Backport Android-specific security fixes from Firefox 112 to ESR 102.10-based Tor Browser (tor-browser.git)

Merge Info

Related Issues

• tor-browser#41724

Backport Timeline

• Immediate - patchsets for critical bug fixes or other major blocker (e.g. fixes for a 0-day exploit) OR patchsets with trivial changes which do not need testing (e.g. fixes for typos or fixes easily verified in a local developer build)
• Next Minor Stable Release - patchset that needs to be verified in nightly before backport
• Eventually - patchset that needs to be verified in alpha before backport
• No Backport - patchset for the next major stable

Upstream Merging

• Merge to base-browser - typically for !fixups to patches in the base-browser branch, though sometimes new patches as well
  • NOTE: if your changeset includes patches to both base-browser and tor-browser please please make separate merge requests for each part

Issue Tracking

• Link resolved issues with appropriate Release Prep issue for changelog generation

Change Description

Backports the fixes for:

• https://www.mozilla.org/en-US/security/advisories/mfsa2023-13/#CVE-2023-29538
  • https://hg.mozilla.org/mozilla-central/rev/6d75b6c4bdf7
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-13/#CVE-2023-29540
  • https://hg.mozilla.org/mozilla-central/rev/7042ad8b36f3
  • https://hg.mozilla.org/mozilla-central/rev/1320da462737
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-13/#CVE-2023-29543
  • https://hg.mozilla.org/mozilla-central/rev/760275af660b
  • https://hg.mozilla.org/mozilla-central/rev/eb7a5d363182

Verified stable builds/runs when patches applied.