Opened 4 months ago

Closed 4 months ago

#14804 closed enhancement (fixed)

firefox-78.9.0 and JS-78.9.0

Reported by: ken@… Owned by: ken@…
Priority: normal Milestone: 10.2
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description


Change History (4)

comment:1 by ken@…, 4 months ago

Owner: changed from blfs-book to ken@…
Status: newassigned

A large diff from 78.8:

mostly changes to the angle code which is only for windows,

but also including an added hunk in config/makefiles/rust.mk for rust versions 1.38 to 1.49, which I guess means that versions up to 1.49 should build,

and js/src changes for x64 and x86 to enable spectreValueMasking which was previously (only) enabled on MIPS so I assume this is a hardening for JS78.

comment:2 by ken@…, 4 months ago

The Release Notes only specify security fixes, listed at https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/ - a WebGL OOB read and the usual Memory Safety Bugs rated as high.

Because of the spectreValueMasking js change, people should upgrade JS78 as well as firefox.

comment:3 by ken@…, 4 months ago

r24392. Security Advisories created.

comment:4 by ken@…, 4 months ago

Resolution: fixed
Status: assignedclosed
Note: See TracTickets for help on using tickets.