--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-ab08c0b063
2021-01-29 02:18:38.100279
--------------------------------------------------------------------------------
Name : mozilla-noscript
Product : Fedora 32
Version : 11.1.9
Release : 1.fc32
URL :
http://noscript.net/
Summary : JavaScript white list extension for Mozilla Firefox
Description :
The NoScript extension provides extra protection for Firefox.
It allows JavaScript, Java, Flash and other plug-ins to be executed only by
trusted web sites of your choice (e.g. your online bank) and additionally
provides Anti-XSS protection.
--------------------------------------------------------------------------------
Update Information:
v 11.1.9 ============================================================ * Return
null when webgl is not allowed (thanks Matthew Finkel for patch) * [XSS] Fixed
memoization bug resulting in performance degradation on some payloads * [XSS]
Include call stack in debugging log output * [XSS] Skip naps when
InjectionChecker runs in its own worker * Shortcut for easier XSS filter testing
* More lenient filter to add a new entry to per-site permissions * [L10n]
Updated de * Replace script-embedded bitmap with css-embedded SVG as the
placeholder logo * Updated TLDs * Remove source map reference causing console
noise * Fix per-site permissions UI glitches when base domain is added to
existing subdomain (thanks barbaz for reporting) v 11.1.8
============================================================ * [XSS] Fix for old
pre-screening optimization exploitable to bypass the filter in recent browsers -
thanks Tsubasa FUJII (@reinforchu) for reporting * Replace DOM-based entity
decoding with the he.js pure JS library * Updated copyright statement * Updated
browser-polyfill.js * Removed obsolete fastclick.js dependency * [l10n] Updated
de (thanks ib and Musonius) * Updated TLDs
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 20 2021 Dominik Mierzejewski <rpm(a)greysector.net> - 11.1.9-1
- update to 11.1.9 (#1914007)
- polyfill was updated
- fastclick is no longer included
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1914007 - mozilla-noscript-11.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1914007
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-ab08c0b063' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------