Re: [BLFS Trac] #23111: firefox-140.10.2esr and js-140.10.2 (spidermonkey) (was: firefox-140.10.1esr and js-140.10.1 (spidermonkey))

"BLFS Trac" ([email protected] via blfs-book Mailing List) <[email protected]> Thu, 07 May 2026 16:45:55 -0000

Newsgroups	gmane.linux.lfs.beyond.book
Message-ID	<[email protected]>

#23111: firefox-140.10.2esr and js-140.10.2 (spidermonkey)
-------------------------+-------------------------
 Reporter:  (none)       |       Owner:  Joe Locash
     Type:  enhancement  |      Status:  new
 Priority:  high         |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------
Changes (by Joe Locash):

 * owner:  SecurityAdvisory => Joe Locash
 * summary:  firefox-140.10.1esr and js-140.10.1 (spidermonkey) =>
     firefox-140.10.2esr and js-140.10.2 (spidermonkey)

Comment:

 Security fixes for 140.10.2ESR:
  - CVE-2026-8090: Use-after-free in the DOM: Networking component (high)
  - CVE-2026-8094: Other issue in the WebRTC component (high)
  - CVE-2026-8092: Memory safety bugs fixed in Firefox ESR 115.35.2,
 Firefox ESR 140.10.2 and Firefox 150.0.2 (high)
 https://www.mozilla.org/en-US/security/advisories/mfsa2026-41/
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23111#comment:10>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page