Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#14804 closed enhancement (fixed)

firefox-78.9.0 and JS-78.9.0

Reported by: ken@… Owned by: ken@…
Priority: normal Milestone: 11.0
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description


Change History (5)

comment:1 by ken@…, 3 years ago

Owner: changed from blfs-book to ken@…
Status: new → assigned

A large diff from 78.8:

mostly changes to the angle code which is only for windows,

but also including an added hunk in config/makefiles/rust.mk for rust versions 1.38 to 1.49, which I guess means that versions up to 1.49 should build,

and js/src changes for x64 and x86 to enable spectreValueMasking which was previously (only) enabled on MIPS so I assume this is a hardening for JS78.

comment:2 by ken@…, 3 years ago

The Release Notes only specify security fixes, listed at ​https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/ - a WebGL OOB read and the usual Memory Safety Bugs rated as high.

Because of the spectreValueMasking js change, people should upgrade JS78 as well as firefox.

comment:3 by ken@…, 3 years ago

r24392. Security Advisories created.

comment:4 by ken@…, 3 years ago

Resolution: → fixed
Status: assigned → closed

comment:5 by Bruce Dubbs, 3 years ago

Milestone: 10.2 → 11.0

Milestone renamed

Note: See TracTickets for help on using tickets.