1 -------------------------------------------------------------------

     2 Wed Feb  1 19:48:47 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>

     3 

     4 - Mozilla Firefox 109.0.1

     5   * Fixed jank when loading pages containing a large number of

     6     emoji characters (bmo#1809081)

     7   * Fixed an issue causing authentication prompts to not appear

     8     when loading pages in some enterprise environments

     9     (bmo#1809151)

    10   * ixed inconsistent sizing of event listener checkboxes inside

    11     the Inspector developer tool (bmo#1811760)

    12 

    13 -------------------------------------------------------------------

    14 Mon Jan 16 06:54:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>

    15 

    16 - Mozilla Firefox 109.0

    17   MFSA 2023-01 (bsc#1207119)

    18   * CVE-2023-23597 (bmo#1538028)

    19     Logic bug in process allocation allowed to read arbitrary

    20     files

    21   * CVE-2023-23598 (bmo#1800425)

    22     Arbitrary file read from GTK drag and drop on Linux

    23   * CVE-2023-23599 (bmo#1777800)

    24     Malicious command could be hidden in devtools output on

    25     Windows

    26   * CVE-2023-23600 (bmo#1787034)

    27     Notification permissions persisted between Normal and Private

    28     Browsing on Android

    29   * CVE-2023-23601 (bmo#1794268)

    30     URL being dragged from cross-origin iframe into same tab

    31     triggers navigation

    32   * CVE-2023-23602 (bmo#1800890)

    33     Content Security Policy wasn't being correctly applied to

    34     WebSockets in WebWorkers

    35   * CVE-2023-23603 (bmo#1800832)

    36     Calls to <code>console.log</code> allowed bypasing Content

    37     Security Policy via format directive

    38   * CVE-2023-23604 (bmo#1802346)

    39     Creation of duplicate <code>SystemPrincipal</code> from less

    40     secure contexts

    41   * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)

    42     Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7

    43   * CVE-2023-23606 (bmo#1764974, bmo#1798591, bmo#1799201,

    44     bmo#1800446, bmo#1801248, bmo#1802100, bmo#1803393,

    45     bmo#1804626, bmo#1804971, bmo#1807004)

    46     Memory safety bugs fixed in Firefox 109

    47 - requires NSS 3.86

    48 - rebased patches

    49