firefox153: update to 153.6
Mozilla Foundation Security Advisory 2026-120
Security Vulnerabilities fixed in Firefox ESR 153.6
Announced
October 27, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.6
Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component
[1592 lines not shown]
mail/ruby-mime-types-data: update to 3.2026.1020
3.2026.1013 (2026-10-13)
* Updated registry entries from the IANA media registry and provisional
media registry and the Apache Tika media registry as of the release date.
3.2026.1020 (2026-10-20)
* Updated registry entries from the IANA media registry and provisional
media registry and the Apache Tika media registry as of the release date.
py-braintree: updated to 4.48.0
4.48.0
Add Transaction.reverse() to automatically void or fully refund a transaction
Add previous_mastercard_transaction_link_id to external_vault on Transaction and CreditCardVerification.create
webkit-gtk*: update to 2.54.2
What's new in the WebKitGTK 2.54.2 release?
===========================================
- Fix performance when compositing layers with backdrop filters.
- Fix prewarmed web process leak when they are rejected due to sandboxing.
- Release suspended pages and idle processes on memory pressure.
- Bind /dev/dxg in the bubblewrap sandbox.
- Notify input method about cursor area or surrounding text after a re-focus.
- Clear input method composition underlines before adding new ones.
- Do not enable input method for read-only text fields.
- Update the input method state when readonly changes on the focused element.
- Add User-Agent quirk for OrangeTV.
- Fix several crashes and rendering issues.
btop: updated to 1.4.8
1.4.8
themes: load/save by name if possible
Fix atomic issues and data races in btop
fix: gate Apple Silicon GPU support to unbreak intel Mac builds
AMD APU/iGPU sysfs backend for GPU monitoring
fix: use ISO 8601 format for log timestamps
Fix possible thread deadlocks and power-event-based false stall detections
fix: defer SIGWINCH resize handling
Fix btop with amd gpu on rocm 7 as in Ubuntu 26.04
Fix: Macos SIGABRT Crash during SMB TimeMachine Backups
fix: avoid macOS swap disk crash
Fix -/+ key binding
fix: ignore missing config dir if config file is present
fix: make background consistent in the Terminal is too small dialogue
lowdown: updated to 3.2.1
3.2.1
Add table wrapping in -tterm mode, where long columns are broken at word
boundaries when exceeding the document width. This uses a simple algorithm at
the cost of an extra rendering step. Can be disabled with --term-no-tablewrap.
Also add --term-no-style, and have --term-no-ansi instead fall back to using
backspace encoding instead of ANSI.
