-2026-117966: Site isolation issue in the Networking: HTTP component Reporter Mozilla Impact moderate References Bug 2075726 #CVE-2026-117967: Mitigation bypass in the DOM: Security component Reporter Nguyen Tuan Hung Impact moderate References Bug 2075930 #CVE-2026-117968: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact moderate References Bug 2075985 #CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component Reporter Mozilla Impact moderate References Bug 2075990 #CVE-2026-117970: Race condition in the Disability Access APIs component Reporter Nguyen Thanh Nguyen Impact moderate References Bug 2076227 #CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview component Reporter Mozilla Impact moderate References Bug 2076399 #CVE-2026-117972: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2076415 #CVE-2026-117973: Use-after-free in the Networking: DNS component Reporter Mozilla Impact moderate References Bug 2076704 #CVE-2026-117974: Use-after-free in the XML component Reporter Mozilla Impact moderate References Bug 2076705 #CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics: WebRender component Reporter Mozilla Impact moderate References Bug 2076714 #CVE-2026-117976: Site isolation issue in the DOM: Navigation component Reporter Shu Takahashi of Velcore Consulting Inc. Impact moderate References Bug 2076816 #CVE-2026-117977: Other issue in the Console component Reporter quanhx Impact moderate References Bug 2077418 #CVE-2026-117978: Incorrect boundary conditions in the Graphics component Reporter Mozilla Impact moderate References Bug 2077730 #CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender component Reporter Mozilla Impact moderate References Bug 2077739 #CVE-2026-117980: Use-after-free in the Graphics component Reporter Massimo Palozzi Impact moderate References Bug 2078145 #CVE-2026-117981: Privilege escalation in the Toolkit component Reporter Mozilla Impact moderate References Bug 2078167 #CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component Reporter Mozilla Impact moderate References Bug 2078855 #CVE-2026-117983: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2078904 #CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling and Overflow component Reporter Mozilla Impact moderate References Bug 2078981 #CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2078982 #CVE-2026-117986: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2078989 #CVE-2026-117987: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2079065 #CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact moderate References Bug 2079072 #CVE-2026-117989: Use-after-free in the Graphics component Reporter Nguyen Tuan Hung Impact moderate References Bug 2079311 #CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component Reporter Mozilla Impact moderate References Bug 2079501 #CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fonts component Reporter Mozilla Impact moderate References Bug 2079686 #CVE-2026-117992: Information disclosure in the CSS Parsing and Computation component Reporter Takashi Suzuki Impact moderate References Bug 2079709 #CVE-2026-117993: Integer overflow in the Graphics: Text component Reporter 5up3rh3i Impact moderate References Bug 2080581 #CVE-2026-117994: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact moderate References Bug 2080787 #CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handling component Reporter haruka yamazaki Impact moderate References Bug 2081184 #CVE-2026-117996: Incorrect boundary conditions in the WebRTC component Reporter Mozilla Impact moderate References Bug 2081535 #CVE-2026-117997: Sandbox escape due to use-after-free in the Widget component Reporter Mozilla Impact moderate References Bug 2081560 #CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions component Reporter Ibuki Sato Impact low References Bug 2042021 #CVE-2026-117999: Race condition in the IPC component Reporter Mozilla Impact low References Bug 2071379 #CVE-2026-118000: Information disclosure in the Networking: HTTP component Reporter Mozilla Impact low References Bug 2072436 #CVE-2026-118002: Information disclosure due to race condition in the Networking component Reporter Abdulrahman Alzahrani Impact low References Bug 2073584 #CVE-2026-118003: Information disclosure in the Networking: DNS component Reporter eldjiikgull Impact low References Bug 2076744 #CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations component Reporter Mozilla Impact low References Bug 2077756 @ text @$NetBSD: distinfo,v 1.6 2026/10/21 04:11:26 gutteridge Exp $ BLAKE2s (firefox-153.6.0esr.source.tar.xz) = c7471b214ec72f4b33e7a90e69a43600c4314618595c3afde132d869627f7082 SHA512 (firefox-153.6.0esr.source.tar.xz) = 3e9f1f8e7c14d1994f4896702a50b46c1a3c7c7b696a080112f5ab3fdf0fcdd41ade4e81f9abafe2d3824cf1dfb16b5c09e5eaec12a05a733906f1483395565d Size (firefox-153.6.0esr.source.tar.xz) = 801903636 bytes BLAKE2s (nodejs-output-153.0.tgz) = 55a9ae8d1b743f57148a3b763bce2bc9afe2bd902f5b5d6a07a3e597c569aca1 SHA512 (nodejs-output-153.0.tgz) = 2513c4c47c9bb619a1702a36b8ec316a6c48d6b641656abf86ff33c5ae9e146721947b26a3a1af8295a005daeffb0c77e5f82f36ca9a717decc6850b3518c275 Size (nodejs-output-153.0.tgz) = 247910 bytes SHA1 (patch-browser_app_profile_firefox.js) = f111e03a9c70b6ad5ba64bf95d45302b9256687a SHA1 (patch-build_gn__processor.py) = 078f773104bf4c1b30584564aefe365db6ba6daf SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678 SHA1 (patch-config_gcc-stl-wrapper.template.h) = f2d19349e2e93c0f82db0a76124103e6ae6bba9d SHA1 (patch-config_makefiles_rust.mk) = 25eb2d4c99ace2b215917490f28ceb90ab90145f SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49 SHA1 (patch-dom_canvas_WebGLMethodDispatcher.h) = 78f6e44116a939615523339fb73ac93f40777749 SHA1 (patch-dom_media_mediacapabilities_MediaCapabilitiesValidation.cpp) = 2f471067387bb63d530ba1299f0542d3b3a785b6 SHA1 (patch-dom_media_webrtc_libwebrtc__overrides_moz.build) = a2ff7cf1e6aaf888ee78581d89c7e658f46c3fcd SHA1 (patch-dom_webtransport_api_WebTransportDatagramDuplexStream.cpp) = b93b4c6367bd2fb3d1868ab7d97ca56c100be414 SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993 SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = b2adce9e65662283a11b6dcff40e95523e940045 SHA1 (patch-gfx_ots_src_name.cc) = 35ae5b2689eae8fab1ea351612f3628c14001f9e SHA1 (patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp) = 3eb9855e20fe8b7784a9620fce4ffb96f4736f82 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3 SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = ee40764b100728d8fb73b8c6f1251456e368bd53 SHA1 (patch-ipc_glue_ForkServer.cpp) = 91d3141795ba19c27c6e46fc205f97bfef1fdd6c SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 00bd08bb68b9aad3c4478c8849b53341da4a0d29 SHA1 (patch-js-src-jit-arm64-vixl-MozCpu-vixl.cpp) = d90fca47d79551fd74214d47f8184670b901b792 SHA1 (patch-js_public_Utility.h) = bb5464a0398b91693ab362e6b9b06d48429b9e7d SHA1 (patch-js_src_editline_editline.c) = ba44a33cc19d19aeaa777548ac74fc7144ea7d70 SHA1 (patch-js_src_intgemm_moz.build) = 460d64d188e145dae2a917cef116e0483d86552e SHA1 (patch-js_src_jit_FlushICache.cpp) = f5d1fcb391c36a29fb71a78dbf731ee6a1cb17b6 SHA1 (patch-js_src_jit_arm64_vixl_Registers-vixl.h) = 0e64f5b7ebc92ba12949181f78f716d88adcb67e SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba SHA1 (patch-js_src_vm_TypedArrayObject-inl.h) = e7913c8d4b2b05b67040baa64dae62d6ba40390e SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = d0bdc30d23447bd56185eb9dc5c86de591f9cc02 SHA1 (patch-media_libpng_pngpriv.h) = ee952a703ee08e8ff2269c7178e55e00b12faa29 SHA1 (patch-memory_build_mozjemalloc__types.h) = af87ef935653cb845a6b702af2f5645a6ada27db SHA1 (patch-mozglue_misc_Now.cpp) = 760724be1bdc4ca6e19edaf2c8df6dd84192d93f SHA1 (patch-netwerk_protocol_http_nsHttpHandler.cpp) = 67493b4635041d21ff9fbfda80b3197fed542a26 SHA1 (patch-nsprpub_pr_src_pthreads_ptsynch.c) = 753fd4d62088c870aefe7c4b739286259848446e SHA1 (patch-python_mozbuild_mozbuild_backend_recursivemake.py) = 5be4183d9075f5a3a3c6b3e0338473af185fb50e SHA1 (patch-python_sites_build.txt) = f03f059bbe79bfdf7f1db5475279edb3c9d6ebed SHA1 (patch-python_sites_mach.txt) = f1568a4a7e65a6811e97f8c9c76148c9cdb7e02a SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.cc) = b1067a6804470f7e365f347683b7d505853fd799 SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_vdso__support.cc) = f9c44d0d6fd952296f23c24f56053958b30d8e5c SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4 SHA1 (patch-third__party_libwebrtc_modules_audio__device_audio__device__impl.cc) = 127284a1a9b6e12581d325f5a5aadae443b0e57b SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = da85f4a3e22c4a346f1f8e87ecdc62bf8c0bddd7 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 89f8f8eb5dcb877e0c70120f742050f1b32676fb SHA1 (patch-third__party_libwebrtc_modules_portal_portal__gn_moz.build) = 87fe72745f7a01596b8be70d618491387e1aaa36 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = a4b04c390f93ffbc79e049f532251bfa00376eff SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 9f1e606242b2ab2625dabc06f25b593f4721d387 SHA1 (patch-third__party_libwebrtc_modules_video__capture_video__capture__internal__impl__gn_moz.build) = 2a214979769cbf57b1d534610e524138aac7fc2b SHA1 (patch-third__party_libwebrtc_modules_video__capture_video__capture__options.cc) = e15f7e365ef6d57cd262f920f49c4d73f3a13305 SHA1 (patch-third__party_libwebrtc_rtc__base_memory__usage.cc) = a831145ba15b30d30c6e6e216b574d416253ed4a SHA1 (patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc) = 6909c4da9e7b3785252e5bce9be0ff47ebb87e01 SHA1 (patch-third__party_libwebrtc_rtc__base_platform__thread__types.cc) = 8ae75100775037347008d168eedc151e0e993b0f SHA1 (patch-third__party_python_dlmanager_check.py) = 69054522d8ced8cb47e65e5a8b1a87ed5ce6708e SHA1 (patch-third__party_rust_mtu_src_bindings_netbsd.rs) = dc28ab3a4b6a5bee76ea6fd2485e34b9d6f1b195 SHA1 (patch-third__party_sqlite3_ext_moz.build) = 4d94ea324617a20b3524016dd02fb717e518ece1 SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52 SHA1 (patch-third__party_wasm2c_src_c-writer.cc) = 38eb2ee0e00722aa1380540b83648b43723719aa SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = 5fec8a65fb5528f97fc7da863fbf950f4bc25597 SHA1 (patch-toolkit_moz.configure) = 1306e7ac3c3939886aff38a58dd3162e6517409b SHA1 (patch-toolkit_mozapps_installer_packager.mk) = c77481a1f8fe1e237b7fe87e3e586ca886ac1d3d SHA1 (patch-xpcom_base_nscore.h) = 1ac4d34d3c9e80bc1ac966c6c84cb320bc0fa1ec SHA1 (patch-xpcom_reflect_xptcall_md_unix_moz.build) = 8980398051fa16c7283acb6d323419993cce1420 @ 1.6 log @firefox153: update to 153.5.1 Mozilla Foundation Security Advisory 2026-112 Security Vulnerabilities fixed in Firefox ESR 153.5.1 Announced October 20, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.5.1 Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. #CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component Reporter Wayne Impact high Description Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is disabled by policy or otherwise unavailable in the user's network environment. References Bug 2083382 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.5 2026/10/13 13:11:04 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-153.5.1esr.source.tar.xz) = 6ef265168be332e58b72d84490948da441406ec2a27f28296b9154c9fcaf45f4 SHA512 (firefox-153.5.1esr.source.tar.xz) = 9dccf8c5383653ddcf807b500889a91f9b9d56a512dab88a2683755ae6cb0c4b5d0788faa9541e5709a2b783002ee9f434020a43c8a43653038a2c3decd9f2c1 Size (firefox-153.5.1esr.source.tar.xz) = 801725652 bytes @ 1.5 log @firefox153: update to 153.5 Mozilla Foundation Security Advisory 2026-108 Security Vulnerabilities fixed in Firefox ESR 153.5 Announced October 13, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.5 Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. #CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact high References Bug 2037979 #CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2040905 #CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high References Bug 2053649 #CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2059150 #CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component Reporter Mozilla Impact high References Bug 2059151 #CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component Reporter Yaqoub Aldurayhim Impact high References Bug 2067976 #CVE-2026-109710: Use-after-free in the Graphics: Text component Reporter Mozilla Impact high References Bug 2068338 #CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2068344 #CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component Reporter Mozilla Impact high References Bug 2068420 #CVE-2026-109713: Use-after-free in the Crash Reporting component Reporter locust1b Impact high References Bug 2068421 #CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component Reporter Amy Burnett of OpenAI Impact high References Bug 2073267 #CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component Reporter Amy Burnett of OpenAI Impact high References Bug 2073269 #CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component Reporter Mozilla Impact high References Bug 2073647 #CVE-2026-109718: Use-after-free in the XML component Reporter Mozilla Impact high References Bug 2073692 #CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component Reporter Shu Takahashi of Velcore Consulting Inc. Impact high References Bug 2073969 #CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component Reporter Amy Burnett of OpenAI Impact high References Bug 2074160 #CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component Reporter Amy Burnett of OpenAI Impact high References Bug 2074161 #CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component Reporter Amy Burnett of OpenAI Impact high References Bug 2074164 #CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component Reporter Amy Burnett of OpenAI Impact high References Bug 2074171 #CVE-2026-109724: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2074193 #CVE-2026-109725: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2074208 #CVE-2026-109726: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2074212 #CVE-2026-109727: Use-after-free in the Audio/Video component Reporter Mozilla Impact high References Bug 2074213 #CVE-2026-109728: Use-after-free in the DOM: Animation component Reporter Amy Burnett of OpenAI Impact high References Bug 2074625 #CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component Reporter Tomer Fichman Impact high References Bug 2074632 #CVE-2026-109730: Integer overflow in the Graphics component Reporter Robert Longson Impact high References Bug 2074896 #CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component Reporter Amy Burnett of OpenAI Impact high References Bug 2075436 #CVE-2026-109732: Use-after-free in the DOM: Streams component Reporter Mozilla Impact high References Bug 2075998 #CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component Reporter Amy Burnett of OpenAI Impact high References Bug 2076269 #CVE-2026-109734: Mitigation bypass in the DOM: Security component Reporter Mirko Brodesser Impact moderate References Bug 1926318 #CVE-2026-109736: Frame poisoning in the Layout component Reporter Mozilla Impact moderate References Bug 2029784 #CVE-2026-109737: Mitigation bypass in the Enterprise Policies component Reporter Souma Ohsawa Impact moderate References Bug 2044525 #CVE-2026-109738: Use-after-free in the Audio/Video: Playback component Reporter Mozilla Impact moderate References Bug 2047722 #CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Reporter Mozilla Impact moderate References Bug 2057113 #CVE-2026-109741: Use-after-free in the Storage: Bucket File System component Reporter Mozilla Impact moderate References Bug 2058651 #CVE-2026-109742: Information disclosure in the PDF Viewer component Reporter Mozilla Impact moderate References Bug 2058800 #CVE-2026-109743: Privilege escalation in the Panning and Zooming component Reporter Mozilla Impact moderate References Bug 2059195 #CVE-2026-109744: Other issue in the DOM: File component Reporter Mozilla Impact moderate References Bug 2059211 #CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component Reporter Mozilla Impact moderate References Bug 2061784 #CVE-2026-109782: Mitigation bypass in the File Handling component Reporter Abdulrahman Alzahrani Impact moderate References Bug 2067465 #CVE-2026-109751: Information disclosure in the Networking component Reporter Mozilla Impact moderate References Bug 2068372 #CVE-2026-109752: Use-after-free in the DOM: Workers component Reporter Mozilla Impact moderate References Bug 2068407 #CVE-2026-109753: Incorrect boundary conditions in the Layout component Reporter Mozilla Impact moderate References Bug 2068441 #CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component Reporter Mozilla Impact moderate References Bug 2068443 #CVE-2026-109756: Privilege escalation in the DOM: Navigation component Reporter Mozilla Impact moderate References Bug 2069258 #CVE-2026-109757: Sandbox escape due to race condition in the Networking component Reporter Yaqoub Aldurayhim Impact moderate References Bug 2069910 #CVE-2026-109759: Site isolation issue in the Networking component Reporter Myungyong Lee Impact moderate References Bug 2070252 #CVE-2026-109760: Mitigation bypass in the Networking: HTTP component Reporter Myungyong Lee Impact moderate References Bug 2070633 #CVE-2026-109762: Incorrect boundary conditions in the SVG component Reporter Mozilla Impact moderate References Bug 2072438 #CVE-2026-109763: Mitigation bypass in the File Handling component Reporter Riku Bamba Impact moderate References Bug 2072501 #CVE-2026-109764: Mitigation bypass in the Enterprise Policies component Reporter HyeonSeung Kim Impact moderate References Bug 2073382 #CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component Reporter Shu Takahashi of Velcore Consulting Inc. Impact moderate References Bug 2073396 #CVE-2026-109766: Mitigation bypass in the Enterprise Policies component Reporter Souma Ohsawa Impact moderate References Bug 2074406 #CVE-2026-109767: Information disclosure in the Networking component Reporter Mozilla Impact moderate References Bug 2074963 #CVE-2026-109783: Mitigation bypass in the File Handling component Reporter Mozilla Impact moderate References Bug 2075533 #CVE-2026-109770: Spoofing issue in the DOM: Web Serial component Reporter Mozilla Impact low References Bug 2059230 #CVE-2026-109775: Denial-of-service in the WebRTC component Reporter Shu Takahashi of Velcore Consulting Inc. Impact low References Bug 2068255 #CVE-2026-109776: Race condition in the XPCOM component Reporter Mozilla Impact low References Bug 2069395 #CVE-2026-109777: Information disclosure in the Storage: IndexedDB component Reporter Shu Takahashi of Velcore Consulting Inc. Impact low References Bug 2069638 #CVE-2026-109778: Privilege escalation in the WebExtensions component Reporter Mozilla Impact low References Bug 2070547 #CVE-2026-109781: Denial-of-service in the Printing: Output component Reporter Nguyen Thanh Nguyen Impact low References Bug 2072852 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.4 2026/09/29 13:03:44 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-153.5.0esr.source.tar.xz) = 9cd6556c9accb9f9cdbdfbcae1a934e7de4b5ae9394a93a5ceb8d545f8124a0a SHA512 (firefox-153.5.0esr.source.tar.xz) = 9acb8d1a4b241767e39da36d6f520d4edaae0f237f311496beeed10e2383cf399b0af11cac6984d425b620af0ecba3e67808637ec74733c7d23186d0dd2bd5d4 Size (firefox-153.5.0esr.source.tar.xz) = 801858032 bytes @ 1.4 log @firefox153: update to 153.4 Mozilla Foundation Security Advisory 2026-100 Security Vulnerabilities fixed in Firefox ESR 153.4 Announced September 29, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.4 Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. #CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter Mozilla Impact high References Bug 2047721 #CVE-2026-100757: Use-after-free in the Widget component Reporter Mohamed Mbarek Impact high References Bug 2049352 #CVE-2026-100758: Sandbox escape in the DOM: Navigation component Reporter Mozilla Impact high References Bug 2049792 #CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component Reporter Mozilla Impact high References Bug 2054736 #CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component Reporter Mozilla Impact high References Bug 2058017 #CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component Reporter Yaqoub Aldurayhim Impact high References Bug 2059404 #CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component Reporter Mozilla Impact high References Bug 2061399 #CVE-2026-100766: Information disclosure in the Networking: JAR component Reporter Mozilla Impact high References Bug 2061526 #CVE-2026-100767: Use-after-free in the Networking: Cache component Reporter Mozilla Impact high References Bug 2063680 #CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component Reporter Tomer Fichman Impact high References Bug 2067190 #CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component Reporter Mozilla Impact high References Bug 2068322 #CVE-2026-100771: Undefined behavior in the DOM: Streams component Reporter Mozilla Impact high References Bug 2068336 #CVE-2026-100772: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068340 #CVE-2026-100773: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high References Bug 2068346 #CVE-2026-100774: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068351 #CVE-2026-100775: Sandbox escape in the Graphics component Reporter Mozilla Impact high References Bug 2068367 #CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component Reporter Mozilla Impact high References Bug 2068374 #CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2068375 #CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068406 #CVE-2026-100779: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2068417 #CVE-2026-100780: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068422 #CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component Reporter Mozilla Impact high References Bug 2068434 #CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component Reporter Mozilla Impact high References Bug 2068456 #CVE-2026-100783: Uninitialized memory in the Audio/Video component Reporter 5up3rh3i Impact high References Bug 2069804 #CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component Reporter 5up3rh3i Impact high References Bug 2070264 #CVE-2026-100785: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2071064 #CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component Reporter Mozilla Impact high References Bug 2071067 #CVE-2026-100787: Sandbox escape in the XUL component Reporter Mozilla Impact high References Bug 2071068 #CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component Reporter Mozilla Impact high References Bug 2072413 #CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2072429 #CVE-2026-100790: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2072432 #CVE-2026-100791: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2072433 #CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2072467 #CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component Reporter Amy Burnett of OpenAI Impact high References Bug 2073266 #CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component Reporter Mozilla Impact moderate References Bug 2028871 #CVE-2026-96869: Information disclosure in the Networking component Reporter Carlo Di Dato Impact moderate References Bug 2041248 #CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component Reporter Mozilla Impact moderate References Bug 2050542 #CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component Reporter Mozilla Impact moderate References Bug 2055694 #CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component Reporter Mozilla Impact moderate References Bug 2056767 #CVE-2026-100801: Privilege escalation in the DLL Services component Reporter Mozilla Impact moderate References Bug 2057112 #CVE-2026-100803: Same-origin policy bypass in the WebExtensions component Reporter Yaqoub Aldurayhim Impact moderate References Bug 2057988 #CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component Reporter Mozilla Impact moderate References Bug 2060408 #CVE-2026-100807: Privilege escalation in the DOM: Service Workers component Reporter Khanh Nguyen Impact moderate References Bug 2062740 #CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component Reporter WinD39 Impact moderate References Bug 2063488 #CVE-2026-100809: Same-origin policy bypass in the DevTools component Reporter Finn Westendorf Impact moderate References Bug 2063658 #CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component Reporter Yaqoub Aldurayhim Impact moderate References Bug 2067973 #CVE-2026-100812: Denial-of-service in the Graphics component Reporter Mozilla Impact moderate References Bug 2068335 #CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component Reporter Mozilla Impact moderate References Bug 2068385 #CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component Reporter Mozilla Impact moderate References Bug 2068404 #CVE-2026-100816: Site isolation issue in the DOM: Networking component Reporter Rintaro Kawasugi Impact moderate References Bug 2068648 #CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component Reporter Mozilla Impact moderate References Bug 2069399 #CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component Reporter Mozilla Impact moderate References Bug 2071069 #CVE-2026-100820: Privilege escalation in the Address Bar component Reporter Tran Quac Impact moderate References Bug 2071645 #CVE-2026-100821: Site isolation issue in the Panning and Zooming component Reporter Nguyen Thanh Nguyen Impact moderate References Bug 2071784 #CVE-2026-100822: Spoofing issue in the Networking: HTTP component Reporter Tomoya Nakanishi Impact low References Bug 2051115 #CVE-2026-100824: Privilege escalation in the Places component Reporter Mozilla Impact low References Bug 2054767 #CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component Reporter x0e Impact low References Bug 2057465 #CVE-2026-100826: Denial-of-service in the Storage: StorageManager component Reporter Mozilla Impact low References Bug 2059222 #CVE-2026-100828: Mitigation bypass in the Bookmarks & History component Reporter Rintaro Kawasugi Impact low References Bug 2066019 #CVE-2026-100829: Mitigation bypass in the DOM: Security component Reporter Rintaro Kawasugi Impact low References Bug 2066321 #CVE-2026-100830: Mitigation bypass in the DOM: Navigation component Reporter Finn Westendorf Impact low References Bug 2066770 #CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component Reporter Mozilla Impact low References Bug 2067172 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2026/09/15 13:20:42 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-153.4.0esr.source.tar.xz) = 5cff0c4b06a94dcd63b0ef203d1e47b29c6399a0fe15e20dfc882eb0bb60bca8 SHA512 (firefox-153.4.0esr.source.tar.xz) = 79e1f2a0f8c4d156c80b8f4c580aa944600d49cc811f961a3eca251113241638991fda94ccb74a44df9030f643586c41686861333288f13793e621a262a1b131 Size (firefox-153.4.0esr.source.tar.xz) = 801731048 bytes @ 1.3 log @firefox153: update to 153.3 Mozilla Foundation Security Advisory 2026-93 Security Vulnerabilities fixed in Firefox ESR 153.3 Announced September 15, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.3 Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. #CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component Reporter devdharan9424@@gmail.com Impact high References Bug 2056051 #CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2057121 #CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2058064 #CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2058065 #CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2058066 #CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2058067 #CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2058068 #CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2058069 #CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Mozilla Impact high References Bug 2058078 #CVE-2026-92015: Privilege escalation in the WebExtensions component Reporter Quy Pham Impact high References Bug 2060235 #CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component Reporter Mozilla Impact high References Bug 2061245 #CVE-2026-92016: Use-after-free in the Disability Access APIs component Reporter Mozilla Impact high References Bug 2061327 #CVE-2026-92017: Privilege escalation in the DOM: Service Workers component Reporter Mozilla Impact high References Bug 2061777 #CVE-2026-92018: Sandbox escape in the DOM: Core & HTML component Reporter Quy Pham Impact high References Bug 2064287 #CVE-2026-92019: Mitigation bypass in the Remote Settings Client component Reporter Shu Takahashi Impact high References Bug 2065636 #CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component Reporter Rintaro Kawasugi Impact high References Bug 2066329 #CVE-2026-92022: Use-after-free in the DOM: HTML Parser component Reporter Seohyeon Maeng Impact high References Bug 2068059 #CVE-2026-92023: Use-after-free in the XML component Reporter Mozilla Impact high References Bug 2068342 #CVE-2026-92024: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2068354 #CVE-2026-92025: Use-after-free in the DOM: Navigation component Reporter Mozilla Impact high References Bug 2068361 #CVE-2026-92026: Use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2068378 #CVE-2026-92027: Use-after-free in the DOM: Streams component Reporter Mozilla Impact high References Bug 2068433 #CVE-2026-92028: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068440 #CVE-2026-92029: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2068445 #CVE-2026-92038: Mitigation bypass in the Remote Settings Client component Reporter Mozilla Impact high References Bug 2068952 #CVE-2026-92039: Mitigation bypass in the DOM: Notifications component Reporter tiebuchen Impact moderate References Bug 2001265 #CVE-2026-92041: Mitigation bypass in the DOM: Networking component Reporter Atsushi Sada Impact moderate References Bug 2029482 #CVE-2026-92042: Race condition in the DOM: Content Processes component Reporter Mozilla Impact moderate References Bug 2049342 #CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component Reporter Mozilla Impact moderate References Bug 2050150 #CVE-2026-92044: Information disclosure in the Networking: HTTP component Reporter Gee-netics Impact moderate References Bug 2051466 #CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component Reporter Mozilla Impact moderate References Bug 2054622 #CVE-2026-92030: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component Reporter anas cherni Impact moderate References Bug 2058417 #CVE-2026-92046: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2058618 #CVE-2026-92047: Privilege escalation in the Crash Reporting component Reporter Mozilla Impact moderate References Bug 2059021 #CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Reporter Mozilla Impact moderate References Bug 2061235 #CVE-2026-92049: Use-after-free in the Widget: Win32 component Reporter Mozilla Impact moderate References Bug 2061295 #CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component Reporter Mozilla Impact moderate References Bug 2061499 #CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component Reporter Mozilla Impact moderate References Bug 2061503 #CVE-2026-92054: Privilege escalation in the Memory component Reporter Amy Burnett of OpenAI Impact moderate References Bug 2062551 #CVE-2026-92055: Privilege escalation in the DevTools component Reporter Finn Westendorf Impact moderate References Bug 2063652 #CVE-2026-92056: Use-after-free in the Graphics: Text component Reporter r00tdaddy Impact moderate References Bug 2065346 #CVE-2026-92057: Mitigation bypass in the Enterprise Policies component Reporter Shu Takahashi Impact moderate References Bug 2065646 #CVE-2026-92031: Information disclosure in the Graphics: ImageLib component Reporter Qi Qin Impact moderate References Bug 2067971 #CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component Reporter Mozilla Impact moderate References Bug 2068437 #CVE-2026-92058: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2068438 #CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component Reporter Mozilla Impact moderate References Bug 2068442 #CVE-2026-92060: Use-after-free in the Internationalization component Reporter Mozilla Impact low References Bug 2027336 #CVE-2026-92062: Privilege escalation in the Session Restore component Reporter Mozilla Impact low References Bug 2054670 #CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Reporter Mozilla Impact low References Bug 2057990 #CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Reporter Mozilla Impact low References Bug 2058018 #CVE-2026-92067: Use-after-free in the Widget: Gtk component Reporter Mozilla Impact low References Bug 2058664 #CVE-2026-92068: Site isolation issue in the Reader Mode component Reporter Mozilla Impact low References Bug 2058790 #CVE-2026-92069: Spoofing issue in the DOM: Navigation component Reporter Mozilla Impact low References Bug 2059196 #CVE-2026-92070: Information disclosure in the Networking component Reporter Mohamed Mbarek Impact low References Bug 2060220 #CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Reporter Mozilla Impact low References Bug 2061231 #CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component Reporter Mozilla Impact low References Bug 2061257 #CVE-2026-92073: Privilege escalation in the Enterprise Policies component Reporter Tyler Maclachlan Impact low References Bug 2062527 #CVE-2026-92074: Mitigation bypass in the Popup Blocker component Reporter Finn Westendorf Impact low References Bug 2063539 #CVE-2026-92075: Mitigation bypass in the Networking component Reporter Takeshi Kaneko Impact low References Bug 2063814 #CVE-2026-92076: Incorrect boundary conditions in the Networking component Reporter Mozilla Impact low References Bug 2064026 #CVE-2026-92077: Denial-of-service in the SVG component Reporter sak Impact low References Bug 2064601 #CVE-2026-92078: Denial-of-service in the Security component Reporter Dominik Bay Impact low References Bug 2066736 #CVE-2026-92079: Mitigation bypass in the Widget: Win32 component Reporter barbarossa404 Impact low References Bug 2067531 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2026/09/01 16:09:24 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-153.3.0esr.source.tar.xz) = 8e18dde67b90030e4ea0d8404e2a446e8da0bb71320d23671eb017c03ab0c6e3 SHA512 (firefox-153.3.0esr.source.tar.xz) = 56a5e092f0aba91febf01d227e8068520513f632d09c5ffbad4cbb2de307d9066425f353a1b7fcf5648733e02a9b17cfc9aaed5e39d7562a6b143b1c9827a668 Size (firefox-153.3.0esr.source.tar.xz) = 804997520 bytes d65 1 a65 1 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b @ 1.3.2.1 log @Pullup ticket #7260 - requested by gutteridge www/firefox153: security fix www/firefox153-l10n: dependent update Revisions pulled up: - www/firefox153-l10n/Makefile 1.4 - www/firefox153-l10n/distinfo 1.4 - www/firefox153/Makefile 1.7 - www/firefox153/distinfo 1.4 - www/firefox153/patches/patch-toolkit_components_terminator_nsTerminator.cpp 1.2 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Sep 29 13:03:44 UTC 2026 Modified Files: pkgsrc/www/firefox153: Makefile distinfo pkgsrc/www/firefox153/patches: patch-toolkit_components_terminator_nsTerminator.cpp Log Message: firefox153: update to 153.4 Mozilla Foundation Security Advisory 2026-100 Security Vulnerabilities fixed in Firefox ESR 153.4 Announced September 29, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.4 Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. #CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter Mozilla Impact high References Bug 2047721 #CVE-2026-100757: Use-after-free in the Widget component Reporter Mohamed Mbarek Impact high References Bug 2049352 #CVE-2026-100758: Sandbox escape in the DOM: Navigation component Reporter Mozilla Impact high References Bug 2049792 #CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component Reporter Mozilla Impact high References Bug 2054736 #CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component Reporter Mozilla Impact high References Bug 2058017 #CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component Reporter Yaqoub Aldurayhim Impact high References Bug 2059404 #CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component Reporter Mozilla Impact high References Bug 2061399 #CVE-2026-100766: Information disclosure in the Networking: JAR component Reporter Mozilla Impact high References Bug 2061526 #CVE-2026-100767: Use-after-free in the Networking: Cache component Reporter Mozilla Impact high References Bug 2063680 #CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component Reporter Tomer Fichman Impact high References Bug 2067190 #CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component Reporter Mozilla Impact high References Bug 2068322 #CVE-2026-100771: Undefined behavior in the DOM: Streams component Reporter Mozilla Impact high References Bug 2068336 #CVE-2026-100772: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068340 #CVE-2026-100773: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high References Bug 2068346 #CVE-2026-100774: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068351 #CVE-2026-100775: Sandbox escape in the Graphics component Reporter Mozilla Impact high References Bug 2068367 #CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component Reporter Mozilla Impact high References Bug 2068374 #CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2068375 #CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068406 #CVE-2026-100779: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2068417 #CVE-2026-100780: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068422 #CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component Reporter Mozilla Impact high References Bug 2068434 #CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component Reporter Mozilla Impact high References Bug 2068456 #CVE-2026-100783: Uninitialized memory in the Audio/Video component Reporter 5up3rh3i Impact high References Bug 2069804 #CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component Reporter 5up3rh3i Impact high References Bug 2070264 #CVE-2026-100785: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2071064 #CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component Reporter Mozilla Impact high References Bug 2071067 #CVE-2026-100787: Sandbox escape in the XUL component Reporter Mozilla Impact high References Bug 2071068 #CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component Reporter Mozilla Impact high References Bug 2072413 #CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2072429 #CVE-2026-100790: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2072432 #CVE-2026-100791: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2072433 #CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2072467 #CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component Reporter Amy Burnett of OpenAI Impact high References Bug 2073266 #CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component Reporter Mozilla Impact moderate References Bug 2028871 #CVE-2026-96869: Information disclosure in the Networking component Reporter Carlo Di Dato Impact moderate References Bug 2041248 #CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component Reporter Mozilla Impact moderate References Bug 2050542 #CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component Reporter Mozilla Impact moderate References Bug 2055694 #CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component Reporter Mozilla Impact moderate References Bug 2056767 #CVE-2026-100801: Privilege escalation in the DLL Services component Reporter Mozilla Impact moderate References Bug 2057112 #CVE-2026-100803: Same-origin policy bypass in the WebExtensions component Reporter Yaqoub Aldurayhim Impact moderate References Bug 2057988 #CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component Reporter Mozilla Impact moderate References Bug 2060408 #CVE-2026-100807: Privilege escalation in the DOM: Service Workers component Reporter Khanh Nguyen Impact moderate References Bug 2062740 #CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component Reporter WinD39 Impact moderate References Bug 2063488 #CVE-2026-100809: Same-origin policy bypass in the DevTools component Reporter Finn Westendorf Impact moderate References Bug 2063658 #CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component Reporter Yaqoub Aldurayhim Impact moderate References Bug 2067973 #CVE-2026-100812: Denial-of-service in the Graphics component Reporter Mozilla Impact moderate References Bug 2068335 #CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component Reporter Mozilla Impact moderate References Bug 2068385 #CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component Reporter Mozilla Impact moderate References Bug 2068404 #CVE-2026-100816: Site isolation issue in the DOM: Networking component Reporter Rintaro Kawasugi Impact moderate References Bug 2068648 #CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component Reporter Mozilla Impact moderate References Bug 2069399 #CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component Reporter Mozilla Impact moderate References Bug 2071069 #CVE-2026-100820: Privilege escalation in the Address Bar component Reporter Tran Quac Impact moderate References Bug 2071645 #CVE-2026-100821: Site isolation issue in the Panning and Zooming component Reporter Nguyen Thanh Nguyen Impact moderate References Bug 2071784 #CVE-2026-100822: Spoofing issue in the Networking: HTTP component Reporter Tomoya Nakanishi Impact low References Bug 2051115 #CVE-2026-100824: Privilege escalation in the Places component Reporter Mozilla Impact low References Bug 2054767 #CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component Reporter x0e Impact low References Bug 2057465 #CVE-2026-100826: Denial-of-service in the Storage: StorageManager component Reporter Mozilla Impact low References Bug 2059222 #CVE-2026-100828: Mitigation bypass in the Bookmarks & History component Reporter Rintaro Kawasugi Impact low References Bug 2066019 #CVE-2026-100829: Mitigation bypass in the DOM: Security component Reporter Rintaro Kawasugi Impact low References Bug 2066321 #CVE-2026-100830: Mitigation bypass in the DOM: Navigation component Reporter Finn Westendorf Impact low References Bug 2066770 #CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component Reporter Mozilla Impact low References Bug 2067172 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Sep 29 13:05:45 UTC 2026 Modified Files: pkgsrc/www/firefox153-l10n: Makefile distinfo Log Message: firefox153-l10n: update to 153.4 @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (firefox-153.4.0esr.source.tar.xz) = 5cff0c4b06a94dcd63b0ef203d1e47b29c6399a0fe15e20dfc882eb0bb60bca8 SHA512 (firefox-153.4.0esr.source.tar.xz) = 79e1f2a0f8c4d156c80b8f4c580aa944600d49cc811f961a3eca251113241638991fda94ccb74a44df9030f643586c41686861333288f13793e621a262a1b131 Size (firefox-153.4.0esr.source.tar.xz) = 801731048 bytes d65 1 a65 1 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = 5fec8a65fb5528f97fc7da863fbf950f4bc25597 @ 1.3.2.2 log @Pullup ticket #7273 - requested by gutteridge www/firefox153: Security fix www/firefox153-l10n: Security fix Revisions pulled up: - www/firefox153-l10n/Makefile 1.5 - www/firefox153-l10n/distinfo 1.5 - www/firefox153/Makefile 1.9 - www/firefox153/distinfo 1.5 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Oct 13 13:11:04 UTC 2026 Modified Files: pkgsrc/www/firefox153: Makefile distinfo Log Message: firefox153: update to 153.5 Mozilla Foundation Security Advisory 2026-108 Security Vulnerabilities fixed in Firefox ESR 153.5 Announced October 13, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.5 Note: We have changed how we publish advisories. We no longer roll all inte= rnally identified memory safety vulnerabilities into a single CVE and are n= ow issuing an advisory for every individual bug. #CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact high References Bug 2037979 #CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect bou= ndary conditions, use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2040905 #CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high References Bug 2053649 #CVE-2026-109707: Sandbox escape due to use-after-free in the Networking co= mponent Reporter Mozilla Impact high References Bug 2059150 #CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in th= e Networking component Reporter Mozilla Impact high References Bug 2059151 #CVE-2026-109709: Information disclosure, privilege escalation in the Secur= ity: Process Sandboxing component Reporter Yaqoub Aldurayhim Impact high References Bug 2067976 #CVE-2026-109710: Use-after-free in the Graphics: Text component Reporter Mozilla Impact high References Bug 2068338 #CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2068344 #CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphic= s component Reporter Mozilla Impact high References Bug 2068420 #CVE-2026-109713: Use-after-free in the Crash Reporting component Reporter locust1b Impact high References Bug 2068421 #CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine co= mponent Reporter Amy Burnett of OpenAI Impact high References Bug 2073267 #CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine co= mponent Reporter Amy Burnett of OpenAI Impact high References Bug 2073269 #CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component Reporter Mozilla Impact high References Bug 2073647 #CVE-2026-109718: Use-after-free in the XML component Reporter Mozilla Impact high References Bug 2073692 #CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWeb= GL component Reporter Shu Takahashi of Velcore Consulting Inc. Impact high References Bug 2073969 #CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly compone= nt Reporter Amy Burnett of OpenAI Impact high References Bug 2074160 #CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: J= IT component Reporter Amy Burnett of OpenAI Impact high References Bug 2074161 #CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT componen= t Reporter Amy Burnett of OpenAI Impact high References Bug 2074164 #CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component Reporter Amy Burnett of OpenAI Impact high References Bug 2074171 #CVE-2026-109724: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2074193 #CVE-2026-109725: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2074208 #CVE-2026-109726: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2074212 #CVE-2026-109727: Use-after-free in the Audio/Video component Reporter Mozilla Impact high References Bug 2074213 #CVE-2026-109728: Use-after-free in the DOM: Animation component Reporter Amy Burnett of OpenAI Impact high References Bug 2074625 #CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component Reporter Tomer Fichman Impact high References Bug 2074632 #CVE-2026-109730: Integer overflow in the Graphics component Reporter Robert Longson Impact high References Bug 2074896 #CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D c= omponent Reporter Amy Burnett of OpenAI Impact high References Bug 2075436 #CVE-2026-109732: Use-after-free in the DOM: Streams component Reporter Mozilla Impact high References Bug 2075998 #CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT componen= t Reporter Amy Burnett of OpenAI Impact high References Bug 2076269 #CVE-2026-109734: Mitigation bypass in the DOM: Security component Reporter Mirko Brodesser Impact moderate References Bug 1926318 #CVE-2026-109736: Frame poisoning in the Layout component Reporter Mozilla Impact moderate References Bug 2029784 #CVE-2026-109737: Mitigation bypass in the Enterprise Policies component Reporter Souma Ohsawa Impact moderate References Bug 2044525 #CVE-2026-109738: Use-after-free in the Audio/Video: Playback component Reporter Mozilla Impact moderate References Bug 2047722 #CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in th= e Widget: Win32 component Reporter Mozilla Impact moderate References Bug 2057113 #CVE-2026-109741: Use-after-free in the Storage: Bucket File System compone= nt Reporter Mozilla Impact moderate References Bug 2058651 #CVE-2026-109742: Information disclosure in the PDF Viewer component Reporter Mozilla Impact moderate References Bug 2058800 #CVE-2026-109743: Privilege escalation in the Panning and Zooming component Reporter Mozilla Impact moderate References Bug 2059195 #CVE-2026-109744: Other issue in the DOM: File component Reporter Mozilla Impact moderate References Bug 2059211 #CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: We= b Serial component Reporter Mozilla Impact moderate References Bug 2061784 #CVE-2026-109782: Mitigation bypass in the File Handling component Reporter Abdulrahman Alzahrani Impact moderate References Bug 2067465 #CVE-2026-109751: Information disclosure in the Networking component Reporter Mozilla Impact moderate References Bug 2068372 #CVE-2026-109752: Use-after-free in the DOM: Workers component Reporter Mozilla Impact moderate References Bug 2068407 #CVE-2026-109753: Incorrect boundary conditions in the Layout component Reporter Mozilla Impact moderate References Bug 2068441 #CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor componen= t Reporter Mozilla Impact moderate References Bug 2068443 #CVE-2026-109756: Privilege escalation in the DOM: Navigation component Reporter Mozilla Impact moderate References Bug 2069258 #CVE-2026-109757: Sandbox escape due to race condition in the Networking co= mponent Reporter Yaqoub Aldurayhim Impact moderate References Bug 2069910 #CVE-2026-109759: Site isolation issue in the Networking component Reporter Myungyong Lee Impact moderate References Bug 2070252 #CVE-2026-109760: Mitigation bypass in the Networking: HTTP component Reporter Myungyong Lee Impact moderate References Bug 2070633 #CVE-2026-109762: Incorrect boundary conditions in the SVG component Reporter Mozilla Impact moderate References Bug 2072438 #CVE-2026-109763: Mitigation bypass in the File Handling component Reporter Riku Bamba Impact moderate References Bug 2072501 #CVE-2026-109764: Mitigation bypass in the Enterprise Policies component Reporter HyeonSeung Kim Impact moderate References Bug 2073382 #CVE-2026-109765: Race condition, use-after-free in the Graphics: Text comp= onent Reporter Shu Takahashi of Velcore Consulting Inc. Impact moderate References Bug 2073396 #CVE-2026-109766: Mitigation bypass in the Enterprise Policies component Reporter Souma Ohsawa Impact moderate References Bug 2074406 #CVE-2026-109767: Information disclosure in the Networking component Reporter Mozilla Impact moderate References Bug 2074963 #CVE-2026-109783: Mitigation bypass in the File Handling component Reporter Mozilla Impact moderate References Bug 2075533 #CVE-2026-109770: Spoofing issue in the DOM: Web Serial component Reporter Mozilla Impact low References Bug 2059230 #CVE-2026-109775: Denial-of-service in the WebRTC component Reporter Shu Takahashi of Velcore Consulting Inc. Impact low References Bug 2068255 #CVE-2026-109776: Race condition in the XPCOM component Reporter Mozilla Impact low References Bug 2069395 #CVE-2026-109777: Information disclosure in the Storage: IndexedDB componen= t Reporter Shu Takahashi of Velcore Consulting Inc. Impact low References Bug 2069638 #CVE-2026-109778: Privilege escalation in the WebExtensions component Reporter Mozilla Impact low References Bug 2070547 #CVE-2026-109781: Denial-of-service in the Printing: Output component Reporter Nguyen Thanh Nguyen Impact low References Bug 2072852 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Oct 13 13:12:33 UTC 2026 Modified Files: pkgsrc/www/firefox153-l10n: Makefile distinfo Log Message: firefox153-l10n: update to 153.5 @ text @d3 3 a5 3 BLAKE2s (firefox-153.5.0esr.source.tar.xz) = 9cd6556c9accb9f9cdbdfbcae1a934e7de4b5ae9394a93a5ceb8d545f8124a0a SHA512 (firefox-153.5.0esr.source.tar.xz) = 9acb8d1a4b241767e39da36d6f520d4edaae0f237f311496beeed10e2383cf399b0af11cac6984d425b620af0ecba3e67808637ec74733c7d23186d0dd2bd5d4 Size (firefox-153.5.0esr.source.tar.xz) = 801858032 bytes @ 1.3.2.3 log @Pullup ticket #7305 - requested by gutteridge www/firefox153: Security fix www/firefox153-l10n: Security fix Revisions pulled up: - www/firefox153-l10n/Makefile 1.6 - www/firefox153-l10n/distinfo 1.6 - www/firefox153/Makefile 1.10 - www/firefox153/distinfo 1.6 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Oct 21 04:11:26 UTC 2026 Modified Files: pkgsrc/www/firefox153: Makefile distinfo Log Message: firefox153: update to 153.5.1 Mozilla Foundation Security Advisory 2026-112 Security Vulnerabilities fixed in Firefox ESR 153.5.1 Announced October 20, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.5.1 Note: We have changed how we publish advisories. We no longer roll all inte= rnally identified memory safety vulnerabilities into a single CVE and are n= ow issuing an advisory for every individual bug. #CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-li= sts, and other State component Reporter Wayne Impact high Description Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on= the 17th of October which was distributed to clients via RemoteSettings th= e same day. This update contains the updated=20 OneCRL block list, ensuring clients will block the compromised certificates= even if RemoteSettings is disabled by policy or otherwise unavailable in t= he user's network environment. References Bug 2083382 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Oct 21 04:13:09 UTC 2026 Modified Files: pkgsrc/www/firefox153-l10n: Makefile distinfo Log Message: firefox153-l10n: update to 153.5.1 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3.2.2 2026/10/18 14:46:05 maya Exp $ d3 3 a5 3 BLAKE2s (firefox-153.5.1esr.source.tar.xz) = 6ef265168be332e58b72d84490948da441406ec2a27f28296b9154c9fcaf45f4 SHA512 (firefox-153.5.1esr.source.tar.xz) = 9dccf8c5383653ddcf807b500889a91f9b9d56a512dab88a2683755ae6cb0c4b5d0788faa9541e5709a2b783002ee9f434020a43c8a43653038a2c3decd9f2c1 Size (firefox-153.5.1esr.source.tar.xz) = 801725652 bytes @ 1.3.2.4 log @Pullup ticket #7326 - requested by gutteridge www/firefox153: security fix www/firefox153-l10n: dependent update Revisions pulled up: - www/firefox153-l10n/Makefile 1.7 - www/firefox153-l10n/distinfo 1.7 - www/firefox153/Makefile 1.11 - www/firefox153/distinfo 1.7 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Oct 27 16:54:24 UTC 2026 Modified Files: pkgsrc/www/firefox153: Makefile distinfo Log Message: firefox153: update to 153.6 Mozilla Foundation Security Advisory 2026-120 Security Vulnerabilities fixed in Firefox ESR 153.6 Announced October 27, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.6 Note: We have changed how we publish advisories. We no longer roll all inte= rnally identified memory safety vulnerabilities into a single CVE and are n= ow issuing an advisory for every individual bug. #CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation componen= t Reporter satyamasd Impact high References Bug 2046558 #CVE-2026-117861: Sandbox escape in the DOM: Navigation component Reporter Mozilla Impact high References Bug 2053240 #CVE-2026-117862: Privilege escalation due to incorrect boundary conditions= in the Networking component Reporter Mozilla Impact high References Bug 2054644 #CVE-2026-117863: Information disclosure due to uninitialized memory in the= Audio/Video component Reporter Mozilla Impact high References Bug 2056783 #CVE-2026-117864: Sandbox escape in the Form Manager component Reporter Mozilla Impact high References Bug 2058614 #CVE-2026-117865: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact high References Bug 2058653 #CVE-2026-117866: Privilege escalation due to use-after-free in the Graphic= s: Canvas2D component Reporter Mozilla Impact high References Bug 2059011 #CVE-2026-117867: Use-after-free in the Layout component Reporter Mozilla Impact high References Bug 2059110 #CVE-2026-117868: Sandbox escape in the DOM: Networking component Reporter Yaqoub Aldurayhim Impact high References Bug 2059961 #CVE-2026-117869: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2068362 #CVE-2026-117870: Use-after-free in the JavaScript Engine component Reporter Mozilla Impact high References Bug 2068395 #CVE-2026-117871: Invalid pointer in the Graphics component Reporter Mozilla Impact high References Bug 2068400 #CVE-2026-117872: Use-after-free in the JavaScript: Standard Library compon= ent Reporter Mozilla Impact high References Bug 2068410 #CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playbac= k component Reporter Mozilla Impact high References Bug 2071733 #CVE-2026-117874: Use-after-free in the Internationalization component Reporter Mozilla Impact high References Bug 2073685 #CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow comp= onent Reporter Mozilla Impact high References Bug 2073686 #CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component Reporter Amy Burnett of OpenAI Impact high References Bug 2074167 #CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component Reporter Mozilla Impact high References Bug 2074209 #CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB com= ponent Reporter Amy Burnett of OpenAI Impact high References Bug 2075431 #CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables compo= nent Reporter Amy Burnett of OpenAI Impact high References Bug 2075432 #CVE-2026-117880: Use-after-free in the XML component Reporter Mozilla Impact high References Bug 2075996 #CVE-2026-117881: Use-after-free in the DOM: Core & HTML component Reporter Amy Burnett of OpenAI Impact high References Bug 2076267 #CVE-2026-117882: Use-after-free in the Layout component Reporter Amy Burnett of OpenAI Impact high References Bug 2076268 #CVE-2026-117883: Use-after-free in the DOM: HTML Parser component Reporter Amy Burnett of OpenAI Impact high References Bug 2076271 #CVE-2026-117884: Use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2076410 #CVE-2026-117885: Use-after-free in the Layout: Grid component Reporter Mozilla Impact high References Bug 2076983 #CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text compo= nent Reporter tsui Impact high References Bug 2077162 #CVE-2026-117887: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2077385 #CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component Reporter Minseong Kim Impact high References Bug 2078649 #CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine co= mponent Reporter Mozilla Impact high References Bug 2078727 #CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT componen= t Reporter Mozilla Impact high References Bug 2078749 #CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component Reporter Mozilla Impact high References Bug 2078837 #CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC:= Networking component Reporter Mozilla Impact high References Bug 2078902 #CVE-2026-117893: Incorrect boundary conditions in the Security: PSM compon= ent Reporter Mozilla Impact high References Bug 2078946 #CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling co= mponent Reporter Mozilla Impact high References Bug 2078983 #CVE-2026-117895: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2078994 #CVE-2026-117896: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079032 #CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables compo= nent Reporter Mozilla Impact high References Bug 2079036 #CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component Reporter Mozilla Impact high References Bug 2079040 #CVE-2026-117899: Use-after-free in the Networking: HTTP component Reporter Mozilla Impact high References Bug 2079046 #CVE-2026-117900: Use-after-free in the DOM: Editor component Reporter Mozilla Impact high References Bug 2079053 #CVE-2026-117901: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079054 #CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component Reporter Mozilla Impact high References Bug 2079057 #CVE-2026-117903: Use-after-free in the Audio/Video component Reporter Mozilla Impact high References Bug 2079058 #CVE-2026-117904: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact high References Bug 2079059 #CVE-2026-117905: Use-after-free in the Audio/Video: Playback component Reporter Mozilla Impact high References Bug 2079061 #CVE-2026-117906: Use-after-free in the CSS Parsing and Computation compone= nt Reporter Mozilla Impact high References Bug 2079062 #CVE-2026-117907: Use-after-free in the Networking component Reporter Mozilla Impact high References Bug 2079068 #CVE-2026-117908: Use-after-free in the Graphics: ImageLib component Reporter Mozilla Impact high References Bug 2079069 #CVE-2026-117909: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact high References Bug 2079155 #CVE-2026-117910: Invalid pointer in the JavaScript Engine component Reporter Mozilla Impact high References Bug 2079156 #CVE-2026-117911: Use-after-free in the Audio/Video: Playback component Reporter Mozilla Impact high References Bug 2079171 #CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computat= ion component Reporter Takashi Suzuki Impact high References Bug 2079209 #CVE-2026-117913: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2079252 #CVE-2026-117914: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2079253 #CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and In= line component Reporter Mozilla Impact high References Bug 2079255 #CVE-2026-117916: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2079257 #CVE-2026-117917: Invalid pointer in the Graphics: WebRender component Reporter Nguyen Tuan Hung Impact high References Bug 2079301 #CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component Reporter Mozilla Impact high References Bug 2079676 #CVE-2026-117919: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079677 #CVE-2026-117920: Use-after-free in the DOM: HTML Parser component Reporter Mozilla Impact high References Bug 2079681 #CVE-2026-117921: Use-after-free in the CSS Parsing and Computation compone= nt Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2079687 #CVE-2026-117922: Use-after-free in the Networking: WebSockets component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2079692 #CVE-2026-117923: Use-after-free in the Audio/Video component Reporter Mozilla Impact high References Bug 2079781 #CVE-2026-117924: Use-after-free in the XSLT component Reporter Mozilla Impact high References Bug 2079783 #CVE-2026-117925: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2079786 #CVE-2026-117926: Incorrect boundary conditions in the SVG component Reporter Mozilla Impact high References Bug 2079924 #CVE-2026-117927: Use-after-free in the SVG component Reporter Mozilla Impact high References Bug 2080102 #CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and Computat= ion component Reporter Minseong Kim Impact high References Bug 2081280 #CVE-2026-117929: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact high References Bug 2081549 #CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081953 #CVE-2026-117931: Use-after-free in the DOM: Events component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081969 #CVE-2026-117932: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081975 #CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation compon= ent Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081976 #CVE-2026-117934: Use-after-free in the Layout component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2081977 #CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082000 #CVE-2026-117936: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082001 #CVE-2026-117937: Invalid pointer in the JavaScript Engine component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082005 #CVE-2026-117938: Use-after-free in the Layout component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082009 #CVE-2026-117939: Use-after-free in the XML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082030 #CVE-2026-117940: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082031 #CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082044 #CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: J= IT component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082047 #CVE-2026-117943: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082061 #CVE-2026-117944: Use-after-free in the Layout component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082064 #CVE-2026-117945: Incorrect boundary conditions in the XML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082076 #CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine co= mponent Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082092 #CVE-2026-117947: Use-after-free in the XML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082100 #CVE-2026-117948: Use-after-free in the SVG component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082112 #CVE-2026-117949: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082118 #CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML com= ponent Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082127 #CVE-2026-117951: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082130 #CVE-2026-117952: Uninitialized memory in the Networking component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082139 #CVE-2026-117953: Use-after-free in the DOM: Core & HTML component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082199 #CVE-2026-117954: Use-after-free in the Layout: Positioned component Reporter OpenAI Codex Security (kylebot) Impact high References Bug 2082450 #CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly compone= nt Reporter Mozilla Impact moderate References Bug 2043044 #CVE-2026-100801: Privilege escalation in the DLL Services component Reporter Mozilla Impact moderate References Bug 2057112 #CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component Reporter Mozilla Impact moderate References Bug 2058659 #CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component Reporter Mozilla Impact moderate References Bug 2061508 #CVE-2026-117958: Site isolation issue in the Networking: HTTP component Reporter Mozilla Impact moderate References Bug 2061509 #CVE-2026-117959: Site isolation issue in the DOM: Service Workers componen= t Reporter Muhammad Ali Impact moderate References Bug 2067292 #CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component Reporter Mohamed Mbarek Impact moderate References Bug 2067647 #CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and Fon= ts component Reporter Mozilla Impact moderate References Bug 2068458 #CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in th= e Storage: Quota Manager component Reporter Mozilla Impact moderate References Bug 2072411 #CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers= component Reporter Mozilla Impact moderate References Bug 2073660 #CVE-2026-117964: Use-after-free in the Panning and Zooming component Reporter Mozilla Impact moderate References Bug 2074199 #CVE-2026-117965: Same-origin policy bypass in the Address Bar component Reporter Takashi Suzuki Impact moderate References Bug 2075126 #CVE-2026-117966: Site isolation issue in the Networking: HTTP component Reporter Mozilla Impact moderate References Bug 2075726 #CVE-2026-117967: Mitigation bypass in the DOM: Security component Reporter Nguyen Tuan Hung Impact moderate References Bug 2075930 #CVE-2026-117968: Use-after-free in the DOM: Core & HTML component Reporter Mozilla Impact moderate References Bug 2075985 #CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component Reporter Mozilla Impact moderate References Bug 2075990 #CVE-2026-117970: Race condition in the Disability Access APIs component Reporter Nguyen Thanh Nguyen Impact moderate References Bug 2076227 #CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview= component Reporter Mozilla Impact moderate References Bug 2076399 #CVE-2026-117972: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2076415 #CVE-2026-117973: Use-after-free in the Networking: DNS component Reporter Mozilla Impact moderate References Bug 2076704 #CVE-2026-117974: Use-after-free in the XML component Reporter Mozilla Impact moderate References Bug 2076705 #CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics: We= bRender component Reporter Mozilla Impact moderate References Bug 2076714 #CVE-2026-117976: Site isolation issue in the DOM: Navigation component Reporter Shu Takahashi of Velcore Consulting Inc. Impact moderate References Bug 2076816 #CVE-2026-117977: Other issue in the Console component Reporter quanhx Impact moderate References Bug 2077418 #CVE-2026-117978: Incorrect boundary conditions in the Graphics component Reporter Mozilla Impact moderate References Bug 2077730 #CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender = component Reporter Mozilla Impact moderate References Bug 2077739 #CVE-2026-117980: Use-after-free in the Graphics component Reporter Massimo Palozzi Impact moderate References Bug 2078145 #CVE-2026-117981: Privilege escalation in the Toolkit component Reporter Mozilla Impact moderate References Bug 2078167 #CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component Reporter Mozilla Impact moderate References Bug 2078855 #CVE-2026-117983: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2078904 #CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling an= d Overflow component Reporter Mozilla Impact moderate References Bug 2078981 #CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics comp= onent Reporter Mozilla Impact moderate References Bug 2078982 #CVE-2026-117986: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2078989 #CVE-2026-117987: Use-after-free in the Graphics component Reporter Mozilla Impact moderate References Bug 2079065 #CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in th= e Graphics: CanvasWebGL component Reporter Mozilla Impact moderate References Bug 2079072 #CVE-2026-117989: Use-after-free in the Graphics component Reporter Nguyen Tuan Hung Impact moderate References Bug 2079311 #CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in th= e Graphics: WebRender component Reporter Mozilla Impact moderate References Bug 2079501 #CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fon= ts component Reporter Mozilla Impact moderate References Bug 2079686 #CVE-2026-117992: Information disclosure in the CSS Parsing and Computation= component Reporter Takashi Suzuki Impact moderate References Bug 2079709 #CVE-2026-117993: Integer overflow in the Graphics: Text component Reporter 5up3rh3i Impact moderate References Bug 2080581 #CVE-2026-117994: Use-after-free in the JavaScript: GC component Reporter Mozilla Impact moderate References Bug 2080787 #CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handli= ng component Reporter haruka yamazaki Impact moderate References Bug 2081184 #CVE-2026-117996: Incorrect boundary conditions in the WebRTC component Reporter Mozilla Impact moderate References Bug 2081535 #CVE-2026-117997: Sandbox escape due to use-after-free in the Widget compon= ent Reporter Mozilla Impact moderate References Bug 2081560 #CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions componen= t Reporter Ibuki Sato Impact low References Bug 2042021 #CVE-2026-117999: Race condition in the IPC component Reporter Mozilla Impact low References Bug 2071379 #CVE-2026-118000: Information disclosure in the Networking: HTTP component Reporter Mozilla Impact low References Bug 2072436 #CVE-2026-118002: Information disclosure due to race condition in the Netwo= rking component Reporter Abdulrahman Alzahrani Impact low References Bug 2073584 #CVE-2026-118003: Information disclosure in the Networking: DNS component Reporter eldjiikgull Impact low References Bug 2076744 #CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and = Animations component Reporter Mozilla Impact low References Bug 2077756 --- Module Name: pkgsrc Committed By: gutteridge Date: Tue Oct 27 16:55:08 UTC 2026 Modified Files: pkgsrc/www/firefox153-l10n: Makefile distinfo Log Message: firefox153-l10n: update to 153.6 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3.2.3 2026/10/21 17:47:45 maya Exp $ d3 3 a5 3 BLAKE2s (firefox-153.6.0esr.source.tar.xz) = c7471b214ec72f4b33e7a90e69a43600c4314618595c3afde132d869627f7082 SHA512 (firefox-153.6.0esr.source.tar.xz) = 3e9f1f8e7c14d1994f4896702a50b46c1a3c7c7b696a080112f5ab3fdf0fcdd41ade4e81f9abafe2d3824cf1dfb16b5c09e5eaec12a05a733906f1483395565d Size (firefox-153.6.0esr.source.tar.xz) = 801903636 bytes @ 1.2 log @firefox153: update to 153.2 Mozilla Foundation Security Advisory 2026-85 Security Vulnerabilities fixed in Firefox ESR 153.2 Announced September 1, 2026 Impact high Products Firefox ESR Fixed in Firefox ESR 153.2 #CVE-2026-75874: Sandbox escape in the Remote Settings Client component Reporter crixer Impact high References Bug 2039972 #CVE-2026-84118: Use-after-free in the JavaScript: GC component Reporter x0e Impact high References Bug 2057457 #CVE-2026-84119: Sandbox escape due to use-after-free in the DOM: Navigation component Reporter Yaqoub Aldurayhim Impact high References Bug 2057817 #CVE-2026-84120: Use-after-free in the Audio/Video component Reporter Ukyo Akai Impact high References Bug 2058911 #CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security component Reporter Yaqoub Aldurayhim Impact high References Bug 2059018 #CVE-2026-84122: Use-after-free in the Audio/Video component Reporter Hyeonjun Ahn Impact high References Bug 2059965 #CVE-2026-84123: Privilege escalation due to use-after-free in the Graphics: WebGPU component Reporter Yaqoub Aldurayhim Impact high References Bug 2060047 #CVE-2026-84124: Use-after-free in the DOM: Core & HTML component Reporter Hyeonjun Ahn Impact high References Bug 2061110 #CVE-2026-84125: Use-after-free in the DOM: Core & HTML component Reporter Yaqoub Aldurayhim Impact high References Bug 2063871 #CVE-2026-74952: Privilege escalation in the Application Update component Reporter Tomoya Nakanishi Impact moderate References Bug 2021757 #CVE-2026-84129: Site isolation issue in the DOM: Navigation component Reporter Yaqoub Aldurayhim Impact moderate References Bug 2055028 #CVE-2026-84130: Information disclosure in the Graphics: WebGPU component Reporter 5up3rh3i Impact moderate References Bug 2057834 #CVE-2026-84131: Privilege escalation due to invalid pointer in the Graphics component Reporter navapon Impact moderate References Bug 2060008 #CVE-2026-84132: Information disclosure in the Networking: HTTP component Reporter Shu Takahashi Impact moderate References Bug 2063020 #CVE-2026-84133: Site isolation issue in the DOM: Push Subscriptions component Reporter pakhunov.anton.n Impact low References Bug 2032388 #CVE-2026-84134: Other issue in the Profile Backup component Reporter 5up3rh3i Impact low References Bug 2044882 #CVE-2026-84136: Other issue in the DOM: Navigation component Reporter Apentota Impact low References Bug 2048699 #CVE-2026-84137: Spoofing issue in the DOM: Core & HTML component Reporter Riski Muhammad Ivan Impact low References Bug 2051146 #CVE-2026-84139: Clickjacking issue in the DOM: Events component Reporter Long Nguyen Impact low References Bug 2060153 #CVE-2026-84140: Site isolation issue in the DOM: Navigation component Reporter Mohamed Mbarek Impact low References Bug 2063780 #CVE-2026-84141: Integer overflow in the Graphics: ImageLib component Reporter nguyentuanhung1149 Impact low References Bug 2063994 #CVE-2026-84143: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 Reporter Jan de Mooij, Tom Ritter and the Mozilla Fuzzing Team Impact high Description Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. References High Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 Moderate Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 Low Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 #CVE-2026-84144: Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2 Reporter Leo Tenenbaum, Tom Ritter and the Mozilla Fuzzing Team Impact high Description Internally found bugs present in Firefox 154 and Firefox ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. References High Severity internally found bugs fixed in Firefox 155 and Firefox ESR 153.2 Moderate Severity internally found bugs fixed in Firefox 155 and Firefox ESR 153.2 Low Severity internally found bugs fixed in Firefox 155 and Firefox ESR 153.2 #CVE-2026-84145: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 Reporter Leo Tenenbaum, Tom Ritter and the Mozilla Fuzzing Team Impact high Description Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. References High Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 Moderate Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 Low Severity internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.1 2026/08/27 01:23:15 gutteridge Exp $ d3 3 a5 3 BLAKE2s (firefox-153.2.0esr.source.tar.xz) = 3457f7e0f25e3a1f39403d5b0bed9ed1b933ce3f4b098b3d8ef55417a58c42df SHA512 (firefox-153.2.0esr.source.tar.xz) = a8cd4784bb52ca89c0fe37404e894c044f6145c62e9fcdeffe621fde81ae4602078be575e26c90d83e5e47f26675d3ee897cd6a20027d09d4ba7d0e785ce39bc Size (firefox-153.2.0esr.source.tar.xz) = 807705672 bytes @ 1.1 log @firefox153: import Firefox 153.1 as www/firefox153 Mozilla Firefox is a free, open-source and cross-platform web browser for Windows, Linux, MacOS X and many other operating systems. It is fast and easy to use, and offers many advantages over other web browsers, such as tabbed browsing and the ability to block pop-up windows. Firefox also offers excellent bookmark and history management, and it can be extended by developers using industry standards such as XML, CSS, JavaScript, C++, etc. Many extensions are available. Note: Due to upstream's trademark policies, this package identifies as "Nightly" rather than "Firefox" by default. This package provides Firefox 153 Extended Support Release. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.590 2026/08/14 12:26:11 ryoon Exp $ d3 3 a5 3 BLAKE2s (firefox-153.1.0esr.source.tar.xz) = ca9970e33602b727db1a1453ecb9541197d467f28afbe7b449f0498bfd722635 SHA512 (firefox-153.1.0esr.source.tar.xz) = 0e5be18878a1bb8575d4ff03b499a092663fcd1779a05b59b82a8b663a3d7047cf3d6f971faeb3d1262f83b23022a703a2033e8ea38bcbd9c85f44bdd35d86c1 Size (firefox-153.1.0esr.source.tar.xz) = 801285696 bytes @