MozillaFirefox/MozillaFirefox.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Sun, 21 Apr 2024 06:46:25 +0200
branchfirefox124
changeset 1202 28ebbea625bd
parent 1201 3a2c95022db2
permissions -rw-r--r--
124.0.2
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
1108
33b03cfb3747 bugfixes, improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1107
diff changeset
     1
-------------------------------------------------------------------
1202
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     2
Wed Apr  3 12:50:27 UTC 2024 - Martin Sirringhaus <martin.sirringhaus@suse.com>
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     3
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     4
- Mozilla Firefox 124.0.2
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     5
  https://www.mozilla.org/en-US/firefox/124.0.2/releasenotes/
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     6
  * Fixed an issue where users with a large amount of bookmarks would
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     7
    be unable to restore a bookmarks backup. (bmo#1884308)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     8
  * Fixed an issue that would cause open Firefox windows
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
     9
    to go blank or crash during video playback on sites such as
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    10
    Netflix. (bmo#1883932)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    11
  * Fixed a crash that affected Linux AArch64 builds. (bmo#1866396)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    12
  * Fixed an issue where some users experienced difficulties loading
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    13
    webpages due to changes made to the default AppArmor configuration
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    14
    shipping in Ubuntu 24.04. (bmo#1884347)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    15
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    16
-------------------------------------------------------------------
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    17
Fri Mar 22 09:53:26 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    18
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    19
- Mozilla Firefox 124.0.1
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    20
  https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    21
  MFSA 2024-15 (bsc#1221850)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    22
  * CVE-2024-29943 (bmo#1886849)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    23
    Out-of-bounds access via Range Analysis bypass
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    24
  * CVE-2024-29944 (bmo#1886852)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    25
    Privileged JavaScript Execution via Event Handlers
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    26
  Mozilla Firefox 124.0
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    27
  https://www.mozilla.org/en-US/firefox/124.0/releasenotes/
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    28
  MFSA 2024-12 (bsc#1221327)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    29
  * CVE-2024-2605 (bmo#1872920)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    30
    Windows Error Reporter could be used as a Sandbox escape vector
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    31
  * CVE-2024-2606 (bmo#1879237)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    32
    Mishandling of WASM register values
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    33
  * CVE-2024-2607 (bmo#1879939)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    34
    JIT code failed to save return registers on Armv7-A
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    35
  * CVE-2024-2608 (bmo#1880692)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    36
    Integer overflow could have led to out of bounds write
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    37
  * CVE-2023-5388 (bmo#1780432)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    38
    NSS susceptible to timing attack against RSA decryption
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    39
  * CVE-2024-2609 (bmo#1866100)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    40
    Permission prompt input delay could expire when not in focus
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    41
  * CVE-2024-2610 (bmo#1871112)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    42
    Improper handling of html and body tags enabled CSP nonce leakage
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    43
  * CVE-2024-2611 (bmo#1876675)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    44
    Clickjacking vulnerability could have led to a user accidentally
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    45
    granting permissions
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    46
  * CVE-2024-2612 (bmo#1879444)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    47
    Self referencing object could have potentially led to a use-
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    48
    after-free
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    49
  * CVE-2024-2613 (bmo#1875701)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    50
    Improper handling of QUIC ACK frame data could have led to OOM
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    51
  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405, bmo#1881093)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    52
    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    53
    and Thunderbird 115.9
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    54
  * CVE-2024-2615 (bmo#1881074, bmo#1881650, bmo#1882438)
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    55
    Memory safety bugs fixed in Firefox 124
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    56
- requires
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    57
  NSS = 3.98
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    58
  rust-cbindgen >= 0.26
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    59
28ebbea625bd 124.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1201
diff changeset
    60
-------------------------------------------------------------------
1201
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    61
Fri Mar  8 06:16:48 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    62
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    63
- Mozilla Firefox 123.0.1
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    64
  * Fixed the *Firefox Translation* language indicator in the
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    65
    address bar displaying a colored square icon instead of the
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    66
    language code icon. (bmo#1879415)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    67
  * Fixed a regression with the `onChange` event not firing when
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    68
    clearing the value of a `textarea` HTML field.
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    69
    (bmo#1881457)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    70
  * Fixed a regression in the JavaScript JIT engine incorrectly
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    71
    inlining strings in some cases. (bmo#1882386)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    72
  * Fixed: Fixed low contrast of text when selecting rows in the
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    73
    Developer tools' Storage panel. (bmo#1877090)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    74
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    75
-------------------------------------------------------------------
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    76
Thu Feb 22 11:02:39 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    77
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    78
- Mozilla Firefox 123.0
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    79
  https://www.mozilla.org/en-US/firefox/123.0/releasenotes/
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    80
  MFSA 2024-05 (bsc#1220048)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    81
  * CVE-2024-1546 (bmo#1843752)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    82
    Out-of-bounds memory read in networking channels
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    83
  * CVE-2024-1547 (bmo#1877879)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    84
    Alert dialog could have been spoofed on another site
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    85
  * CVE-2024-1554 (bmo#1816390)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    86
    fetch could be used to effect cache poisoning
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    87
  * CVE-2024-1548 (bmo#1832627)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    88
    Fullscreen Notification could have been hidden by select element
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    89
  * CVE-2024-1549 (bmo#1833814)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    90
    Custom cursor could obscure the permission dialog
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    91
  * CVE-2024-1550 (bmo#1860065)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    92
    Mouse cursor re-positioned unexpectedly could have led to
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    93
    unintended permission grants
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    94
  * CVE-2024-1551 (bmo#1864385)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    95
    Multipart HTTP Responses would accept the Set-Cookie header
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    96
    in response parts
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    97
  * CVE-2024-1555 (bmo#1873223)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    98
    SameSite cookies were not properly respected when opening a
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
    99
    website from an external browser
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   100
  * CVE-2024-1556 (bmo#1870414)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   101
    Invalid memory access in the built-in profiler
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   102
  * CVE-2024-1552 (bmo#1874502)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   103
    Incorrect code generation on 32-bit ARM devices
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   104
  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498, bmo#1872296,
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   105
    bmo#1873521, bmo#1873577, bmo#1873597, bmo#1873866, bmo#1874080,
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   106
    bmo#1874740, bmo#1875795, bmo#1875906, bmo#1876425, bmo#1878211,
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   107
    bmo#1878286)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   108
    Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8,
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   109
    and Thunderbird 115.8
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   110
  * CVE-2024-1557 (bmo#1746471, bmo#1848829, bmo#1864011, bmo#1869175,
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   111
    bmo#1869455, bmo#1869938, bmo#1871606)
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   112
    Memory safety bugs fixed in Firefox 123
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   113
- requires NSS 3.97
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   114
3a2c95022db2 Firefox 123.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1200
diff changeset
   115
-------------------------------------------------------------------
1200
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   116
Tue Feb 13 21:21:15 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   117
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   118
- Mozilla Firefox 122.0.1
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   119
  https://www.mozilla.org/en-US/firefox/122.0.1/releasenotes/
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   120
  * Fixed the Library and Sidebar context menus only displaying
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   121
    Multi-Account Containers icons in the "Open in New Container
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   122
    Tab" menu. (bmo#1876518)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   123
  * Fixed an issue when clicking the Dismiss button in
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   124
    notification pop-ups on Windows causing a webpage in a new tab.
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   125
    (bmo#1848801)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   126
  * Fixed the yaru-remix system theme not applying correctly on
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   127
    Linux. (bmo#1877002)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   128
  * Fixed adding an extra new line to a rule in the Developer
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   129
    Tools' Inspector when copying it to the clipboard.
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   130
    (bmo#1876220)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   131
  * Rolled back a keyboard behavior change made to the Developer
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   132
    Tools' Rules view when validating a property name or input with
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   133
    the Enter key.
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   134
    This moves the focus to the next input, as was the behavior
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   135
    in Firefox 121. (bmo#1877457)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   136
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   137
-------------------------------------------------------------------
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   138
Tue Jan 30 13:51:25 UTC 2024 - Martin Sirringhaus <martin.sirringhaus@suse.com>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   139
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   140
- Recommend libfido2-udev on codestreams that exist, in order to try
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   141
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   142
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   143
-------------------------------------------------------------------
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   144
Sat Jan 27 23:12:05 UTC 2024 - Andreas Schwab <schwab@suse.de>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   145
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   146
- Fix file list
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   147
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   148
-------------------------------------------------------------------
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   149
Sun Jan 21 09:16:30 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   150
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   151
- Mozilla Firefox 122.0
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   152
  https://www.mozilla.org/en-US/firefox/122.0/releasenotes/
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   153
  MFSA 2024-01 (bsc#1218955)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   154
  * CVE-2024-0741 (bmo#1864587)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   155
    Out of bounds write in ANGLE
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   156
  * CVE-2024-0742 (bmo#1867152)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   157
    Failure to update user input timestamp
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   158
  * CVE-2024-0743 (bmo#1867408)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   159
    Crash in NSS TLS method
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   160
  * CVE-2024-0744 (bmo#1871089)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   161
    Wild pointer dereference in JavaScript
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   162
  * CVE-2024-0745 (bmo#1871838)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   163
    Stack buffer overflow in WebAudio
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   164
  * CVE-2024-0746 (bmo#1660223)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   165
    Crash when listing printers on Linux
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   166
  * CVE-2024-0747 (bmo#1764343)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   167
    Bypass of Content Security Policy when directive unsafe-inline was set
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   168
  * CVE-2024-0748 (bmo#1783504)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   169
    Compromised content process could modify document URI
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   170
  * CVE-2024-0749 (bmo#1813463)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   171
    Phishing site popup could show local origin in address bar
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   172
  * CVE-2024-0750 (bmo#1863083)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   173
    Potential permissions request bypass via clickjacking
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   174
  * CVE-2024-0751 (bmo#1865689)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   175
    Privilege escalation through devtools
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   176
  * CVE-2024-0752 (bmo#1866840)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   177
    Use-after-free could occur when applying update on macOS
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   178
  * CVE-2024-0753 (bmo#1870262)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   179
    HSTS policy on subdomain could bypass policy of upper domain
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   180
  * CVE-2024-0754 (bmo#1871605)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   181
    Crash when using some WASM files in devtools
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   182
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   183
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   184
    and Thunderbird 115.7
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   185
- requires NSS 3.96.1
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   186
- rebased patches
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   187
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
   188
-------------------------------------------------------------------
1199
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   189
Tue Jan  9 20:36:26 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   190
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   191
- Mozilla Firefox 121.0.1
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   192
  * Fixed unexpected line wrapping in some CJK contexts caused by
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   193
    changes in ideographic space handling. bmo#1870973)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   194
  * Fixed a hang when loading sites containing column-based
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   195
    layouts under some circumstances. bmo#1867784)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   196
  * Fixed missing rounded corners for videos playing over another
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   197
    video. bmo#1869994)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   198
  * Fixed Firefox not closing properly and other applications being
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   199
    unable to use a USB security key after being previously used
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   200
    during a Firefox session. bmo#1863135)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   201
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   202
-------------------------------------------------------------------
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   203
Wed Dec 20 12:59:57 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   204
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   205
- Mozilla Firefox 121.0
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   206
  https://www.mozilla.org/en-US/firefox/121.0/releasenotes
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   207
  MFSA 2023-56 (bsc#1217974)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   208
  * CVE-2023-6856 (bmo#1843782)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   209
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   210
    method with Mesa VM driver
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   211
  * CVE-2023-6135 (bmo#1853908)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   212
    NSS susceptible to "Minerva" attack
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   213
  * CVE-2023-6865 (bmo#1864123)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   214
    Potential exposure of uninitialized data in EncryptingOutputStream
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   215
  * CVE-2023-6857 (bmo#1796023)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   216
    Symlinks may resolve to smaller than expected buffers
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   217
  * CVE-2023-6858 (bmo#1826791)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   218
    Heap buffer overflow in nsTextFragment
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   219
  * CVE-2023-6859 (bmo#1840144)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   220
    Use-after-free in PR_GetIdentitiesLayer
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   221
  * CVE-2023-6866 (bmo#1849037)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   222
    TypedArrays lack sufficient exception handling
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   223
  * CVE-2023-6860 (bmo#1854669)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   224
    Potential sandbox escape due to VideoBridge lack of texture
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   225
    validation
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   226
  * CVE-2023-6867 (bmo#1863863)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   227
    Clickjacking permission prompts using the popup transition
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   228
  * CVE-2023-6861 (bmo#1864118)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   229
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   230
    headless mode
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   231
  * CVE-2023-6868 (bmo#1865488)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   232
    WebPush requests on Firefox for Android did not require VAPID key
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   233
  * CVE-2023-6869 (bmo#1799036)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   234
    Content can paint outside of sandboxed iframe
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   235
  * CVE-2023-6870 (bmo#1823316)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   236
    Android Toast notifications may obscure fullscreen event
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   237
    notifications
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   238
  * CVE-2023-6871 (bmo#1828334)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   239
    Lack of protocol handler warning in some instances
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   240
  * CVE-2023-6872 (bmo#1849186)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   241
    Browsing history leaked to syslogs via GNOME
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   242
  * CVE-2023-6863 (bmo#1868901)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   243
    Undefined behavior in ShutdownObserver()
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   244
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328, bmo#1856090,
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   245
    bmo#1858033, bmo#1858509, bmo#1862777, bmo#1864015)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   246
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   247
    and Thunderbird 115.6
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   248
  * CVE-2023-6873 (bmo#1855327, bmo#1862089, bmo#1862723)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   249
    Memory safety bugs fixed in Firefox 121
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   250
- requires NSS 3.95
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   251
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   252
-------------------------------------------------------------------
1198
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   253
Fri Dec  8 15:55:00 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   254
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   255
- Mozilla Firefox 120.0.1 (boo#1217910)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   256
  * Fixed a bug that was causing persistent startup slowdowns
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   257
    (bmo#1867095)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   258
  * Fixed an issue that was causing 100% CPU usage on sites such as
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   259
    Google Maps. (bmo#1866409)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   260
  * Fixed an issue that was causing YouTube videos to show a green
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   261
    screen when hardware acceleration was enabled. (bmo#1865928)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   262
  * Fixed an issue where the status bar was still visible when
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   263
    viewing fullscreen video. (bmo#1853896)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   264
  * Fixed a startup crash affecting Linux users on some aarch64
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   265
    systems with page sizes other than 4KB. (bmo#1866025)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   266
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   267
-------------------------------------------------------------------
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   268
Wed Nov 22 06:57:37 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   269
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   270
- Mozilla Firefox 120.0
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   271
  https://www.mozilla.org/en-US/firefox/120.0/releasenotes
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   272
  MFSA 2023-49 (bsc#1217230)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   273
  * CVE-2023-6204 (bmo#1841050)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   274
    Out-of-bound memory access in WebGL2 blitFramebuffer
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   275
  * CVE-2023-6205 (bmo#1854076)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   276
    Use-after-free in MessagePort::Entangled
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   277
  * CVE-2023-6206 (bmo#1857430)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   278
    Clickjacking permission prompts using the fullscreen
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   279
    transition
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   280
  * CVE-2023-6207 (bmo#1861344)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   281
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   282
  * CVE-2023-6208 (bmo#1855345)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   283
    Using Selection API would copy contents into X11 primary
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   284
    selection.
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   285
  * CVE-2023-6209 (bmo#1858570)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   286
    Incorrect parsing of relative URLs starting with "///"
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   287
  * CVE-2023-6210 (bmo#1801501)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   288
    Mixed-content resources not blocked in a javascript: pop-up
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   289
  * CVE-2023-6211 (bmo#1850200)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   290
    Clickjacking to load insecure pages in HTTPS-only mode
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   291
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   292
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   293
    bmo#1862782)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   294
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   295
    and Thunderbird 115.5
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   296
  * CVE-2023-6213 (bmo#1849265, bmo#1851118, bmo#1854911)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   297
    Memory safety bugs fixed in Firefox 120
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   298
- rebased patches
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   299
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   300
-------------------------------------------------------------------
1197
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   301
Wed Nov  8 20:27:15 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   302
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   303
- Mozilla Firefox 119.0.1
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   304
  * Fixed a bug causing colors in the <select> HTML element to not
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   305
    be applied to dropdown menu arrows (bmo#1861253)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   306
  * Fixed a bug with the <input> HTML element state not changing
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   307
    when dynamically updating the `disabled` attribute on an
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   308
    ancestor <fieldset> (bmo#1861027)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   309
  * Fixed a bug causing elements with the indeterminate CSS
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   310
    selector in a radio group to not update (bmo#1861346)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   311
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   312
-------------------------------------------------------------------
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   313
Thu Oct 26 10:31:03 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   314
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   315
- Mozilla Firefox 119.0
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   316
  https://www.mozilla.org/en-US/firefox/119.0/releasenotes
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   317
  MFSA 2023-45 (bsc#1216338)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   318
  * CVE-2023-5721 (bmo#1830820)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   319
    Queued up rendering could have allowed websites to clickjack
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   320
  * CVE-2023-5722 (bmo#1738426)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   321
    Cross-Origin size and header leakage
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   322
  * CVE-2023-5723 (bmo#1802057)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   323
    Invalid cookie characters could have led to unexpected errors
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   324
  * CVE-2023-5724 (bmo#1836705)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   325
    Large WebGL draw could have led to a crash
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   326
  * CVE-2023-5725 (bmo#1845739)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   327
    WebExtensions could open arbitrary URLs
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   328
  * CVE-2023-5726 (bmo#1846205)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   329
    Full screen notification obscured by file open dialog on macOS
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   330
  * CVE-2023-5727 (bmo#1847180)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   331
    Download Protections were bypassed by .msix, .msixbundle,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   332
    .appx, and .appxbundle files on Windows
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   333
  * CVE-2023-5728 (bmo#1852729)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   334
    Improper object tracking during GC in the JavaScript engine
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   335
    could have led to a crash.
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   336
  * CVE-2023-5729 (bmo#1823720)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   337
    Fullscreen notification dialog could have been obscured by
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   338
    WebAuthn prompts
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   339
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694, bmo#1848833,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   340
    bmo#1850191, bmo#1850259, bmo#1852596, bmo#1853201, bmo#1854002,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   341
    bmo#1855306, bmo#1855640, bmo#1856695)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   342
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   343
    and Thunderbird 115.4.1
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   344
  * CVE-2023-5731 (bmo#1690111, bmo#1721904, bmo#1851803, bmo#1854068)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   345
    Memory safety bugs fixed in Firefox 119
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   346
- requires NSS 3.94
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   347
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   348
-------------------------------------------------------------------
1195
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   349
Wed Oct 11 18:28:09 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   350
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   351
- Mozilla Firefox 118.0.2
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   352
  * Fix games not loading on betsoft.com (bmo#1856145)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   353
  * Fix printing issues for some SVG images (bmo#1853727)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   354
  * Fix CORS XHR with authentication no longer working (bmo#1855650)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   355
  * Fix h264 WebRTC video not working in some contexts (bmo#1855636)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   356
  * Fix Firefox Translations not working on some pages
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   357
    (bmo#1841656, bmo#1855307)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   358
  * Stability fixes (bmo#1851991, bmo#1799326, bmo#1856637)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   359
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   360
-------------------------------------------------------------------
1196
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   361
Sat Sep 30 19:51:56 UTC 2023 - Björn Bidar <bjorn.bidar@thaodan.de>
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   362
1197
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   363
- Activate KDE integration again, included rebased and updated
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   364
  patches, firefox-kde.patch and mozilla-kde.patch, (upstream
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   365
  removed special files handling for preferences but that has no
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   366
  effect since we haven't shipped obsolete kde.js for a while)
1196
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   367
  (boo#1216027)
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   368
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   369
-------------------------------------------------------------------
1194
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   370
Fri Sep 29 06:50:26 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   371
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   372
- Mozilla Firefox 118.0.1
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   373
  MFSA 2023-44 (bsc#1215814)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   374
  * CVE-2023-5217 (bmo#1855550),
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   375
    Heap buffer overflow in libvpx
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   376
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   377
-------------------------------------------------------------------
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   378
Mon Sep 25 06:35:49 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   379
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   380
- Mozilla Firefox 118.0
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   381
  MFSA 2023-41 (bsc#1215575)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   382
  * CVE-2023-5168 (bmo#1846683)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   383
    Out-of-bounds write in FilterNodeD2D1
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   384
  * CVE-2023-5169 (bmo#1846685)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   385
    Out-of-bounds write in PathOps
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   386
  * CVE-2023-5170 (bmo#1846686)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   387
    Memory leak from a privileged process
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   388
  * CVE-2023-5171 (bmo#1851599)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   389
    Use-after-free in Ion Compiler
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   390
  * CVE-2023-5172 (bmo#1852218)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   391
    Memory Corruption in Ion Hints
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   392
  * CVE-2023-5173 (bmo#1823172)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   393
    Out-of-bounds write in HTTP Alternate Services
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   394
  * CVE-2023-5174 (bmo#1848454)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   395
    Double-free in process spawning on Windows
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   396
  * CVE-2023-5175 (bmo#1849704)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   397
    Use-after-free of ImageBitmap during process shutdown
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   398
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962,
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   399
    bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   400
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   401
    and Thunderbird 115.3
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   402
- requires NSS 3.93
1193
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   403
- add mozilla-bmo1822730.patch
1194
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   404
- deactivated KDE integration temporarily
1195
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   405
  (removed mozilla-kde.patch and firefox-kde.patch for now)
1193
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   406
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   407
-------------------------------------------------------------------
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   408
Tue Sep 12 17:04:01 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   409
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   410
- Mozilla Firefox 117.0.1
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   411
  * Fix a bug causing extensions using an event page for long-
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   412
    running tasks to be terminated while running, causing
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   413
    unexpected behavior changes (bmo#1851373)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   414
  * Temporarily revert an intentional behavior change preventing
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   415
    Javascript from changing URL.protocol (bmo#1850954).
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   416
  * Fix audio worklets not working for sites using WebAssembly
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   417
    exception handling (bmo#1851468)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   418
  * Fix the Reopen all tabs option in the Recently closed tabs
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   419
    menu sometimes failing to open all tabs (bmo#1850856)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   420
  * Fix the bookmarks menu sometimes remaining partially visible
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   421
    when minimizing Firefox (bmo#1843700)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   422
  * Fix an issue causing incorrect time zones to be detected on
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   423
    some sites (bmo#1848615)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   424
  * MFSA 2023-40 CVE-2023-4863 (boo#1215231)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   425
    Heap buffer overflow in WebP
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   426
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   427
-------------------------------------------------------------------
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   428
Sun Aug 27 08:51:28 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   429
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   430
- Mozilla Firefox 117.0
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   431
  https://www.mozilla.org/en-US/firefox/117.0/releasenotes
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   432
  MFSA 2023-34 (bsc#1214606)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   433
  * CVE-2023-4573 (bmo#1846687)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   434
    Memory corruption in IPC CanvasTranslator
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   435
  * CVE-2023-4574 (bmo#1846688)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   436
    Memory corruption in IPC ColorPickerShownCallback
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   437
  * CVE-2023-4575 (bmo#1846689)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   438
    Memory corruption in IPC FilePickerShownCallback
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   439
  * CVE-2023-4576 (bmo#1846694)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   440
    Integer Overflow in RecordedSourceSurfaceCreation
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   441
  * CVE-2023-4577 (bmo#1847397)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   442
    Memory corruption in JIT UpdateRegExpStatics
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   443
  * CVE-2023-4578 (bmo#1839007)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   444
    Error reporting methods in SpiderMonkey could have triggered
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   445
    an Out of Memory Exception
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   446
  * CVE-2023-4579 (bmo#1842766)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   447
    Persisted search terms were formatted as URLs
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   448
  * CVE-2023-4580 (bmo#1843046)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   449
    Push notifications saved to disk unencrypted
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   450
  * CVE-2023-4581 (bmo#1843758)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   451
    XLL file extensions were downloadable without warnings
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   452
  * CVE-2023-4582 (bmo#1773874)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   453
    Buffer Overflow in WebGL glGetProgramiv
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   454
  * CVE-2023-4583 (bmo#1842030)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   455
    Browsing Context potentially not cleared when closing Private
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   456
    Window
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   457
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   458
    bmo#1846526, bmo#1847529)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   459
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   460
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   461
  * CVE-2023-4585 (bmo#1751583, bmo#1841082, bmo#1847904, bmo#1848999)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   462
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   463
    and Thunderbird 115.2
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   464
- requires
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   465
  NSS = 3.92
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   466
  rustc = 1.71
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   467
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   468
-------------------------------------------------------------------
1192
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   469
Thu Aug 17 18:20:18 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   470
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   471
- Mozilla Firefox 116.0.3
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   472
  * Fixed an issue for OPFS users that broke access to files that
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   473
    were locally cached in a previous version
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   474
    (bmo#1847989, bmo#1847619)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   475
  * Fixed an issue that was breaking screensharing for some users
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   476
    on Wayland (bmo#1841851)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   477
  * Fixed an issue where a fullscreen notification was persistently
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   478
    being shown to a user, even after disabling it (bmo#1847901)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   479
  * Fixed an issue where Firefox would hang when doing a Google
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   480
    search (bmo#1847066)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   481
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   482
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   483
Tue Aug 15 09:51:15 UTC 2023 - Adam Majer <adam.majer@suse.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   484
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   485
- After further testing on memory consumption during linking, it's
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   486
  safe to remove most of the memory reducing options for ix86 linker.
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   487
  A combination of these actually resulted in the OOM condition.
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   488
  It's even possible to add basic debugging info while keeping
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   489
  linker memory consumption at about 2GB
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   490
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   491
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   492
Thu Aug 10 16:32:02 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   493
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   494
- Mozilla Firefox 116.0.2
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   495
  * fixes for other platforms
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   496
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   497
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   498
Wed Aug  9 09:52:36 UTC 2023 - Adam Majer <adam.majer@suse.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   499
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   500
- Workarold ld bug causing OOM when linking on 32-bit
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   501
- Remove -j1 limit on x86. The build runs on 64-bit kernel with a
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   502
  32-bit userland. This means there is plenty of memory available
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   503
  but userland is limited to just under 4GB per process.
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   504
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   505
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   506
Sat Aug  5 17:46:22 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   507
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   508
- Mozilla Firefox 116.0.1
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   509
  * fixes for other platforms
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   510
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   511
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   512
Sat Aug  5 10:04:18 UTC 2023 - Andreas Schwab <schwab@suse.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   513
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   514
- ship vaapitest binary for supported archs
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   515
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   516
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   517
Fri Aug  4 09:55:05 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   518
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   519
- re-enable ppc64le
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   520
- ship v4l2test binary for supported archs
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   521
- drop obsolete mozilla-bmo1775202.patch
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   522
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   523
-------------------------------------------------------------------
1191
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   524
Sun Jul 30 19:55:49 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   525
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   526
- Mozilla Firefox 116.0
1192
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   527
  * https://www.mozilla.org/en-US/firefox/116.0/releasenotes/
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   528
  MFSA 2023-29 (bsc#1213746)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   529
  * CVE-2023-4045 (bmo#1833876)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   530
    Offscreen Canvas could have bypassed cross-origin restrictions
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   531
  * CVE-2023-4046 (bmo#1837686)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   532
    Incorrect value used during WASM compilation
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   533
  * CVE-2023-4047 (bmo#1839073)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   534
    Potential permissions request bypass via clickjacking
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   535
  * CVE-2023-4048 (bmo#1841368)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   536
    Crash in DOMParser due to out-of-memory conditions
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   537
  * CVE-2023-4049 (bmo#1842658)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   538
    Fix potential race conditions when releasing platform objects
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   539
  * CVE-2023-4050 (bmo#1843038)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   540
    Stack buffer overflow in StorageManager
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   541
  * CVE-2023-4051 (bmo#1821884)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   542
    Full screen notification obscured by file open dialog
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   543
  * CVE-2023-4052 (bmo#1824420)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   544
    File deletion and privilege escalation through Firefox uninstaller
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   545
  * CVE-2023-4053 (bmo#1839079)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   546
    Full screen notification obscured by external program
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   547
  * CVE-2023-4054 (bmo#1840777)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   548
    Lack of warning when opening appref-ms files
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   549
  * CVE-2023-4055 (bmo#1782561)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   550
    Cookie jar overflow caused unexpected cookie jar state
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   551
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   552
    bmo#1842325, bmo#1843847)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   553
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   554
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   555
  * CVE-2023-4057 (bmo#1841682)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   556
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   557
    and Thunderbird 115.1
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   558
  * CVE-2023-4058 (bmo#1819160, bmo#1828024)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   559
    Memory safety bugs fixed in Firefox 116
1191
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   560
- require NSS 3.91
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   561
- remove obsolete mozilla-fix-top-level-asm.patch
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   562
- re-enable LTO
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   563
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   564
-------------------------------------------------------------------
1190
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   565
Fri Jul 28 20:56:00 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   566
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   567
- Mozilla Firefox 115.0.3
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   568
  * fixes for other platforms
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   569
- remove bashisms from firefox startup script (boo#1213657)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   570
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   571
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   572
Thu Jul 13 13:30:20 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   573
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   574
- Mozilla Firefox 115.0.2
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   575
  * Fixed a bug with displaying a caret in the text editor on some websites
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   576
    (bmo#1840804)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   577
  * Fixed a bug with broken audio rendering on some websites (bmo#1841982)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   578
  * Fixed a bug with patternTransform translate using the wrong units
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   579
    (bmo#1840746)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   580
  MFSA 2023-26 (bsc#1213230)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   581
  * CVE-2023-3600 (bmo#1839703)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   582
    Use-after-free in workers
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   583
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   584
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   585
Fri Jul  7 19:39:30 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   586
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   587
- Mozilla Firefox 115.0.1
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   588
  * fixes for other platforms
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   589
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   590
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   591
Sun Jul  2 16:00:53 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   592
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   593
- Mozilla Firefox 115.0
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   594
  * Support for importing payment methods saved in Chrome-based browser
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   595
  * Hardware video decoding is now enabled for Intel GPUs on Linux
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   596
  * The Tab Manager dropdown now features close buttons, so tabs
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   597
    can be closed more quickly
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   598
  * Streamlined the user interface for importing data in from other browsers
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   599
  * Users without platform support for H264 video decoding can now
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   600
    fallback to Cisco's OpenH264 plugin for playback.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   601
  * Undo and redo are now available in Password fields
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   602
  * Changed: On Linux, middle clicks on the new tab button will
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   603
    now open the xclipboard contents in the new tab. If the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   604
    xclipboard content is a URL then that URL is opened, any
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   605
    other text is opened with your default search provider.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   606
  * Changed: For users with a Firefox Colorways built-in theme,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   607
    the theme will be automatically migrated to the same theme
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   608
    hosted on addons.mozilla.org for Firefox profiles that have
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   609
    disabled add-ons auto-updates. This will allow users to keep
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   610
    their Colorways theme when they are later removed from
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   611
    Firefox installer files.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   612
  * Changed: Certain Firefox users may come across a message in
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   613
    the extensions panel indicating that their add-ons are not
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   614
    allowed on the site currently open. We have introduced a new
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   615
    back-end feature to only allow some extensions monitored by
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   616
    Mozilla to run on specific websites for various reasons,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   617
    including security concerns.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   618
  * HTML5: The builtin editor now behaves similarly to other
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   619
    browsers with `contenteditable` and `designMode` when
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   620
    splitting a node, e.g. typing Enter to split a paragraph, and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   621
    also when joining two nodes, e.g. typing Backspace at the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   622
    start of a paragraph to join the paragraph and the previous
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   623
    one.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   624
    When a node is split, the builtin editor creates a new node
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   625
    after the original one instead of before, i.e. creates the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   626
    right node instead of the left node.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   627
    Similarly, when two nodes are joined, the builtin editor
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   628
    deletes the latter node and moves its children to the end of
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   629
    the preceding node instead of deleting the former node and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   630
    moving its child to the start of the following node.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   631
  * HTML5: WebRTC application developers can now specify a target
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   632
    in milliseconds of media for the jitter buffer to hold.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   633
    Altering the target value allows applications to control the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   634
    tradeoff between playout delay and the risk of running out of
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   635
    audio or video frames due to network jitter.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   636
  * HTML5: Change array by copy provides additional methods on
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   637
    `Array.prototype` and `TypedArray.prototype` to enable
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   638
    changes on the array by returning a new copy of it with the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   639
    change.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   640
  * HTML5: The animation-composition property is now supported,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   641
    allowing a declarative way to define the composite operation
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   642
    used when multiple animations affect the same property
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   643
    simultaneously.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   644
  * HTML5: Added the URL.canParse() function to allow easy and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   645
    fast checking if URLs are valid and parseable.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   646
  * HTML5: IndexedDB is now also supported in private browsing
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   647
    without memory limits thanks to encrypted storage on disk.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   648
    The temporary keys to decrypt the information are hold in RAM
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   649
    only and all stored information is purged at the normal end
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   650
    of a private browsing session from disk.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   651
  * HTML5: Supports conditions are now supported in CSS import
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   652
    rules @import supports(...)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   653
  * Developer: In web development, we rely on third-party
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   654
    libraries which you may not be interested in while debugging.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   655
    These can be ignored. Ignoring them means that breakpoints
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   656
    will not get hit and they are skipped during stepping.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   657
    You can now choose to **Hide ignore-listed sources** in the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   658
    Developer Tools source tree
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   659
  * Developer: We have introduced a new option,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   660
    `devtools.f12_enabled`, that can be utilized to prevent the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   661
    accidental use of the F12 key, which opens the DevTools
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   662
    toolbox (bug).
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   663
  * Enterprise: You can find information about policy updates and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   664
    enterprise specific bug fixes in the Firefox for Enterprise
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   665
    115 Release Notes.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   666
  MFSA 2023-22 (bsc#1212438)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   667
  * CVE-2023-3482 (bmo#1839464)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   668
    Block all cookies bypass for localstorage
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   669
  * CVE-2023-37201 (bmo#1826002)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   670
    Use-after-free in WebRTC certificate generation
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   671
  * CVE-2023-37202 (bmo#1834711)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   672
    Potential use-after-free from compartment mismatch in SpiderMonkey
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   673
  * CVE-2023-37203 (bmo#291640)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   674
    Drag and Drop API may provide access to local system files
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   675
  * CVE-2023-37204 (bmo#1832195)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   676
    Fullscreen notification obscured via option element
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   677
  * CVE-2023-37205 (bmo#1704420)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   678
    URL spoofing in address bar using RTL characters
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   679
  * CVE-2023-37206 (bmo#1813299)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   680
    Insufficient validation of symlinks in the FileSystem API
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   681
  * CVE-2023-37207 (bmo#1816287)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   682
    Fullscreen notification obscured
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   683
  * CVE-2023-37208 (bmo#1837675)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   684
    Lack of warning when opening Diagcab files
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   685
  * CVE-2023-37209 (bmo#1837993)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   686
    Use-after-free in `NotifyOnHistoryReload`
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   687
  * CVE-2023-37210 (bmo#1821886)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   688
    Full-screen mode exit prevention
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   689
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   690
    bmo#1836550, bmo#1837450)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   691
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   692
    and Thunderbird 102.13
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   693
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206, bmo#1827076,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   694
    bmo#1828690, bmo#1833503, bmo#1835710, bmo#1838587)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   695
    Memory safety bugs fixed in Firefox 115
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   696
- Requires NSS 3.90
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   697
- Add patches:
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   698
  mozilla-rust-disable-future-incompat.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   699
  mozilla-bmo1775202.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   700
  mozilla-partial-revert-1768632.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   701
- removed obsolete mozilla-buildfixes.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   702
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   703
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   704
Tue Jun 20 19:49:51 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   705
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   706
- Mozilla Firefox 114.0.2:
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   707
  * Several crash fixes
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   708
  * Web Extensions: Fixes for 114 regressions in Native Messaging
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   709
    support
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   710
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   711
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   712
Tue Jun 20 06:30:02 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   713
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   714
- do not enable LTO as it caused crashes now (boo#1212101)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   715
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   716
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   717
Sat Jun 10 14:48:07 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   718
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   719
- Mozilla Firefox 114.0.1
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   720
  * Fix a startup crash (bmo#1837201, boo#1212101)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   721
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   722
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   723
Fri Jun  9 11:05:47 UTC 2023 - Martin Sirringhaus <martin.sirringhaus@suse.com>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   724
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   725
- Only install vaapitest for wayland-enabled builds, where it gets built
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   726
- Rebase mozilla-silence-no-return-type.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   727
- Rebase s390x-patches, and remove obsolete patches:
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   728
  mozilla-bmo1005535.patch mozilla-s390x-skia-gradient.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   729
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   730
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   731
Mon Jun  5 21:22:19 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   732
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   733
- Mozilla Firefox 114.0
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   734
  MFSA 2023-20 (bsc#1211922)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   735
  * CVE-2023-34414 (bmo#1695986)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   736
    Click-jacking certificate exceptions through rendering lag
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   737
  * CVE-2023-34415 (bmo#1811999)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   738
    Site-isolation bypass on sites that allow open redirects to
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   739
    data: urls
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   740
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   741
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   742
    bmo#1830206, bmo#1830795, bmo#1833339)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   743
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   744
    102.12
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   745
  * CVE-2023-34417 (bmo#1746447, bmo#1820903, bmo#1832832)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   746
    Memory safety bugs fixed in Firefox 114
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   747
  * New: Added UI to manage the DNS over HTTPS exception list.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   748
    (bmo#1596847)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   749
  * New: Bookmarks can now be searched from the Bookmarks menu.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   750
    The Bookmarks menu is accessible by adding the *Bookmarks
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   751
    menu* button to the toolbar. (bmo#1736937)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   752
  * New: Restrict searches to your local browsing history by
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   753
    selecting *Search history* from the History, Library or
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   754
    Application menu buttons. (bmo#1736939)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   755
  * New: Mac users can now capture video from their cameras in
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   756
    all supported native resolutions. This enables resolutions
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   757
    higher than 1280x720. (bmo#1806604)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   758
  * New: It is now possible to reorder the extensions listed in
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   759
    the extensions panel. (bmo#1805924)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   760
  * New: Users on macOS, Linux, and Windows 7 can now use FIDO2 /
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   761
    WebAuthn authenticators over USB. Some advanced features,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   762
    such as fully passwordless logins, require a PIN to be set on
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   763
    the authenticator. (bmo#1814487)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   764
  * New: Pocket Recommended content can now be seen in France,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   765
    Italy, and Spain. (bmo#None)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   766
  * Changed: DNS over HTTPS settings are now part of  the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   767
    *Privacy & Security* section of the *Settings* page and allow
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   768
    the user to choose from all the supported modes.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   769
    (bmo#1610741)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   770
  * HTML5: DOM: Added support for ES Modules on DedicatedWorker
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   771
    and SharedWorker
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   772
  * HTML5: WebTransport is now enabled by default and will be
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   773
    going to release with 114. As the original Explainer  notes,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   774
    it enables multiple use-cases that are hard or impossible to
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   775
    handle without it, especially for Gaming and live streaming.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   776
    It covers cases that are problematic for alternative
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   777
    mechanisms, such as WebSockets.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   778
    Built on top of HTTP3 (HTTP2 support will be coming later).
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   779
    The current implementation in Firefox is passing 505 out of
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   780
    565 Web-Platform Tests.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   781
  * HTML5: CSS: The `infinity` and `NaN` constants are now
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   782
    supported inside the `calc()` function. (bmo#1830759)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   783
  * Developer: The *Copy as cURL* feature, available in the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   784
    Network panel, has been enhanced. It now supports the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   785
    -`-compressed` argument. (bmo#1776120)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   786
  * Developer: The Accessibility Inspector has been improved to
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   787
    accurately recognize all the ARIA roles like `banner`,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   788
    `main`, `navigation`, and `contentinfo`, etc. This
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   789
    enhancement is particularly beneficial for web developers
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   790
    working with ARIA roles to improve web accessibility.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   791
    (bmo#1572512)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   792
  * Developer: Firefox now provides support for the CSS Cascading
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   793
    Level 4 `supports()` syntax for `@import` rules. This allows
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   794
    for the importation of other stylesheets based on support-
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   795
    dependency. In addition, the Inspector panel now accurately
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   796
    displays the conditions at the top of the imported rule.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   797
- requires NSS 3.89.1
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   798
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   799
-------------------------------------------------------------------
1189
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   800
Wed May 24 19:26:35 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   801
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   802
- Mozilla Firefox 113.0.2 (boo#1211696)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   803
  * Fixed: Fixed a bug which could cause Firefox to freeze on
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   804
    some pages when loading them with the Developer Tools Web
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   805
    Console open (bmo#1828026)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   806
  * Fixed: Fixed a bug which would cause the bookmarks and
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   807
    history sidebars to not properly react to the browser window
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   808
    being vertically resized (bmo#1831535)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   809
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   810
-------------------------------------------------------------------
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   811
Sat May 13 20:56:05 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   812
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   813
- Mozilla Firefox 113.0.1
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   814
  * UI fixes for other platforms
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   815
- upstream signing key updated
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   816
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   817
-------------------------------------------------------------------
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   818
Tue May  9 21:12:38 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   819
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   820
- Mozilla Firefox 113.0
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   821
  * https://www.mozilla.org/en-US/firefox/113.0/releasenotes
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   822
  MFSA 2023-16 (bsc#1211175)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   823
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   824
    Browser prompts could have been obscured by popups
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   825
  * CVE-2023-32206 (bmo#1824892)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   826
    Crash in RLBox Expat driver
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   827
  * CVE-2023-32207 (bmo#1826116)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   828
    Potential permissions request bypass via clickjacking
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   829
  * CVE-2023-32208 (bmo#1646034)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   830
    Leak of script base URL in service workers via import()
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   831
  * CVE-2023-32209 (bmo#1767194)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   832
    Persistent DoS via favicon image
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   833
  * CVE-2023-32210 (bmo#1776755)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   834
    Incorrect principal object ordering
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   835
  * CVE-2023-32211 (bmo#1823379)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   836
    Content process crash due to invalid wasm code
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   837
  * CVE-2023-32212 (bmo#1826622)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   838
    Potential spoof due to obscured address bar
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   839
  * CVE-2023-32213 (bmo#1826666)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   840
    Potential memory corruption in FileReader::DoReadData()
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   841
  * MFSA-TMP-2023-0002 (bmo#1814560, bmo#1814790, bmo#1819796)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   842
    Race condition in dav1d decoding
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   843
  * CVE-2023-32214 (bmo#1828716)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   844
    Potential DoS via exposed protocol handlers
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   845
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856, bmo#1820210,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   846
    bmo#1821480, bmo#1827019, bmo#1827024, bmo#1827144, bmo#1827359,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   847
    bmo#1830186)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   848
    Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   849
  * CVE-2023-32216 (bmo#1746479, bmo#1806852, bmo#1815987,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   850
    bmo#1820359, bmo#1823568, bmo#1824803, bmo#1824834, bmo#1825170,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   851
    bmo#1827020, bmo#1828130)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   852
    Memory safety bugs fixed in Firefox 113
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   853
- removed obsolete mozilla-bmo1568145.patch
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   854
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   855
-------------------------------------------------------------------
1188
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   856
Sun May  7 19:47:00 UTC 2023 - Aaron Puchert <aaronpuchert@alice-dsl.net>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   857
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   858
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   859
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   860
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   861
Tue Apr 25 16:01:07 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   862
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   863
- Mozilla Firefox 112.0.2
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   864
  * Fix a high memory usage issue with animated images in minimized
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   865
    (or completely covered) windows, especially when using animated
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   866
    themes (bmo#1828587)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   867
  * Fix an issue where Linux users with bitmap fonts installed may
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   868
    have had entire sections of text invisible to them on some
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   869
    sites (bmo#1827950)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   870
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   871
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   872
Fri Apr 21 09:48:25 UTC 2023 - Manfred Hollstein <manfred.h@gmx.net>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   873
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   874
- Include Leap 15.5 in check for which python version is required.
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   875
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   876
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   877
Thu Apr 20 13:24:13 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   878
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   879
- Mozilla Firefox 112.0.1
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   880
  * Fix a bug where cookie dates appear to be set in the far
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   881
    future after updating Firefox. This may have caused cookies to
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   882
    be unintentionally purged (bmo#1827669)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   883
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   884
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   885
Mon Apr 10 21:58:19 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   886
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   887
- Mozilla Firefox 112.0
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   888
  * https://www.mozilla.org/en-US/firefox/112.0/releasenotes/
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   889
  MFSA 2023-13 (bsc#1210212)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   890
  * CVE-2023-29531 (bmo#1794292)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   891
    Out-of-bound memory access in WebGL on macOS
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   892
  * CVE-2023-29532 (bmo#1806394)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   893
    Mozilla Maintenance Service Write-lock bypass
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   894
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   895
    Fullscreen notification obscured
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   896
  * CVE-2023-29534 (bmo#1816007, bmo#1816059, bmo#1821155, bmo#1821576,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   897
    bmo#1821906, bmo#1822298, bmo#1822305)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   898
    Fullscreen notification could have been obscured on Firefox
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   899
    for Android
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   900
  * MFSA-TMP-2023-0001 (bmo#1819244)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   901
    Double-free in libwebp
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   902
  * CVE-2023-29535 (bmo#1820543)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   903
    Potential Memory Corruption following Garbage Collector compaction
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   904
  * CVE-2023-29536 (bmo#1821959)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   905
    Invalid free from JavaScript code
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   906
  * CVE-2023-29537 (bmo#1823365, bmo#1824200, bmo#1825569)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   907
    Data Races in font initialization code
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   908
  * CVE-2023-29538 (bmo#1685403)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   909
    Directory information could have been leaked to WebExtensions
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   910
  * CVE-2023-29539 (bmo#1784348)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   911
    Content-Disposition filename truncation leads to Reflected
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   912
    File Download
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   913
  * CVE-2023-29540 (bmo#1790542)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   914
    Iframe sandbox bypass using redirects and sourceMappingUrls
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   915
  * CVE-2023-29541 (bmo#1810191)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   916
    Files with malicious extensions could have been downloaded
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   917
    unsafely on Linux
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   918
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   919
    Bypass of file download extension restrictions
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   920
  * CVE-2023-29543 (bmo#1816158)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   921
    Use-after-free in debugging APIs
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   922
  * CVE-2023-29544 (bmo#1818781)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   923
    Memory Corruption in garbage collector
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   924
  * CVE-2023-29545 (bmo#1823077)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   925
    Windows Save As dialog resolved environment variables
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   926
  * CVE-2023-29546 (bmo#1780842)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   927
    Screen recording in Private Browsing included address bar on
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   928
    Android
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   929
  * CVE-2023-29547 (bmo#1783536)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   930
    Secure document cookie could be spoofed with insecure cookie
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   931
  * CVE-2023-29548 (bmo#1822754)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   932
    Incorrect optimization result on ARM64
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   933
  * CVE-2023-29549 (bmo#1823042)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   934
    Javascript's bind function may have failed
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   935
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498, bmo#1814217,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   936
    bmo#1818357, bmo#1818762, bmo#1819493, bmo#1820389, bmo#1820602,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   937
    bmo#1821448, bmo#1822413, bmo#1824828)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   938
    Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   939
  * CVE-2023-29551 (bmo#1763625, bmo#1814314, bmo#1815798, bmo#1815890,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   940
    bmo#1819239, bmo#1819465, bmo#1819486, bmo#1819492, bmo#1819957,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   941
    bmo#1820514, bmo#1820776, bmo#1821838, bmo#1822175, bmo#1823547)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   942
    Memory safety bugs fixed in Firefox 112
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   943
- requires
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   944
  * NSS 3.89
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   945
  * Python >= 3.7 (for build)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   946
- removed obsolete mozilla-bmo1807652.patch
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   947
- Fix Icons displayed incorrectly on GNOME/wayland via WMCLASS
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   948
  in desktop file
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   949
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   950
-------------------------------------------------------------------
1187
17bc5a064ab4 excludearch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1186
diff changeset
   951
Mon Mar 27 15:17:17 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
1185
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   952
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   953
- Mozilla Firefox 111.0.1 (boo#1209688)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   954
  * Fixed a crash on macOS while pinch-zooming under some circumstances
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   955
    (bmo#1658986)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   956
  * Fixed a bug causing Firefox to freeze on startup for some
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   957
    Windows users (bmo#1823159)
1186
5185fb499263 fix build in TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1185
diff changeset
   958
- fix build on Tumbleweed (mozilla-bmo1807652.patch)
1187
17bc5a064ab4 excludearch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1186
diff changeset
   959
- exclude i586/i686 once again because it fails to link libxul due
17bc5a064ab4 excludearch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1186
diff changeset
   960
  to its size
1185
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   961
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   962
-------------------------------------------------------------------
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   963
Tue Mar 14 14:29:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   964
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   965
- Mozilla Firefox 111.0
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   966
  * https://www.mozilla.org/en-US/firefox/111.0/releasenotes
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   967
  MFSA 2023-09 (bsc#1209173)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   968
  * CVE-2023-28159 (bmo#1783561)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   969
    Fullscreen Notification could have been hidden by download
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   970
    popups on Android
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   971
  * CVE-2023-25748 (bmo#1798798)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   972
    Fullscreen Notification could have been hidden by window
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   973
    prompts on Android
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   974
  * CVE-2023-25749 (bmo#1810705)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   975
    Firefox for Android may have opened third-party apps without
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   976
    a prompt
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   977
  * CVE-2023-25750 (bmo#1814733)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   978
    Potential ServiceWorker cache leak during private browsing mode
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   979
  * CVE-2023-25751 (bmo#1814899)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   980
    Incorrect code generation during JIT compilation
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   981
  * CVE-2023-28160 (bmo#1802385)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   982
    Redirect to Web Extension files may have leaked local path
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   983
  * CVE-2023-28164 (bmo#1809122)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   984
    URL being dragged from a removed cross-origin iframe into the
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   985
    same tab triggered navigation
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   986
  * CVE-2023-28161 (bmo#1811181)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   987
    One-time permissions granted to a local file were extended to
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   988
    other local files loaded in the same tab
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   989
  * CVE-2023-28162 (bmo#1811327)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   990
    Invalid downcast in Worklets
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   991
  * CVE-2023-25752 (bmo#1811627)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   992
    Potential out-of-bounds when accessing throttled streams
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   993
  * CVE-2023-28163 (bmo#1817768)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   994
    Windows Save As dialog resolved environment variables
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   995
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904, bmo#1817442,
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   996
    bmo#1818674)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   997
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   998
  * CVE-2023-28177 (bmo#1803109, bmo#1808832, bmo#1809542, bmo#1817336)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   999
    Memory safety bugs fixed in Firefox 111
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1000
- ensure gcc11-c++ gets used on Leap 15.5
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1001
- requires NSS >= 3.88.1
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1002
- removed obsolete patches
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1003
  gcc13-fix.patch
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1004
  mozilla-bmo1810584.patch
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1005
- rebased patches
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1006
- update create-tar.sh
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1007
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
  1008
-------------------------------------------------------------------
1184
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1009
Tue Mar  7 09:40:11 UTC 2023 - Martin Liška <mliska@suse.cz>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1010
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1011
- Cherry-pick upstream changes for GCC 13 in gcc13-fix.patch.
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1012
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1013
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1014
Mon Mar  6 20:09:41 UTC 2023 - Andreas Schwab <schwab@suse.de>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1015
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1016
- Limit memory use on riscv64
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1017
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1018
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1019
Sat Mar  4 16:03:22 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1020
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1021
- Fix 32 bit build bmo#1810584 (add mozilla-bmo1810584.patch)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1022
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1023
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1024
Fri Mar  3 17:29:27 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1025
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1026
- Mozilla Firefox 110.0.1 (boo#1208886)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1027
  * Fixed clearing recent cookies clears all cookies
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1028
    (bmo#1816279)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1029
  * Fixed WebGL crashes on Linux when ran inside a VMWare virtual
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1030
    machine (bmo#1807942)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1031
  * Fixed a bug with CSP serialization causing bugs with the MitID
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1032
    Digital ID in Denmark (bmo#1819096)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1033
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1034
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1035
Wed Feb 15 09:56:46 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1036
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1037
- Mozilla Firefox 110.0
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1038
  * https://www.mozilla.org/en-US/firefox/110.0/releasenotes
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1039
  MFSA 2023-05 (bsc#1208144)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1040
  * CVE-2023-25728 (bmo#1790345)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1041
    Content security policy leak in violation reports using iframes
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1042
  * CVE-2023-25730 (bmo#1794622)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1043
    Screen hijack via browser fullscreen mode
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1044
  * CVE-2023-25743 (bmo#1800203)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1045
    Fullscreen notification not shown in Firefox Focus
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1046
  * CVE-2023-0767 (bmo#1804640)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1047
    Arbitrary memory write via PKCS 12 in NSS
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1048
  * CVE-2023-25735 (bmo#1810711)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1049
    Potential use-after-free from compartment mismatch in SpiderMonkey
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1050
  * CVE-2023-25737 (bmo#1811464)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1051
    Invalid downcast in SVGUtils::SetupStrokeGeometry
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1052
  * CVE-2023-25738 (bmo#1811852)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1053
    Printing on Windows could potentially crash Firefox with some
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1054
    device drivers
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1055
  * CVE-2023-25739 (bmo#1811939)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1056
    Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1057
  * CVE-2023-25729 (bmo#1792138)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1058
    Extensions could have opened external schemes without user knowledge
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1059
  * CVE-2023-25732 (bmo#1804564)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1060
    Out of bounds memory write from EncodeInputStream
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1061
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143, bmo#1812338)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1062
    Opening local .url files could cause unexpected network loads
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1063
  * CVE-2023-25740 (bmo#1812354)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1064
    Opening local .scf files could cause unexpected network loads
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1065
  * CVE-2023-25731 (bmo#1801542)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1066
    Prototype pollution when rendering URLPreview
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1067
  * CVE-2023-25733 (bmo#1808632)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1068
    Possible null pointer dereference in TaskbarPreviewCallback
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1069
  * CVE-2023-25736 (bmo#1811331)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1070
    Invalid downcast in GetTableSelectionMode
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1071
  * CVE-2023-25741 (bmo#1437126, bmo#1812611, bmo#1813376)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1072
    Same-origin policy leak via image drag and drop
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1073
  * CVE-2023-25742 (bmo#1813424)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1074
    Web Crypto ImportKey crashes tab
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1075
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1076
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1077
  * CVE-2023-25745 (bmo#1688592, bmo#1797186, bmo#1804998,
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1078
    bmo#1806521, bmo#1813284)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1079
    Memory safety bugs fixed in Firefox 110
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1080
- requires
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1081
  NSS = 3.87
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1082
  rust/cargo = 1.66
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1083
- update create-tar.sh
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1084
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
  1085
-------------------------------------------------------------------
1183
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1086
Wed Feb  1 19:48:47 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1087
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1088
- Mozilla Firefox 109.0.1
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1089
  * Fixed jank when loading pages containing a large number of
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1090
    emoji characters (bmo#1809081)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1091
  * Fixed an issue causing authentication prompts to not appear
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1092
    when loading pages in some enterprise environments
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1093
    (bmo#1809151)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1094
  * ixed inconsistent sizing of event listener checkboxes inside
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1095
    the Inspector developer tool (bmo#1811760)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1096
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1097
-------------------------------------------------------------------
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1098
Mon Jan 16 06:54:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1099
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1100
- Mozilla Firefox 109.0
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1101
  MFSA 2023-01 (bsc#1207119)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1102
  * CVE-2023-23597 (bmo#1538028)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1103
    Logic bug in process allocation allowed to read arbitrary
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1104
    files
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1105
  * CVE-2023-23598 (bmo#1800425)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1106
    Arbitrary file read from GTK drag and drop on Linux
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1107
  * CVE-2023-23599 (bmo#1777800)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1108
    Malicious command could be hidden in devtools output on
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1109
    Windows
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1110
  * CVE-2023-23600 (bmo#1787034)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1111
    Notification permissions persisted between Normal and Private
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1112
    Browsing on Android
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1113
  * CVE-2023-23601 (bmo#1794268)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1114
    URL being dragged from cross-origin iframe into same tab
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1115
    triggers navigation
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1116
  * CVE-2023-23602 (bmo#1800890)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1117
    Content Security Policy wasn't being correctly applied to
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1118
    WebSockets in WebWorkers
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1119
  * CVE-2023-23603 (bmo#1800832)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1120
    Calls to <code>console.log</code> allowed bypasing Content
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1121
    Security Policy via format directive
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1122
  * CVE-2023-23604 (bmo#1802346)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1123
    Creation of duplicate <code>SystemPrincipal</code> from less
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1124
    secure contexts
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1125
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1126
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1127
  * CVE-2023-23606 (bmo#1764974, bmo#1798591, bmo#1799201,
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1128
    bmo#1800446, bmo#1801248, bmo#1802100, bmo#1803393,
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1129
    bmo#1804626, bmo#1804971, bmo#1807004)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1130
    Memory safety bugs fixed in Firefox 109
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1131
- requires NSS 3.86
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1132
- rebased patches
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1133
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1134
-------------------------------------------------------------------
1182
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1135
Fri Jan  6 06:57:25 UTC 2023 - Luciano Santos <luc14n0@opensuse.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1136
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1137
- Mozilla Firefox 108.0.2
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1138
  * Fixes a crash that might occur when managing browser history
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1139
    (bmo#1806408).
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1140
- Drop merged-upstream mozilla-bmo1805809.patch.
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1141
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1142
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1143
Wed Dec 21 16:05:26 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1144
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1145
- add mozilla-bmo1805809.patch to fix build for x86-32 (boo#1206600)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1146
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1147
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1148
Tue Dec 20 07:58:58 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1149
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1150
- Mozilla Firefox 108.0.1 (boo#1206507)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1151
  * Fixes the default search engine being reset on upgrade for
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1152
    profiles which were previously copied from a different location
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1153
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1154
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1155
Tue Dec 13 13:54:35 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1156
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1157
- Mozilla Firefox 108.0
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1158
  https://www.mozilla.org/en-US/firefox/108.0/releasenotes/
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1159
  MFSA 2022-51 (bsc#1206242)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1160
  * CVE-2022-46871 (bmo#1795697)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1161
    libusrsctp library out of date
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1162
  * CVE-2022-46872 (bmo#1799156)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1163
    Arbitrary file read from a compromised content process
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1164
  * CVE-2022-46873 (bmo#1644790)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1165
    Firefox did not implement the CSP directive unsafe-hashes
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1166
  * CVE-2022-46874 (bmo#1746139)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1167
    Drag and Dropped Filenames could have been truncated to
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1168
    malicious extensions
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1169
  * CVE-2022-46875 (bmo#1786188)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1170
    Download Protections were bypassed by .atloc and .ftploc
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1171
    files on Mac OS
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1172
  * CVE-2022-46877 (bmo#1795139)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1173
    Fullscreen notification bypass
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1174
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1175
    bmo#1801102, bmo#1801315, bmo#1802395)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1176
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1177
  * CVE-2022-46879 (bmo#1736224, bmo#1793407, bmo#1794249, bmo#1795845,
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1178
    bmo#1797682, bmo#1797720, bmo#1798494, bmo#1799479)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1179
    Memory safety bugs fixed in Firefox 108
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1180
- requires
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1181
  NSS >= 3.85
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1182
  rustc/cargo 1.65
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1183
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1184
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1185
Thu Dec  8 08:42:14 UTC 2022 - Milachew <milachew@mail.lv>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1186
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1187
- added translations to .desktop file.
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1188
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1189
-------------------------------------------------------------------
1181
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1190
Thu Dec  1 21:13:32 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1191
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1192
- Mozilla Firefox 107.0.1:
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1193
  * Fix an issue with accessing some sites reliably in Private
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1194
    Browsing mode or Strict ETP due to anti-adblockers
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1195
    (bmo#1717806)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1196
  * Fix an issue where Color Management was not available for
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1197
    some users (bmo#1799391)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1198
  * Fix an issue with text overlapping in the Settings Menu for
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1199
    some locales (bmo#1800379)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1200
  * Fix an issue where the DevTools UI is not accessible when an
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1201
    alert dialog is displayed (bmo#1801840)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1202
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1203
-------------------------------------------------------------------
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1204
Tue Nov 15 14:22:26 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1205
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1206
- Mozilla Firefox 107.0
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1207
  MFSA 2022-47 (bsc#1205270)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1208
 * CVE-2022-45403 (bmo#1762078)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1209
    Service Workers might have learned size of cross-origin media files
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1210
  * CVE-2022-45404 (bmo#1790815)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1211
    Fullscreen notification bypass
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1212
  * CVE-2022-45405 (bmo#1791314)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1213
    Use-after-free in InputStream implementation
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1214
  * CVE-2022-45406 (bmo#1791975)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1215
    Use-after-free of a JavaScript Realm
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1216
  * CVE-2022-45407 (bmo#1793314)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1217
    Loading fonts on workers was not thread-safe
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1218
  * CVE-2022-45408 (bmo#1793829)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1219
    Fullscreen notification bypass via windowName
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1220
  * CVE-2022-45409 (bmo#1796901)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1221
    Use-after-free in Garbage Collection
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1222
  * CVE-2022-45410 (bmo#1658869)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1223
    ServiceWorker-intercepted requests bypassed SameSite cookie policy
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1224
  * CVE-2022-45411 (bmo#1790311)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1225
    Cross-Site Tracing was possible via non-standard override headers
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1226
  * CVE-2022-45412 (bmo#1791029)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1227
    Symlinks may resolve to partially uninitialized buffers
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1228
  * CVE-2022-45413 (bmo#1791201)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1229
    SameSite=Strict cookies could have been sent cross-site via
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1230
    intent URLs
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1231
  * CVE-2022-40674 (bmo#1791598)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1232
    Use-after-free vulnerability in expat
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1233
  * CVE-2022-45415 (bmo#1793551)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1234
    Downloaded file may have been saved with malicious extension
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1235
  * CVE-2022-45416 (bmo#1793676)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1236
    Keystroke Side-Channel Leakage
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1237
  * CVE-2022-45417 (bmo#1794508)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1238
    Service Workers in Private Browsing Mode may have been
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1239
    written to disk
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1240
  * CVE-2022-45418 (bmo#1795815)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1241
    Custom mouse cursor could have been drawn over browser UI
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1242
  * CVE-2022-45419 (bmo#1716082)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1243
    Deleting a security exception did not take effect immediately
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1244
  * CVE-2022-45420 (bmo#1792643)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1245
    Iframe contents could be rendered outside the iframe
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1246
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1247
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1248
- requires
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1249
  * NSS >= 3.84
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1250
  * rust = 1.64
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1251
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1252
-------------------------------------------------------------------
1180
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1253
Sat Nov  5 13:16:42 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1254
1181
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1255
- Mozilla Firefox 106.0.5
1180
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1256
  * Addresses a crash experienced by users with Intel Gemini Lake
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1257
    CPUs (bmo#1702019)
1181
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1258
- Mozilla Firefox 106.0.4
1180
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1259
  * Fixed an issue with DRM Video playback (bmo#1797292)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1260
  * Fixed broken layout of datetime input when switching
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1261
    types (bmo#1797139)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1262
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1263
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1264
Tue Nov  1 19:26:39 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1265
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1266
- Mozilla Firefox 106.0.3
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1267
  * Fixes for other platforms
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1268
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1269
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1270
Thu Oct 27 18:07:29 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1271
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1272
- Mozilla Firefox 106.0.2
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1273
  * Fix missing content on some PDF forms (bmo#1794351)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1274
  * Fix column width for the Notification sub-panel in Settings
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1275
    (bmo#1793558)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1276
  * Fix a browser freeze with accessibility enabled on some sites
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1277
    such as the Proxmox Web UI (bmo#1793748)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1278
  * Fix page reloading not working with Firefox View and not
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1279
    refreshing synced data (bmo#1792680, bmo#1794474)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1280
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1281
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1282
Sun Oct 23 07:34:50 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1283
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1284
- Mozilla Firefox 106.0.1
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1285
  * Addresses a crash experienced by users with AMD Zen 1 CPUs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1286
    (bmo#1796126)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1287
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1288
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1289
Sun Oct 16 20:08:21 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1290
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1291
- Mozilla Firefox 106.0
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1292
  * support editing of PDFs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1293
  * introduced Firefox View
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1294
  * major WebRTC update
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1295
    - Better screen sharing for Windows and Linux Wayland users
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1296
    - RTP performance and reliability improvements
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1297
    - Richer statistics
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1298
    - Cross-browser and service compatibility improvements
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1299
  * detailed releasenotes
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1300
    https://www.mozilla.org/en-US/firefox/106.0/releasenotes
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1301
  MFSA 2022-44 (bsc#1204421)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1302
  * CVE-2022-42927 (bmo#1789128)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1303
    Same-origin policy violation could have leaked cross-origin URLs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1304
  * CVE-2022-42928 (bmo#1791520)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1305
    Memory Corruption in JS Engine
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1306
  * CVE-2022-42929 (bmo#1789439)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1307
    Denial of Service via window.print
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1308
  * CVE-2022-42930 (bmo#1789503)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1309
    Race condition in DOM Workers
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1310
  * CVE-2022-42931 (bmo#1780571)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1311
    Username saved to a plaintext file on disk
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1312
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1313
    Memory safety bugs fixed in Firefox
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1314
- added -msse2 flag to fix i386 build and workaround bmo#1795993
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1315
- fixed used buildflags
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1316
- renamed mozilla-i686-build.patch to mozilla-buildfixes.patch
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1317
  as it was extended with changes for other archs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1318
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1319
-------------------------------------------------------------------
1179
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1320
Sat Oct  8 13:41:12 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1321
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1322
- Mozilla Firefox 105.0.3:
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1323
  * Fixes for other platforms
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1324
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1325
-------------------------------------------------------------------
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1326
Wed Oct  5 18:27:01 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1327
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1328
- Mozilla Firefox 105.0.2:
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1329
  * Fixed poor contrast on various menu items with certain
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1330
    themes on Linux systems (bmo#1792063)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1331
  * Fixed the scrollbar appearing on the wrong side of
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1332
    `select` elements in right-to-left locales (bmo#1791219)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1333
  * Fixed a possible deadlock when loading some sites in
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1334
    Troubleshoot Mode (bmo#1786259)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1335
  * Fixed a bug causing some dynamic appearance changes to
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1336
    not appear when expected (bmo#1786521)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1337
  * Fixed a bug causing theme styling to not be properly applied
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1338
    to sidebars for some add-ons in Private Browsing Mode
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1339
    (bmo#1787543)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1340
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1341
-------------------------------------------------------------------
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1342
Thu Sep 22 22:12:39 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1343
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1344
- Mozilla Firefox 105.0.1
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1345
  * Reverted focus behavior for new windows back to the content
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1346
    area instead of the address bar (bmo#1784692)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1347
- added mozilla-i686-build.patch to avoid using avx2
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1348
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1349
-------------------------------------------------------------------
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1350
Sat Sep 17 21:01:10 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1351
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1352
- Mozilla Firefox 105.0
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1353
  https://www.mozilla.org/en-US/firefox/105.0/releasenotes
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1354
  MFSA 2022-40 (bsc#1203477)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1355
  * CVE-2022-40959 (bmo#1782211)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1356
    Bypassing FeaturePolicy restrictions on transient pages
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1357
  * CVE-2022-40960 (bmo#1787633)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1358
    Data-race when parsing non-UTF-8 URLs in threads
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1359
  * CVE-2022-40958 (bmo#1779993)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1360
    Bypassing Secure Context restriction for cookies with __Host
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1361
    and __Secure prefix
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1362
  * CVE-2022-40961 (bmo#1784588)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1363
    Stack-buffer overflow when initializing Graphics
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1364
  * CVE-2022-40956 (bmo#1770094)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1365
    Content-Security-Policy base-uri bypass
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1366
  * CVE-2022-40957 (bmo#1777604)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1367
    Incoherent instruction cache when building WASM on ARM64
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1368
  * CVE-2022-40962 (bmo#1767360, bmo#1776655, bmo#1777574,
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1369
    bmo#1784835, bmo#1785109, bmo#1786502, bmo#1789440)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1370
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1371
- requires
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1372
  NSS 3.82
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1373
  Rust 1.63 (1.61)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1374
- removed obsolete mozilla-glibc236.patch
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1375
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1376
-------------------------------------------------------------------
1178
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1377
Fri Sep  9 05:59:03 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1378
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1379
- Adjust memory requirements to fix build on aarch64
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1380
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1381
-------------------------------------------------------------------
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1382
Wed Sep  7 06:50:24 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1383
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1384
- Mozilla Firefox 104.0.2 (boo#1203177)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1385
  https://www.mozilla.org/en-US/firefox/104.0.2/releasenotes/
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1386
  * Fixed a bug making it impossible to use touch or a stylus to
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1387
    drag the scrollbar on pages (bmo#1787361)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1388
  * Fixed an issue causing some users to crash in out-of-memory
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1389
    conditions (bmo#1774155)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1390
  * Fixed an issue that would sometimes affect video & audio playback
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1391
    when loaded via a cross-origin iframe src attribute (bmo#1781759)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1392
  * Fixed an issue that would sometimes affect video & audio playback
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1393
    when served with Content-Security-Policy: sandbox (bmo#1781063)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1394
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1395
-------------------------------------------------------------------
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1396
Thu Sep  1 07:04:11 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1397
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1398
- Mozilla Firefox 104.0.1
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1399
  * Addresses an issue with Youtube video playback that was
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1400
    affecting some users (boo#1203003)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1401
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1402
-------------------------------------------------------------------
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1403
Sun Aug 21 11:12:14 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1404
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1405
- Mozilla Firefox 104.0
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1406
  * https://www.mozilla.org/en-US/firefox/104.0/releasenotes
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1407
  MFSA 2022-33 (bsc#1202645)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1408
  * CVE-2022-38472 (bmo#1769155)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1409
    Address bar spoofing via XSLT error handling
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1410
  * CVE-2022-38473 (bmo#1771685)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1411
    Cross-origin XSLT Documents would have inherited the parent's
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1412
    permissions
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1413
  * CVE-2022-38474 (bmo#1719511)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1414
    Recording notification not shown when microphone was
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1415
    recording on Android
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1416
  * CVE-2022-38475 (bmo#1773266)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1417
    Attacker could write a value to a zero-length array
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1418
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159, bmo#1773363)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1419
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1420
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1421
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1422
    and Firefox ESR 91.13
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1423
- requires
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1424
  NSPR 4.34.1
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1425
  NSS 3.81
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1426
  rust 1.62
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1427
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1428
-------------------------------------------------------------------
1177
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1429
Sat Aug 13 06:25:20 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1430
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1431
- added mozilla-glibc236.patch (bmo#1782988, boo#1202323)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1432
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1433
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1434
Tue Aug  9 08:46:29 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1435
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1436
- Mozilla Firefox 103.0.2
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1437
  * Fixed menu shortcuts for users of the JAWS screen reader
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1438
  * Fixed an occasional non-overridable certificate error when
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1439
    accessing device configuration pages
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1440
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1441
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1442
Tue Aug  2 08:05:28 UTC 2022 - Andreas Schwab <schwab@suse.de>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1443
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1444
- The --disable-elf-hack option only exists on ARM and X86
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1445
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1446
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1447
Mon Aug  1 10:45:16 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1448
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1449
- Mozilla Firefox 103.0.1
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1450
  * Enabled hardware acceleration on newer AMD cards.
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1451
  * Fixed a crash on Firefox shutdown caused by a bug in the
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1452
    audio manager
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1453
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1454
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1455
Wed Jul 27 07:13:07 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1456
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1457
- Mozilla Firefox 103.0
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1458
  https://www.mozilla.org/en-US/firefox/103.0/releasenotes
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1459
  MFSA 2022-28 (bsc#1201758)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1460
  * CVE-2022-36319 (bmo#1737722)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1461
    Mouse Position spoofing with CSS transforms
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1462
  * CVE-2022-36317 (bmo#1759951)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1463
    Long URL would hang Firefox for Android
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1464
  * CVE-2022-36318 (bmo#1771774)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1465
    Directory indexes for bundled resources reflected URL
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1466
    parameters
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1467
  * CVE-2022-36314 (bmo#1773894)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1468
    Opening local <code>.lnk</code> files could cause unexpected
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1469
    network loads
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1470
  * CVE-2022-36315 (bmo#1762520)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1471
    Preload Cache Bypasses Subresource Integrity
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1472
  * CVE-2022-36316 (bmo#1768583)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1473
    Performance API leaked whether a cross-site resource is
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1474
    redirecting
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1475
  * CVE-2022-36320 (bmo#1759794, bmo#1760998)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1476
    Memory safety bugs fixed in Firefox 103
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1477
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1478
    Memory safety bugs fixed in Firefox 103 and 102.1
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1479
- requires
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1480
  NSS >= 3.80
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1481
  rust = 1.61
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1482
  rust-cbindgen >= 0.24.3
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1483
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1484
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1485
Wed Jul 13 07:54:21 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1486
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1487
- Move %limit_build set before mozilla config to actually set the
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1488
  value of %jobs to MOZ_MAKE_FLAGS to fix build on aarch64
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1489
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1490
-------------------------------------------------------------------
1175
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1491
Wed Jul  6 18:35:47 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1492
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1493
- Firefox 102.0.1:
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1494
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1495
    dark mode (bmo#1776157)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1496
  * Fixed: Fixed multilingual spell checking not working with
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1497
    content in both English and a non-Latin alphabet
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1498
    (bmo#1773802)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1499
  * Fixed: Developer tools:  Fixed an issue where the console
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1500
    output keep getting scrolled to the bottom when the last
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1501
    visible message is an evaluation result (bmo#1776262)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1502
  * Fixed: Fixed *Delete cookies and site data when Firefox is
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1503
    closed* checkbox getting disabled on startup (bmo#1777419)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1504
  * Fixed: Various stability fixes
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1505
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1506
-------------------------------------------------------------------
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1507
Sat Jun 25 12:51:46 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1508
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1509
- Firefox 102.0
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1510
  * You can now disable automatic opening of the download panel
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1511
    every time a new download starts
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1512
  * Firefox now mitigates query parameter tracking when navigating
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1513
    sites in ETP strict mode
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1514
  * Improved security by moving audio decoding into a separate
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1515
    process with stricter sandboxing, thus improving process isolation
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1516
  * https://www.mozilla.org/en-US/firefox/102.0/releasenotes
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1517
  MFSA 2022-24 (bsc#1200793)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1518
  * CVE-2022-34479 (bmo#1745595)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1519
    A popup window could be resized in a way to overlay the
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1520
    address bar with web content
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1521
  * CVE-2022-34470 (bmo#1765951)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1522
    Use-after-free in nsSHistory
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1523
  * CVE-2022-34468 (bmo#1768537)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1524
    CSP sandbox header without `allow-scripts` can be bypassed
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1525
    via retargeted javascript: URI
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1526
  * CVE-2022-34482 (bmo#845880)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1527
    Drag and drop of malicious image could have led to malicious
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1528
    executable and potential code execution
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1529
  * CVE-2022-34483 (bmo#1335845)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1530
    Drag and drop of malicious image could have led to malicious
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1531
    executable and potential code execution
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1532
  * CVE-2022-34476 (bmo#1387919)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1533
    ASN.1 parser could have been tricked into accepting malformed ASN.1
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1534
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1535
    Potential integer overflow in ReplaceElementsAt
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1536
  * CVE-2022-34474 (bmo#1677138)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1537
    Sandboxed iframes could redirect to external schemes
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1538
  * CVE-2022-34469 (bmo#1721220)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1539
    TLS certificate errors on HSTS-protected domains could be
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1540
    bypassed by the user on Firefox for Android
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1541
  * CVE-2022-34471 (bmo#1766047)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1542
    Compromised server could trick a browser into an addon downgrade
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1543
  * CVE-2022-34472 (bmo#1770123)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1544
    Unavailable PAC file resulted in OCSP requests being blocked
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1545
  * CVE-2022-34478 (bmo#1773717)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1546
    Microsoft protocols can be attacked if a user accepts a prompt
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1547
  * CVE-2022-2200 (bmo#1771381)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1548
    Undesired attributes could be set as part of prototype pollution
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1549
  * CVE-2022-34480 (bmo#1454072)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1550
    Free of uninitialized pointer in lg_init
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1551
  * CVE-2022-34477 (bmo#1731614)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1552
    MediaError message property leaked information on cross-
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1553
    origin same-site pages
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1554
  * CVE-2022-34475 (bmo#1757210)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1555
    HTML Sanitizer could have been bypassed via same-origin
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1556
    script via use tags
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1557
  * CVE-2022-34473 (bmo#1770888)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1558
    HTML Sanitizer could have been bypassed via use tags
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1559
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1560
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1561
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1562
    Memory safety bugs fixed in Firefox 102
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1563
- requires
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1564
  NSPR >= 4.34
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1565
  NSS >= 3.79
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1566
  rust = 1.60
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1567
- switch out skia-patches with webrender-patches for big endian
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1568
  removed:
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1569
  * mozilla-bmo1504834-part2.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1570
  * mozilla-bmo1504834-part4.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1571
  * mozilla-bmo1626236.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1572
  added:
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1573
  * one_swizzle_to_rule_them_all.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1574
  * svg-rendering.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1575
- add some more returns to the no-return-patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1576
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1577
-------------------------------------------------------------------
1174
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1578
Fri Jun 10 20:45:37 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1579
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1580
- Mozilla Firefox 101.0.1:
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1581
  * Fixed context menus not appearing when right-clicking
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1582
    Picture-in-Picture windows on some Linux systems (bmo#1771914)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1583
  * Various stability fixes
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1584
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1585
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1586
Sun May 29 08:02:45 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1587
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1588
- Mozilla Firefox 101.0
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1589
  * Reading is now easier with the prefers-contrast media query,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1590
    which allows sites to detect if the user has requested that web
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1591
    content is presented with a higher (or lower) contrast
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1592
  * All non-configured MIME types can now be assigned a custom
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1593
    action upon download completion
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1594
  * allows users to use as many microphones as you want, at the
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1595
    same time, during video conferencing. The most exciting benefit
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1596
    is that you can easily switch your microphones at any time
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1597
    (if your conferencing service provider enables this flexibility)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1598
  MFSA 2022-20 (bsc#1200027)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1599
  * CVE-2022-31736 (bmo#1735923)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1600
    Cross-Origin resource's length leaked
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1601
  * CVE-2022-31737 (bmo#1743767)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1602
    Heap buffer overflow in WebGL
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1603
  * CVE-2022-31738 (bmo#1756388)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1604
    Browser window spoof using fullscreen mode
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1605
  * CVE-2022-31739 (bmo#1765049)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1606
    Attacker-influenced path traversal when saving downloaded files
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1607
  * CVE-2022-31740 (bmo#1766806)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1608
    Register allocation problem in WASM on arm64
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1609
  * CVE-2022-31741 (bmo#1767590)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1610
    Uninitialized variable leads to invalid memory read
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1611
  * CVE-2022-31742 (bmo#1730434)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1612
    Querying a WebAuthn token with a large number of allowCredential
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1613
    entries may have leaked cross-origin information
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1614
  * CVE-2022-31743 (bmo#1747388)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1615
    HTML Parsing incorrectly ended HTML comments prematurely
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1616
  * CVE-2022-31744 (bmo#1757604)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1617
    CSP bypass enabling stylesheet injection
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1618
  * CVE-2022-31745 (bmo#1760944)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1619
    Incorrect Assertion caused by unoptimized array shift operations
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1620
  * CVE-2022-1919 (bmo#1761275)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1621
    Memory Corruption when manipulating webp images
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1622
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1623
    bmo#1767365, bmo#1768559, bmo#1768734)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1624
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1625
  * CVE-2022-31748 (bmo#1713773, bmo#1762201, bmo#1762469,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1626
    bmo#1762770, bmo#1764878, bmo#1765226, bmo#1765782, bmo#1765973,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1627
    bmo#1767177, bmo#1767181, bmo#1768232, bmo#1768251, bmo#1769869)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1628
    Memory safety bugs fixed in Firefox 101
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1629
- requires
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1630
  * NSS 3.78.1
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1631
  * rust-cbindgen 0.23.0
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1632
  * rust 1.59
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1633
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1634
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1635
Fri May 20 15:03:50 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1636
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1637
- Mozilla Firefox 100.0.2
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1638
  MFSA 2022-19 (bsc#1199768)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1639
  * CVE-2022-1802 (bmo#1770137)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1640
    Prototype pollution in Top-Level Await implementation
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1641
  * CVE-2022-1529 (bmo#1770048)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1642
    Untrusted input used in JavaScript object indexing, leading
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1643
    to prototype pollution
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1644
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1645
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1646
Wed May 18 20:27:49 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1647
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1648
- Mozilla Firefox 100.0.1:
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1649
  * Fixed: Fixed an issue with subtitles in Picture-in-Picture
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1650
    mode while using Netflix (bmo#1768818)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1651
  * Fixed: Fixed an issue where some commands were unavailable in
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1652
    the Picture-in-Picture window (bmo#1768201)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1653
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1654
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1655
Sun May  1 21:31:01 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1656
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1657
- Mozilla Firefox 100.0
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1658
  * subtitle support in PiP
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1659
  * spell checking supports multiple languages in parallel
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1660
  * more details here
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1661
    https://www.mozilla.org/en-US/firefox/100.0/releasenotes
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1662
  MFSA 2022-16 (boo#1198970)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1663
  * CVE-2022-29914 (bmo#1746448)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1664
    Fullscreen notification bypass using popups
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1665
  * CVE-2022-29909 (bmo#1755081)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1666
    Bypassing permission prompt in nested browsing contexts
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1667
  * CVE-2022-29916 (bmo#1760674)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1668
    Leaking browser history with CSS variables
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1669
  * CVE-2022-29911 (bmo#1761981)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1670
    iframe Sandbox bypass
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1671
  * CVE-2022-29912 (bmo#1692655)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1672
    Reader mode bypassed SameSite cookies
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1673
  * CVE-2022-29910 (bmo#1757138)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1674
    Firefox for Android forgot HTTP Strict Transport Security
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1675
    settings
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1676
  * CVE-2022-29915 (bmo#1751678)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1677
    Leaking cross-origin redirect through the Performance API
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1678
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1679
    bmo#1762614, bmo#1762620, bmo#1764778)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1680
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1681
  * CVE-2022-29918 (bmo#1744043, bmo#1747178, bmo#1753535,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1682
    bmo#1754017, bmo#1755847, bmo#1756172, bmo#1757477,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1683
    bmo#1758223, bmo#1760160, bmo#1761481, bmo#1761771)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1684
    Memory safety bugs fixed in Firefox 100
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1685
- requires NSS 3.77
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1686
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1687
-------------------------------------------------------------------
1173
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1688
Tue Apr 12 19:30:30 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1689
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1690
- Mozilla Firefox 99.0.1
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1691
  * Fixed an issue with text rendering in Bengali (bmo#1763368)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1692
  * Fixed a selection issue in the Download panel with drag and
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1693
    drop (bmo#1762723)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1694
  * Fixed: Fixed an issue preventing Zoom gallery mode for users
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1695
    who go to zoom.us URLs instead of subdomain.zoom.us URLs
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1696
    (bmo#1763801)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1697
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1698
-------------------------------------------------------------------
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1699
Mon Apr  4 07:34:36 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1700
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1701
- Mozilla Firefox 99.0
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1702
  * You can now toggle Narrate in ReaderMode with the keyboard
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1703
    shortcut "n."
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1704
  * You can find added support for search—with or without
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1705
    diacritics—in the PDF viewer.
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1706
  * The Linux sandbox has been strengthened: processes exposed to web
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1707
    content no longer have access to the X Window system (X11).
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1708
  * Firefox now supports credit card autofill and capture in
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1709
    Germany and France.
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1710
  MFSA 2022-13 (bsc#1197903)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1711
  * CVE-2022-1097 (bmo#1745667)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1712
    Use-after-free in NSSToken objects
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1713
  * CVE-2022-28281 (bmo#1755621)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1714
    Out of bounds write due to unexpected WebAuthN Extensions
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1715
  * CVE-2022-28282 (bmo#1751609)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1716
    Use-after-free in DocumentL10n::TranslateDocument
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1717
  * CVE-2022-28283 (bmo#1754066)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1718
    Missing security checks for fetching sourceMapURL
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1719
  * CVE-2022-28284 (bmo#1754522)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1720
    Script could be executed via svg's use element
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1721
  * CVE-2022-28285 (bmo#1756957)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1722
    Incorrect AliasSet used in JIT Codegen
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1723
  * CVE-2022-28286 (bmo#1735265)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1724
    iframe contents could be rendered outside the border
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1725
  * CVE-2022-28287 (bmo#1741515)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1726
    Text Selection could crash Firefox
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1727
  * CVE-2022-24713 (bmo#1758509)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1728
    Denial of Service via complex regular expressions
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1729
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1730
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1731
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1732
  * CVE-2022-28288 (bmo#1746415, bmo#1746495, bmo#1746500,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1733
    bmo#1747282, bmo#1748759, bmo#1749056, bmo#1749786,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1734
    bmo#1751679, bmo#1752120, bmo#1756010, bmo#1756017,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1735
    bmo#1757213, bmo#1757258, bmo#1757427)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1736
    Memory safety bugs fixed in Firefox 99
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1737
- requires NSS >= 3.76.1
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1738
- remove obsolete patch
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1739
  * mozilla-bmo1756347.patch
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1740
  * mozilla-bmo1757571.patch
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1741
- update create-tar.sh
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1742
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1743
-------------------------------------------------------------------
1172
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1744
Thu Mar 24 21:49:57 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1745
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1746
- MozillaFirefox 98.0.2:
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1747
  * Fixed: Fixed an issue preventing users from typing in Address
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1748
    Bar after opening new tab and pressing cmd + enter
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1749
    (bmo#1757376)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1750
  * Fixed: Fixed an issue causing some users to crash in out-of-
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1751
    memory conditions (bmo#1757618)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1752
  * Fixed: Fixed an issue in session history which caused some
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1753
    sites to fail to load (bmo#1758664)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1754
  * Fixed: Fixed an add-on specific compatibility issue
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1755
    (bmo#1759162)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1756
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1757
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1758
Wed Mar 23 15:14:22 UTC 2022 - Simon Vogl <simon.vogl@gmx.net>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1759
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1760
- Change mozilla-kde.patch to follow the GNOME registry
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1761
  behavior for new MIME types to avoid opening downloaded files
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1762
  without any inquiries (bsc#1197319)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1763
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1764
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1765
Tue Mar 22 12:22:51 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1766
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1767
- Add patch to fix start-up on aarch64:
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1768
  * mozilla-bmo1757571.patch
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1769
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1770
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1771
Thu Mar 17 14:52:39 UTC 2022 - Dirk Müller <dmueller@suse.com>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1772
1173
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1773
- exclude slow cpus for building
1172
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1774
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1775
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1776
Thu Mar 17 09:18:01 UTC 2022 - Martin Sirringhaus <martin.sirringhaus@suse.com>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1777
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1778
- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1779
  faster buildhosts, as the others struggle to build FF.
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1780
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1781
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1782
Mon Mar 14 22:48:42 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1783
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1784
- Mozilla Firefox 98.0.1:
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1785
  * Yandex and Mail.ru have been removed as optional search
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1786
    providers in the drop-down search menu in Firefox
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1787
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1788
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1789
Tue Mar  8 10:27:16 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1790
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1791
- Mozilla Firefox 98.0
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1792
  * Firefox has a new optimized download flow
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1793
  * other changes as documented here
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1794
    https://www.mozilla.org/en-US/firefox/98.0/releasenotes
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1795
  MFSA 2022-10 (bsc#1196900)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1796
  * CVE-2022-26383 (bmo#1742421)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1797
    Browser window spoof using fullscreen mode
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1798
  * CVE-2022-26384 (bmo#1744352)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1799
    iframe allow-scripts sandbox bypass
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1800
  * CVE-2022-26387 (bmo#1752979)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1801
    Time-of-check time-of-use bug when verifying add-on signatures
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1802
  * CVE-2022-26381 (bmo#1736243)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1803
    Use-after-free in text reflows
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1804
  * CVE-2022-26382 (bmo#1741888)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1805
    Autofill Text could be exfiltrated via side-channel attacks
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1806
  * CVE-2022-26385 (bmo#1747526)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1807
    Use-after-free in thread shutdown
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1808
  * CVE-2022-0843 (bmo#1746523, bmo#1749062, bmo#1749164, bmo#1749214,
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1809
    bmo#1749610, bmo#1750032, bmo#1752100, bmo#1752405, bmo#1753612,
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1810
    bmo#1754508)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1811
    Memory safety bugs fixed in Firefox 98
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1812
- requires NSS 3.75
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1813
- add mozilla-bmo1756347.patch to fix i586 build
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1814
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1815
-------------------------------------------------------------------
1171
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1816
Fri Feb 18 20:38:22 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1817
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1818
- Mozilla Firefox 97.0.1
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1819
  * Fixed: Fixed an issue where TikTok videos would fail to load
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1820
    when selected from a user's profile page (bmo#1750973)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1821
  * Fixed: Fixed an issue which led to Picture-in-Picture mode
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1822
    being unable to be toggled on Hulu (bmo#1753401)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1823
  * Fixed: Works around problems with WebRoot SecureAnywhere
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1824
    antivirus rendering Firefox unusable in some situations
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1825
    (bmo#1752466)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1826
  * Fixed: Fixed an issue causing users to see the Restore
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1827
    Session screen unexpectedly when starting Firefox
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1828
    (bmo#1749996)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1829
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1830
-------------------------------------------------------------------
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1831
Mon Feb 14 19:31:29 UTC 2022 - Luciano Santos <luc14n0@opensuse.org>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1832
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1833
- Remove bashisms ("source" and "function" keywords) from
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1834
  mozilla.sh.in to ally with the #!/bin/sh shebang. If the end user
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1835
  has either dash-sh package or busybox-sh to handle Bourn Shell
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1836
  scripts rather than having bash-sh package, the script would
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1837
  fail. Using "." instead of "source" and "create_langpack_link()"
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1838
  function definition is enough to keep both sides sane,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1839
  behavior-wise.
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1840
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1841
-------------------------------------------------------------------
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1842
Tue Feb  8 08:40:45 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1843
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1844
- Mozilla Firefox 97.0
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1845
  MFSA 2022-04 (bsc#1195682)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1846
  * CVE-2022-22753 (bmo#1732435)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1847
    Privilege Escalation to SYSTEM on Windows via Maintenance Service
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1848
  * CVE-2022-22754 (bmo#1750565)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1849
    Extensions could have bypassed permission confirmation during update
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1850
  * CVE-2022-22755 (bmo#1309630)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1851
    XSL could have allowed JavaScript execution after a tab was closed
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1852
  * CVE-2022-22756 (bmo#1317873)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1853
    Drag and dropping an image could have resulted in the dropped
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1854
    object being an executable
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1855
  * CVE-2022-22757 (bmo#1720098)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1856
    Remote Agent did not prevent local websites from connecting
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1857
  * CVE-2022-22758 (bmo#1728742)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1858
    tel: links could have sent USSD codes to the dialer on
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1859
    Firefox for Android
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1860
  * CVE-2022-22759 (bmo#1739957)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1861
    Sandboxed iframes could have executed script if the parent
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1862
    appended elements
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1863
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1864
    Cross-Origin responses could be distinguished between script
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1865
    and non-script content-types
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1866
  * CVE-2022-22761 (bmo#1745566)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1867
    frame-ancestors Content Security Policy directive was not
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1868
    enforced for framed extension pages
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1869
  * CVE-2022-22762 (bmo#1743931)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1870
    JavaScript Dialogs could have been displayed over other
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1871
    domains on Firefox for Android
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1872
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1873
    bmo#1748210, bmo#1748279)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1874
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1875
  * CVE-2022-0511 (bmo#1713579, bmo#1735448, bmo#1743821, bmo#1746313,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1876
    bmo#1746314, bmo#1746316, bmo#1746321, bmo#1746322, bmo#1746323,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1877
    bmo#1746412, bmo#1746430, bmo#1746451, bmo#1746488, bmo#1746875,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1878
    bmo#1746898, bmo#1746905, bmo#1746907, bmo#1746917, bmo#1747128,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1879
    bmo#1747137, bmo#1747331, bmo#1747346, bmo#1747439, bmo#1747457,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1880
    bmo#1747870, bmo#1749051, bmo#1749274, bmo#1749831)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1881
    Memory safety bugs fixed in Firefox 97
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1882
- requires NSS 3.74
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1883
- requires rust 1.57
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1884
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1885
-------------------------------------------------------------------
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1886
Mon Feb  7 22:21:29 UTC 2022 - Dirk Müller <dmueller@suse.com>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1887
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1888
- remove memoryperjob and use %limit instead. this allows to
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1889
  adapt to more worker types, and lowers the time the package
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1890
  is stuck in "scheduling". raising memory above 8 to lower
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1891
  risk for LTO jobs to run OOM
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1892
- add hack to disable -Wl,--gc-section which avoids a binutils
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1893
  segfault on x86
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1894
- change mozilla-reduce-rust-debuginfo.patch: use -g1 everywhere
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1895
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1896
-------------------------------------------------------------------
1170
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1897
Sun Jan 30 23:58:34 UTC 2022 - Dirk Müller <dmueller@suse.com>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1898
1171
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1899
- disable ccache, this adds about 1 minute of build time and
1170
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1900
  over 2 GB of disk space usage without benefit on OBS builds
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1901
- build with rust-simd like upstream does
1171
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1902
- use -g1 for debuginfo generation as this is what upstream
1170
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1903
  does as well and it saves ~ 2GB of writes
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1904
- use %limit on x86_64 to scale down to less capable workers
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1905
- disable install stripping so that debuginfo is useful
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1906
- use autopatch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1907
- cleanup constraints to specify only jobs, physicalmemory
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1908
  and memoryperjob to be more flexible on which host to build
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1909
  on
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1910
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1911
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1912
Fri Jan 28 15:26:45 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1913
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1914
- Mozilla Firefox 96.0.3 (bsc#1195230)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1915
  * Fixed an issue that allowed unexpected data to be submitted in
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1916
    some of our search telemetry (bmo#1752317)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1917
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1918
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1919
Mon Jan 24 07:42:03 UTC 2022 - Martin Liška <mliska@suse.cz>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1920
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1921
- Enable -fimplicit-constexpr for GCC 12+.
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1922
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1923
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1924
Thu Jan 20 23:21:44 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1925
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1926
- Mozilla Firefox 96.0.2
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1927
  * Fix an issue that caused tab height to display inconsistently
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1928
    on Linux when audio was played (bmo#1714276)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1929
  * Fix an issue that caused Lastpass dropdowns to appear blank in
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1930
    Private Browsing mode (bmo#1748158)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1931
  * Fix a crash encountered when resizing a Facebook app
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1932
    (bmo#1746084)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1933
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1934
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1935
Fri Jan 14 16:56:42 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1936
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1937
- Mozilla Firefox 96.0.1
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1938
  * Fixed: Improvements to make the parsing of content-length
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1939
    headers more robust (bmo#1749957, boo#1194677)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1940
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1941
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1942
Sat Jan  8 10:32:46 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1943
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1944
- Mozilla Firefox 96.0
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1945
  * https://www.mozilla.org/en-US/firefox/96.0/releasenotes
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1946
  MFSA 2022-01 (bsc#1194547)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1947
  * CVE-2022-22746 (bmo#1735071)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1948
    Calling into reportValidity could have lead to fullscreen
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1949
    window spoof
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1950
  * CVE-2022-22743 (bmo#1739220)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1951
    Browser window spoof using fullscreen mode
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1952
  * CVE-2022-22742 (bmo#1739923)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1953
    Out-of-bounds memory access when inserting text in edit mode
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1954
  * CVE-2022-22741 (bmo#1740389)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1955
    Browser window spoof using fullscreen mode
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1956
  * CVE-2022-22740 (bmo#1742334)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1957
    Use-after-free of ChannelEventQueue::mOwner
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1958
  * CVE-2022-22738 (bmo#1742382)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1959
    Heap-buffer-overflow in blendGaussianBlur
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1960
  * CVE-2022-22737 (bmo#1745874)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1961
    Race condition when playing audio files
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1962
  * CVE-2021-4140 (bmo#1746720)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1963
    Iframe sandbox bypass with XSLT
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1964
  * CVE-2022-22750 (bmo#1566608)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1965
    IPC passing of resource handles could have lead to sandbox
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1966
    bypass
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1967
  * CVE-2022-22749 (bmo#1705094)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1968
    Lack of URL restrictions when scanning QR codes
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1969
  * CVE-2022-22748 (bmo#1705211)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1970
    Spoofed origin on external protocol launch dialog
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1971
  * CVE-2022-22745 (bmo#1735856)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1972
    Leaking cross-origin URLs through securitypolicyviolation
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1973
    event
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1974
  * CVE-2022-22744 (bmo#1737252)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1975
    The 'Copy as curl' feature in DevTools did not fully escape
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1976
    website-controlled data, potentially leading to command
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1977
    injection
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1978
  * CVE-2022-22747 (bmo#1735028)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1979
    Crash when handling empty pkcs7 sequence
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1980
  * CVE-2022-22736 (bmo#1742692)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1981
    Potential local privilege escalation when loading modules
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1982
    from the install directory.
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1983
  * CVE-2022-22739 (bmo#1744158)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1984
    Missing throttling on external protocol launch dialog
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1985
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1986
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1987
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1988
    Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1989
  * CVE-2022-22752 (bmo#1740534, bmo#1741210, bmo#1742770)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1990
    Memory safety bugs fixed in Firefox 96
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1991
- removed obsolete patches
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1992
  * mozilla-bmo1745560.patch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1993
  * mozilla-bmo1744896.patch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1994
  * mozilla-sandbox-fips.patch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1995
- requires
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1996
  NSPR >= 4.33
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1997
  NSS  >= 3.73.1
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1998
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1999
-------------------------------------------------------------------
1169
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2000
Tue Dec 28 17:45:28 UTC 2021 - Bjørn Lie <bjorn.lie@gmail.com>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2001
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2002
- Add upstream patches:
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2003
  * mozilla-bmo1745560.patch: Fix build against wayland 1.20.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2004
  * mozilla-bmo1744896.patch: Create WaylandVsyncSource on window
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2005
    creation
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2006
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2007
-------------------------------------------------------------------
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2008
Mon Dec 20 21:57:30 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2009
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2010
- Mozilla Firefox 95.0.2
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2011
  * Addresses frequent crashes experienced by users with C/E/Z-Series
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2012
    "Bobcat" CPUs running on Windows 7, 8, and 8.1.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2013
- updated constraints for ppc and x86-64
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2014
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2015
-------------------------------------------------------------------
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2016
Fri Dec 17 13:49:16 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2017
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2018
- Mozilla Firefox 95.0.1 (bsc#1193845)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2019
  * Fixed frequent
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2020
    MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING error
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2021
    messages when trying to connect to various microsoft.com
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2022
    domains (bmo#1745600)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2023
  * Fix for a WebRender crash on some Linux/X11 systems (bmo#1741956)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2024
  * Fix for a frequent Windows shutdown crash (bmo#1738984)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2025
  * Fix websites contrast issues for some Linux users with
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2026
    Dark mode set at OS level (bmo#1740518)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2027
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2028
-------------------------------------------------------------------
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2029
Sat Dec  4 12:07:21 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2030
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2031
- Mozilla Firefox 95.0
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2032
  * You can now move the Picture-in-Picture toggle button to the
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2033
    opposite side of the video. Simply look for the new context menu
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2034
    option Move Picture-in-Picture Toggle to Left (Right) Side.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2035
  * To better protect Firefox users against side-channel attacks such
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2036
    as Spectre, Site Isolation is now enabled for all Firefox 95 users.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2037
  * https://www.mozilla.org/en-US/firefox/95.0/releasenotes
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2038
  MFSA 2021-52 (bsc#1193485)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2039
  * CVE-2021-43536 (bmo#1730120)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2040
    URL leakage when navigating while executing asynchronous
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2041
    function
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2042
  * CVE-2021-43537 (bmo#1738237)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2043
    Heap buffer overflow when using structured clone
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2044
  * CVE-2021-43538 (bmo#1739091)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2045
    Missing fullscreen and pointer lock notification when
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2046
    requesting both
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2047
  * CVE-2021-43539 (bmo#1739683)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2048
    GC rooting failure when calling wasm instance methods
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2049
  * MOZ-2021-0010 (bmo#1735852)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2050
    Use-after-free in fullscreen objects on MacOS
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2051
  * CVE-2021-43540 (bmo#1636629)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2052
    WebExtensions could have installed persistent ServiceWorkers
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2053
  * CVE-2021-43541 (bmo#1696685)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2054
    External protocol handler parameters were unescaped
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2055
  * CVE-2021-43542 (bmo#1723281)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2056
    XMLHttpRequest error codes could have leaked the existence of
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2057
    an external protocol handler
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2058
  * CVE-2021-43543 (bmo#1738418)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2059
    Bypass of CSP sandbox directive when embedding
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2060
  * CVE-2021-43544 (bmo#1739934)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2061
    Receiving a malicious URL as text through a SEND intent could
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2062
    have led to XSS
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2063
  * CVE-2021-43545 (bmo#1720926)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2064
    Denial of Service when using the Location API in a loop
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2065
  * CVE-2021-43546 (bmo#1737751)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2066
    Cursor spoofing could overlay user interface when native
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2067
    cursor is zoomed
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2068
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2069
    bmo#1737009, bmo#1739372, bmo#1739421)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2070
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2071
- requires
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2072
  NSS >= 3.72
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2073
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  2074
-------------------------------------------------------------------
1168
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2075
Thu Dec  2 20:32:42 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2076
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2077
- remove x-scheme-handler/ftp from firefox.desktop boo#1193321
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2078
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2079
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2080
Thu Nov 25 20:21:07 UTC 2021 - Bjørn Lie <bjorn.lie@gmail.com>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2081
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2082
- Drop unused libidl-devel BuildRequires.
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2083
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2084
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2085
Tue Nov 23 22:00:38 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2086
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2087
- Mozilla Firefox 94.0.2:
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2088
  * Update preference design for Firefox Suggest for improved clarity
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2089
  * Resolved general instability/crashes on Linux caused by a file
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2090
    descriptor leak when backgrounding tabs using WebGL
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2091
    (bmo#1741997)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2092
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2093
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2094
Fri Nov  5 18:02:48 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2095
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2096
- Mozilla Firefox 94.0.1:
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2097
  * fixes for other platforms
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2098
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2099
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2100
Sat Oct 30 07:52:22 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2101
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2102
- Mozilla Firefox 94.0
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2103
  * https://www.mozilla.org/en-US/firefox/94.0/releasenotes
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2104
  MFSA 2021-48 (bsc#1192250)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2105
  * CVE-2021-38503 (bmo#1729517)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2106
    iframe sandbox rules did not apply to XSLT stylesheets
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2107
  * CVE-2021-38504 (bmo#1730156)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2108
    Use-after-free in file picker dialog
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2109
  * CVE-2021-38505 (bmo#1730194)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2110
    Windows 10 Cloud Clipboard may have recorded sensitive user data
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2111
  * CVE-2021-38506 (bmo#1730750)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2112
    Firefox could be coaxed into going into fullscreen mode
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2113
    without notification or warning
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2114
  * CVE-2021-38507 (bmo#1730935)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2115
    Opportunistic Encryption in HTTP2 could be used to bypass the
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2116
    Same-Origin-Policy on services hosted on other ports
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2117
  * MOZ-2021-0003 (bmo#1736886)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2118
    Universal XSS in Firefox for Android via QR Code URLs
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2119
  * CVE-2021-38508 (bmo#1366818)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2120
    Permission Prompt could be overlaid, resulting in user
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2121
    confusion and potential spoofing
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2122
  * MOZ-2021-0004 (bmo#1659155)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2123
    Web Extensions could access pre-redirect URL when their
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2124
    context menu was triggered by a user
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2125
  * CVE-2021-38509 (bmo#1718571)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2126
    Javascript alert box could have been spoofed onto an
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2127
    arbitrary domain
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2128
  * CVE-2021-38510 (bmo#1731779)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2129
    Download Protections were bypassed by .inetloc files on Mac OS
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2130
  * MOZ-2021-0005 (bmo#1719203)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2131
    'Copy Image Link' context menu action could have been abused
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2132
    to see authentication tokens
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2133
  * MOZ-2021-0006 (bmo#1724233)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2134
    URL Parsing may incorrectly parse internationalized domains
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2135
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048, bmo#1735152)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2136
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2137
- removed obsolete patches
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2138
  * mozilla-bmo1602730.patch
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2139
  * mozilla-bmo1725828.patch
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2140
  * mozilla-bmo1729124.patch
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2141
- requires
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2142
  NSS >= 3.71
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2143
  rust >= 1.53
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2144
- fix Plasma detection (boo#1191825)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2145
- fix Link error "undefined hidden symbol:"
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2146
  https://github.com/openSUSE/firefox-maintenance/issues/37
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2147
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2148
-------------------------------------------------------------------
1166
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2149
Tue Oct 26 19:48:24 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2150
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2151
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2152
- (re-)enable LTO on Tumbleweed
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2153
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2154
-------------------------------------------------------------------
1165
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2155
Wed Oct 20 06:49:52 UTC 2021 - Martin Sirringhaus <martin.sirringhaus@suse.com>
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2156
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2157
- Rebase mozilla-sandbox-fips.patch to punch another hole in the
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2158
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2159
  from within the newly introduced socket process sandbox.
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2160
  This fixes bsc#1191815 and bsc#1190141
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2161
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2162
-------------------------------------------------------------------
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2163
Mon Oct 18 12:44:44 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2164
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2165
- Add patch to fix build on aarch64 (bmo#1729124)
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2166
  * mozilla-bmo1729124.patch
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2167
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2168
-------------------------------------------------------------------
1164
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2169
Fri Oct  1 18:33:33 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2170
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2171
- Mozilla Firefox 93.0
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2172
  * supports the new AVIF image format
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2173
  * PDF viewer now supports filling more forms (XFA-based forms)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2174
  * now blocks downloads that rely on insecure connections,
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2175
    protecting against potentially malicious or unsafe downloads
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2176
  * Improved web compatibility for privacy protections with SmartBlock 3.0
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2177
  * Introducing a new referrer tracking protection in Strict Tracking
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2178
    Protection and Private Browsing
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2179
  * TLS ciphersuites that use 3DES have been disabled. Such
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2180
    ciphersuites can only be enabled when deprecated versions of
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2181
    TLS are also enabled
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2182
  * The download panel now follows the Firefox visual styles
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2183
  MFSA 2021-43 (bsc#1191332)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2184
  * CVE-2021-38496 (bmo#1725335)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2185
    Use-after-free in MessageTask
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2186
  * CVE-2021-38497 (bmo#1726621)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2187
    Validation message could have been overlaid on another origin
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2188
  * CVE-2021-38498 (bmo#1729642)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2189
    Use-after-free of nsLanguageAtomService object
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2190
  * CVE-2021-32810 (bmo#1729813)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2191
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2192
    Data race in crossbeam-deque
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2193
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2194
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2195
    and Firefox ESR 91.2
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2196
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2197
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2198
  * CVE-2021-38499 (bmo#1667102, bmo#1723170, bmo#1725356, bmo#1727364)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2199
    Memory safety bugs fixed in Firefox 93
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2200
- removed obsolete mozilla-bmo1708709.patch
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2201
- require NSS >= 3.70
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2202
- allow to override wayland detection by defining MOZ_ENABLE_WAYLAND
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2203
  explicitely as 0 or 1
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2204
- fix aarch64 build by updating constraints
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2205
- add mozilla-bmo1725828.patch to fix widevine (bsc#1190842)
1164
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2206
- add mozilla-bmo531915.patch to fix build for i586
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2207
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2208
-------------------------------------------------------------------
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2209
Sat Sep 25 10:10:56 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2210
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2211
- Mozilla Firefox 92.0.1
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2212
  * Fixed: Fixes an issue where audio playback was not working on
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2213
    some Linux systems (bmo#1730499)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2214
  * Fixed: Fixes issues with the findbar close button on
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2215
    different operating systems (bmo#1728368)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2216
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2217
-------------------------------------------------------------------
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2218
Mon Sep  6 10:16:28 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2219
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2220
- Mozilla Firefox 92.0
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2221
  * More secure connections: Firefox can now automatically upgrade to
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2222
    HTTPS using HTTPS RR as Alt-Svc headers
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2223
  * Full-range color levels are now supported for video playback on
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2224
    many systems
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2225
  MFSA 2021-38 (bsc#1190269)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2226
  * CVE-2021-29993 (bmo#1708544, bmo#1708767, bmo#1712240,
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2227
    bmo#1712242, bmo#1729259)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2228
    Handling custom intents could lead to crashes and UI spoofs
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2229
  * CVE-2021-38491 (bmo#1551886)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2230
    Mixed-Content-Blocking was unable to check opaque origins
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2231
  * CVE-2021-38492 (bmo#1721107)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2232
    Navigating to `mk:` URL scheme could load Internet Explorer
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2233
  * CVE-2021-38493 (bmo#1723391, bmo#1724101, bmo#1724107)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2234
    Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2235
    Firefox ESR 91.1
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2236
  * CVE-2021-38494 (bmo#1723920, bmo#1725638)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2237
    Memory safety bugs fixed in Firefox 92
1162
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2238
- updated appdata
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2239
- remove mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2240
  (does not apply anymore; unclear if obsolete)
1162
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2241
- bring back mozilla-silence-no-return-type.patch and
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2242
  run post-build-checks everywhere again
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2243
- requires NSS 3.69.1
1162
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2244
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2245
-------------------------------------------------------------------
1161
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2246
Tue Aug 31 00:33:39 UTC 2021 - Atri Bhattacharya <badshah400@gmail.com>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2247
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2248
- Add mozilla-bmo1708709.patch: On [wayland] popup can be wrongly
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2249
  repositioned due to rounding errors when font scaling != 1
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2250
  (bmo#1708709); patch taken from upstream bug report and rebased
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2251
  to apply cleanly against current version.
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2252
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2253
-------------------------------------------------------------------
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2254
Sun Aug 29 14:45:29 UTC 2021 - Martin Liška <mliska@suse.cz>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2255
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2256
- Bump using with GCC (tested locally).
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2257
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2258
-------------------------------------------------------------------
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2259
Fri Aug 27 22:47:48 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2260
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2261
- Mozilla Firefox 91.0.2:
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2262
  * Fixed: Firefox no longer clears authentication data when
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2263
    purging trackers, to avoid repeatedly prompting for a
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2264
    password (bmo#1721084)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2265
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2266
-------------------------------------------------------------------
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2267
Wed Aug 18 06:34:01 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2268
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2269
- Mozilla Firefox 91.0.1
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2270
  * Fixed an issue causing buttons on the tab bar to be resized when
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2271
    loading certain websites (bmo#1704404)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2272
  * Fixed an issue which caused tabs from private windows to be
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2273
    visible in non-private windows when viewing switch-to-tab results
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2274
    in the address bar panel (bmo#1720369)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2275
  * Various stability fixes
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2276
  MFSA 2021-37 (bsc#1189547)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2277
  * CVE-2021-29991 (bmo#1724896)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2278
    Header Splitting possible with HTTP/3 Responses
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2279
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2280
-------------------------------------------------------------------
1160
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2281
Mon Aug  9 14:55:22 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2282
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2283
- Mozilla Firefox 91.0
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2284
  MFSA 2021-33 (bsc#1188891)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2285
  * CVE-2021-29986 (bmo#1696138)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2286
    Race condition when resolving DNS names could have led to
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2287
    memory corruption
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2288
  * CVE-2021-29981 (bmo#1707774)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2289
    Live range splitting could have led to conflicting
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2290
    assignments in the JIT
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2291
  * CVE-2021-29988 (bmo#1717922)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2292
    Memory corruption as a result of incorrect style treatment
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2293
  * CVE-2021-29983 (bmo#1719088)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2294
    Firefox for Android could get stuck in fullscreen mode
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2295
  * CVE-2021-29984 (bmo#1720031)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2296
    Incorrect instruction reordering during JIT optimization
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2297
  * CVE-2021-29980 (bmo#1722204)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2298
    Uninitialized memory in a canvas object could have led to
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2299
    memory corruption
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2300
  * CVE-2021-29987 (bmo#1716129)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2301
    Users could have been tricked into accepting unwanted
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2302
    permissions on Linux
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2303
  * CVE-2021-29985 (bmo#1722083)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2304
    Use-after-free media channels
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2305
  * CVE-2021-29982 (bmo#1715318)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2306
    Single bit data leak due to incorrect JIT optimization and
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2307
    type confusion
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2308
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2309
    bmo#1719998, bmo#1720568)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2310
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2311
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2312
    bmo#1719319, bmo#1722073)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2313
    Memory safety bugs fixed in Firefox 91
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2314
- requires
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2315
  * rustc/cargo >= 1.51
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2316
  * NSPR >= 4.32
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2317
  * NSS >= 3.68
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2318
- force-disable webrender on BE platforms
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2319
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2320
-------------------------------------------------------------------
1159
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2321
Sat Jul 24 07:15:54 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2322
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2323
- Mozilla Firefox 90.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2324
  * Changed: Updates to support DoH Canada rollout (bmo#1713036)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2325
  * Fixed: Fixed truncated output when printing (bmo#1720621)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2326
  * Fixed: Fixed menu styling on some Gtk themes (bmo#1720441,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2327
    bmo#1720874)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2328
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2329
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2330
Mon Jul 19 20:08:56 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2331
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2332
- Mozilla Firefox 90.0.1 (boo#1188480):
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2333
  * Fixed: Fixed busy looping processing some HTTP3 responses
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2334
    (bmo#1720079)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2335
  * Fixed: Fixed transient errors authenticating with some smart
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2336
    cards (bmo#1715325)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2337
  * Fixed: Fixed a rare crash on shutdown (bmo#1707057)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2338
  * Fixed: Fixed a race on startup that caused about:support to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2339
    end up empty after upgrade (bmo#1717894, boo#1188330)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2340
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2341
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2342
Sun Jul 11 08:53:02 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2343
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2344
- Mozilla Firefox 90.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2345
  MFSA 2021-28 (bsc#1188275)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2346
  * CVE-2021-29970 (bmo#1709976)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2347
    Use-after-free in accessibility features of a document
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2348
  * CVE-2021-29971 (bmo#1713638)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2349
    Granted permissions only compared host; omitting scheme and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2350
    port on Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2351
  * CVE-2021-30547 (bmo#1715766)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2352
    Out of bounds write in ANGLE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2353
  * CVE-2021-29972 (bmo#1696816)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2354
    Use of out-of-date library included use-after-free
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2355
    vulnerability
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2356
  * CVE-2021-29973 (bmo#1701932)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2357
    Password autofill on HTTP websites was enabled without user
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2358
    interaction on Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2359
  * CVE-2021-29974 (bmo#1704843)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2360
    HSTS errors could be overridden when network partitioning was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2361
    enabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2362
  * CVE-2021-29975 (bmo#1713259)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2363
    Text message could be overlaid on top of another website
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2364
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2365
    bmo#1711576, bmo#1714391)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2366
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2367
  * CVE-2021-29977 (bmo#1665836, bmo#1686138, bmo#1704316,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2368
    bmo#1706314, bmo#1709931, bmo#1712084, bmo#1712357,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2369
    bmo#1714066)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2370
    Memory safety bugs fixed in Firefox 90
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2371
- requires
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2372
  NSPR 4.31
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2373
  NSS 3.66
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2374
- Gtk2 support removed (was only for Flash plugin before)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2375
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2376
-------------------------------------------------------------------
1158
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2377
Wed Jun 23 16:54:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2378
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2379
- Mozilla Firefox 89.0.2 (boo#1187648):
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2380
  * Fix occasional hangs with Software WebRender on Linux (bmo#1708224)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2381
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2382
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2383
Sat Jun 19 09:00:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2384
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2385
- Mozilla Firefox 89.0.1 (boo#1187475):
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2386
  * Updated translations, including full Spanish (Mexico)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2387
    localization and other improvements (bmo#1714946)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2388
  * Fix various font related regressions (bmo#1694174)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2389
  * Linux: Fix performance and stability regressions with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2390
    WebRender (bmo#1715895, bmo#1715902)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2391
  * Enterprise: Fix for the `DisableDeveloperTools` policy not
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2392
    having effect anymore (bmo#1715777)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2393
  * Linux: Fix broken scrollbars on some GTK themes (bmo#1714103)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2394
  * Various stability fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2395
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2396
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2397
Sat May 29 20:55:56 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2398
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2399
- Mozilla Firefox 89.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2400
  * UI redesign
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2401
  * The Event Timing API is now supported
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2402
  * The CSS forced-colors media query is now supported
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2403
  MFSA 2021-23 (bsc#1186696)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2404
  * CVE-2021-29965 (bmo#1709257)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2405
    Password Manager on Firefox for Android susceptible to domain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2406
    spoofing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2407
  * CVE-2021-29960 (bmo#1675965)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2408
    Filenames printed from private browsing mode incorrectly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2409
    retained in preferences
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2410
  * CVE-2021-29961 (bmo#1700235)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2411
    Firefox UI spoof using `<select>` elements and CSS scaling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2412
  * CVE-2021-29963 (bmo#1705068)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2413
    Shared cookies for search suggestions in private browsing mode
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2414
  * CVE-2021-29964 (bmo#1706501)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2415
    Out of bounds-read when parsing a `WM_COPYDATA` message
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2416
  * CVE-2021-29959 (bmo#1395819)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2417
    Devices could be re-enabled without additional permission prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2418
  * CVE-2021-29962 (bmo#1701673)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2419
    No rate-limiting for popups on Firefox for Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2420
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2421
    bmo#1704722, bmo#1706041)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2422
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2423
  * CVE-2021-29966 (bmo#1660307, bmo#1686154, bmo#1702948, bmo#1708124)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2424
    Memory safety bugs fixed in Firefox 89
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2425
- require
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2426
  NSS >= 3.64
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2427
  rust-cbindgen >= 0.19.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2428
- do not rely on nodejs10 packagename anymore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2429
- updated mozilla.keyring
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2430
- switched TW/x86_64 to clang as the last platform due to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2431
  https://bugs.gentoo.org/792705
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2432
- but LTO with clang is broken in TW so disable LTO for it
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2433
  https://bugs.llvm.org/show_bug.cgi?id=47872
1157
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2434
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2435
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2436
Thu May  6 13:40:10 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2437
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2438
- Relax RAM and disk constraints for aarch64
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2439
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2440
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2441
Wed May  5 15:13:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2442
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2443
- Mozilla Firefox 88.0.1
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2444
  * Fixed: Resolved an issue caused by a recent Widevine plugin
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2445
    update which prevented some purchased video content from
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2446
    playing correctly (bmo#1705138)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2447
  * Fixed: Fixed corruption of videos playing on Twitter or
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2448
    WebRTC calls on some Gen6 Intel graphics chipsets
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2449
    (bmo#1708937)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2450
  * Fixed: Fixed menulists in Preferences being unreadable for
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2451
    users with High Contrast Mode enabled (bmo#1706496)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2452
  MFSA 2021-20 (bsc#1185633)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2453
  * CVE-2021-29952 (bmo#1704227)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2454
    Race condition in Web Render Components
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2455
- devel package: move macros to /usr/lib/rpm/macros.d (boo#1185658)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2456
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2457
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2458
Sun May  2 12:03:26 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2459
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2460
- add compatibility for libavcodec58_134
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2461
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2462
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2463
Sun Apr 18 09:01:32 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2464
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2465
- Mozilla Firefox 88.0
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2466
  * New: PDF forms now support JavaScript embedded in PDF files.
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2467
    Some PDF forms use JavaScript for validation and other
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2468
    interactive features
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2469
  * New: Print updates: Margin units are now localized
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2470
  * New: Smooth pinch-zooming using a touchpad is now supported
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2471
    on Linux
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2472
  * New: To protect against cross-site privacy leaks, Firefox now
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2473
    isolates window.name data to the website that created it.
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2474
    Learn more
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2475
  * Changed: Firefox will not prompt for access to your
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2476
    microphone or camera if you’ve already granted access to the
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2477
    same device on the same site in the same tab within the past
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2478
    50 seconds. This new grace period reduces the number of times
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2479
    you’re prompted to grant device access
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2480
  * Changed: The ‘Take a Screenshot’ feature was removed from the
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2481
    Page Actions menu in the url bar. To take a screenshot,
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2482
    right-click to open the context menu. You can also add a
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2483
    screenshots shortcut directly to your toolbar via the
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2484
    Customize menu. Open the Firefox menu and select Customize…
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2485
  * Changed: FTP support has been disabled, and its full removal
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2486
    is planned for an upcoming release. Addressing this security
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2487
    risk reduces the likelihood of an attack while also removing
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2488
    support for a non-encrypted protocol
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2489
  * Developer: Introduced a new toggle button in the Network
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2490
    panel for switching between JSON formatted HTTP response and
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2491
    raw data (as received over the wire).
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2492
    !enter image description here
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2493
  * Enterprise: Various bug fixes and new policies have been
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2494
    implemented in the latest version of Firefox. You can see
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2495
    more details in the Firefox for Enterprise 88 Release Notes.
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2496
  * Fixed: Screen readers no longer incorrectly read content that
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2497
    websites have visually hidden, as in the case of articles in
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2498
    the Google Help panel
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2499
  MFSA 2021-16 (bsc#1184960)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2500
  * CVE-2021-23994 (bmo#1699077)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2501
    Out of bound write due to lazy initialization
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2502
  * CVE-2021-23995 (bmo#1699835)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2503
    Use-after-free in Responsive Design Mode
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2504
  * CVE-2021-23996 (bmo#1701834)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2505
    Content rendered outside of webpage viewport
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2506
  * CVE-2021-23997 (bmo#1701942)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2507
    Use-after-free when freeing fonts from cache
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2508
  * CVE-2021-23998 (bmo#1667456)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2509
    Secure Lock icon could have been spoofed
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2510
  * CVE-2021-23999 (bmo#1691153)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2511
    Blob URLs may have been granted additional privileges
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2512
  * CVE-2021-24000 (bmo#1694698)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2513
    requestPointerLock() could be applied to a tab different from
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2514
    the visible tab
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2515
  * CVE-2021-24001 (bmo#1694727)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2516
    Testing code could have enabled session history manipulations
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2517
    by a compromised content process
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2518
  * CVE-2021-24002 (bmo#1702374)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2519
    Arbitrary FTP command execution on FTP servers using an
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2520
    encoded URL
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2521
  * CVE-2021-29945 (bmo#1700690)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2522
    Incorrect size computation in WebAssembly JIT could lead to
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2523
    null-reads
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2524
  * CVE-2021-29944 (bmo#1697604)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2525
    HTML injection vulnerability in Firefox for Android's Reader View
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2526
  * CVE-2021-29946 (bmo#1698503)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2527
    Port blocking could be bypassed
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2528
  * CVE-2021-29947 (bmo#1651449, bmo#1674142, bmo#1693476,
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2529
    bmo#1696886, bmo#1700091)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2530
    Memory safety bugs fixed in Firefox 88
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2531
- requires
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2532
  * NSPR 4.30
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2533
  * NSS 3.63.1
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2534
- align wayland support logic
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2535
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2536
-------------------------------------------------------------------
1156
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2537
Sat Mar 27 10:40:46 UTC 2021 - Manfred Hollstein <manfred.h@gmx.net>
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2538
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2539
- Switch to clang_build globally; just on TW/x86_64 it does not work
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2540
  due to unreolved externals `__rust_probestack' - disable clang_build
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2541
  then.
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2542
- useccache: Add conditionals to enable/disable ccache.
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2543
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2544
-------------------------------------------------------------------
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2545
Tue Mar 23 16:42:19 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
1155
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2546
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2547
- Mozilla Firefox 87.0
1156
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2548
  * requires NSS 3.62
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2549
  * removed obsolete BigEndian ICU build workaround
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2550
  * rebased patches
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2551
  MFSA 2021-10 (bsc#1183942)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2552
  * CVE-2021-23981 (bmo#1692832)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2553
    Texture upload into an unbound backing buffer resulted in an
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2554
    out-of-bound read
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2555
  * CVE-2021-23982 (bmo#1677046)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2556
    Internal network hosts could have been probed by a malicious
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2557
    webpage
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2558
  * CVE-2021-23983 (bmo#1692684)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2559
    Transitions for invalid ::marker properties resulted in memory
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2560
    corruption
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2561
  * CVE-2021-23984 (bmo#1693664)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2562
    Malicious extensions could have spoofed popup information
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2563
  * CVE-2021-23985 (bmo#1659129)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2564
    Devtools remote debugging feature could have been enabled
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2565
    without indication to the user
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2566
  * CVE-2021-23986 (bmo#1692623)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2567
    A malicious extension could have performed credential-less
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2568
    same origin policy violations
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2569
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2570
    bmo#1690718)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2571
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2572
  * CVE-2021-23988 (bmo#1684994, bmo#1686653)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2573
    Memory safety bugs fixed in Firefox 87
1155
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2574
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2575
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2576
Tue Mar 16 14:26:35 UTC 2021 - Martin Liška <mliska@suse.cz>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2577
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2578
- Set memory limits for DWZ to 4x.
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2579
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2580
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2581
Sat Mar 13 08:23:06 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2582
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2583
- Mozilla Firefox 86.0.1
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2584
  * Fixed: Fixed an issue on Apple Silicon machines that caused
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2585
    Firefox to be unresponsive after system sleep (bmo#1682713)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2586
  * Fixed: Fixed an issue causing windows to gain or lose focus
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2587
    unexpectedly (bmo#1694927)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2588
  * Fixed: Fixed truncation of date and time widgets due to
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2589
    incorrect width calculation (bmo#1695578)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2590
  * Fixed: Fixed an issue causing unexpected behavior with
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2591
    extensions managing tab groups (bmo#1694699)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2592
  * Fixed: Fixed a frequent Linux crash on browser launch
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2593
    (bmo#1694670)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2594
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2595
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2596
Sun Feb 21 18:14:12 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2597
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2598
- Mozilla Firefox 86.0
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2599
  * requires NSS >= 3.61
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2600
  * requires rust-cbindgen >= 0.16.0
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2601
  * Firefox now supports simultaneously watching multiple videos in
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2602
    Picture-in-Picture.
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2603
  * Total Cookie Protection to Strict Mode
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2604
  * https://www.mozilla.org/en-US/firefox/86.0/releasenotes
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2605
  MSFA 2021-07 (bsc#1182614)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2606
  * CVE-2021-23969 (bmo#1542194)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2607
    Content Security Policy violation report could have contained
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2608
    the destination of a redirect
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2609
  * CVE-2021-23970 (bmo#1681724)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2610
    Multithreaded WASM triggered assertions validating separation
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2611
    of script domains
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2612
  * CVE-2021-23968 (bmo#1687342)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2613
    Content Security Policy violation report could have contained
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2614
    the destination of a redirect
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2615
  * CVE-2021-23974 (bmo#1528997, bmo#1683627)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2616
    noscript elements could have led to an HTML Sanitizer bypass
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2617
  * CVE-2021-23971 (bmo#1678545)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2618
    A website's Referrer-Policy could have been be overridden,
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2619
    potentially resulting in the full URL being sent as a Referrer
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2620
  * CVE-2021-23976 (bmo#1684627)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2621
    Local spoofing of web manifests for arbitrary pages in
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2622
    Firefox for Android
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2623
  * CVE-2021-23977 (bmo#1684761)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2624
    Malicious application could read sensitive data from Firefox
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2625
    for Android's application directories
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2626
  * CVE-2021-23972 (bmo#1683536)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2627
    HTTP Auth phishing warning was omitted when a redirect is
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2628
    cached
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2629
  * CVE-2021-23975 (bmo#1685145)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2630
    about:memory Measure function caused an incorrect pointer
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2631
    operation
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2632
  * CVE-2021-23973 (bmo#1690976)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2633
    MediaError message property could have leaked information
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2634
    about cross-origin resources
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2635
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597, bmo#786797)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2636
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2637
  * CVE-2021-23979 (bmo#1663222, bmo#1666607, bmo#1672120, bmo#1678463,
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2638
    bmo#1678927, bmo#1679560, bmo#1681297, bmo#1681684, bmo#1683490,
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2639
    bmo#1684377, bmo#1684902)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2640
    Memory safety bugs fixed in Firefox 86
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2641
- updated create-tar.sh (bsc#1182357)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2642
- removed obsolete mozilla-bmo1554971.patch
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2643
- remove buildsymbols subpackage
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2644
  * we haven't done anything with it for years
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2645
  * mozilla is collecting those from our debuginfo packages
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2646
  * would require a local dump_syms tool
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2647
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2648
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2649
Wed Feb 17 18:40:41 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2650
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2651
- Mozilla Firefox 85.0.2
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2652
  * Fixed: Fixed a deadlock during startup (bmo#1679933)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2653
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2654
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2655
Wed Feb 17 11:19:01 UTC 2021 - Michel Normand <normand@linux.vnet.ibm.com>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2656
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2657
- Use %limit_build macros for PowerPC to avoid oom build failure
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2658
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2659
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2660
Tue Feb  9 09:05:26 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2661
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2662
- Mozilla Firefox 85.0.1
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2663
  MFSA 2021-06 (bsc#1181848)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2664
  * MOZ-2021-0001 (bmo#1676636)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2665
    Buffer overflow in depth pitch calculations for compressed
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2666
    textures
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2667
  * Fixed: Avoid printing an extra blank page at the end of some
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2668
    documents (bmo#1689789).
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2669
  * Fixed: Fixed a browser crash in case of unexpected Cache API
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2670
    state (bmo#1684838).
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2671
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2672
-------------------------------------------------------------------
1154
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2673
Sun Jan 24 11:53:58 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2674
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2675
- Mozilla Firefox 85.0
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2676
  * Adobe Flash is completely history
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2677
  * supercookie protection
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2678
  * new bookmark handling and features
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2679
  MFSA 2021-03 (bsc#1181414)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2680
  * CVE-2021-23953 (bmo#1683940)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2681
    Cross-origin information leakage via redirected PDF requests
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2682
  * CVE-2021-23954 (bmo#1684020)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2683
    Type confusion when using logical assignment operators in
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2684
    JavaScript switch statements
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2685
  * CVE-2021-23955 (bmo#1684837)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2686
    Clickjacking across tabs through misusing requestPointerLock
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2687
  * CVE-2021-23956 (bmo#1338637)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2688
    File picker dialog could have been used to disclose a
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2689
    complete directory
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2690
  * CVE-2021-23957 (bmo#1584582)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2691
    Iframe sandbox could have been bypassed on Android via the
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2692
    intent URL scheme
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2693
  * CVE-2021-23958 (bmo#1642747)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2694
    Screen sharing permission leaked across tabs
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2695
  * CVE-2021-23959 (bmo#1659035)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2696
    Cross-Site Scripting in error pages on Firefox for Android
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2697
  * CVE-2021-23960 (bmo#1675755)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2698
    Use-after-poison for incorrectly redeclared JavaScript
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2699
    variables during GC
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2700
  * CVE-2021-23961 (bmo#1677940)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2701
    More internal network hosts could have been probed by a
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2702
    malicious webpage
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2703
  * CVE-2021-23962 (bmo#1677194)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2704
    Use-after-poison in
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2705
    <code>nsTreeBodyFrame::RowCountChanged</code>
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2706
  * CVE-2021-23963 (bmo#1680793)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2707
    Permission prompt inaccessible after asking for additional
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2708
    permissions
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2709
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526, bmo#1674278,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2710
    bmo#1674835, bmo#1675097, bmo#1675844, bmo#1675868, bmo#1677590,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2711
    bmo#1677888, bmo#1680410, bmo#1681268, bmo#1682068, bmo#1682938,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2712
    bmo#1683736, bmo#1685260, bmo#1685925)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2713
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2714
  * CVE-2021-23965 (bmo#1670378, bmo#1673555, bmo#1676812, bmo#1678582,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2715
    bmo#1684497)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2716
    Memory safety bugs fixed in Firefox 85
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2717
- requires NSS 3.60.1
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2718
- requires rust 1.47
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2719
- remove obsolete mozilla-pipewire-0-3.patch
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2720
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2721
-------------------------------------------------------------------
1153
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2722
Mon Jan 11 18:02:01 UTC 2021 - Matthias Mailänder <mailaender@opensuse.org>
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2723
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2724
- Fix AppStream screenshot links
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2725
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2726
-------------------------------------------------------------------
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2727
Thu Jan  7 17:11:43 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2728
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2729
- Mozilla Firefox 84.0.2
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2730
  MFSA 2021-01 (bsc#1180623)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2731
  * CVE-2020-16044 (bmo#1683964)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2732
    Use-after-free write when handling a malicious COOKIE-ECHO
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2733
    SCTP chunk
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2734
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2735
-------------------------------------------------------------------
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2736
Sun Dec 27 09:52:50 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2737
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2738
- Mozilla Firefox 84.0.1
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2739
  * Fixed problems loading secure websites and crashes for users
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2740
    with certain third-party PKCS11 modules and smartcards installed
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2741
    (bmo#1682881) (fixed in NSS 3.59.1)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2742
  * Fixed a bug causing some Unity JS games to not load on Apple
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2743
    Silicon devices due to improper detection of the OS version
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2744
    (bmo#1680516)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2745
- requires NSS 3.59.1
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2746
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2747
-------------------------------------------------------------------
1152
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2748
Sun Dec 13 18:18:58 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2749
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2750
- Mozilla Firefox 84.0
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2751
  * Firefox 84 is the final release to support Adobe Flash
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2752
  * WebRender is enabled by default when run on GNOME-based X11
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2753
    Linux desktops
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2754
  MFSA 2020-54 (bsc#1180039))
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2755
  * CVE-2020-16042 (bmo#1679003)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2756
    Operations on a BigInt could have caused uninitialized memory
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2757
    to be exposed
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2758
  * CVE-2020-26971 (bmo#1663466)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2759
    Heap buffer overflow in WebGL
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2760
  * CVE-2020-26972 (bmo#1671382)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2761
    Use-After-Free in WebGL
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2762
  * CVE-2020-26973 (bmo#1680084)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2763
    CSS Sanitizer performed incorrect sanitization
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2764
  * CVE-2020-26974 (bmo#1681022)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2765
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2766
    use-after-free
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2767
  * CVE-2020-26975 (bmo#1661071)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2768
    Malicious applications on Android could have induced Firefox
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2769
    for Android into sending arbitrary attacker-specified headers
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2770
  * CVE-2020-26976 (bmo#1674343)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2771
    HTTPS pages could have been intercepted by a registered
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2772
    service worker when they should not have been
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2773
  * CVE-2020-26977 (bmo#1676311)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2774
    URL spoofing via unresponsive port in Firefox for Android
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2775
  * CVE-2020-26978 (bmo#1677047)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2776
    Internal network hosts could have been probed by a malicious
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2777
    webpage
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2778
  * CVE-2020-26979 (bmo#1641287, bmo#1673299)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2779
    When entering an address in the address or search bars, a
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2780
    website could have redirected the user before they were
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2781
    navigated to the intended url
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2782
  * CVE-2020-35111 (bmo#1657916)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2783
    The proxy.onRequest API did not catch view-source URLs
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2784
  * CVE-2020-35112 (bmo#1661365)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2785
    Opening an extension-less download may have inadvertently
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2786
    launched an executable instead
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2787
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2788
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2789
  * CVE-2020-35114 (bmo#1607449, bmo#1640416, bmo#1656459,
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2790
    bmo#1669914, bmo#1673567)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2791
    Memory safety bugs fixed in Firefox 84
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2792
- requires
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2793
  NSS >= 3.59
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2794
  rust >= 1.44
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2795
  rust-cbindgen >= 0.15.0
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2796
- remove revert-795c8762b16b.patch and replace with mozilla-pgo.patch
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2797
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2798
-------------------------------------------------------------------
1151
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2799
Sat Nov 21 08:12:17 UTC 2020 - Kirill Kirillov <kkirill@opensuse.org>
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2800
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2801
- Add/Enable GNOME search provider
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2802
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2803
-------------------------------------------------------------------
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2804
Sun Nov 15 12:16:53 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2805
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2806
- Mozilla Firefox 83.0
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2807
  * major update for SpiderMonkey improving performance significantly
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2808
  * optional HTTPS-Only mode
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2809
  * more improvements
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2810
    https://www.mozilla.org/en-US/firefox/83.0/releasenotes/
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2811
  MFSA 2020-50 (bsc#1178824))
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2812
  * CVE-2020-26951 (bmo#1667113)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2813
    Parsing mismatches could confuse and bypass security
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2814
    sanitizer for chrome privileged code
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2815
  * CVE-2020-26952 (bmo#1667685)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2816
    Out of memory handling of JITed, inlined functions could lead
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2817
    to a memory corruption
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2818
  * CVE-2020-16012 (bmo#1642028)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2819
    Variable time processing of cross-origin images during
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2820
    drawImage calls
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2821
  * CVE-2020-26953 (bmo#1656741)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2822
    Fullscreen could be enabled without displaying the security UI
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2823
  * CVE-2020-26954 (bmo#1657026)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2824
    Local spoofing of web manifests for arbitrary pages in
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2825
    Firefox for Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2826
  * CVE-2020-26955 (bmo#1663261)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2827
    Cookies set during file downloads are shared between normal
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2828
    and Private Browsing Mode in Firefox for Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2829
  * CVE-2020-26956 (bmo#1666300)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2830
    XSS through paste (manual and clipboard API)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2831
  * CVE-2020-26957 (bmo#1667179)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2832
    OneCRL was not working in Firefox for Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2833
  * CVE-2020-26958 (bmo#1669355)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2834
    Requests intercepted through ServiceWorkers lacked MIME type
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2835
    restrictions
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2836
  * CVE-2020-26959 (bmo#1669466)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2837
    Use-after-free in WebRequestService
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2838
  * CVE-2020-26960 (bmo#1670358)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2839
    Potential use-after-free in uses of nsTArray
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2840
  * CVE-2020-15999 (bmo#1672223)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2841
    Heap buffer overflow in freetype
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2842
  * CVE-2020-26961 (bmo#1672528)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2843
    DoH did not filter IPv4 mapped IP Addresses
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2844
  * CVE-2020-26962 (bmo#610997)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2845
    Cross-origin iframes supported login autofill
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2846
  * CVE-2020-26963 (bmo#1314912)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2847
    History and Location interfaces could have been used to hang
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2848
    the browser
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2849
  * CVE-2020-26964 (bmo#1658865)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2850
    Firefox for Android's Remote Debugging via USB could have
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2851
    been abused by untrusted apps on older versions of Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2852
  * CVE-2020-26965 (bmo#1661617)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2853
    Software keyboards may have remembered typed passwords
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2854
  * CVE-2020-26966 (bmo#1663571)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2855
    Single-word search queries were also broadcast to local
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2856
    network
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2857
  * CVE-2020-26967 (bmo#1665820)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2858
    Mutation Observers could break or confuse Firefox Screenshots
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2859
    feature
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2860
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2861
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2862
    bmo#1671923)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2863
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2864
  * CVE-2020-26969 (bmo#1623920, bmo#1651705, bmo#1667872,
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2865
    bmo#1668876)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2866
    Memory safety bugs fixed in Firefox 83
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2867
- requires
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2868
  NSS >= 3.58
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2869
  nodejs >= 10.22.1
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2870
- removed obsolete mozilla-ppc-altivec_static_inline.patch
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2871
- disable LTO on TW because of ICEs in gcc
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2872
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2873
-------------------------------------------------------------------
1150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2874
Mon Nov  9 10:15:52 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2875
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2876
- Mozilla Firefox 82.0.3
1151
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2877
  MSFA 2020-49
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2878
  * CVE-2020-26950 (bmo#1675905)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2879
    Write side effects in MCallGetProperty opcode not accounted for
1150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2880
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2881
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2882
Mon Nov  2 09:00:13 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2883
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2884
- Mozilla Firefox 82.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2885
  * few bugfixes for introduced regressions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2886
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2887
-------------------------------------------------------------------
1151
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2888
Sun Nov  1 20:15:17 UTC 2020 - Kirill Kirillov <kkirill@opensuse.org>
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2889
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2890
- Enable GNOME search provider
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2891
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2892
-------------------------------------------------------------------
1150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2893
Thu Oct 15 20:44:47 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2894
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2895
- Mozilla Firefox 82.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2896
  * https://www.mozilla.org/en-US/firefox/82.0/releasenotes/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2897
  MFSA 2020-45 (bsc#1177872)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2898
  * CVE-2020-15969 (bmo#1666570)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2899
    Use-after-free in usersctp
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2900
  * CVE-2020-15254 (bmo#1668514)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2901
    Undefined behavior in bounded channel of crossbeam rust crate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2902
  * CVE-2020-15680 (bmo#1658881)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2903
    Presence of external protocol handlers could be determined
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2904
    through image tags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2905
  * CVE-2020-15681 (bmo#1666568)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2906
    Multiple WASM threads may have overwritten each others' stub
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2907
    table entries
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2908
  * CVE-2020-15682 (bmo#1636654)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2909
    The domain associated with the prompt to open an external
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2910
    protocol could be spoofed to display the incorrect origin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2911
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2912
    bmo#1662760, bmo#1663439, bmo#1666140)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2913
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2914
  * CVE-2020-15684 (bmo#1653764, bmo#1661402, bmo#1662259,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2915
    bmo#1664257)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2916
    Memory safety bugs fixed in Firefox 82
1148
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2917
- requires
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2918
  * NSPR 4.29
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2919
  * NSS 3.57
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2920
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2921
-------------------------------------------------------------------
1147
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2922
Thu Oct  1 20:00:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2923
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2924
- Mozilla Firefox 81.0.1
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2925
  * https://www.mozilla.org/en-US/firefox/81.0.1/releasenotes/
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2926
- remove obsolete python2 build requires
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2927
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2928
-------------------------------------------------------------------
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2929
Wed Sep 30 18:49:10 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2930
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2931
- Increase disk requirements in _constraints to match current needs
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2932
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2933
-------------------------------------------------------------------
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2934
Fri Sep 18 06:22:40 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2935
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2936
- Mozilla Firefox 81.0
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2937
  * https://www.mozilla.org/en-US/firefox/81.0/releasenotes
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2938
  MFSA 2020-42 (bsc#1176756)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2939
  * CVE-2020-15675 (bmo#1654211)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2940
    Use-After-Free in WebGL
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2941
  * CVE-2020-15677 (bmo#1641487)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2942
    Download origin spoofing via redirect
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2943
  * CVE-2020-15676 (bmo#1646140)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2944
    XSS when pasting attacker-controlled data into a
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2945
    contenteditable element
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2946
  * CVE-2020-15678 (bmo#1660211)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2947
    When recursing through layers while scrolling, an iterator
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2948
    may have become invalid, resulting in a potential use-after-
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2949
    free scenario
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2950
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2951
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2952
  * CVE-2020-15674 (bmo#1656063, bmo#1656064, bmo#1656067, bmo#1660293)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2953
    Memory safety bugs fixed in Firefox 81
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2954
- requires
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2955
  NSPR 4.28
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2956
  NSS 3.56
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2957
- removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2958
  * mozilla-system-nspr.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2959
  * mozilla-bmo1661715.patch
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2960
  * mozilla-silence-no-return-type.patch
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2961
- skip post-build-checks for 15.0 and 15.1
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2962
- add revert-795c8762b16b.patch to fix LTO builds with gcc
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2963
  (related to bmo#1644409)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2964
- require python3-curses as workaround to fix i586 build
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2965
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2966
-------------------------------------------------------------------
1143
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2967
Thu Sep 17 11:45:31 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2968
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2969
- Use %limit_build macro again for aarch64 and armv7, instead of
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2970
  the new memoryperjob _constraints to use more workers
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2971
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2972
-------------------------------------------------------------------
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2973
Sat Sep  5 17:43:26 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2974
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2975
- add mozilla-bmo1661715.patch to fix Flash plugin
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2976
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2977
-------------------------------------------------------------------
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2978
Wed Sep  2 17:11:19 UTC 2020 - Manfred Hollstein <manfred.h@gmx.net>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2979
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2980
- Mozilla Firefox 80.0.1: Bug fixes:
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2981
  * Fixed a performance regression when encountering new intermediate
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2982
    CA certificates (bmo#1661543)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2983
  * Fixed crashes possibly related to GPU resets (bmo#1627616)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2984
  * Fixed rendering on some sites using WebGL (bmo#1659225)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2985
  * Fixed the zoom-in keyboard shortcut on Japanese language builds
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2986
    (bmo#1661895)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2987
  * Fixed download issues related to extensions and cookies
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2988
    (bmo#1655190)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2989
- added mozilla-silence-no-return-type.patch
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2990
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2991
-------------------------------------------------------------------
1142
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2992
Tue Aug 25 19:30:15 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2993
1143
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2994
- more whitelisting (/dev/random) for sandbox in relation to FIPS
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2995
  (bsc#1174284)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2996
- improve langpack builds to use dedicated objdirs and make it
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2997
  parallel again
1142
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2998
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2999
-------------------------------------------------------------------
1141
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3000
Sat Aug 22 06:52:01 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3001
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3002
- Mozilla Firefox 80.0
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3003
  MFSA 2020-36 (bsc#1175686)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3004
  * CVE-2020-15663 (bmo#1643199)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3005
    Downgrade attack on the Mozilla Maintenance Service could
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3006
    have resulted in escalation of privilege
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3007
  * CVE-2020-15664 (bmo#1658214)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3008
    Attacker-induced prompt for extension installation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3009
  * CVE-2020-12401 (bmo#1631573)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3010
    Timing-attack on ECDSA signature generation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3011
  * CVE-2020-6829 (bmo#1631583)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3012
    P-384 and P-521 vulnerable to an electro-magnetic side
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3013
    channel attack on signature generation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3014
  * CVE-2020-12400 (bmo#1623116)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3015
    P-384 and P-521 vulnerable to a side channel attack on
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3016
    modular inversion
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3017
  * CVE-2020-15665 (bmo#1651636)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3018
    Address bar not reset when choosing to stay on a page after
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3019
    the beforeunload dialog is shown
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3020
  * CVE-2020-15666 (bmo#1450853)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3021
    MediaError message property leaks cross-origin response
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3022
    status
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3023
  * CVE-2020-15667 (bmo#1653371)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3024
    Heap overflow when processing an update file
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3025
  * CVE-2020-15668 (bmo#1651520)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3026
    Data Race when reading certificate information
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3027
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3028
    bmo#1656957)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3029
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3030
- requires
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3031
  * NSPR 4.27
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3032
  * NSS 3.55
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3033
- added mozilla-system-nspr.patch (bmo#1661096)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3034
- exclude ga-IE locale as it's failing to build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3035
- rollback parallelize locale build because it breaks bookmarks
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3036
  (boo#1167976)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3037
- preserve original default bookmark file during langpack build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3038
  (boo#1167976)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3039
- add some ccache output during build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3040
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  3041
-------------------------------------------------------------------
1140
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3042
Thu Aug 20 13:07:33 UTC 2020 - Martin Liška <mliska@suse.cz>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3043
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3044
- Use new memoryperjob _constraints instead of %limit_build macro.
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3045
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3046
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3047
Mon Aug 10 09:19:38 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3048
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3049
- use ccache for build
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3050
- replace versioned RPM deps with requires_ge
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3051
- parallelize locale build
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3052
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3053
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3054
Thu Aug  6 14:37:16 UTC 2020 - Yunhe Guo <i@guoyunhe.me>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3055
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3056
- Change *.appdata.xml location to latest AppStream standard
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3057
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3058
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3059
Thu Jul 23 21:00:34 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3060
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3061
- Mozilla Firefox 79.0
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3062
  MFSA 2020-30 (bsc#1174538)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3063
  * CVE-2020-15652 (bmo#1634872)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3064
    Potential leak of redirect targets when loading scripts in a worker
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3065
  * CVE-2020-6514 (bmo#1642792)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3066
    WebRTC data channel leaks internal address to peer
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3067
  * CVE-2020-15655 (bmo#1645204)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3068
    Extension APIs could be used to bypass Same-Origin Policy
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3069
  * CVE-2020-15653 (bmo#1521542)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3070
    Bypassing iframe sandbox when allowing popups
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3071
  * CVE-2020-6463 (bmo#1635293)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3072
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3073
  * CVE-2020-15656 (bmo#1647293)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3074
    Type confusion for special arguments in IonMonkey
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3075
  * CVE-2020-15658 (bmo#1637745)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3076
    Overriding file type when saving to disk
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3077
  * CVE-2020-15657 (bmo#1644954)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3078
    DLL hijacking due to incorrect loading path
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3079
  * CVE-2020-15654 (bmo#1648333)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3080
    Custom cursor can overlay user interface
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3081
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1638856,
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3082
    bmo#1643613, bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646220,
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3083
    bmo#1646787, bmo#1649347, bmo#1650811, bmo#1651678)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3084
    Memory safety bugs fixed in Firefox 79
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3085
- updated dependency requirements:
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3086
  * mozilla-nspr >= 4.26
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3087
  * mozilla-nss >= 3.54
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3088
  * rust >= 1.43
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3089
  * rust-cbindgen >= 0.14.3
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3090
- removed obsolete patch
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3091
  mozilla-bmo1463035.patch
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3092
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  3093
-------------------------------------------------------------------
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3094
Tue Jul 21 21:31:20 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3095
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3096
- fixed syntax issue in desktop file (boo#1174360)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3097
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3098
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3099
Fri Jul 17 15:07:45 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3100
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3101
- Add mozilla-libavcodec58_91.patch to link against updated
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3102
  soversion of libavcodec (58.91) with ffmpeg >= 4.3.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3103
  (patch provided by Atri Bhattacharya <badshah400@gmail.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3104
- enable MOZ_USE_XINPUT2 for TW (again) (boo#1173320)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3105
  (Plasma 5.19.3 is now in TW)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3106
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3107
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3108
Sat Jul 11 11:08:06 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3109
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3110
- Mozilla Firefox 78.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3111
  * Fixed an accessibility regression in reader mode (bmo#1650922)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3112
  * Made the address bar more resilient to data corruption in the
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3113
    user profile (bmo#1649981)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3114
  * Fixed a regression opening certain external applications (bmo#1650162)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3115
  MFSA 2020-28
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3116
  * CVE pending (bmo#1644076)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3117
    X-Frame-Options bypass using object or embed tags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3118
- added desktop file actions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3119
- do not use XINPUT2 for the moment until Plasma 5.19.3 has landed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3120
  (boo#1173993)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3121
- rework langpack integration (boo#1173991)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3122
  * ship XPIs instead of directories
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3123
  * allow addon sideloading
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3124
  * mark signatures for langpacks non-mandatory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3125
  * do not autodisable user profile scopes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3126
- Google API key is not usable for geolocation service
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3127
- fix pipewire support for TW (boo#1172903)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3128
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3129
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3130
Wed Jul  1 07:15:02 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3131
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3132
- Mozilla Firefox 78.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3133
  * Fixed an issue which could cause installed search engines to not
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3134
    be visible when upgrading from a previous release.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3135
- enable MOZ_USE_XINPUT2 for TW (boo#1173320)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3136
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3137
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3138
Sun Jun 28 07:17:13 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3139
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3140
- Mozilla Firefox 78.0
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3141
  * startup notifications now using Gtk instead of libnotify
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3142
  * PDF downloads now show an option to open the PDF directly in Firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3143
  * Protections Dashboard (about:protections)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3144
  * WebRTC not interrupted by screensaver anymore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3145
  * disabled TLS 1.0 and 1.1 by default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3146
  MFSA 2020-24 (bsc#1173576)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3147
  * CVE-2020-12415 (bmo#1586630)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3148
    AppCache manifest poisoning due to url encoded character processing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3149
  * CVE-2020-12416 (bmo#1639734)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3150
    Use-after-free in WebRTC VideoBroadcaster
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3151
  * CVE-2020-12417 (bmo#1640737)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3152
    Memory corruption due to missing sign-extension for ValueTags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3153
    on ARM64
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3154
  * CVE-2020-12418 (bmo#1641303)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3155
    Information disclosure due to manipulated URL object
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3156
  * CVE-2020-12419 (bmo#1643874)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3157
    Use-after-free in nsGlobalWindowInner
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3158
  * CVE-2020-12420 (bmo#1643437)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3159
    Use-After-Free when trying to connect to a STUN server
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3160
  * CVE-2020-12402 (bmo#1631597)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3161
    RSA Key Generation vulnerable to side-channel attack
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3162
  * CVE-2020-12421 (bmo#1308251)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3163
    Add-On updates did not respect the same certificate trust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3164
    rules as software updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3165
  * CVE-2020-12422 (bmo#1450353)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3166
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3167
  * CVE-2020-12423 (bmo#1642400)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3168
    DLL Hijacking due to searching %PATH% for a library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3169
  * CVE-2020-12424 (bmo#1562600)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3170
    WebRTC permission prompt could have been bypassed by a
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3171
    compromised content process
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3172
  * CVE-2020-12425 (bmo#1634738)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3173
    Out of bound read in Date.parse()
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3174
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187, bmo#1637682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3175
    Memory safety bugs fixed in Firefox 78
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3176
- requires
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3177
  * NSS >= 3.53.1
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3178
  * nodejs >= 10.21
1133
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
  3179
  * Gtk+3 >= 3.14
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3180
- removed obsolete patches
1133
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
  3181
  * mozilla-s390-bigendian.patch
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3182
  * mozilla-bmo1634646.patch
1134
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3183
- Add mozilla-pipewire-0-3.patch for openSUSE >= 15.2 to build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3184
  WebRTC with pipewire support to enable screen sharing under
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3185
  Wayland; also add BuildRequires: pkgconfig(libpipewire-0.3)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3186
  appropriately (boo#1172903).
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3187
- adding SLE12 compatibility in spec file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3188
- add patches for s390x
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3189
  * mozilla-bmo1602730.patch (bmo#1602730)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3190
  * mozilla-bmo1626236.patch (bmo#1626236)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3191
  * mozilla-bmo998749.patch (bmo#998749)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3192
  * mozilla-s390x-skia-gradient.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3193
- update create-tar.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3194
- Use same _constraints for ppc64 (BE) as ppc64le to avoid oom build failure
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3195
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3196
-------------------------------------------------------------------
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3197
Wed Jun 10 07:17:15 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3198
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3199
- Exclude armv6, since it is unbuildable since about 3 years
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3200
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3201
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3202
Wed Jun  3 21:39:11 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3203
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3204
- Mozilla Firefox 77.0.1
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3205
  * Disable automatic selection of DNS over HTTPS providers during
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3206
    a test to enable wider deployment in a more controlled way
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3207
    (bmo#1642723)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3208
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3209
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3210
Fri May 29 11:49:36 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3211
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3212
- Mozilla Firefox 77.0
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3213
  * view and manage web certificates more easily on the new
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3214
    about:certificate page
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3215
  * improvements in accessibility
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3216
  * significant improvements to JavaScript debugging
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3217
  MFSA 2020-20 (bsc#1172402)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3218
  * CVE-2020-12399 (bmo#1631576)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3219
    Timing attack on DSA signatures in NSS library
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3220
    (fixed with external NSS >= 3.52.1)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3221
  * CVE-2020-12405 (bmo#1631618)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3222
    Use-after-free in SharedWorkerService
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3223
  * CVE-2020-12406 (bmo#1639590)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3224
    JavaScript type confusion with NativeTypes
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3225
  * CVE-2020-12407 (bmo#1637112)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3226
    WebRender leaking GPU memory when using border-image CSS
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3227
    directive
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3228
  * CVE-2020-12408 (bmo#1623888)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3229
    URL spoofing when using IP addresses
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3230
  * CVE-2020-12409 (bmo#1619305, bmo#1632717)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3231
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3232
  * CVE-2020-12411 (bmo#1620972, bmo#1625333)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3233
    Memory safety bugs fixed in Firefox 77
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3234
- requires
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3235
  * NSS >= 3.52.1
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3236
  * rust-cbindgen >= 1.14.1
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3237
  * clang >= 5
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3238
- added mozilla-bmo1634646.patch as part of fixing PGO build
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3239
  (still not working)
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3240
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3241
-------------------------------------------------------------------
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3242
Wed May 13 12:21:13 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3243
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3244
- change again _constraints for ppc64le use <physicalmemory>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3245
  and increase limit_build in spec file to reduce max_jobs.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3246
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3247
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3248
Sat May  9 11:45:39 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3249
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3250
- Mozilla Firefox 76.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3251
  * Fixed a bug causing some add-ons such as Amazon Assistant to see
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3252
    multiple onConnect events, impairing functionality (bmo#1635637)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3253
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3254
-------------------------------------------------------------------
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3255
Fri May  1 11:59:58 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3256
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3257
- Mozilla Firefox 76.0
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3258
  * Lockwise improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3259
  * Improvements in Picture-in-Picture feature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3260
  * Support Audio Worklets
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3261
  MFSA-2020-16 (bsc#1171186)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3262
  * CVE-2020-12387 (bmo#1545345)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3263
    Use-after-free during worker shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3264
  * CVE-2020-12388 (bmo#1618911)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3265
    Sandbox escape with improperly guarded Access Tokens
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3266
  * CVE-2020-12389 (bmo#1554110)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3267
    Sandbox escape with improperly separated process types
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3268
  * CVE-2020-6831 (bmo#1632241)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3269
    Buffer overflow in SCTP chunk input validation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3270
  * CVE-2020-12390 (bmo#1141959)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3271
    Incorrect serialization of nsIPrincipal.origin for IPv6 addresses
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3272
  * CVE-2020-12391 (bmo#1457100)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3273
    Content-Security-Policy bypass using object elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3274
  * CVE-2020-12392 (bmo#1614468)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3275
    Arbitrary local file access with 'Copy as cURL'
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3276
  * CVE-2020-12393 (bmo#1615471)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3277
    Devtools' 'Copy as cURL' feature did not fully escape
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3278
    website-controlled data, potentially leading to command injection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3279
  * CVE-2020-12394 (bmo#1628288)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3280
    URL spoofing in location bar when unfocussed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3281
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704, bmo#1624098,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3282
    bmo#1625749, bmo#1626382, bmo#1628076, bmo#1631508)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3283
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3284
  * CVE-2020-12396 (bmo#1339601, bmo#1611938, bmo#1620488,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3285
    bmo#1622291, bmo#1627644)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3286
    Memory safety bugs fixed in Firefox 76
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3287
- requires
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3288
  * NSS >= 3.51.1
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3289
  * nasm >= 2.14
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3290
- removed obsolete patch mozilla-bmo1622013.patch
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3291
- fix URI creation for KDE file selector integration (boo#1160331)
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3292
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3293
-------------------------------------------------------------------
1124
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3294
Tue Apr  7 12:18:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3295
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3296
- Mozilla Firefox 75.0
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3297
  * https://www.mozilla.org/en-US/firefox/75.0/releasenotes
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3298
  MFSA 2020-12 (bsc#1168874)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3299
  * CVE-2020-6821 (bmo#1625404)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3300
    Uninitialized memory could be read when using the WebGL
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3301
    copyTexSubImage method
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3302
  * CVE-2020-6822 (bmo#1544181)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3303
    Out of bounds write in GMPDecodeData when processing large images
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3304
  * CVE-2020-6823 (bmo#1614919)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3305
    Malicious Extension could obtain auth codes from OAuth login flows
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3306
  * CVE-2020-6824 (bmo#1621853)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3307
    Generated passwords may be identical on the same site between
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3308
    separate private browsing sessions
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3309
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3310
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3311
  * CVE-2020-6826 (bmo#1613009,bmo#1613195,bmo#1616734,bmo#1617488,
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3312
    bmo#1619229,bmo#1620719,bmo#1624897)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3313
    Memory safety bugs fixed in Firefox 75
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3314
- removed obsolete patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3315
  mozilla-bmo1609538.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3316
- requires
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3317
  * rust >= 1.41
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3318
  * rust-cbindgen >= 0.13.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3319
  * mozilla-nss >= 3.51
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3320
  * nodejs10 >= 10.19
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3321
- fix build issue in libvpx for i586 via mozilla-bmo1622013.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3322
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3323
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3324
Mon Apr  6 11:19:24 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3325
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3326
- increase _constraints memory for ppc64le
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3327
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3328
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3329
Fri Apr  3 15:23:28 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3330
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3331
- Mozilla Firefox 74.0.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3332
  MFSA 2020-11 (boo#1168630)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3333
  * CVE-2020-6819 (bmo#1620818)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3334
    Use-after-free while running the nsDocShell destructor
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3335
  * CVE-2020-6820 (bmo#1626728)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3336
    Use-after-free when handling a ReadableStream
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3337
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3338
-------------------------------------------------------------------
1123
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3339
Wed Mar 25 07:30:39 UTC 2020 - Marcus Meissner <meissner@suse.com>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3340
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3341
- mozilla-sandbox-fips.patch: allow /proc/sys/crypto/fips_enabled
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3342
  to be read, as openssl 1.1.1 FIPS aborts if it cannot access it
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3343
  (bsc#1167132)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3344
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3345
-------------------------------------------------------------------
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3346
Sat Mar  7 08:51:06 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3347
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3348
- Mozilla Firefox 74.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3349
  * https://www.mozilla.org/en-US/firefox/74.0/releasenotes/
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3350
  MFSA 2020-08 (bsc#1166238)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3351
  * CVE-2020-6805 (bmo#1610880)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3352
    Use-after-free when removing data about origins
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3353
  * CVE-2020-6806 (bmo#1612308)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3354
    BodyStream::OnInputStreamReady was missing protections against
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3355
    state confusion
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3356
  * CVE-2020-6807 (bmo#1614971)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3357
    Use-after-free in cubeb during stream destruction
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3358
  * CVE-2020-6808 (bmo#1247968)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3359
    URL Spoofing via javascript: URL
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3360
  * CVE-2020-6809 (bmo#1420296)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3361
    Web Extensions with the all-urls permission could access local
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3362
    files
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3363
  * CVE-2020-6810 (bmo#1432856)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3364
    Focusing a popup while in fullscreen could have obscured the
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3365
    fullscreen notification
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3366
  * CVE-2020-6811 (bmo#1607742)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3367
    Devtools' 'Copy as cURL' feature did not fully escape
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3368
    website-controlled data, potentially leading to command injection
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3369
  * CVE-2019-20503 (bmo#1613765)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3370
    Out of bounds reads in sctp_load_addresses_from_init
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3371
  * CVE-2020-6812 (bmo#1616661)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3372
    The names of AirPods with personally identifiable information
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3373
    were exposed to websites with camera or microphone permission
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3374
  * CVE-2020-6813 (bmo#1605814)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3375
    @import statements in CSS could bypass the Content Security
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3376
    Policy nonce feature
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3377
  * CVE-2020-6814 (bmo#1592078,bmo#1604847,bmo#1608256,bmo#1612636,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3378
    bmo#1614339)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3379
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3380
  * CVE-2020-6815 (bmo#1181957,bmo#1557732,bmo#1557739,bmo#1611457,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3381
    bmo#1612431)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3382
    Memory and script safety bugs fixed in Firefox 74
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3383
- requires
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3384
  * NSPR 4.25
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3385
  * NSS 3.50
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3386
  * rust-cbindgen 0.13.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3387
- removed obsolete patches
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3388
  mozilla-bmo1610814.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3389
  mozilla-cubeb-noreturn.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3390
- add mozilla-bmo1609538.patch to fix wayland issues with mutter 3.36
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3391
  (bmo#1609538, boo#1166471)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3392
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3393
-------------------------------------------------------------------
1122
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3394
Wed Feb 26 08:12:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3395
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3396
- big endian fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3397
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3398
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3399
Tue Feb 25 14:17:00 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3400
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3401
- Fix build on aarch64/armv7 with:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3402
  * mozilla-bmo1610814.patch (boo#1164845, bmo#1610814)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3403
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3404
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3405
Thu Feb 20 13:40:59 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3406
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3407
- Mozilla Firefox 73.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3408
  * Resolved problems connecting to the RBC Royal Bank website
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3409
    (bmo#1613943)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3410
  * Fixed Firefox unexpectedly exiting when leaving Print Preview mode
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3411
    (bmo#1611133)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3412
  * Fixed crashes when playing encrypted content on some Linux systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3413
    (bmo#1614535, boo#1164646)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3414
- start in wayland mode when running under wayland session
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3415
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3416
-------------------------------------------------------------------
1121
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3417
Sun Feb  9 07:45:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3418
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3419
- Mozilla Firefox 73.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3420
  * Added support for setting a default zoom level applicable for all
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3421
    web content
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3422
  * High-contrast mode has been updated to allow background images
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3423
  * Improved audio quality when playing back audio at a faster or
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3424
    slower speed
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3425
  * Added NextDNS as alternative option for DNS over HTTPS
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3426
  MFSA 2020-05 (bsc#1163368)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3427
  * CVE-2020-6796 (bmo#1610426)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3428
    Missing bounds check on shared memory read in the parent process
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3429
  * CVE-2020-6797 (bmo#1596668) (MacOS X only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3430
    Extensions granted downloads.open permission could open arbitrary
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3431
    applications on Mac OSX
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3432
  * CVE-2020-6798 (bmo#1602944)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3433
    Incorrect parsing of template tag could result in JavaScript injection
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3434
  * CVE-2020-6799 (bmo#1606596) (Windows only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3435
    Arbitrary code execution when opening pdf links from other
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3436
    applications, when Firefox is configured as default pdf reader
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3437
  * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851,
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3438
    bmo#1608580,bmo#1608785,bmo#1605777)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3439
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3440
  * CVE-2020-6801 (bmo#1601024,bmo#1601712,bmo#1604836,bmo#1606492)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3441
    Memory safety bugs fixed in Firefox 73
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3442
- updated requirements
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3443
  * rust >= 1.39
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3444
  * NSS >= 3.49.2
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3445
  * rust-cbindgen >= 0.12.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3446
- rebased patches
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3447
- removed obsolete patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3448
  * mozilla-bmo1601707.patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3449
- switched to cairo-gtk3-wayland build
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3450
  (to fully enable wayland MOZ_ENABLE_WAYLAND=1 needs to be set)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3451
- disabled elfhack due to failing packager
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3452
  https://github.com/openSUSE/firefox-maintenance/issues/28
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3453
- disabled PGO due to build failure
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3454
  https://github.com/openSUSE/firefox-maintenance/issues/29
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3455
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3456
-------------------------------------------------------------------
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3457
Tue Jan 28 07:30:16 UTC 2020 - Stasiek Michalski <stasiek@michalski.cc>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3458
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3459
- Use a symbolic icon from branding internals
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3460
- Pixmaps no longer required for the desktops
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3461
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3462
-------------------------------------------------------------------
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3463
Wed Jan 22 10:30:21 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3464
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3465
- Mozilla Firefox 72.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3466
  * Various stability fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3467
  * Fixed issues opening files with spaces in their path (bmo#1601905)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3468
  * Fixed a hang opening about:logins when a master password is set
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3469
    (bmo#1606992)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3470
  * Fixed a web compatibility issue with CSS Shadow Parts which
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3471
    shipped in Firefox 72 (bmo#1604989)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3472
  * Fixed inconsistent playback performance for fullscreen 1080p
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3473
    videos on some systems (bmo#1608485)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3474
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3475
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3476
Tue Jan 21 12:59:54 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3477
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3478
- Fix build for aarch64/ppc64le (do not update config.sub file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3479
  for libbacktrace)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3480
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3481
-------------------------------------------------------------------
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3482
Wed Jan  8 08:19:12 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3483
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3484
- Mozilla Firefox 72.0.1
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3485
  MFSA 2020-03 (bsc#1160498)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3486
  * CVE-2019-17026 (bmo#1607443)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3487
    IonMonkey type confusion with StoreElementHole and FallibleStoreElement
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3488
- Mozilla Firefox 72.0
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3489
  * block fingerprinting scripts by default
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3490
  * new notification pop-ups
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3491
  * Picture-in-picture video
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3492
  MFSA 2020-01 (bsc#1160305)
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3493
  * CVE-2019-17016 (bmo#1599181)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3494
    Bypass of @namespace CSS sanitization during pasting
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3495
  * CVE-2019-17017 (bmo#1603055)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3496
    Type Confusion in XPCVariant.cpp
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3497
  * CVE-2019-17020 (bmo#1597645)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3498
    Content Security Policy not applied to XSL stylesheets applied
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3499
    to XML documents
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3500
  * CVE-2019-17022 (bmo#1602843)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3501
    CSS sanitization does not escape HTML tags
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3502
  * CVE-2019-17023 (bmo#1590001) (fixed in NSS FIXME)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3503
    NSS may negotiate TLS 1.2 or below after a TLS 1.3
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3504
    HelloRetryRequest had been sent
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3505
  * CVE-2019-17024 (bmo#1507180,bmo#1595470,bmo#1598605,bmo#1601826)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3506
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3507
  * CVE-2019-17025 (bmo#1328295,bmo#1328300,bmo#1590447,bmo#1590965
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3508
    bmo#1595692,bmo#1597321,bmo#1597481)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3509
    Memory safety bugs fixed in Firefox 72
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3510
- update create-tar.sh to skip compare-locales
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3511
- requires NSPR 4.24 and NSS 3.48
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3512
- removed usage of browser-plugins convention for NPAPI plugins
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3513
  from start wrapper and changed the RPM macro to the
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3514
  /usr/$LIB/mozilla/plugins location (boo#1160302)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3515
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3516
-------------------------------------------------------------------
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3517
Mon Dec  2 08:24:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3518
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3519
- Mozilla Firefox 71.0
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3520
  * Improvements to Lockwise, our integrated password manager
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3521
  * More information about Enhanced Tracking Protection in action
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3522
  * Native MP3 decoding on Windows, Linux, and macOS
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3523
  * Configuration page (about:config) reimplemented in HTML
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3524
  * New kiosk mode functionality, which allows maximum screen space
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3525
    for customer-facing displays
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3526
  MFSA 2019-36
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3527
  * CVE-2019-11756 (bmo#1508776)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3528
    Use-after-free of SFTKSession object
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3529
  * CVE-2019-17008 (bmo#1546331)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3530
    Use-after-free in worker destruction
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3531
  * CVE-2019-13722 (bmo#1580156) (Windows only)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3532
    Stack corruption due to incorrect number of arguments in WebRTC code
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3533
  * CVE-2019-17014 (bmo#1322864)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3534
    Dragging and dropping a cross-origin resource, incorrectly loaded
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3535
    as an image, could result in information disclosure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3536
  * CVE-2019-17010 (bmo#1581084)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3537
    Use-after-free when performing device orientation checks
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3538
  * CVE-2019-17005 (bmo#1584170)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3539
    Buffer overflow in plain text serializer
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3540
  * CVE-2019-17011 (bmo#1591334)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3541
    Use-after-free when retrieving a document in antitracking
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3542
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667, bmo#1567209
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3543
    bmo#1580288, bmo#1585760, bmo#1592502)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3544
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3545
  * CVE-2019-17013 (bmo#1298509, bmo#1472328, bmo#1577439, bmo#1577937
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3546
    bmo#1580320, bmo#1584195, bmo#1585106, bmo#1586293, bmo#1593865
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3547
    bmo#1594181)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3548
    Memory safety bugs fixed in Firefox 71
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3549
- requires
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3550
  NSPR >= 4.23
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3551
  NSS >= 3.47.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3552
  rust/cargo >= 1.37
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3553
- reactivate webrtc for platforms where it was disabled
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3554
- updated create-tar.sh to cover buildid and origin repo information
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3555
  -> removed obsolete source-stamp.txt
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3556
- removed obsolete patches
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3557
  mozilla-bmo1511604.patch
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3558
  mozilla-openaes-decl.patch
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3559
- changed locale building procedure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3560
  * removed obsolete compare-locales.tar.xz
1118
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
  3561
- added mozilla-bmo1601707.patch to fix gcc/LTO builds
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
  3562
  (bmo#1601707, boo#1158466)
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3563
- added mozilla-bmo849632.patch to fix big endian issues in skia
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3564
  used for WebGL
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3565
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3566
-------------------------------------------------------------------
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3567
Fri Nov  1 14:16:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3568
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3569
- Mozilla Firefox 70.0.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3570
  * Fix for an issue that caused some websites or page elements using
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3571
    dynamic JavaScript to fail to load. (bmo#1592136)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3572
  * Title bar no longer shows in full screen view (bmo#1588747)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3573
- added mozilla-bmo1504834-part4.patch to fix some visual issues on
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3574
  big endian platforms
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3575
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3576
-------------------------------------------------------------------
1112
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3577
Sun Oct 20 20:19:31 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3578
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3579
- Mozilla Firefox 70.0
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3580
  * more privacy protections from Enhanced Tracking Protection
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3581
  * Firefox Lockwise passwordmanager
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3582
  * Improvements to core engine components, for better browsing on more sites
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3583
  * Improved privacy and security indicators
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3584
  MFSA 2019-34
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3585
  * CVE-2018-6156 (bmo#1480088)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3586
    Heap buffer overflow in FEC processing in WebRTC
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3587
  * CVE-2019-15903 (bmo#1584907)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3588
    Heap overflow in expat library in XML_GetCurrentLineNumber
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3589
  * CVE-2019-11757 (bmo#1577107)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3590
    Use-after-free when creating index updates in IndexedDB
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3591
  * CVE-2019-11759 (bmo#1577953)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3592
    Stack buffer overflow in HKDF output
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3593
  * CVE-2019-11760 (bmo#1577719)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3594
    Stack buffer overflow in WebRTC networking
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3595
  * CVE-2019-11761 (bmo#1561502)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3596
    Unintended access to a privileged JSONView object
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3597
  * CVE-2019-11762 (bmo#1582857)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3598
    document.domain-based origin isolation has same-origin-property violation
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3599
  * CVE-2019-11763 (bmo#1584216)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3600
    Incorrect HTML parsing results in XSS bypass technique
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3601
  * CVE-2019-11765 (bmo#1562582)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3602
    Incorrect permissions could be granted to a website
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3603
  * CVE-2019-17000 (bmo#1441468)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3604
    CSP bypass using object tag with data: URI
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3605
  * CVE-2019-17001 (bmo#1587976)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3606
    CSP bypass using object tag when script-src 'none' is specified
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3607
  * CVE-2019-17002 (bmo#1561056)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3608
    upgrade-insecure-requests was not being honored for links dragged and dropped
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3609
  * CVE-2019-11764 (bmo#1558522, bmo#1577061, bmo#1548044, bmo#1571223,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3610
    bmo#1573048, bmo#1578933, bmo#1575217, bmo#1583684, bmo#1586845, bmo#1581950,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3611
    bmo#1583463, bmo#1586599)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3612
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3613
- requires
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3614
    rust/cargo >= 1.36
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3615
    NSPR >= 4.22
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3616
    NSS >= 3.46.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3617
    rust-cbindgen >= 0.9.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3618
- removed obsolete patches
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3619
    mozilla-bmo1573381.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3620
    mozilla-nestegg-big-endian.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3621
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3622
-------------------------------------------------------------------
1111
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3623
Sun Oct 13 08:58:12 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3624
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3625
- Mozilla Firefox 69.0.3
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3626
  * Fixed Yahoo mail users being prompted to download files when
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3627
    clicking on emails (bmo#1582848)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3628
- devel package build can easily be disabled now
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3629
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3630
-------------------------------------------------------------------
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3631
Thu Oct  3 08:40:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3632
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3633
- Mozilla Firefox 69.0.2
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3634
  * Fixed a crash when editing files on Office 365 websites (bmo#1579858)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3635
  * Fixed a Linux-only crash when changing the playback speed while
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3636
    watching YouTube videos (bmo#1582222)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3637
- updated supported locale list
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3638
- Allow to build without profile guided optimizations (boo#1040589)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3639
  (contributed by Bernhard Wiedemann)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3640
- Make build verbose (contributed by Martin Liška)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3641
- remove obsolete kde.js setting (boo#1151186) and related patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3642
  firefox-add-kde.js-in-order-to-survive-PGO-build.patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3643
- update create-tar.sh to latest revision and adjusted tar_stamps
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3644
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3645
- extension preferences moved from branding package to core package
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3646
  (packaging but not branding specific)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3647
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3648
-------------------------------------------------------------------
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3649
Thu Sep 19 13:31:16 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3650
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3651
- Mozilla Firefox 69.0.1
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3652
  * Fixed external programs launching in the background when clicking
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3653
    a link from inside Firefox to launch them (bmo#1570845)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3654
  * Usability improvements to the Add-ons Manager for users with
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3655
    screen readers (bmo#1567600)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3656
  * Fixed the Captive Portal notification bar not being dismissable
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3657
    in some situations after login is complete (bmo#1578633)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3658
  * Fixed the maximum size of fonts in Reader Mode when zoomed (bmo#1578454)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3659
  * Fixed missing stacks in the Developer Tools Performance section
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3660
    (bmo#1578354)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3661
  MFSA 2019-31
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3662
  * CVE-2019-11754 (bmo#1580506)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3663
    Pointer Lock is enabled with no user notification
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3664
- disable DOH by default
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3665
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3666
-------------------------------------------------------------------
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3667
Thu Sep  5 13:02:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3668
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3669
- Mozilla Firefox 69.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3670
  * Enhanced Tracking Protection (ETP) for stronger privacy protections
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3671
  * Block Autoplay feature is enhanced to give users the option to block
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3672
    any video
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3673
  * Users in the US or using the en-US browser, can get a new “New Tab”
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3674
    page experience connecting to the best of Pocket's content.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3675
  * Support for the Web Authentication HmacSecret extension via
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3676
    Windows Hello introduced.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3677
  * Support for receiving multiple video codecs with this release makes
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3678
    it easier for WebRTC conferencing services to mix video from
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3679
    different clients.
1107
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3680
  MFSA 2019-25 (boo#1149324)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3681
  * CVE-2019-11741 (bmo#1539595)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3682
    Isolate addons.mozilla.org and accounts.firefox.com
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3683
  * CVE-2019-5849 (bmo#1555838)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3684
    Out-of-bounds read in Skia
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3685
  * CVE-2019-11737 (bmo#1388015)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3686
    Content security policy directives ignore port and path if host is a wildcard
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3687
  * CVE-2019-11734 (bmo#1352875,bmo#1536227,bmo#1557208,bmo#1560641)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3688
    Memory safety bugs fixed in Firefox 69
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3689
  * CVE-2019-11735 (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3690
    bmo#1565744,bmo#1568858,bmo#1570358)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3691
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3692
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3693
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3694
- requires
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3695
  * rust/cargo >= 1.35
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3696
  * rust-cbindgen >= 0.9.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3697
  * mozilla-nss >= 3.45
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3698
- rebased patches
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3699
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3700
-------------------------------------------------------------------
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3701
Wed Sep  4 15:38:40 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3702
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3703
- added a bunch of patches mainly for big endian platforms
1109
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
  3704
  * mozilla-bmo1504834-part1.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
  3705
  * mozilla-bmo1504834-part2.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
  3706
  * mozilla-bmo1504834-part3.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3707
  * mozilla-bmo1511604.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3708
  * mozilla-bmo1554971.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3709
  * mozilla-bmo1573381.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3710
  * mozilla-nestegg-big-endian.patch
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3711
  * mozilla-bmo1512162.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3712
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3713
-------------------------------------------------------------------
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3714
Fri Aug 30 20:49:11 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3715
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3716
- Mozilla Firefox 68.1.0
1100
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3717
  MFSA 2019-26
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3718
  * CVE-2019-11751 (bmo#1572838; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3719
    Malicious code execution through command line parameters
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3720
  * CVE-2019-11746 (bmo#1564449)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3721
    Use-after-free while manipulating video
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3722
  * CVE-2019-11744 (bmo#1562033)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3723
    XSS by breaking out of title and textarea elements using innerHTML
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3724
  * CVE-2019-11742 (bmo#1559715)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3725
    Same-origin policy violation with SVG filters and canvas to steal
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3726
    cross-origin images
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3727
  * CVE-2019-11736 (bmo#1551913, bmo#1552206; Windows only))
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3728
    File manipulation and privilege escalation in Mozilla Maintenance Service
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3729
  * CVE-2019-11753 (bmo#1574980; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3730
    Privilege escalation with Mozilla Maintenance Service in custom
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3731
    Firefox installation location
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3732
  * CVE-2019-11752 (bmo#1501152)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3733
    Use-after-free while extracting a key value in IndexedDB
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3734
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3735
    Sandbox escape through Firefox Sync
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3736
  * CVE-2019-11743 (bmo#1560495)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3737
    Cross-origin access to unload event attributes
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3738
  * CVE-2019-11748 (bmo#1564588)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3739
    Persistence of WebRTC permissions in a third party context
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3740
  * CVE-2019-11749 (bmo#1565374)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3741
    Camera information available without prompting using getUserMedia
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3742
  * CVE-2019-11750 (bmo#1568397)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3743
    Type confusion in Spidermonkey
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3744
  * CVE-2019-11738 (bmo#1452037)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3745
    Content security policy bypass through hash-based sources in directives
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3746
  * CVE-2019-11747 (bmo#1564481)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3747
    'Forget about this site' removes sites from pre-loaded HSTS list
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3748
  * CVE-2019-11735i (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3749
    bmo#1565744,bmo#1568858,bmo#1570358)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3750
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3751
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3752
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3753
- switched package to ESR branch
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3754
- added mozilla-bmo1568145.patch to make builds reproducible
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3755
- removed upstreamed patch mozilla-gcc-internal-compiler-error.patch
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3756
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3757
-------------------------------------------------------------------
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3758
Sun Aug 18 17:29:25 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3759
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3760
- Mozilla Firefox 68.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3761
  * Fixed a bug causing some special characters to be cut off from
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3762
    the end of the search terms when searching from the URL bar
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3763
    (bmo#1560228)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3764
  * Allow fonts to be loaded via file:// URLs when opening a page
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3765
    locally (bmo#1565942)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3766
  * Printing emails from the Outlook web app no longer prints only
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3767
    the header and footer (bmo#1567105)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3768
  * Fixed a bug causing some images not to be displayed on reload,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3769
    including on Google Maps (bmo# 1565542)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3770
  * Fixed an error when starting external applications configured
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3771
    as URI handlers (bmo#1567614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3772
  MFSA 2019-24 (boo#1145665)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3773
  * CVE-2019-11733: Stored passwords in 'Saved Logins' can be
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3774
    copied without master password entry (bmo#1565780)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3775
- drop fix-build-after-y2038-changes-in-glibc.patch, upstream
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3776
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3777
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3778
Fri Aug 16 16:49:24 UTC 2019 - Jonathan Brielmaier <jbrielmaier@suse.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3779
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3780
- Fix crash when typing in the URL bar on ppc64le (bmo#1512162).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3781
  The upstream patch doesn't resolve the issue on TW, but compiling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3782
  with -O1 does. Do this until we have a proper fix.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3783
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3784
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3785
Thu Aug  1 14:25:02 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3786
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3787
- Update build constraints to fix arm builds
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3788
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3789
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3790
Fri Jul 19 08:11:27 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3791
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3792
- Mozilla Firefox 68.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3793
  * Fixed missing Full Screen button when watching videos in full
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3794
    screen mode on HBO GO (bmo#1562837)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3795
  * Fixed a bug causing incorrect messages to appear for some
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3796
    locales when sites try to request the use of the Storage
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3797
    Access API (bmo#1558503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3798
  * Users in Russian regions may have their default search engine
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3799
    changed (bmo#1565315)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3800
  * Built-in search engines in some locales do not function
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3801
    correctly (bmo#1565779)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3802
  * SupportMenu policy doesn't always work (bmo#1553290)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3803
  * Allow the privacy.file_unique_origin pref to be controlled by
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3804
    policy (bmo#1563759)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3805
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3806
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3807
Thu Jul 11 10:51:39 UTC 2019 - Jiri Slaby <jslaby@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3808
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3809
- add fix-build-after-y2038-changes-in-glibc.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3810
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3811
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3812
Wed Jul 10 13:47:41 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3813
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3814
- Generate langpacks sequentially to avoid file corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3815
  from racy file writes (boo#1137970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3816
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3817
-------------------------------------------------------------------
1097
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3818
Mon Jul  8 13:30:35 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3819
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3820
- Mozilla Firefox 68.0
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3821
  * Dark mode in reader view
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3822
  * Improved extension security and discovery
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3823
  * Cryptomining and fingerprinting protections are added to strict
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3824
    content blocking settings in Privacy & Security preferences
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3825
  * Camera and microphone access now require an HTTPS connection
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3826
  MFSA 2019-21 (bsc#1140868)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3827
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3828
    Sandbox escape via installation of malicious languagepack
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3829
  * CVE-2019-11711 (bmo#1552541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3830
    Script injection within domain through inner window reuse
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3831
  * CVE-2019-11712 (bmo#1543804)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3832
    Cross-origin POST requests can be made with NPAPI plugins by
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3833
    following 308 redirects
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3834
  * CVE-2019-11713 (bmo#1528481)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3835
    Use-after-free with HTTP/2 cached stream
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3836
  * CVE-2019-11714 (bmo#1542593)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3837
    NeckoChild can trigger crash when accessed off of main thread
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3838
  * CVE-2019-11729 (bmo#1515342)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3839
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3840
  * CVE-2019-11715 (bmo#1555523)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3841
    HTML parsing error can contribute to content XSS
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3842
  * CVE-2019-11716 (bmo#1552632)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3843
    globalThis not enumerable until accessed
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3844
  * CVE-2019-11717 (bmo#1548306)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3845
    Caret character improperly escaped in origins
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3846
  * CVE-2019-11718 (bmo#1408349)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3847
    Activity Stream writes unsanitized content to innerHTML
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3848
  * CVE-2019-11719 (bmo#1540541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3849
    Out-of-bounds read when importing curve25519 private key
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3850
  * CVE-2019-11720 (bmo#1556230)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3851
    Character encoding XSS vulnerability
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3852
  * CVE-2019-11721 (bmo#1256009)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3853
    Domain spoofing through unicode latin 'kra' character
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3854
  * CVE-2019-11730 (bmo#1558299)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3855
    Same-origin policy treats all files in a directory as having the
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3856
    same-origin
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3857
  * CVE-2019-11723 (bmo#1528335)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3858
    Cookie leakage during add-on fetching across private browsing boundaries
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3859
  * CVE-2019-11724 (bmo#1512511)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3860
    Retired site input.mozilla.org has remote troubleshooting permissions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3861
  * CVE-2019-11725 (bmo#1483510)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3862
    Websocket resources bypass safebrowsing protections
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3863
  * CVE-2019-11727 (bmo#1552208)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3864
    PKCS#1 v1.5 signatures can be used for TLS 1.3
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3865
  * CVE-2019-11728 (bmo#1552993)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3866
    Port scanning through Alt-Svc header
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3867
  * CVE-2019-11710 (bmo#1549768, bmo#1548611, bmo#1533842, bmo#1537692,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3868
    bmo#1540590, bmo#1551907, bmo#1510345, bmo#1535482, bmo#1535848,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3869
    bmo#1547472, bmo#1547760, bmo#1507696, bmo#1544180)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3870
    Memory safety bugs fixed in Firefox 68
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3871
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3872
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3873
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3874
- requires
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3875
  * NSS 3.44.1
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3876
  * rust/cargo 1.34
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3877
  * rust-cbindgen 0.8.7
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3878
- rebased patches
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3879
  * mozilla-aarch64-startup-crash.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3880
  * mozilla-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3881
  * mozilla-nongnome-proxies.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3882
  * firefox-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3883
- use new create-tar.sh and add tar_stamps for package definitions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3884
- added patches imported from SLE flavour
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3885
  * mozilla-gcc-internal-compiler-error.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3886
  * mozilla-bmo1005535.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3887
  * mozilla-ppc-altivec_static_inline.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3888
  * mozilla-reduce-rust-debuginfo.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3889
  * mozilla-s390-bigendian.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3890
  * mozilla-s390-context.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3891
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3892
-------------------------------------------------------------------
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3893
Mon Jul  2 14:15:17 UTC 2019 - Martin Liška <mliska@suse.cz>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3894
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3895
- Enable PGO for x86_64.
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3896
  * added firefox-add-kde.js-in-order-to-survive-PGO-build.patch
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3897
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3898
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3899
Thu Jun 20 06:20:59 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3900
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3901
- Mozilla Firefox 67.0.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3902
  MFSA 2019-19 (boo#1138872)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3903
  * CVE-2019-11708 (bmo#1559858)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3904
    sandbox escape using Prompt:Open
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3905
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3906
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3907
Tue Jun 18 18:36:15 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3908
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3909
- Mozilla Firefox 67.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3910
  MFSA 2019-18 (boo#1138614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3911
  * CVE-2019-11707 (bmo#1544386)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3912
    Type confusion in Array.pop
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3913
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3914
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3915
Thu Jun 12 14:56:32 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3916
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3917
- Mozilla Firefox 67.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3918
  * Fixed: Fix JavaScript error ("TypeError: data is null in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3919
    PrivacyFilter.jsm") in console which may significantly degrade
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3920
    sessionstore reliability and performance (bmo#1553413)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3921
  * Fixed: Proxy authentication dialog box repeatedly pops up
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3922
    asking to authenticate after upgrading to Firefox 67 (bmo#1548804)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3923
  * Fixed: Pearson MyCloud breaks if FIDO U2F is not Chrome's
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3924
    implementation (bmo#1551282)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3925
  * Fixed: Starting in safe mode on Linux or macOS causes Firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3926
    to think on the subsequent launch that the profile is too
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3927
    recent to be used with this version of Firefox (bmo#1556612)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3928
  * Fixed: Linux distribution users can't easily install/use
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3929
    additional/different languages using the built-in preferences
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3930
    UI (bmo#1554744)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3931
  * Fixed: Developer tools users can't copy the href/src content
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3932
    from various HTML tags via the context menu in the Inspector
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3933
    markup view (bmo#1552275)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3934
  * Fixed: Custom home page is broken with clearing data on shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3935
    settings applied (bmo#1554167)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3936
  * Fixed: Performance-regression for eclipse RAP based applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3937
    (bmo#1555962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3938
  * Fixed: macOS 10.15 crash fix (bmo#1556076)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3939
  * Fixed: Can't start two downloads in parallel via <a download>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3940
    anymore (bmo#1542912)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3941
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3942
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3943
Thu Jun  6 06:49:51 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3944
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3945
- Mozilla Firefox 67.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3946
  * enable enhanced tracking protection by default for new users
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3947
  * upgrade of Facebook container to version 2.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3948
  * new version of Firefox Lockwise (password management)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3949
  * new version of Firefox Monitor
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3950
  * Firefox Send improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3951
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3952
-------------------------------------------------------------------
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3953
Sun May 19 20:40:30 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
1093
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3954
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3955
- Mozilla Firefox 67.0
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3956
  * Firefox 67 will be able to run different Firefox installs side by side
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3957
    https://blog.nightly.mozilla.org/2019/01/14/moving-to-a-profile-per-install-architecture/
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3958
  * Tabs can now be pinned from the Page Actions menu in the address bar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3959
  * Users can block known cryptominers and fingerprinters in the
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3960
    Custom settings or their Content Blocking preferences
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3961
  * The Import Data from Another Browser feature is now also available
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3962
    from the File menu
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3963
  * Firefox will now protect you against running older versions which
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3964
    can lead to data corruption and stability issues
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3965
  * Easier access to your list of saved logins from the main menu and
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3966
    login autocomplete
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3967
  * We’ve added a toolbar menu for your Firefox Account to provide more
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3968
    transparency for when you are synced, sharing data across devices
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3969
    and with Firefox. Personalize the appearance of the menu with your
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3970
    own avatar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3971
  * Enable FIDO U2F API, and permit registrations for Google Accounts
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3972
  * Enabled AV1 support on Linux
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3973
  MFSA 2019-13 (boo#1135824)
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3974
  * CVE-2019-9815 (bmo#1546544)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3975
    Disable hyperthreading on content JavaScript threads on macOS
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3976
  * CVE-2019-9816 (bmo#1536768)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3977
    Type confusion with object groups and UnboxedObjects
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3978
  * CVE-2019-9817 (bmo#1540221)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3979
    Stealing of cross-domain images using canvas
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3980
  * CVE-2019-9818 (bmo#1542581) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3981
    Use-after-free in crash generation server
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3982
  * CVE-2019-9819 (bmo#1532553)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3983
    Compartment mismatch with fetch API
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3984
  * CVE-2019-9820 (bmo#1536405)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3985
    Use-after-free of ChromeEventHandler by DocShell
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3986
  * CVE-2019-9821 (bmo#1539125)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3987
    Use-after-free in AssertWorkerThread
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3988
  * CVE-2019-11691 (bmo#1542465)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3989
    Use-after-free in XMLHttpRequest
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3990
  * CVE-2019-11692 (bmo#1544670)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3991
    Use-after-free removing listeners in the event listener manager
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3992
  * CVE-2019-11693 (bmo#1532525)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3993
    Buffer overflow in WebGL bufferdata on Linux
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3994
  * CVE-2019-7317 (bmo#1542829)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3995
    Use-after-free in png_image_free of libpng library
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3996
  * CVE-2019-11694 (bmo#1534196) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3997
    Uninitialized memory memory leakage in Windows sandbox
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3998
  * CVE-2019-11695 (bmo#1445844)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3999
    Custom cursor can render over user interface outside of web content
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4000
  * CVE-2019-11696 (bmo#1392955)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4001
    Java web start .JNLP files are not recognized as executable files
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4002
    for download prompts
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4003
  * CVE-2019-11697 (bmo#1440079)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4004
    Pressing key combinations can bypass installation prompt delays and
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4005
    install extensions
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4006
  * CVE-2019-11698 (bmo#1543191)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4007
    Theft of user history data through drag and drop of hyperlinks
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4008
    to and from bookmarks
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4009
  * CVE-2019-11700 (bmo#1549833) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4010
    res: protocol can be used to open known local files
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4011
  * CVE-2019-11699 (bmo#1528939)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4012
    Incorrect domain name highlighting during page navigation
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4013
  * CVE-2019-11701 (bmo#1518627)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4014
    webcal: protocol default handler loads vulnerable web page
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4015
  * CVE-2019-9814 (bmo#1527592, bmo#1534536, bmo#1520132, bmo#1543159,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4016
    bmo#1539393, bmo#1459932, bmo#1459182, bmo#1516425)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4017
    Memory safety bugs fixed in Firefox 67
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4018
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4019
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4020
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4021
    bmo#1532465, bmo#1533554, bmo#1541580)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4022
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
1093
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4023
- requires
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4024
  * rust/cargo >= 1.32
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4025
  * mozilla-nspr >= 4.21
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4026
  * mozilla-nss >= 3.43
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4027
  * rust-cbindgen >= 0.8.2
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4028
- rebased patches
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4029
- KDE integration for default browser detection is broken in this revision
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4030
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  4031
-------------------------------------------------------------------
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4032
Fri May 17 12:04:49 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4033
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4034
- Fix armv7 build with:
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4035
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4036
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  4037
-------------------------------------------------------------------
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4038
Fri May 10 10:30:05 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4039
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4040
- Mozilla Firefox 66.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4041
  * Fixed: Further improvements to re-enable web extensions which
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4042
    had been disabled for users with a master password set (bmo#1549249)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4043
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4044
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4045
Sun May  5 20:21:02 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4046
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4047
- Mozilla Firefox 66.0.4 (boo#1134126)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4048
  * fix extension certificate chain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4049
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4050
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4051
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4052
Thu Apr 11 09:16:17 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4053
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4054
- Mozilla Firefox 66.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4055
  * Fixed: Address bar on tablets running Windows 10 now behaves
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4056
    correctly (bmo#1498973)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4057
  * Fixed: Performance issues with some HTML5 games (bmo#1537609)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4058
  * Fixed a bug with keypress events in IBM cloud applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4059
    (bmo#1538970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4060
  * Fix for keypress events in some Microsoft cloud applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4061
    (bmo#1539618)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4062
  * Changed: Updated Baidu search plugin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4063
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4064
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4065
Thu Mar 28 19:01:41 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4066
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4067
- Mozilla Firefox 66.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4068
  * Fixed Web compatibility issues with Office 365, iCloud and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4069
    IBM WebMail caused by recent changes to the handling of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4070
    keyboard events (bmo#1538966)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4071
  * Crash fixes (bmo#1521370, bmo#1539118)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4072
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4073
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4074
Thu Mar 28 09:58:36 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4075
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4076
- Add patch to fix aarch64 build:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4077
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4078
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4079
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4080
Fri Mar 22 22:22:08 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4081
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4082
- Mozilla Firefox 66.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4083
  MFSA 2019-09 (bsc#1130262)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4084
  * CVE-2019-9810 (bmo#1537924)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4085
    IonMonkey MArraySlice has incorrect alias information
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4086
  * CVE-2019-9813 (bmo#1538006)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4087
    Ionmonkey type confusion with __proto__ mutations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4088
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4089
-------------------------------------------------------------------
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4090
Sun Mar 17 10:08:51 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4091
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4092
- Mozilla Firefox 66.0
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4093
  * Increased content processes to 8
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4094
  * Added capability to search through open tabs from the tab overflow menu
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4095
  * New backend for the storage.local WebExtensions API, providing
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4096
    I/O performance improvements when the extension updates a small
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4097
    subset of the stored data
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4098
  * WebExtension keyboard shortcuts can now be managed or overridden
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4099
    from about:addons
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4100
  * Improved scrolling behavior: Firefox will now attempt to keep content
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4101
    from jumping around while a page is loading by supporting scroll
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4102
    anchoring
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4103
  * New about:privatebrowsing with search
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4104
  * A certificate error page now notifies the user of the name of the
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4105
    certificate issuer that breaks HTTPs connections on intercepted
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4106
    connections to help troubleshooting possible anti-virus software
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4107
    issues.
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4108
  * Fixed an performance issue some Linux users experienced with the
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4109
    Downloads panel (bmo#1517101)
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4110
  * Firefox now blocks all autoplay media with sound by default. Users
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4111
    can add individual sites to an exceptions list or turn the blocking
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4112
    off.
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4113
  * System title bar is hidden by default to match Gnome guideline
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4114
  MFSA 2019-07 (bsc#1129821)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4115
  * CVE-2019-9790 (bmo#1525145)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4116
    Use-after-free when removing in-use DOM elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4117
  * CVE-2019-9791 (bmo#1530958)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4118
    Type inference is incorrect for constructors entered through on-stack
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4119
    replacement with IonMonkey
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4120
  * CVE-2019-9792 (bmo#1532599)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4121
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4122
  * CVE-2019-9793 (bmo#1528829)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4123
    Improper bounds checks when Spectre mitigations are disabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4124
  * CVE-2019-9794 (bmo#1530103) (Windows only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4125
    Command line arguments not discarded during execution
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4126
  * CVE-2019-9795 (bmo#1514682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4127
    Type-confusion in IonMonkey JIT compiler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4128
  * CVE-2019-9796 (bmo#1531277)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4129
    Use-after-free with SMIL animation controller
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4130
  * CVE-2019-9797 (bmo#1528909)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4131
    Cross-origin theft of images with createImageBitmap
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4132
  * CVE-2019-9798 (bmo#1527534) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4133
    Library is loaded from world writable APITRACE_LIB location
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4134
  * CVE-2019-9799 (bmo#1505678)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4135
    Information disclosure via IPC channel messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4136
  * CVE-2019-9801 (bmo#1527717) (Windows only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4137
    Windows programs that are not 'URL Handlers' are exposed to web content
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4138
  * CVE-2019-9802 (bmo#1415508)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4139
    Chrome process information leak
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4140
  * CVE-2019-9803 (bmo#1515863, bmo#1437009)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4141
    Upgrade-Insecure-Requests incorrectly enforced for same-origin navigation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4142
  * CVE-2019-9804 (bmo#1518026) (MacOS only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4143
    Code execution through 'Copy as cURL' in Firefox Developer Tools on macOS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4144
  * CVE-2019-9805 (bmo#1521360)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4145
    Potential use of uninitialized memory in Prio
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4146
  * CVE-2019-9806 (bmo#1525267)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4147
    Denial of service through successive FTP authorization prompts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4148
  * CVE-2019-9807 (bmo#1362050)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4149
    Text sent through FTP connection can be incorporated into alert messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4150
  * CVE-2019-9809 (bmo#1282430, bmo#1523249)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4151
    Denial of service through FTP modal alert error messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4152
  * CVE-2019-9808 (bmo#1434634)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4153
    WebRTC permissions can display incorrect origin with data: and blob: URLs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4154
  * CVE-2019-9789 bmo#1520483, bmo#1522987, bmo#1528199, bmo#1519337,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4155
    bmo#1525549, bmo#1516179, bmo#1518524, bmo#1518331, bmo#1526579,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4156
    bmo#1512567, bmo#1524335, bmo#1448505, bmo#1518821
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4157
    Memory safety bugs fixed in Firefox 66
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4158
  * CVE-2019-9788 bmo#1518001, bmo#1521304, bmo#1521214, bmo#1506665,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4159
    bmo#1516834, bmo#1518774, bmo#1524755, bmo#1523362, bmo#1524214, bmo#1529203
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4160
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4161
- updated build/runtime requirements
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4162
  * mozilla-nss >= 3.42.1
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4163
  * cargo/rust >= 1.31
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4164
  * rust-cbindgen >= 0.6.8
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4165
  * nasm >= 2.13 (new)
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4166
- removed obsolete patch
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4167
  * mozilla-bmo256180.patch
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4168
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4169
-------------------------------------------------------------------
1087
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4170
Tue Mar  5 10:17:01 UTC 2019 - Stephan Kulow <coolo@suse.com>
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4171
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4172
- Do not hardcode nodejs8 but leave the prefer to the distribution
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4173
  (Tumbleweed staging wants to switch to nodejs10)
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4174
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4175
-------------------------------------------------------------------
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4176
Fri Feb 15 13:45:57 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4177
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4178
- Update _constraints to avoid 'no space left' error seen on aarch64
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4179
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4180
-------------------------------------------------------------------
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4181
Wed Feb 13 07:17:28 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4182
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4183
- Mozilla Firefox 65.0.1
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4184
  * Fixed accidental requests to addons.mozilla.org when an addon
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4185
    recommendation doorhanger is shown (bmo#1526387)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4186
  * Improved playback of interactive Netflix videos (bmo#1524500)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4187
  * Fixed incorrect sizing of the "Clear Recent History" window in
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4188
    some situations (bmo#1523696)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4189
  * Fixed audio & video delays while making WebRTC calls
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4190
    (bmo#1521577, bmo#1523817)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4191
  * Fixed video sizing problems during some WebRTC calls (bmo#1520200)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4192
  * Fixed looping CONNECT requests when using WebSockets over HTTP/2
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4193
    from behind a proxy server (bmo#1523427)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4194
  * Fixed the "Enter" key not working on password entry fields for
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4195
    certain Linux distributions (bmo#1523635)
1087
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4196
  MFSA 2019-04 (bsc#1125330)
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4197
  * CVE-2018-18356 bmo#1525817
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4198
    Use-after-free in Skia
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4199
  * CVE-2019-5785 bmo#1525433
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4200
    Integer overflow in Skia
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4201
  * CVE-2018-18511 bmo#1526218
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4202
    Cross-origin theft of images with ImageBitmapRenderingContext
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4203
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4204
-------------------------------------------------------------------
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4205
Wed Feb 13 06:12:43 UTC 2019 - Martin Liška <mliska@suse.cz>
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4206
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4207
- Enable LTO only for latest new toolchain (boo#1125038) for x86_64
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4208
  (with increased memory constraints)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4209
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4210
-------------------------------------------------------------------
1085
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4211
Sat Jan 26 22:37:01 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4212
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4213
- Mozilla Firefox 65.0
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4214
  * Enhanced tracking protection
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4215
  * allow switching of UI locales within preferences
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4216
  * support for the WebP image format
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4217
  * "top"-like about:performance
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4218
  MFSA 2019-01 (bsc#1122983)
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4219
  * CVE-2018-18500 bmo#1510114
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4220
    Use-after-free parsing HTML5 stream
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4221
  * CVE-2018-18503 bmo#1509442
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4222
    Memory corruption with Audio Buffer
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4223
  * CVE-2018-18504 bmo#1496413
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4224
    Memory corruption and out-of-bounds read of texture client
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4225
  * CVE-2018-18505 bmo#1497749
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4226
    Privilege escalation through IPC channel messages
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4227
  * CVE-2018-18506 bmo#1503393
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4228
    Proxy Auto-Configuration file can define localhost access to be proxied
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4229
  * CVE-2018-18502 bmo#1499426 bmo#1480090 bmo#1472990 bmo#1514762
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4230
    bmo#1501482 bmo#1505887 bmo#1508102 bmo#1508618 bmo#1511580
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4231
    bmo#1493497 bmo#1510145 bmo#1516289 bmo#1506798 bmo#1512758
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4232
    Memory safety bugs fixed in Firefox 65
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4233
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4234
    bmo#1502871 bmo#1516738 bmo#1516514
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4235
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4236
- requires
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4237
  NSS 3.41
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4238
  rust/carge 1.30
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4239
  rust-cbindgen 0.6.7
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4240
- rebased patches
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4241
- remove workaround for build memory consumption on i586; other
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4242
  mitigations meanwhile introduced (mainly parallelity) will be
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4243
  sufficient
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4244
  mozilla-reduce-files-per-UnifiedBindings.patch
1085
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4245
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4246
-------------------------------------------------------------------
1084
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4247
Tue Jan 15 14:32:03 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4248
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4249
- Increase disk constraint.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4250
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4251
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4252
Mon Jan 14 12:12:12 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4253
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4254
- Remove -v from mach build in order to work-around bmo#1500436.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4255
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4256
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4257
Fri Jan 11 15:07:14 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4258
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4259
- Set %clang_build to false on all architectures
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4260
- Do not use -fno-delete-null-pointer-checks and -fno-strict-aliasing:
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4261
  it should not be needed anymore
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4262
- Do not overwrite enable-optimize and when possible
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4263
  enable --enable-debug-symbols.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4264
- Add -v to mach in order to make build verbose.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4265
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4266
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4267
Wed Jan  9 22:40:14 UTC 2019 - astieger@suse.com
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4268
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4269
- Mozilla Firefox 64.0.2:
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4270
  * Update the Japanese translation for missing strings (bmo#1513259)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4271
  * Properly restore column sizes in developer tools inspector (bmo#1503175)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4272
  * Fixed video stuttering on Youtube (bmo#1513511)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4273
  * Fix updates for some lightweight themes (bmo#1508777)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4274
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4275
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4276
Tue Dec 18 14:46:41 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4277
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4278
- Enable build_hardened for all architectures
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4279
- Switch back aarch64 to clang as '-fPIC' fixes bmo#1513605
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4280
- Remove obolete '--enable-pie' as -pie is always enabled for
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4281
  gcc and clang
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4282
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4283
-------------------------------------------------------------------
1083
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4284
Wed Dec 12 17:33:29 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4285
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4286
- Switch aarch64 builds back to gcc, not clang (bmo#1513605)
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4287
- Switch %arm builds back to gcc, not clang to avoid OOM
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4288
- Fix build flags when clang is not used
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4289
- Fix flags for clang ppc64 builds
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4290
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4291
-------------------------------------------------------------------
1082
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4292
Tue Dec 11 08:45:56 UTC 2018 - Wolfgang Rosenauer <wr@rosenauer.org>
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4293
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4294
- update to Firefox 64.0
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4295
  * Better recommendations: You may see suggestions in regular browsing
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4296
    mode for new and relevant Firefox features, services, and extensions
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4297
    based on how you use the web (for US users only)
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4298
  * Enhanced tab management: You can now select multiple tabs from the
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4299
    tab bar and close, move, bookmark, or pin them quickly and easily
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4300
  * Easier performance management: The new Task Manager page found at
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4301
    about:performance lets you see how much energy each open tab consumes
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4302
    and provides access to close tabs to conserve power
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4303
  * Improved performance for Mac and Linux users, by enabling link time
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4304
    optimization (Clang LTO).
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4305
  * Added option to remove add-ons using the context menu on their
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4306
    toolbar buttons
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4307
  * RSS feed preview and live bookmarks are available only via add-ons
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4308
  * TLS certificates issued by Symantec are no longer trusted by Firefox.
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4309
    Website operators are strongly encouraged to replace any remaining
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4310
    Symantec TLS certificates as soon as possible
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4311
  MFSA 2018-29 (bsc#1119105)
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4312
  * CVE-2018-12407 bmo#1505973
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4313
    Buffer overflow with ANGLE library when using VertexBuffer11 module
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4314
  * CVE-2018-17466 bmo#1488295
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4315
    Buffer overflow and out-of-bounds read in ANGLE library with
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4316
    TextureStorage11
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4317
  * CVE-2018-18492 bmo#1499861
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4318
    Use-after-free with select element
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4319
  * CVE-2018-18493 bmo#1504452
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4320
    Buffer overflow in accelerated 2D canvas with Skia
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4321
  * CVE-2018-18494 bmo#1487964
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4322
    Same-origin policy violation using location attribute and
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4323
    performance.getEntries to steal cross-origin URLs
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4324
  * CVE-2018-18495 bmo#1427585
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4325
    WebExtension content scripts can be loaded in about: pages
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4326
  * CVE-2018-18496 bmo#1422231 (Windows only)
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4327
    Embedded feed preview page can be abused for clickjacking
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4328
  * CVE-2018-18497 bmo#1488180
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4329
    WebExtensions can load arbitrary URLs through pipe separators
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4330
  * CVE-2018-18498 bmo#1500011
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4331
    Integer overflow when calculating buffer sizes for images
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4332
  * CVE-2018-12406 bmo#1456947 bmo#1475669 bmo#1504816 bmo#1502886
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4333
    bmo#1500064 bmo#1500310 bmo#1500696 bmo#1498765 bmo#1499198 bmo#1434490
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4334
    bmo#1481745 bmo#1458129
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4335
    Memory safety bugs fixed in Firefox 64
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4336
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4337
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4338
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4339
- requires
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4340
  * rust/cargo >= 1.29
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4341
  * mozilla-nss >= 3.40.1
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4342
  * rust-cbindgen >= 0.6.4
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4343
- rebased patches
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4344
- removed obsolete patch
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4345
  * mozilla-bmo1491289.patch
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4346
- now uses clang primarily for compilation
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4347
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4348
-------------------------------------------------------------------
1081
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4349
Wed Nov 28 11:07:18 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4350
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4351
- Remove --disable-elf-hack when not available: on aarch64 and ppc64*
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4352
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4353
-------------------------------------------------------------------
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4354
Mon Nov 26 09:46:02 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4355
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4356
- Clean-up %arm build
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4357
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4358
-------------------------------------------------------------------
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4359
Sun Nov 18 11:01:21 UTC 2018 - manfred.h@gmx.net
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4360
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4361
- update to Firefox 63.0.3
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4362
  * Games using WebGL (created in Unity) get stuck after very short
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4363
    time of gameplay (bmo#1502748)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4364
  * Slow page loading for some users with specific proxy configurations
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4365
    (bmo#1495024)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4366
  * Disable HTTP response throttling by default for causing bugs with
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4367
    videos in background tabs (bmo#1503354)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4368
  * Opening magnet links no longer works (bmo#1498934)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4369
  * Crash fixes (bmo#1498510, bmo#1503424)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4370
- removed mozilla-newer-cbindgen.patch; no longer needed
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4371
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4372
-------------------------------------------------------------------
1077
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4373
Thu Nov  8 14:59:13 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4374
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4375
- update to Firefox 63.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4376
  * Snippets are not loaded due to missing element (bmo#1503047)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4377
  * Print preview always shows 30& scale when it is actually
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4378
    Shrink To Fit (bmo#1501952)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4379
  * Dialog displayed when closing multiple windows shows unreplaced
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4380
    %1$S placeholder in Japanese and potentially other locales
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4381
    (bmo#1500823)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4382
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4383
-------------------------------------------------------------------
1075
0831123bc28a final 63.0 release preparations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1074
diff changeset
  4384
Mon Oct 29 14:07:51 UTC 2018 - wr@rosenauer.org
0831123bc28a final 63.0 release preparations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1074
diff changeset
  4385
0831123bc28a final 63.0 release preparations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1074
diff changeset
  4386
- update to Firefox 63.0
1074
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4387
  * WebExtensions now run in their own process on Linux
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4388
  * The Ctrl+Tab shortcut now displays thumbnail previews of your
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4389
    tabs and cycles through tabs in recently used order. This new
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4390
    default behavior is activated only in new profiles and can be
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4391
    changed in preferences.
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4392
  * Added support for Web Components custom elements and shadow DOM
1077
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4393
  MFSA 2018-26 (bsc#1112852)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4394
  * CVE-2018-12391 (bmo#1478843) (Android-only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4395
    HTTP Live Stream audio data is accessible cross-origin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4396
  * CVE-2018-12392 (bmo#1492823)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4397
    Crash with nested event loops
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4398
  * CVE-2018-12393 (bmo#1495011) (only affects non-64-bit archs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4399
    Integer overflow during Unicode conversion while loading JavaScript
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4400
  * CVE-2018-12395 (bmo#1467523)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4401
    WebExtension bypass of domain restrictions through header rewriting
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4402
  * CVE-2018-12396 (bmo#1483602)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4403
    WebExtension content scripts can execute in disallowed contexts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4404
  * CVE-2018-12397 (bmo#1487478)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4405
    Missing warning prompt when WebExtension requests local file access
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4406
  * CVE-2018-12398 (bmo#1460538, bmo#1488061)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4407
    CSP bypass through stylesheet injection in resource URIs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4408
  * CVE-2018-12399 (bmo#1490276)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4409
    Spoofing of protocol registration notification bar
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4410
  * CVE-2018-12400 (bmo#1448305) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4411
    Favicons are cached in private browsing mode on Firefox for Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4412
  * CVE-2018-12401 (bmo#1422456)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4413
    DOS attack through special resource URI parsing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4414
  * CVE-2018-12402 (bmo#1469916)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4415
    SameSite cookies leak when pages are explicitly saved
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4416
  * CVE-2018-12403 (bmo#1484753)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4417
    Mixed content warning is not displayed when HTTPS page loads a favicon over HTTP
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4418
  * CVE-2018-12388 (bmo#1472639, bmo#1485698, bmo#1301547, bmo#1471427,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4419
    bmo#1379411, bmo#1482122, bmo#1486314, bmo#1487167)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4420
    Memory safety bugs fixed in Firefox 63
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4421
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4422
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4423
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4424
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4425
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
1074
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4426
- requires NSPR 4.20, NSS 3.39 and Rust 1.28
1077
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4427
- latest rust does not provide rust-std so stop requiring it
1079
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4428
- requires rust-cbindgen >= 0.6.2 to build
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4429
- requires nodejs >= 8.11 to build
1078
9f49c406dc11 63.0.1 release candidate with several build updates and required fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1077
diff changeset
  4430
- added mozilla-bmo1491289.patch to fix system NSS build (bmo#1491289)
9f49c406dc11 63.0.1 release candidate with several build updates and required fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1077
diff changeset
  4431
- added mozilla-cubeb-noreturn.patch to fix non-return function
1079
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4432
- added mozilla-newer-cbindgen.patch to fix build with cbindgen 0.6.7
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4433
- disable elfhack for TW and newer due to build errors
1081
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4434
- removed obsolete patches
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4435
  * mozilla-no-return.patch
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4436
  * mozilla-no-stdcxx-check.patch
1073
63a32fb3b602 merge from firefox62 and prepare for 63beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1072
diff changeset
  4437
63a32fb3b602 merge from firefox62 and prepare for 63beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1072
diff changeset
  4438
-------------------------------------------------------------------
1076
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4439
Thu Oct 25 14:39:04 UTC 2018 - guillaume.gardet@opensuse.org
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4440
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4441
- Update _constraints for armv6/7
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4442
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4443
-------------------------------------------------------------------
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4444
Thu Oct 25 08:50:24 UTC 2018 - guillaume.gardet@opensuse.org
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4445
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4446
- Add patch to fix build on armv7:
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4447
  * mozilla-bmo1463035.patch
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4448
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4449
-------------------------------------------------------------------
1072
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4450
Tue Oct  2 21:28:31 UTC 2018 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4451
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4452
- Mozilla Firefox 62.0.3:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4453
  MFSA 2018-24
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4454
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4455
    Type confusion in JavaScript allowed remote code execution
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4456
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4457
    Array.prototype.push stack pointer vulnerability may enable
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4458
    exploits in the sandboxed content process
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4459
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4460
-------------------------------------------------------------------
1071
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4461
Sat Sep 22 09:03:53 UTC 2018 - astieger@suse.com
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4462
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4463
- Mozilla Firefox 62.0.2:
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4464
  MFSA 2018-22
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4465
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4466
    Crash in TransportSecurityInfo due to cached data
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4467
  * Unvisited bookmarks can once again be autofilled in the address
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4468
    bar
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4469
  * Fix WebGL rendering issues
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4470
  * Fix fallback on startup when a language pack is missing
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4471
  * Avoid crash when sharing a profile with newer (as yet
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4472
    unreleased) versions of Firefox
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4473
  * Do not undo removal of search engines when using a language
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4474
    pack
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4475
  * Fixed rendering of some web sites
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4476
  * Restored compatibility with some sites using deprecated TLS
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4477
    settings
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4478
- disable rust debug symbols to fix build on %ix86
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4479
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4480
-------------------------------------------------------------------
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4481
Mon Sep  3 10:47:43 UTC 2018 - wr@rosenauer.org
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4482
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4483
- update to Firefox 62.0
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4484
  * Firefox Home (the default New Tab) now allows users to display
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4485
    up to 4 rows of top sites, Pocket stories, and highlights
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4486
  * "Reopen in Container" tab menu option appears for users with
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4487
    Containers that lets them choose to reopen a tab in a different
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4488
    container
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4489
  * In advance of removing all trust for Symantec-issued certificates
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4490
    in Firefox 63, a preference was added that allows users to distrust
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4491
    certificates issued by Symantec. To use this preference, go to
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4492
    about:config in the address bar and set the preference
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4493
    "security.pki.distrust_ca_policy" to 2.
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4494
  * Support for CSS Shapes, allowing for richer web page layouts.
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4495
    This goes hand in hand with a brand new Shape Path Editor in the
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4496
    CSS inspector.
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4497
  * CSS Variable Fonts (OpenType Font Variations) support, which makes
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4498
    it possible to create beautiful typography with a single font file
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4499
  * Added Canadian English (en-CA) locale
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4500
  MFSA 2018-20 (bsc#1107343)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4501
  * CVE-2018-12377 (bmo#1470260)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4502
    Use-after-free in refresh driver timers
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4503
  * CVE-2018-12378 (bmo#1459383)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4504
    Use-after-free in IndexedDB
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4505
  * CVE-2018-12379 (bmo#1473113) (updater is disabled for us)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4506
    Out-of-bounds write with malicious MAR file
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4507
  * CVE-2017-16541 (bmo#1412081)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4508
    Proxy bypass using automount and autofs
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4509
  * CVE-2018-12381 (bmo#1435319)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4510
    Dragging and dropping Outlook email message results in page navigation
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4511
  * CVE-2018-12382 (bmo#1479311) (Android only)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4512
    Addressbar spoofing with javascript URI on Firefox for Android
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4513
  * CVE-2018-12383 (bmo#1475775)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4514
    Setting a master password post-Firefox 58 does not delete
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4515
    unencrypted previously stored passwords
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4516
  * CVE-2018-12375
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4517
    Memory safety bugs fixed in Firefox 62
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4518
  * CVE-2018-12376
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4519
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
1066
3f18b0f2a868 merge from firefox61 and specify next beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1065
diff changeset
  4520
- requires NSS >= 3.38
1071
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4521
- removed obsolete patch
1067
735b140fb042 rebased patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1066
diff changeset
  4522
  mozilla-bmo1464766.patch
1066
3f18b0f2a868 merge from firefox61 and specify next beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1065
diff changeset
  4523
3f18b0f2a868 merge from firefox61 and specify next beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1065
diff changeset
  4524
-------------------------------------------------------------------
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4525
Thu Aug  9 14:22:00 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4526
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4527
- update to Firefox 61.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4528
  * Improved website rendering with the Retained Display List feature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4529
    enabled (bmo#1474402)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4530
  * Fixed broken DevTools panels with certain extensions installed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4531
    (bmo#1474379)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4532
  * Fixed a crash for users with some accessibility tools enabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4533
    (bmo#1474007)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4534
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4535
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4536
Mon Jul  9 07:22:09 UTC 2018 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4537
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4538
- Mozilla Firefox 61.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4539
  * Fix missing content on the New Tab Page and the Home section of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4540
    the Preferences page (bmo#1471375)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4541
  * Fixed loss of bookmarks under rare circumstances when upgrading
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4542
    from Firefox 60 (bmo#1472127)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4543
  * Improved playback of Twitch 1080p video streams (bmo#1469257)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4544
  * Web pages no longer lose focus when a browser popup window is
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4545
    opened (bmo#1471415)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4546
  * Re-allowed downloading files from FTP sites via the "Save Link
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4547
    As" option when linked from HTTP pages (bmo#1470295)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4548
  * Fixed extensions being unable to override the default homepage
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4549
    in certain situations (bmo#1466846)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4550
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4551
-------------------------------------------------------------------
1061
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4552
Sat Jun 23 07:25:51 UTC 2018 - wr@rosenauer.org
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4553
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4554
- update to Firefox 61.0
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4555
  * Performance enhancements
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4556
  * Various improvements for dark theme support will provide a more
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4557
    consistent experience across the entire Firefox UI
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4558
  * OpenSearch plugins offered by web pages can now be added from the
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4559
    page action menu for easier installation
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4560
  * Improved support for allowing WebExtensions to manage and hide tabs
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4561
  MFSA 2018-15 (bsc#1098998)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4562
  * CVE-2018-12359 (bmo#1459162)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4563
    Buffer overflow using computed size of canvas element
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4564
  * CVE-2018-12360 (bmo#1459693)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4565
    Use-after-free when using focus()
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4566
  * CVE-2018-12361 (bmo#1463244)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4567
    Integer overflow in SwizzleData
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4568
  * CVE-2018-12358 (bmo#1467852)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4569
    Same-origin bypass using service worker and redirection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4570
  * CVE-2018-12362 (bmo#1452375)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4571
    Integer overflow in SSSE3 scaler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4572
  * CVE-2018-5156 (bmo#1453127)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4573
    Media recorder segmentation fault when track type is changed during capture
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4574
  * CVE-2018-12363 (bmo#1464784)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4575
    Use-after-free when appending DOM nodes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4576
  * CVE-2018-12364 (bmo#1436241)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4577
    CSRF attacks through 307 redirects and NPAPI plugins
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4578
  * CVE-2018-12365 (bmo#1459206)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4579
    Compromised IPC child process can list local filenames
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4580
  * CVE-2018-12371 (bmo#1465686) 
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4581
    Integer overflow in Skia library during edge builder allocation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4582
  * CVE-2018-12366 (bmo#1464039)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4583
    Invalid data handling during QCMS transformations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4584
  * CVE-2018-12367 (bmo#1462891)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4585
    Timing attack mitigation of PerformanceNavigationTiming
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4586
  * CVE-2018-12369 (bmo#1454909)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4587
    WebExtension security permission checks bypassed by embedded experiments
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4588
  * CVE-2018-12370 (bmo#1456652)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4589
    SameSite cookie protections bypassed when exiting Reader View
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4590
  * CVE-2018-5186 (bmo#1464872,bmo#1463329,bmo#1419373,bmo#1412882,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4591
    bmo#1413033,bmo#1444673,bmo#1454448,bmo#1453505,bmo#1438671)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4592
    Memory safety bugs fixed in Firefox 61
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4593
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4594
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4595
    bmo#1463884)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4596
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4597
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4598
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4599
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4600
    bmo#1464079,bmo#1463494,bmo#1458048)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4601
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
1054
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4602
- requires NSS 3.37.3
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4603
- requires python >= 3.5 to build
1055
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4604
- removed obsolete patches
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4605
  mozilla-i586-DecoderDoctorLogger.patch
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4606
  mozilla-i586-domPrefs.patch
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4607
  mozilla-fix-skia-aarch64.patch
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4608
  mozilla-bmo1375074.patch
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4609
  mozilla-enable-csd.patch
1057
b70ce330958c successfull RPM build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1056
diff changeset
  4610
- patch for new no-return warnings (mozilla-no-return.patch)
1059
936bf8851c57 try to make langpacks work again
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1057
diff changeset
  4611
- do not disable system installed locales (mozilla-bmo1464766.patch)
1054
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4612
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4613
-------------------------------------------------------------------
1056
90e1f32cf034 several changes to make upstream tarballs a good neighbour for locale fetching and HG checkouts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1055
diff changeset
  4614
Fri Jun  8 10:52:13 UTC 2018 - bjorn.lie@gmail.com
1054
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4615
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4616
- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4617
  conditional --disable-gconf to configure: no longer pull in
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4618
  obsolete gconf2 for Tumbleweed.
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4619
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4620
-------------------------------------------------------------------
1052
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4621
Thu Jun  7 12:11:06 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4622
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4623
- update to Firefox 60.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4624
  * requires NSS 3.36.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4625
  MFSA 2018-14 (bsc#1096449)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4626
  * CVE-2018-6126 (bmo#1462682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4627
    Heap buffer overflow rasterizing paths in SVG with Skia
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4628
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4629
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4630
Wed Jun  6 18:57:52 UTC 2018 - guillaume.gardet@opensuse.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4631
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4632
- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4633
  workaround:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4634
  * mozilla-bmo1375074.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4635
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4636
-------------------------------------------------------------------
1051
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4637
Sat May 26 15:53:25 UTC 2018 - wr@rosenauer.org
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4638
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4639
- fixed "open with" option under KDE (boo#1094747)
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4640
- workaround crash on startup on aarch64 (boo#1093059)
1052
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4641
  (contributed by guillaume.gardet@arm.com)
1051
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4642
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4643
-------------------------------------------------------------------
1049
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4644
Wed May 23 08:49:09 UTC 2018 - guillaume.gardet@opensuse.org
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4645
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4646
- Disable webrtc for aarch64 due to bmo#1434589
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4647
- Add patch to fix skia build on AArch64:
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4648
  * mozilla-fix-skia-aarch64.patch
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4649
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4650
-------------------------------------------------------------------
1048
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4651
Thu May 17 14:01:18 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4652
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4653
- update to Firefox 60.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4654
  * Avoid overly long cycle collector pauses with some add-ons installed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4655
    (bmo#1449033)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4656
  * After unckecking the "Sponsored Stories" option, the New Tab page
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4657
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4658
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4659
    (bmo#1457743)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4660
  * Use the right default background when opening tabs or windows in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4661
    high contrast mode (bmo#1458956)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4662
  * Restored translations of the Preferences panels when using a
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4663
    language pack (bmo#1461590)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4664
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4665
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4666
Mon May 14 13:37:38 UTC 2018 - pcerny@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4667
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4668
- parellelise locales building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4669
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4670
-------------------------------------------------------------------
1047
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4671
Mon May  7 08:32:28 UTC 2018 - wr@rosenauer.org
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4672
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4673
- update to Firefox 60.0
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4674
  * Added a policy engine that allows customized Firefox deployments
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4675
    in enterprise environments, using Windows Group Policy or a
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4676
    cross-platform JSON file
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4677
  * Applied Quantum CSS to render browser UI
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4678
  * Added support for Web Authentication, allowing the use of USB
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4679
    tokens for authentication to web sites
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4680
  * Locale added: Occitan (oc)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4681
  MFSA 2018-11 (bsc#1092548)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4682
  * CVE-2018-5154 (bmo#1443092)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4683
    Use-after-free with SVG animations and clip paths
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4684
  * CVE-2018-5155 (bmo#1448774)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4685
    Use-after-free with SVG animations and text paths
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4686
  * CVE-2018-5157 (bmo#1449898)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4687
    Same-origin bypass of PDF Viewer to view protected PDF files
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4688
  * CVE-2018-5158 (bmo#1452075)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4689
    Malicious PDF can inject JavaScript into PDF Viewer
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4690
  * CVE-2018-5159 (bmo#1441941)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4691
    Integer overflow and out-of-bounds write in Skia
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4692
  * CVE-2018-5160 (bmo#1436117)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4693
    Uninitialized memory use by WebRTC encoder
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4694
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4695
    WebExtensions information leak through webRequest API
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4696
  * CVE-2018-5153 (bmo#1436809)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4697
    Out-of-bounds read in mixed content websocket messages
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4698
  * CVE-2018-5163 (bmo#1426353)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4699
    Replacing cached data in JavaScript Start-up Bytecode Cache
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4700
  * CVE-2018-5164 (bmo#1416045)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4701
    CSP not applied to all multipart content sent with
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4702
    multipart/x-mixed-replace
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4703
  * CVE-2018-5166 (bmo#1437325)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4704
    WebExtension host permission bypass through filterReponseData
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4705
  * CVE-2018-5167 (bmo#1447969)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4706
    Improper linkification of chrome: and javascript: content in
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4707
    web console and JavaScript debugger
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4708
  * CVE-2018-5168 (bmo#1449548)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4709
    Lightweight themes can be installed without user interaction
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4710
  * CVE-2018-5169 (bmo#1319157)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4711
    Dragging and dropping link text onto home button can set home page
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4712
    to include chrome pages
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4713
  * CVE-2018-5172 (bmo#1436482)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4714
    Pasted script from clipboard can run in the Live Bookmarks page
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4715
    or PDF viewer
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4716
  * CVE-2018-5173 (bmo#1438025)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4717
    File name spoofing of Downloads panel with Unicode characters
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4718
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4719
    Windows Defender SmartScreen UI runs with less secure behavior
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4720
    for downloaded files in Windows 10 April 2018 Update
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4721
  * CVE-2018-5175 (bmo#1432358)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4722
    Universal CSP bypass on sites using strict-dynamic in their policies
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4723
  * CVE-2018-5176 (bmo#1442840)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4724
    JSON Viewer script injection
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4725
  * CVE-2018-5177 (bmo#1451908)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4726
    Buffer overflow in XSLT during number formatting
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4727
  * CVE-2018-5165 (bmo#1451452)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4728
    Checkbox for enabling Flash protected mode is inverted in 32-bit
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4729
    Firefox
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4730
  * CVE-2018-5180 (bmo#1444086)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4731
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4732
  * CVE-2018-5181 (bmo#1424107)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4733
    Local file can be displayed in noopener tab through drag and
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4734
    drop of hyperlink
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4735
  * CVE-2018-5182 (bmo#1435908)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4736
    Local file can be displayed from hyperlink dragged and dropped
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4737
    on addressbar
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4738
  * CVE-2018-5151
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4739
    Memory safety bugs fixed in Firefox 60
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4740
  * CVE-2018-5150
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4741
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
1046
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4742
- removed obsolete patches
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4743
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
1047
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4744
  mozilla-bmo1005535.patch
1046
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4745
- requires NSPR 4.19 and NSS 3.36.1
1047
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4746
- requires rust 1.24 or higher
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4747
- use upstream source archive and detached signature for
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4748
  source verification
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4749
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4750
-------------------------------------------------------------------
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4751
Thu May  3 14:33:37 UTC 2018 - guillaume.gardet@opensuse.org
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4752
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4753
- Fix armv7 build by:
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4754
  * adding RUSTFLAGS="-Cdebuginfo=0"
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4755
  * updating _constraints for %arm
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4756
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4757
-------------------------------------------------------------------
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4758
Wed May  2 20:46:37 UTC 2018 - wr@rosenauer.org
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4759
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4760
- do not try CSD on kwin (boo#1091592)
1046
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4761
- fix build in openSUSE:Leap:42.3:Update, use gcc7
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4762
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4763
-------------------------------------------------------------------
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4764
Tue May  1 14:26:24 UTC 2018 - astieger@suse.com
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4765
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4766
- Mozilla Firefox 59.0.3:
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4767
  * fixes for platforms other than GNU/Linux
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4768
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4769
-------------------------------------------------------------------
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4770
Fri Apr 20 12:31:52 UTC 2018 - mliska@suse.cz
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4771
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4772
- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4773
  in order to fix boo#1090362.
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4774
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4775
-------------------------------------------------------------------
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4776
Mon Apr  2 00:55:45 UTC 2018 - badshah400@gmail.com
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4777
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4778
- Add back mozilla-enable-csd.patch: New rebased version from
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4779
  Fedora for version 59.0.x.
1044
142a0c92607c merge latest from 59.x
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1043
diff changeset
  4780
142a0c92607c merge latest from 59.x
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1043
diff changeset
  4781
-------------------------------------------------------------------
1043
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4782
Tue Mar 27 14:07:11 UTC 2018 - schwab@suse.de
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4783
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4784
- Reduce constraints on aarch64
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4785
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4786
-------------------------------------------------------------------
1041
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4787
Tue Mar 27 06:40:25 UTC 2018 - wr@rosenauer.org
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4788
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4789
- update to Firefox 59.0.2
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4790
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4791
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4792
    that use those keys with resistFingerprinting enabled (bmo#1433592)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4793
  * High CPU / memory churn caused by third-party software on some
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4794
    computers (bmo#1446280)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4795
  * Users who have configured an "automatic proxy configuration URL"
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4796
    and want to reload their proxy settings from the URL will find
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4797
    the Reload button disabled in the Connection Settings dialog when
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4798
    they select Preferences/Options>Network Proxy>Settings... (bmo#1445991)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4799
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4800
  * User's trying to cancel a print around the time it completes will
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4801
    continue to get intermittent crashes (bmo#1441598)
1043
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4802
  MFSA 2018-10 (bsc#1087059)
1041
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4803
  * CVE-2018-5148 (bmo#1440717)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4804
    Use-after-free in compositor
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4805
- removed obsolete patch mozilla-bmo1446062.patch
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4806
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4807
-------------------------------------------------------------------
1040
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4808
Wed Mar 21 17:14:24 UTC 2018 - cgrobertson@suse.com
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4809
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4810
- Added patches:
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4811
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4812
    fixes non-unified build error
1041
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4813
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
1040
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4814
    fixes 32bit build error
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4815
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4816
-------------------------------------------------------------------
1039
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4817
Fri Mar 16 06:40:11 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4818
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4819
- update to Firefox 59.0.1 (bsc#1085671)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4820
  MFSA 2018-08
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4821
  * CVE-2018-5146 (bmo#1446062)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4822
    Vorbis audio processing out of bounds write
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4823
  * CVE-2018-5147 (bmo#1446365)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4824
    Out of bounds memory write in libtremor
1040
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4825
    (mozilla-bmo1446062.patch)
1039
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4826
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4827
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4828
Wed Mar 14 19:27:07 UTC 2018 - cgrobertson@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4829
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4830
- Added patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4831
  * mozilla-bmo1005535.patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4832
    Enable skia_gpu on big endian platforms.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4833
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4834
-------------------------------------------------------------------
1037
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4835
Sun Mar 11 22:12:12 UTC 2018 - wr@rosenauer.org
1036
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1035
diff changeset
  4836
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1035
diff changeset
  4837
- update to Firefox 59.0
1037
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4838
  * Performance enhancements
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4839
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4840
  * added features for Firefox Screenshots
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4841
  * Enhanced WebExtensions API
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4842
  * Improved RTC capabilities
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4843
  MFSA 2018-06 (bsc#1085130)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4844
  * CVE-2018-5127 (bmo#1430557)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4845
    Buffer overflow manipulating SVG animatedPathSegList
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4846
  * CVE-2018-5128 (bmo#1431336)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4847
    Use-after-free manipulating editor selection ranges
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4848
  * CVE-2018-5129 (bmo#1428947)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4849
    Out-of-bounds write with malformed IPC messages
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4850
  * CVE-2018-5130 (bmo#1433005)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4851
    Mismatched RTP payload type can trigger memory corruption
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4852
  * CVE-2018-5131 (bmo#1440775)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4853
    Fetch API improperly returns cached copies of no-store/no-cache resources
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4854
  * CVE-2018-5132 (bmo#1408194)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4855
    WebExtension Find API can search privileged pages
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4856
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4857
    Value of the app.support.baseURL preference is not properly sanitized
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4858
  * CVE-2018-5134 (bmo#1429379)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4859
    WebExtensions may use view-source: URLs to bypass content restrictions
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4860
  * CVE-2018-5135 (bmo#1431371)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4861
    WebExtension browserAction can inject scripts into unintended contexts
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4862
  * CVE-2018-5136 (bmo#1419166)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4863
    Same-origin policy violation with data: URL shared workers
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4864
  * CVE-2018-5137 (bmo#1432870)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4865
    Script content can access legacy extension non-contentaccessible resources
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4866
  * CVE-2018-5138 (bmo#1432624) (Android only)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4867
    Android Custom Tab address spoofing through long domain names
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4868
  * CVE-2018-5140 (bmo#1424261)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4869
    Moz-icon images accessible to web content through moz-icon: protocol
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4870
  * CVE-2018-5141 (bmo#1429093)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4871
    DOS attack through notifications Push API
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4872
  * CVE-2018-5142 (bmo#1366357)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4873
    Media Capture and Streams API permissions display incorrect origin
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4874
    with data: and blob: URLs
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4875
  * CVE-2018-5143 (bmo#1422643)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4876
    Self-XSS pasting javascript: URL with embedded tab into addressbar
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4877
  * CVE-2018-5126
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4878
    Memory safety bugs fixed in Firefox 59
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4879
  * CVE-2018-5125
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4880
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
1031
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4881
- requires NSPR 4.18 and NSS 3.35
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4882
- requires rust >= 1.22.1
1032
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4883
- removed obsolete patches:
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4884
  mozilla-alsa-sandbox.patch
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4885
  mozilla-enable-csd.patch
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4886
  firefox-no-default-ualocale.patch
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4887
- removed l10n_changesets.txt since same information is now in
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4888
  Firefox source tree (updated create-tar.sh now requires jq)
1031
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4889
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4890
-------------------------------------------------------------------
1039
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4891
Fri Feb  9 13:37:46 UTC 2018 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4893
- Mozilla Firefox 58.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4894
  * Blocklisted graphics drivers related to off main thread painting
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4895
    crashes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4896
  * Fix tab crash during printing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4897
  * Fix clicking links and scrolling emails on Microsoft Hotmail
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4898
    and Outlook (OWA) webmail
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4899
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4900
-------------------------------------------------------------------
1030
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4901
Fri Feb  9 12:06:31 UTC 2018 - wr@rosenauer.org
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4902
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4903
- correct requires and provides handling (boo#1076907)
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4904
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4905
-------------------------------------------------------------------
1029
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4906
Tue Feb  6 07:03:42 UTC 2018 - fstrba@suse.com
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4907
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4908
- Added patch:
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4909
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4910
    or again?) not working in Firefox 58 due to sandboxing.
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4911
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4912
-------------------------------------------------------------------
1028
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4913
Mon Jan 29 22:32:21 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4914
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4915
- update to Firefox 58.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4916
  MFSA 2018-05
1037
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4917
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
1029
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4918
- use correct language packs
1027
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4919
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4920
- allow larger number of nested elements (mozilla-bmo256180.patch)
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4921
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4922
-------------------------------------------------------------------
1026
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4923
Tue Jan 23 20:40:57 UTC 2018 - wr@rosenauer.org
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4924
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4925
- update to Firefox 58.0 (bsc#1077291)
1023
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  4926
  * Added Nepali (ne-NP) locale
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  4927
  * Added support for form autofill for credit card
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  4928
  * Optimize page load by caching JavaScript internal representation
1026
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4929
  MFSA 2018-02
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4930
  * CVE-2018-5091 (bmo#1423086)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4931
    Use-after-free with DTMF timers
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4932
  * CVE-2018-5092 (bmo#1418074)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4933
    Use-after-free in Web Workers
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4934
  * CVE-2018-5093 (bmo#1415291)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4935
    Buffer overflow in WebAssembly during Memory/Table resizing
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4936
  * CVE-2018-5094 (bmo#1415883)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4937
    Buffer overflow in WebAssembly with garbage collection on
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4938
    uninitialized memory
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4939
  * CVE-2018-5095 (bmo#1418447)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4940
    Integer overflow in Skia library during edge builder allocation
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4941
  * CVE-2018-5097 (bmo#1387427)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4942
    Use-after-free when source document is manipulated during XSLT
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4943
  * CVE-2018-5098 (bmo#1399400)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4944
    Use-after-free while manipulating form input elements
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4945
  * CVE-2018-5099 (bmo#1416878)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4946
    Use-after-free with widget listener
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4947
  * CVE-2018-5100 (bmo#1417405)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4948
    Use-after-free when IsPotentiallyScrollable arguments are freed
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4949
    from memory
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4950
  * CVE-2018-5101 (bmo#1417661)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4951
    Use-after-free with floating first-letter style elements
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4952
  * CVE-2018-5102 (bmo#1419363)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4953
    Use-after-free in HTML media elements
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4954
  * CVE-2018-5103 (bmo#1423159)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4955
    Use-after-free during mouse event handling
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4956
  * CVE-2018-5104 (bmo#1425000)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4957
    Use-after-free during font face manipulation
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4958
  * CVE-2018-5105 (bmo#1390882)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4959
    WebExtensions can save and execute files on local file system
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4960
    without user prompts
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4961
  * CVE-2018-5106 (bmo#1408708)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4962
    Developer Tools can expose style editor information cross-origin
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4963
    through service worker
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4964
  * CVE-2018-5107 (bmo#1379276)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4965
    Printing process will follow symlinks for local file access
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4966
  * CVE-2018-5108 (bmo#1421099)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4967
    Manually entered blob URL can be accessed by subsequent private browsing tabs
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4968
  * CVE-2018-5109 (bmo#1405599)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4969
    Audio capture prompts and starts with incorrect origin attribution
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4970
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4971
    Cursor can be made invisible on OS X
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4972
  * CVE-2018-5111 (bmo#1321619)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4973
    URL spoofing in addressbar through drag and drop
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4974
  * CVE-2018-5112 (bmo#1425224)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4975
    Extension development tools panel can open a non-relative URL in the panel
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4976
  * CVE-2018-5113 (bmo#1425267)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4977
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4978
  * CVE-2018-5114 (bmo#1421324)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4979
    The old value of a cookie changed to HttpOnly remains accessible to scripts
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4980
  * CVE-2018-5115 (bmo#1409449)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4981
    Background network requests can open HTTP authentication in unrelated foreground tabs
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4982
  * CVE-2018-5116 (bmo#1396399)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4983
    WebExtension ActiveTab permission allows cross-origin frame content access
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4984
  * CVE-2018-5117 (bmo#1395508)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4985
    URL spoofing with right-to-left text aligned left-to-right
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4986
  * CVE-2018-5118 (bmo#1420049)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4987
    Activity Stream images can attempt to load local content through file:
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4988
  * CVE-2018-5119 (bmo#1420507)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4989
    Reader view will load cross-origin content in violation of CORS headers
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4990
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4991
    OS X Tibetan characters render incompletely in the addressbar
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4992
  * CVE-2018-5122 (bmo#1413841)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4993
    Potential integer overflow in DoCrypt
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4994
  * CVE-2018-5090
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4995
    Memory safety bugs fixed in Firefox 58
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4996
  * CVE-2018-5089
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4997
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
1019
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4998
- requires NSS 3.34.1
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4999
- requires rust 1.21
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  5000
- removed obsolete patches:
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  5001
  mozilla-bindgen-systemlibs.patch
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  5002
  mozilla-bmo1360278.patch
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  5003
  mozilla-bmo1399611-csd.patch
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  5004
  mozilla-rust-1.23.patch
1020
d2c159cb9bf2 rebased patches; updated spec file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1019
diff changeset
  5005
- rebased patches
1023
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  5006
- updated man-page
1019
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  5007
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  5008
-------------------------------------------------------------------
1017
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  5009
Tue Jan  9 18:48:02 UTC 2018 - wr@rosenauer.org
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  5010
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  5011
- fixed build with latest rust (mozilla-rust-1.23.patch)
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  5012
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  5013
-------------------------------------------------------------------
1016
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  5014
Thu Jan  4 12:23:41 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  5015
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  5016
- update to Firefox 57.0.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  5017
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  5018
  (boo#1074723)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  5019
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  5020
-------------------------------------------------------------------
1015
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5021
Wed Jan  3 08:29:38 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5022
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5023
- fixed regression introduced Oct 10th which made Firefox crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5024
  when cancelling the KDE file dialog (boo#1069962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5025
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5026
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5027
Fri Dec 29 19:52:34 UTC 2017 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5028
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5029
- Mozilla Firefox 57.0.3:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5030
  * Fix a crash reporting issue that inadvertently sends background
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5031
    tab crash reports to Mozilla without user opt-in (bmo#1427111,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5032
    bsc#1074235)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5033
- Includes changes from 57.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5034
  * fixes for platforms other than GNU/Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5035
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  5036
-------------------------------------------------------------------
1012
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5037
Fri Dec  8 15:52:17 UTC 2017 - dimstar@opensuse.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5038
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5039
- Explicitly buildrequires python2-xml: The build system relies on
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5040
  it. We wrongly relied on other packages pulling it in for us.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5041
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5042
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5043
Thu Dec  7 11:12:31 UTC 2017 - dimstar@opensuse.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5044
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5045
- Escape the usage of %{VERSION} when calling out to rpm.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5046
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5047
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5048
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5049
Wed Nov 29 23:45:03 UTC 2017 - wr@rosenauer.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5050
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5051
- update to Firefox 57.0.1
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5052
  * CVE-2017-7843: Web worker in Private Browsing mode can write
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5053
    IndexedDB data (bsc#1072034, bmo#1410106)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5054
  * CVE-2017-7844: Visited history information leak through SVG
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5055
    image (bsc#1072036, bmo#1420001)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5056
  * Fix a video color distortion issue on YouTube and other video
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5057
    sites with some AMD devices (bmo#1417442)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5058
  * Fix an issue with prefs.js when the profile path has non-ascii
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5059
    characters (bmo#1420427)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5060
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5061
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5062
Tue Nov 21 09:00:48 UTC 2017 - christophe@krop.fr
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5063
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5064
- Add mozilla-bmo1360278.patch
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5065
  Starting with Firefox 57, the context menu appears on key press.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5066
  This patch creates a config entry to restore the
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5067
  old behaviour. Without the patch, the mouse gesture extensions
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5068
  require 2 clicks to work (bmo#1360278).
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5069
  The new config entry is named ui.context_menus.after_mouseup
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5070
  (default : false).
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5071
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5072
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5073
Sat Nov 18 08:35:21 UTC 2017 - wr@rosenauer.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5074
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5075
- Allow experimental CSD for Gtk3 (bmo#1399611) if available and enabled
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5076
  widget.allow-client-side-decoration=true
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5077
  (mozilla-bmo1399611-csd.patch)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5078
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  5079
-------------------------------------------------------------------
1011
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5080
Wed Nov 15 06:46:06 UTC 2017 - wr@rosenauer.org
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5081
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5082
- update to Firefox 57.0 (boo#1068101)
1008
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5083
  * Firefox Quantum
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5084
  * Photon UI
1011
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5085
  * Unified address and search bar
1008
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5086
  * AMD VP9 hardware video decoder support
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5087
  * Added support for Date/Time input
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5088
  * stricter security sandbox blocking filesystem reading and
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5089
    writing on Linux systems
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5090
  * middle mouse paste in the content area no longer navigates to
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5091
    URLs by default on Unix systems
1011
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5092
  MFSA 2017-24
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5093
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5094
    Use-after-free of PressShell while restyling layout
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5095
  * CVE-2017-7830 (bmo#1408990)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5096
    Cross-origin URL information leak through Resource Timing API
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5097
  * CVE-2017-7831 (bmo#1392026)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5098
    Information disclosure of exposed properties on JavaScript proxy
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5099
    objects
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5100
  * CVE-2017-7832 (bmo#1408782)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5101
    Domain spoofing through use of dotless 'i' character followed
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5102
    by accent markers
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5103
  * CVE-2017-7833 (bmo#1370497)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5104
    Domain spoofing with Arabic and Indic vowel marker characters
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5105
  * CVE-2017-7834 (bmo#1358009)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5106
    data: URLs opened in new tabs bypass CSP protections
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5107
  * CVE-2017-7835 (bmo#1402363)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5108
    Mixed content blocking incorrectly applies with redirects
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5109
  * CVE-2017-7836 (bmo#1401339)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5110
    Pingsender dynamically loads libcurl on Linux and OS X
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5111
  * CVE-2017-7837 (bmo#1325923)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5112
    SVG loaded as <img> can use meta tags to set cookies
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5113
  * CVE-2017-7838 (bmo#1399540)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5114
    Failure of individual decoding of labels in international domain
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5115
    names triggers punycode display of entire IDN
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5116
  * CVE-2017-7839 (bmo#1402896)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5117
    Control characters before javascript: URLs defeats self-XSS
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5118
    prevention mechanism
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5119
  * CVE-2017-7840 (bmo#1366420)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5120
    Exported bookmarks do not strip script elements from user-supplied
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5121
    tags
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5122
  * CVE-2017-7842 (bmo#1397064)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5123
    Referrer Policy is not always respected for <link> elements
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5124
  * CVE-2017-7827
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5125
    Memory safety bugs fixed in Firefox 57
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5126
  * CVE-2017-7826
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5127
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5
1004
f98f2fd265af update version requirements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1001
diff changeset
  5128
- requires NSPR 4.17, NSS 3.33 and rustc 1.19
1005
6d716caa6abe 57.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1004
diff changeset
  5129
- rebased patches
1008
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5130
- added mozilla-bindgen-systemlibs.patch to allow stylo build
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5131
  with system libs (bmo#1341234)
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5132
- removed mozilla-language.patch since the whole locale code
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5133
  changed in Firefox and is relying on ICU now
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5134
- removed obsolete mozilla-ucontext.patch
1004
f98f2fd265af update version requirements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1001
diff changeset
  5135
f98f2fd265af update version requirements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1001
diff changeset
  5136
-------------------------------------------------------------------
1001
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5137
Sat Oct 28 06:30:37 UTC 2017 - wr@rosenauer.org
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5138
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5139
- update to Firefox 56.0.2
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5140
  * Disable Form Autofill completely on user request (bmo#1404531)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5141
  * Fix for video-related crashes on Windows 7 (bmo#1409141)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5142
  * Correct detection for 64-bit GSSAPI authentication (bmo#1409275)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5143
  * Fix for shutdown crash (bmo#1404105)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5144
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5145
-------------------------------------------------------------------
1000
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5146
Tue Oct 10 11:47:49 UTC 2017 - wr@rosenauer.org
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5147
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5148
- update to Firefox 56.0.1
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5149
  * Block D3D11 when using Intel drivers on Windows 7 systems with
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5150
    partial AVX support (bmo#1403353)
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5151
  -> just to sync the version number
998
6c6109948e35 enable stylo (Quantum CSS) for TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 997
diff changeset
  5152
- enable stylo for TW (requires LLVM >= 3.9)
1000
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5153
- queue KDE filepicker requests to avoid non-opening file dialogs
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5154
  happening in certain situations (contributed by Ignaz Forster)
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5155
- the placeholder dot in KDE file dialog in case of empty filenames
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5156
  was removed, apparently not required (anymore)
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5157
  (contributed by Ignaz Forster)
998
6c6109948e35 enable stylo (Quantum CSS) for TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 997
diff changeset
  5158
6c6109948e35 enable stylo (Quantum CSS) for TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 997
diff changeset
  5159
-------------------------------------------------------------------
997
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5160
Sun Oct  1 18:25:16 UTC 2017 - stefan.bruens@rwth-aachen.de
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5161
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5162
- Correct plugin directory for aarch64 (boo#1061207). The wrapper
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5163
  script was not detecting aarch64 as a 64 bit architecture, thus
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5164
  used /usr/lib/browser-plugins/.
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5165
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5166
-------------------------------------------------------------------
996
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5167
Sat Sep 30 20:10:50 UTC 2017 - zaitor@opensuse.org
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5168
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5169
- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5170
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5171
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5172
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5173
  looks for.
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5174
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5175
-------------------------------------------------------------------
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5176
Thu Sep 28 08:28:29 UTC 2017 - wr@rosenauer.org
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5177
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5178
- update to Firefox 56.0 (boo#1060445)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5179
  * Firefox Screenshots
994
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5180
  * Find Options/Preferences more quickly with new search function
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5181
  * Media is no longer auto-played when opened in a background tab
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5182
  * Enable CSS Grid Layout View
996
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5183
  MFSA 2017-21
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5184
  * CVE-2017-7793 (bmo#1371889)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5185
    Use-after-free with Fetch API
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5186
  * CVE-2017-7817 (bmo#1356596) (Android-only)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5187
    Firefox for Android address bar spoofing through fullscreen mode
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5188
  * CVE-2017-7818 (bmo#1363723)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5189
    Use-after-free during ARIA array manipulation
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5190
  * CVE-2017-7819 (bmo#1380292)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5191
    Use-after-free while resizing images in design mode
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5192
  * CVE-2017-7824 (bmo#1398381)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5193
    Buffer overflow when drawing and validating elements with ANGLE
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5194
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5195
    Use-after-free in TLS 1.2 generating handshake hashes
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5196
  * CVE-2017-7812 (bmo#1379842)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5197
    Drag and drop of malicious page content to the tab bar can open locally stored files
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5198
  * CVE-2017-7814 (bmo#1376036)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5199
    Blob and data URLs bypass phishing and malware protection warnings
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5200
  * CVE-2017-7813 (bmo#1383951)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5201
    Integer truncation in the JavaScript parser
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5202
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5203
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5204
  * CVE-2017-7815 (bmo#1368981)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5205
    Spoofing attack with modal dialogs on non-e10s installations
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5206
  * CVE-2017-7816 (bmo#1380597)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5207
    WebExtensions can load about: URLs in extension UI
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5208
  * CVE-2017-7821 (bmo#1346515)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5209
    WebExtensions can download and open non-executable files without user interaction
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5210
  * CVE-2017-7823 (bmo#1396320)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5211
    CSP sandbox directive did not create a unique origin
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5212
  * CVE-2017-7822 (bmo#1368859)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5213
    WebCrypto allows AES-GCM with 0-length IV
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5214
  * CVE-2017-7820 (bmo#1378207)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5215
    Xray wrapper bypass with new tab and web console
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5216
  * CVE-2017-7811
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5217
    Memory safety bugs fixed in Firefox 56
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5218
  * CVE-2017-7810
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5219
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
994
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5220
- requires NSPR 4.16 and NSS 3.32.1
996
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5221
- rebased patches
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5222
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5223
-------------------------------------------------------------------
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5224
Thu Sep 28 07:53:13 UTC 2017 - dimstar@opensuse.org
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5225
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5226
- Add alsa-devel BuildRequires: we care for ALSA support to be
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5227
  built and thus need to ensure we get the dependencies in place.
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5228
  In the past, alsa-devel was pulled in by accident: we
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5229
  buildrequire libgnome-devel. This required esound-devel and that
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5230
  in turn pulled in alsa-devel for us. libgnome is being fixed to
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5231
  no longer require esound-devel.
994
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5232
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5233
-------------------------------------------------------------------
992
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5234
Mon Sep  4 18:27:44 UTC 2017 - wr@rosenauer.org
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5235
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5236
- update to Firefox 55.0.3
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5237
  * Fix an issue with addons when using a path containing non-ascii
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5238
    characters (bmo#1389160)
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5239
  * Fix file uploads to some websites, including YouTube (bmo#1383518)
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5240
- fix Google API key build integration
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5241
- add mozilla-ucontext.patch to fix Tumbleweed build
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5242
- do not enable XINPUT2 for now (boo#1053959)
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5243
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5244
-------------------------------------------------------------------
991
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5245
Fri Aug 11 08:32:30 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5246
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5247
- update to Firefox 55.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5248
  * Fix a regression the tab restoration process (bmo#1388160)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5249
  * Fix a problem causing What's new pages not to be displayed (bmo#1386224)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5250
  * Fix a rendering issue with some PKCS#11 libraries (bmo#1388370)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5251
  * Disable the predictor prefetch (bmo#1388160)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5252
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5253
-------------------------------------------------------------------
985
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5254
Sat Aug  5 13:22:16 UTC 2017 - wr@rosenauer.org
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5255
991
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5256
- update to Firefox 55.0 (boo#1052829)
985
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5257
  * Browsing sessions with a high number of tabs are now restored
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5258
    in an instant
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5259
  * Sidebar (bookmarks, history, synced tabs) can now be moved to
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5260
    the right edge of the window
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5261
  * Fine-tune your browser performance from the Preferences/Options page.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5262
  * Make screenshots of webpages, and save them locally or upload
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5263
    them to the cloud. This feature will undergo A/B testing and
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5264
    will not be visible for some users.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5265
  * Added Belarusian (be) locale
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5266
  * Simplify print jobs from within print preview
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5267
  * Use virtual reality devices with the web with the introduction
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5268
    of WebVR
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5269
  * Search suggestions are now enabled by default for users who
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5270
    haven't explicitly opted-out
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5271
  * Search with any installed search engine directly from the
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5272
    location bar
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5273
  * IMPORTANT: Breaking profile changes - do not downgrade Firefox
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5274
    and use a profile that has been opened with Firefox 55+.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5275
  * The Adobe Flash plugin is now click-to-activate by default and
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5276
    only allowed on http:// and https:// URL schemes. This change
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5277
    will be rolled out progressively and so will not be visible to
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5278
    all users immediately. For more information see the Firefox
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5279
    plugin roadmap
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5280
  * Modernized application update UI to be less intrusive and more
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5281
    aligned with the rest of the browser. Only users who have not
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5282
    restarted their browser 8 days after downloading an update or
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5283
    users who opted out of automatic updates will see this change.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5284
  * Insecure sites can no longer access the Geolocation APIs to get
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5285
    access to your physical location
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5286
  * requires NSPR 4.15 and NSS 3.31
991
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5287
  MFSA 2017-18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5288
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5289
    XUL injection in the style editor in devtools
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5290
  * CVE-2017-7800 (bmo#1374047)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5291
    Use-after-free in WebSockets during disconnection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5292
  * CVE-2017-7801 (bmo#1371259)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5293
    Use-after-free with marquee during window resizing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5294
  * CVE-2017-7809 (bmo#1380284)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5295
    Use-after-free while deleting attached editor DOM node
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5296
  * CVE-2017-7784 (bmo#1376087)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5297
    Use-after-free with image observers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5298
  * CVE-2017-7802 (bmo#1378147)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5299
    Use-after-free resizing image elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5300
  * CVE-2017-7785 (bmo#1356985)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5301
    Buffer overflow manipulating ARIA attributes in DOM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5302
  * CVE-2017-7786 (bmo#1365189)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5303
    Buffer overflow while painting non-displayable SVG
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5304
  * CVE-2017-7806 (bmo#1378113)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5305
    Use-after-free in layer manager with SVG
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5306
  * CVE-2017-7753 (bmo#1353312)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5307
    Out-of-bounds read with cached style data and pseudo-elements#
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5308
  * CVE-2017-7787 (bmo#1322896)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5309
    Same-origin policy bypass with iframes through page reloads
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5310
  * CVE-2017-7807 (bmo#1376459)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5311
    Domain hijacking through AppCache fallback
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5312
  * CVE-2017-7792 (bmo#1368652)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5313
    Buffer overflow viewing certificates with an extremely long OID
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5314
  * CVE-2017-7804 (bmo#1372849)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5315
    Memory protection bypass through WindowsDllDetourPatcher
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5316
  * CVE-2017-7791 (bmo#1365875)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5317
    Spoofing following page navigation with data: protocol and modal alerts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5318
  * CVE-2017-7808 (bmo#1367531)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5319
    CSP information leak with frame-ancestors containing paths
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5320
  * CVE-2017-7782 (bmo#1344034)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5321
    WindowsDllDetourPatcher allocates memory without DEP protections
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5322
  * CVE-2017-7781 (bmo#1352039)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5323
    Elliptic curve point addition error when using mixed Jacobian-affine coordinates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5324
  * CVE-2017-7794 (bmo#1374281)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5325
    Linux file truncation via sandbox broker
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5326
  * CVE-2017-7803 (bmo#1377426)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5327
    CSP containing 'sandbox' improperly applied
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5328
  * CVE-2017-7799 (bmo#1372509)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5329
    Self-XSS XUL injection in about:webrtc
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5330
  * CVE-2017-7783 (bmo#1360842)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5331
    DOS attack through long username in URL
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5332
  * CVE-2017-7788 (bmo#1073952)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5333
    Sandboxed about:srcdoc iframes do not inherit CSP directives
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5334
  * CVE-2017-7789 (bmo#1074642)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5335
    Failure to enable HSTS when two STS headers are sent for a connection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5336
  * CVE-2017-7790 (bmo#1350460) (Windows-only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5337
    Windows crash reporter reads extra memory for some non-null-terminated registry values
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5338
  * CVE-2017-7796 (bmo#1234401) (Windows-only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5339
    Windows updater can delete any file named update.log
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5340
  * CVE-2017-7797 (bmo#1334776)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5341
    Response header name interning leaks across origins
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5342
  * CVE-2017-7780
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5343
    Memory safety bugs fixed in Firefox 55
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5344
  * CVE-2017-7779
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5345
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3
985
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5346
- updated mozilla-kde.patch:
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5347
  * removed "downloadfinished" alert as Firefox reimplemented the
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5348
    whole thing (TODO: check if there is another function we should
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5349
    hook in)
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5350
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5351
-------------------------------------------------------------------
983
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5352
Tue Jul  4 20:08:47 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5353
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5354
- update to Firefox 54.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5355
  * Fix a display issue of tab title (bmo#1357656)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5356
  * Fix a display issue of opening new tab (bmo#1371995)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5357
  * Fix a display issue when opening multiple tabs (bmo#1371962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5358
  * Fix a tab display issue when downloading files (bmo#1373109)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5359
  * Fix a PDF printing issue (bmo#1366744)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5360
  * Fix a Netflix issue on Linux (bmo#1375708)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5361
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5362
-------------------------------------------------------------------
982
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5363
Thu Jun 15 13:56:05 UTC 2017 - wr@rosenauer.org
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5364
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5365
- update to Firefox 54.0
981
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5366
  * Clearer and more detailed information for download items in the
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5367
    download panel
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5368
  * Added Burmese (my) locale
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5369
  * Bookmarks created on mobile devices are now shown in
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5370
    "Mobile Bookmarks” folder in the drop down list from the toolbar
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5371
    and Bookmarks option in the menu bar in Desktop Firefox
982
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5372
  * added support for multiple content processes (e10s-multi)
979
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5373
- requires NSPR 4.14 and NSS 3.30.2
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5374
- requires rust 1.15.1
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5375
- removed mozilla-shared-nss-db.patch as it seems to be a rather
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5376
  unused feature
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5377
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5378
-------------------------------------------------------------------
977
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5379
Thu Jun  1 04:25:05 UTC 2017 - kah0922@gmail.com
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5380
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5381
- remove -fno-inline-small-functions and explicitely optimize with
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5382
  -O2 for openSUSE > 13.2/Leap 42 to work with gcc7 (boo#1040105)
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5383
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5384
-------------------------------------------------------------------
967
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
  5385
Wed Apr 26 12:37:38 UTC 2017 - wr@rosenauer.org
964
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5386
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5387
- switch to Mozilla's geolocation service (boo#1026989)
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5388
- removed mozilla-preferences.patch obsoleted by overriding via
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5389
  firefox.js
967
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
  5390
- fixed KDE integration to avoid crash caused by filepicker
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
  5391
  (boo#1015998)
964
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5392
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5393
-------------------------------------------------------------------
960
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
  5394
Mon Apr 17 12:52:10 UTC 2017 - wr@rosenauer.org
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
  5395
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
  5396
- update to Firefox 53.0
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5397
  * requires NSS 3.29.5
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5398
  * Lightweight themes are now applied in private browsing windows
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5399
  * Reader Mode now displays estimated reading time for the page
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5400
  * Two new 'compact' themes available in Firefox, dark and light,
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5401
    based on the Firefox Developer Edition theme
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5402
  * Ended Firefox Linux support for processors older than Pentium 4
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5403
    and AMD Opteron
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5404
  * Refresh of the media controls user interface
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5405
  * Shortened titles on tabs are faded out instead of using ellipsis
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5406
    for improved readability
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5407
  * Media playback on new tabs is blocked until the tab is visible
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5408
  * Permission notifications have a cleaner design and cannot be
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5409
    easily missed
962
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5410
  MFSA 2017-10
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5411
  * CVE-2017-5456 (bmo#1344415)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5412
    Sandbox escape allowing local file system access
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5413
  * CVE-2017-5442 (bmo#1347979)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5414
    Use-after-free during style changes
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5415
  * CVE-2017-5443 (bmo#1342661)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5416
    Out-of-bounds write during BinHex decoding
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5417
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5418
     bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5419
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5420
    Firefox ESR 52.1
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5421
  * CVE-2017-5464 (bmo#1347075)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5422
    Memory corruption with accessibility and DOM manipulation
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5423
  * CVE-2017-5465 (bmo#1347617)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5424
    Out-of-bounds read in ConvolvePixel
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5425
  * CVE-2017-5466 (bmo#1353975)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5426
    Origin confusion when reloading isolated data:text/html URL
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5427
  * CVE-2017-5467 (bmo#1347262)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5428
    Memory corruption when drawing Skia content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5429
  * CVE-2017-5460 (bmo#1343642)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5430
    Use-after-free in frame selection
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5431
  * CVE-2017-5461 (bmo#1344380)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5432
    Out-of-bounds write in Base64 encoding in NSS
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5433
  * CVE-2017-5448 (bmo#1346648)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5434
    Out-of-bounds write in ClearKeyDecryptor
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5435
  * CVE-2017-5449 (bmo#1340127)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5436
    Crash during bidirectional unicode manipulation with animation
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5437
  * CVE-2017-5446 (bmo#1343505)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5438
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5439
  * CVE-2017-5447 (bmo#1343552)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5440
    Out-of-bounds read during glyph processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5441
  * CVE-2017-5444 (bmo#1344461)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5442
    Buffer overflow while parsing application/http-index-format content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5443
  * CVE-2017-5445 (bmo#1344467)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5444
    Uninitialized values used while parsing application/http-index-format
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5445
    content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5446
  * CVE-2017-5468 (bmo#1329521)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5447
    Incorrect ownership model for Private Browsing information
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5448
  * CVE-2017-5469 (bmo#1292534)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5449
    Potential Buffer overflow in flex-generated code
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5450
  * CVE-2017-5440 (bmo#1336832)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5451
    Use-after-free in txExecutionState destructor during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5452
  * CVE-2017-5441 (bmo#1343795)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5453
    Use-after-free with selection during scroll events
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5454
  * CVE-2017-5439 (bmo#1336830)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5455
    Use-after-free in nsTArray Length() during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5456
  * CVE-2017-5438 (bmo#1336828)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5457
    Use-after-free in nsAutoPtr during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5458
  * CVE-2017-5437 (bmo#1343453)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5459
    Vulnerabilities in Libevent library
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5460
  * CVE-2017-5436 (bmo#1345461)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5461
    Out-of-bounds write with malicious font in Graphite 2
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5462
  * CVE-2017-5435 (bmo#1350683)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5463
    Use-after-free during transaction processing in the editor
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5464
  * CVE-2017-5434 (bmo#1349946)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5465
    Use-after-free during focus handling
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5466
  * CVE-2017-5433 (bmo#1347168)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5467
    Use-after-free in SMIL animation functions
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5468
  * CVE-2017-5432 (bmo#1346654)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5469
    Use-after-free in text input selection
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5470
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5471
     bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5472
     bmo#1346140, bmo#1346419, bmo#1348143, bmo#1349621,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5473
     bmo#1349719, bmo#1353476)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5474
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5475
  * CVE-2017-5459 (bmo#1333858)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5476
    Buffer overflow in WebGL
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5477
  * CVE-2017-5458 (bmo#1229426)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5478
    Drag and drop of javascript: URLs can allow for self-XSS
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5479
  * CVE-2017-5455 (bmo#1341191)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5480
    Sandbox escape through internal feed reader APIs
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5481
  * CVE-2017-5454 (bmo#1349276)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5482
    Sandbox escape allowing file system read access through file picker
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5483
  * CVE-2017-5451 (bmo#1273537)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5484
    Addressbar spoofing with onblur event
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5485
  * CVE-2017-5453 (bmo#1321247)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5486
    HTML injection into RSS Reader feed preview page through
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5487
    TITLE element
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5488
  * CVE-2017-5462 (bmo#1345089)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5489
    DRBG flaw in NSS
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5490
- removed browser(npapi) provides as these plugins are deprecated
953
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5491
- switch used compiler to gcc5 (FF requires gcc >= 4.9 now) for
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5492
  Leap 42
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5493
- Gtk2 is not longer an option; switched to Gtk3
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5494
- apply MOZ_USE_XINPUT2=1 for better touchpad and touchscreen support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5495
  (boo#1032003)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5496
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5497
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5498
Mon Apr  3 06:16:26 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5499
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5500
- update to Firefox 52.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5501
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5502
  * Fix loading tab icons on session restore (bmo#1338009)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5503
  * Fix a crash on startup on Linux (bmo#1345413)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5504
  * Fix new installs erroneously not prompting to change the default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5505
    browser setting (bmo#1343938)
953
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5506
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5507
-------------------------------------------------------------------
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5508
Mon Mar 20 15:35:57 UTC 2017 - wr@rosenauer.org
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5509
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5510
- disable rust usage for everything but x86(-64)
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5511
- explicitely add libffi build requirement
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5512
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5513
-------------------------------------------------------------------
946
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5514
Fri Mar 17 15:43:29 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5515
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5516
- update to Firefox 52.0.1 (boo#1029822)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5517
  MFSA 2017-08
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5518
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5519
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5520
-------------------------------------------------------------------
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5521
Thu Mar  9 12:30:14 UTC 2017 - wr@rosenauer.org
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5522
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5523
- reenable ALSA support which was removed by default upstream
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5524
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5525
-------------------------------------------------------------------
944
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
  5526
Sat Mar  4 16:57:45 UTC 2017 - wr@rosenauer.org
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
  5527
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5528
- update to Firefox 52.0 (boo#1028391)
944
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
  5529
  * requires NSS >= 3.28.3
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5530
  * Pages containing insecure password fields now display a warning
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5531
    directly within username and password fields.
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5532
  * Send and open a tab from one device to another with Sync
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5533
  * Removed NPAPI support for plugins other than Flash. Silverlight,
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5534
    Java, Acrobat and the like are no longer supported.
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5535
  * Removed Battery Status API to reduce fingerprinting of users by
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5536
    trackers
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5537
  * MFSA 2017-05
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5538
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5539
                   (bmo#1334933)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5540
    CVE-2017-5401: Memory Corruption when handling ErrorResult
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5541
                   (bmo#1328861)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5542
    CVE-2017-5402: Use-after-free working with events in FontFace
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5543
                   objects (bmo#1334876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5544
    CVE-2017-5403: Use-after-free using addRange to add range to an
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5545
                   incorrect root object (bmo#1340186)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5546
    CVE-2017-5404: Use-after-free working with ranges in selections
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5547
                   (bmo#1340138)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5548
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5549
                   (bmo#1306890)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5550
    CVE-2017-5407: Pixel and history stealing via floating-point
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5551
                   timing side channel with SVG filters (bmo#1336622)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5552
    CVE-2017-5410: Memory corruption during JavaScript garbage
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5553
                   collection incremental sweeping (bmo#1330687)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5554
    CVE-2017-5408: Cross-origin reading of video captions in violation
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5555
                   of CORS (bmo#1313711)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5556
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5557
    CVE-2017-5413: Segmentation fault during bidirectional operations
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5558
                   (bmo#1337504)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5559
    CVE-2017-5414: File picker can choose incorrect default directory
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5560
                   (bmo#1319370)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5561
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5562
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5563
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5564
                   (bmo#791597)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5565
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5566
                   seccomp-bpf filter is running (bmo#1257361)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5567
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5568
                   startup (bmo#1295542)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5569
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5570
                   authorization responses (bmo#1338876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5571
    CVE-2017-5419: Repeated authentication prompts lead to DOS
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5572
                   attack (bmo#1312243)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5573
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5574
                   location (bmo#1284395)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5575
    CVE-2017-5405: FTP response codes can cause use of
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5576
                   uninitialized values for ports (bmo#1336699)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5577
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5578
    CVE-2017-5422: DOS attack by using view-source: protocol
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5579
                   repeatedly in one hyperlink (bmo#1295002)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5580
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5581
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5582
                   Firefox ESR 45.8
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5583
- removed obsolete patches
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5584
  * mozilla-binutils-visibility.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5585
  * mozilla-check_return.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5586
  * mozilla-disable-skia-be.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5587
  * mozilla-skia-overflow.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5588
  * mozilla-skia-ppc-endianess.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5589
- rebased patches
943
ace605efe50f latest beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 942
diff changeset
  5590
- enable rust usage for Tumbleweed
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5591
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5592
-------------------------------------------------------------------
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5593
Fri Jan 27 20:25:59 UTC 2017 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5594
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5595
- Mozilla Firefox 51.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5596
  - Multiprocess incompatibility did not correctly register with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5597
    some add-ons (bmo#1333423)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5598
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5599
-------------------------------------------------------------------
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5600
Fri Jan 20 13:57:56 UTC 2017 - wr@rosenauer.org
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5601
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5602
- update to Firefox 51.0
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5603
  * requires NSPR >= 4.13.1, NSS >= 3.28.1
936
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5604
  * Added support for FLAC (Free Lossless Audio Codec) playback
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5605
  * Added support for WebGL 2
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5606
  * Added Georgian (ka) and Kabyle (kab) locales
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5607
  * Support saving passwords for forms without 'submit' events
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5608
  * Improved video performance for users without GPU acceleration
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5609
  * Zoom indicator is shown in the URL bar if the zoom level is not
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5610
    at default level
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5611
  * View passwords from the prompt before saving them
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5612
  * Remove Belarusian (be) locale
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5613
  * Use Skia for content rendering (Linux)
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5614
  * MFSA 2017-01
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5615
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5616
                   ASLR and DEP (bmo#1325200, boo#1021814)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5617
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5618
    CVE-2017-5377: Memory corruption with transforms to create
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5619
                   gradients in Skia (bmo#1306883, boo#1021826)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5620
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5621
                   (bmo#1312001, bmo#1330769, boo#1021818)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5622
    CVE-2017-5379: Use-after-free in Web Animations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5623
                   (bmo#1309198,boo#1021827)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5624
    CVE-2017-5380: Potential use-after-free during DOM manipulations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5625
                   (bmo#1322107, boo#1021819)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5626
    CVE-2017-5390: Insecure communication methods in Developer Tools
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5627
                   JSON viewer (bmo#1297361, boo#1021820)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5628
    CVE-2017-5389: WebExtensions can install additional add-ons via
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5629
                   modified host requests (bmo#1308688, boo#1021828)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5630
    CVE-2017-5396: Use-after-free with Media Decoder
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5631
                   (bmo#1329403, boo#1021821)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5632
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5633
                   and save to arbitrary filesystem locations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5634
		   (bmo#1017616, boo#1021830)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5635
    CVE-2017-5382: Feed preview can expose privileged content errors
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5636
                   and exceptions (bmo#1295322, boo#1021831)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5637
    CVE-2017-5383: Location bar spoofing with unicode characters
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5638
                   (bmo#1323338, bmo#1324716, boo#1021822)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5639
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5640
                   (bmo#1255474, boo#1021832)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5641
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5642
                   response headers (bmo#1295945, boo#1021833)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5643
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5644
                   extensions (bmo#1319070, boo#1021823)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5645
    CVE-2017-5394: Android location bar spoofing using fullscreen and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5646
                   JavaScript events (bmo#1222798)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5647
    CVE-2017-5391: Content about: pages can load privileged about: pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5648
                   (bmo#1309310, boo#1021835)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5649
    CVE-2017-5392: Weak references using multiple threads on weak proxy
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5650
                   objects lead to unsafe memory usage (bmo#1293709)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5651
		   (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5652
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5653
                   mozAddonManager (bmo#1309282, boo#1021837)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5654
    CVE-2017-5395: Android location bar spoofing during scrolling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5655
                   (bmo#1293463) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5656
    CVE-2017-5387: Disclosure of local file existence through TRACK
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5657
                   tag error messages (bmo#1295023, boo#1021839)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5658
    CVE-2017-5388: WebRTC can be used to generate a large amount of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5659
                   UDP traffic for DDOS attacks
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5660
		   (bmo#1281482, boo#1021840)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5661
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5662
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5663
                   Firefox ESR 45.7 (boo#1021824)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5664
- switch Firefox to Gtk3 for Tumbleweed
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5665
- removed obsolete patches
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5666
  * mozilla-flex_buffer_overrun.patch
939
3604ed712e16 51.0 as submitted to official openSUSE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 938
diff changeset
  5667
- updated RPM locale support tag
3604ed712e16 51.0 as submitted to official openSUSE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 938
diff changeset
  5668
- improve recognition of LANGUAGE env variable (boo#1017174)
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5669
- add upstream patch to fix PPC64LE (bmo#1319389)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5670
  (mozilla-skia-ppc-endianess.patch)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5671
- fix build without skia (big endian archs) (bmo#1319374)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5672
  (mozilla-disable-skia-be.patch)
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5673
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5674
-------------------------------------------------------------------
933
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5675
Mon Dec 12 21:18:41 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5676
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5677
- update to Firefox 50.1.0 (boo#1015422)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5678
  * MFSA 2016-94
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5679
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5680
    CVE-2016-9899: Use-after-free while manipulating DOM events and
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5681
                   audio elements (bmo#1317409)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5682
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5683
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5684
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5685
    CVE-2016-9898: Use-after-free in Editor while manipulating
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5686
                   DOM subtrees (bmo#1314442)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5687
    CVE-2016-9900: Restricted external resources can be loaded by
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5688
                   SVG images through data URLs (bmo#1319122)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5689
    CVE-2016-9904: Cross-origin information leak in shared atoms
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5690
                   (bmo#1317936)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5691
    CVE-2016-9901: Data from Pocket server improperly sanitized
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5692
                   before execution (bmo#1320057)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5693
    CVE-2016-9902: Pocket extension does not validate the origin
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5694
                   of events (bmo#1320039)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5695
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5696
                   (bmo#1315435)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5697
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5698
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5699
                   Firefox ESR 45.6
933
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5700
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5701
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5702
Fri Dec  9 17:57:22 UTC 2016 - cgrobertson@novell.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5703
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5704
- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5705
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5706
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5707
Thu Dec  1 02:49:45 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5708
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5709
- update to Firefox 50.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5710
  * Firefox crashes with 3rd party Chinese IME when using IME text
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5711
    (50.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5712
  security fixes (in 50.0.1): (boo#1012807)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5713
  * MFSA 2016-91
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5714
    CVE-2016-9078: data: URL can inherit wrong origin after an
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5715
                   HTTP redirect (bmo#1317641)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5716
  security fixes (in 50.0.2) (boo#1012964)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5717
  * MFSA 2016-92
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5718
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5719
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5720
-------------------------------------------------------------------
932
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5721
Mon Nov 14 21:07:03 UTC 2016 - wr@rosenauer.org
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5722
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5723
- update to Firefox 50.0 (boo#1009026)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5724
  * requires NSS 3.26.2
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5725
  new features
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5726
  * Updates to keyboard shortcuts
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5727
    Set a preference to have Ctrl+Tab cycle through tabs in recently
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5728
    used order
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5729
    View a page in Reader Mode by using Ctrl+Alt+R
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5730
  * Added option to Find in page that allows users to limit search to
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5731
    whole words only
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5732
  * Added download protection for a large number of executable file
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5733
    types on Windows, Mac and Linux
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5734
  * Fixed rendering of dashed and dotted borders with rounded corners
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5735
    (border-radius)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5736
  * Added a built-in Emoji set for operating systems without native
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5737
    Emoji fonts (Windows 8.0 and lower and Linux)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5738
  * Blocked versions of libavcodec older than 54.35.1
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5739
  * additional locale
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5740
  security fixes:
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5741
  * MFSA 2016-89
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5742
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5743
                   (bmo#1292443)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5744
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5745
    CVE-2016-5293: Write to arbitrary file with updater and moz
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5746
                   maintenance service using updater.log hardlink
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5747
		   (Windows only) (bmo#1246945)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5748
    CVE-2016-5294: Arbitrary target directory for result files of
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5749
                   update process (Windows only) (bmo#1246972)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5750
    CVE-2016-5297: Incorrect argument length checking in Javascript
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5751
                   (bmo#1303678)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5752
    CVE-2016-9064: Addons update must verify IDs match between
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5753
                   current and new versions (bmo#1303418)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5754
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5755
                   (Android only) (bmo#1306696)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5756
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5757
                   nsScriptLoadHandler (bmo#1299686)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5758
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5759
                   (bmo#1301777, bmo#1308922 (CVE-2016-9069))
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5760
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5761
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5762
                   (bmo#1300083) (Windows only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5763
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5764
                   and use it to gain elevated privileges (bmo#1295324)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5765
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5766
                   to cross-origin images, allowing timing attacks on them
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5767
		   (bmo#1298552)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5768
    CVE-2016-5291: Same-origin policy violation using local HTML file
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5769
                    and saved shortcut file (bmo#1292159)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5770
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5771
                   arbitrary files as SYSTEM (Windows only) (bmo#1247239)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5772
    CVE-2016-5298: SSL indicator can mislead the user about the real
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5773
                   URL visited (bmo#1227538) (Android only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5774
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5775
                   signature-level permission can be accessed by an
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5776
		   application installed beforehand that defines the
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5777
		   same permissions (bmo#1245791) (Android only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5778
    CVE-2016-9061: API Key (glocation) in broadcast protected with
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5779
                   signature-level permission can be accessed by an
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5780
		   application installed beforehand that defines the
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5781
		   same permissions (Android only) (bmo#1245795)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5782
    CVE-2016-9062: Private browsing browser traces (android) in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5783
                   browser.db and wal file (Android only) (bmo#1294438)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5784
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5785
                   (bmo#1281071)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5786
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5787
                   (bmo#1289273)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5788
    CVE-2016-9074: Insufficient timing side-channel resistance in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5789
                   divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5790
    CVE-2016-9076: select dropdown menu can be used for URL bar
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5791
                   spoofing on e10s (bmo#1276976)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5792
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5793
                   in expat (bmo#1274777)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5794
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5795
                   (bmo#1285003)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5796
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5797
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5798
- make aarch64 build more similar to x86_64 build (remove conditionals
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5799
  that don't seem to be necessary anymore)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5800
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5801
-------------------------------------------------------------------
931
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5802
Mon Oct 24 09:41:17 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5803
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5804
- Mozilla Firefox 49.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5805
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5806
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5807
  * Asynchronous rendering of the Flash plugins is now enabled by
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5808
    default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5809
  * Change D3D9 default fallback preference to prevent graphical
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5810
    artifacts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5811
  * Network issue prevents some users from seeing the Firefox UI on
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5812
    startup
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5813
  * Web compatibility issue with file uploads
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5814
  * Web compatibility issue with Array.prototype.values
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5815
  * Diagnostic information on timing for tab switching
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5816
  * Fix a Canvas filters graphics issue affecting HTML5 apps
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5817
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5818
-------------------------------------------------------------------
930
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5819
Wed Oct 12 20:42:28 UTC 2016 - badshah400@gmail.com
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5820
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5821
- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5822
  and fixes have been incorporated by upstream.
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5823
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5824
-------------------------------------------------------------------
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5825
Fri Sep 23 20:36:39 UTC 2016 - astieger@suse.com
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5826
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5827
- Mozilla Firefox 49.0.1:
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5828
  * Mitigate a startup crash issue caused by Websense - bmo#1304783
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5829
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5830
-------------------------------------------------------------------
929
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5831
Tue Sep 20 07:09:52 UTC 2016 - wr@rosenauer.org
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5832
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5833
- update to Firefox 49.0 (boo#999701)
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5834
  new features
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5835
  * Updated Firefox Login Manager to allow HTTPS pages to use saved
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5836
    HTTP logins.
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5837
  * Added features to Reader Mode that make it easier on the eyes and
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5838
    the ears
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5839
  * Improved video performance for users on systems that support
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5840
    SSE3 without hardware acceleration
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5841
  * Added context menu controls to HTML5 audio and video that let users
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5842
    loops files or play files at 1.25x speed
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5843
  * Improvements in about:memory reports for tracking font memory usage
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5844
  security related
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5845
  * MFSA 2016-85
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5846
    CVE-2016-2827 (bmo#1289085) - Out-of-bounds read in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5847
    mozilla::net::IsValidReferrerPolicy
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5848
    CVE-2016-5270 (bmo#1291016) - Heap-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5849
    nsCaseTransformTextRunFactory::TransformString
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5850
    CVE-2016-5271 (bmo#1288946) - Out-of-bounds read in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5851
    PropertyProvider::GetSpacingInternal
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5852
    CVE-2016-5272 (bmo#1297934) - Bad cast in nsImageGeometryMixin
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5853
    CVE-2016-5273 (bmo#1280387) - crash in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5854
    mozilla::a11y::HyperTextAccessible::GetChildOffset
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5855
    CVE-2016-5276 (bmo#1287721) - Heap-use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5856
    mozilla::a11y::DocAccessible::ProcessInvalidationList
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5857
    CVE-2016-5274 (bmo#1282076) - use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5858
    nsFrameManager::CaptureFrameState
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5859
    CVE-2016-5277 (bmo#1291665) - Heap-use-after-free in nsRefreshDriver::Tick
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5860
    CVE-2016-5275 (bmo#1287316) - global-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5861
    mozilla::gfx::FilterSupport::ComputeSourceNeededRegions
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5862
    CVE-2016-5278 (bmo#1294677) - Heap-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5863
    nsBMPEncoder::AddImageFrame
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5864
    CVE-2016-5279 (bmo#1249522) - Full local path of files is available
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5865
    to web pages after drag and drop
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5866
    CVE-2016-5280 (bmo#1289970) - Use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5867
    mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5868
    CVE-2016-5281 (bmo#1284690) - use-after-free in DOMSVGLength
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5869
    CVE-2016-5282 (bmo#932335) - Don't allow content to request favicons
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5870
    from non-whitelisted schemes
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5871
    CVE-2016-5283 (bmo#928187) - <iframe src> fragment timing attack can
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5872
    reveal cross-origin data
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5873
    CVE-2016-5284 (bmo#1303127) - Add-on update site certificate pin expiration
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5874
    CVE-2016-5256 - Memory safety bugs fixed in Firefox 49
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5875
    CVE-2016-5257 - Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5876
- removed obsolete patches:
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5877
  * mozilla-aarch64-48bit-va.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5878
  * mozilla-exclude-nametablecpp.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5879
  * mozilla-old_configure-bmo1282843.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5880
- added patch mozilla-skia-overflow.patch (bmo#1304114)
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5881
- requires NSS 3.25
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5882
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5883
-------------------------------------------------------------------
928
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5884
Tue Aug 30 20:25:38 UTC 2016 - astieger@suse.com
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5885
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5886
- Mozilla Firefox 48.0.2:
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5887
  * Mitigate a startup crash issue caused on Windows (bmo#1291738)
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5888
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5889
-------------------------------------------------------------------
927
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5890
Sat Aug 20 10:58:26 UTC 2016 - astieger@suse.com
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5891
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5892
- Mozilla Firefox 48.0.1:
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5893
  * Fix an audio regression impacting some major websites
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5894
    (bmo#1295296)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5895
  * Fix a top crash in the JavaScript engine (bmo#1290469)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5896
  * Fix a startup crash issue caused by Websense (bmo#1291738)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5897
  * Fix a different behavior with e10s / non-e10s on <select> and
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5898
    mouse events (bmo#1291078)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5899
  * Fix a top crash caused by plugin issues (bmo#1264530)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5900
  * Fix a shutdown issue (bmo#1276920)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5901
  * Fix a crash in WebRTC
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5902
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5903
-------------------------------------------------------------------
925
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5904
Mon Aug 15 11:24:00 UTC 2016 - wr@rosenauer.org
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5905
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5906
- added upstream patch so system plugins/extensions are correctly
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5907
  loaded again on x86-64 (bmo#1282843)
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5908
  (mozilla-old_configure-bmo1282843.patch)
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5909
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5910
-------------------------------------------------------------------
926
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5911
Fri Aug  5 13:47:12 UTC 2016 - pcerny@suse.com
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5912
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5913
- Fix for possible buffer overrun (bsc#990856)
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5914
  CVE-2016-6354 (bmo#1292534)
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5915
  [mozilla-flex_buffer_overrun.patch]
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5916
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5917
-------------------------------------------------------------------
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5918
Wed Aug  3 03:38:47 UTC 2016 - badshah400@gmail.com
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5919
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5920
- Update mozilla-gtk3_20.patch to latest version from Fedora.
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5921
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5922
-------------------------------------------------------------------
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5923
Mon Aug  1 12:37:05 UTC 2016 - wr@rosenauer.org
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5924
924
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5925
- update to Firefox 48.0 (boo#991809)
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5926
  * requires NSS 3.24
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5927
  * Process separation (e10s) is enabled for some of you
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5928
  * Add-ons that have not been verified and signed by Mozilla will not load
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5929
  * WebRTC embetterments
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5930
  * The media parser has been redeveloped using the Rust programming
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5931
    language
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5932
  * better Canvas performance with speedy Skia support
924
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5933
  security fixes:
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5934
  * MFSA 2016-62/CVE-2016-2835/CVE-2016-2836
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5935
    Miscellaneous memory safety hazards
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5936
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5937
    Favicon network connection can persist when page is closed
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5938
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5939
    Buffer overflow rendering SVG with bidirectional content
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5940
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5941
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5942
  * MFSA 2016-66/CVE-2016-5251 (bmo#1255570)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5943
    Location bar spoofing via data URLs with malformed/invalid mediatypes
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5944
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5945
    Stack underflow during 2D graphics rendering
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5946
  * MFSA 2016-68/CVE-2016-0718 (bmo#1236923)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5947
    Out-of-bounds read during XML parsing in Expat library
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5948
  * MFSA 2016-69/CVE-2016-5253 (bmo#1246944)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5949
    Arbitrary file manipulation by local user through Mozilla updater
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5950
    and callback application path parameter (Windows-only)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5951
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5952
    Use-after-free when using alt key and toplevel menus
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5953
  * MFSA 2016-71/CVE-2016-5255 (bmo#1212356)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5954
    Crash in incremental garbage collection in JavaScript
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5955
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5956
    Use-after-free in DTLS during WebRTC session shutdown
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5957
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5958
    Use-after-free in service workers with nested sync events
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5959
  * MFSA 2016-74/CVE-2016-5260 (bmo#1280294)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5960
    Form input type change from password to text can store plain
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5961
    text password in session restore file
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5962
  * MFSA 2016-75/CVE-2016-5261 (bmo#1287266)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5963
    Integer overflow in WebSockets during data buffering
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5964
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5965
    Scripts on marquee tag can execute in sandboxed iframes
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5966
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5967
    Buffer overflow in ClearKey Content Decryption Module (CDM)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5968
    during video playback
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5969
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5970
    Type confusion in display transformation
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5971
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5972
    Use-after-free when applying SVG effects
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5973
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5974
    Same-origin policy violation using local HTML file and saved shortcut file
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5975
  * MFSA 2016-81/CVE-2016-5266 (bmo#1226977)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5976
    Information disclosure and local file manipulation through drag and drop
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5977
  * MFSA 2016-82/CVE-2016-5267 (bmo#1284372)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5978
    Addressbar spoofing with right-to-left characters on Firefox for Android
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5979
    (Android only)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5980
  * MFSA 2016-83/CVE-2016-5268 (bmo#1253673)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5981
    Spoofing attack through text injection into internal error pages
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5982
  * MFSA 2016-84/CVE-2016-5250 (bmo#1254688)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5983
    Information disclosure through Resource Timing API during page navigation
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5984
- removed obsolete mozilla-gcc6.patch
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5985
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5986
-------------------------------------------------------------------
921
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5987
Fri Jul 29 01:26:13 UTC 2016 - badshah400@gmail.com
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5988
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5989
- Update description and screenshots in appdata.xml file.
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5990
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5991
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5992
Sat Jul 23 20:13:08 UTC 2016 - antoine.belvire@laposte.net
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5993
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5994
- Fix Firefox crash on startup on i586 (boo#986541):
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5995
  * Add -fno-delete-null-pointer-checks and
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5996
    -fno-inline-small-functions to CFLAGS
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5997
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5998
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5999
Tue Jul 19 20:12:11 UTC 2016 - mailaender@opensuse.org
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6000
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6001
- Update the appdata.xml file (replace Windows XP screenshot)
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6002
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6003
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6004
Wed Jun 29 09:25:41 UTC 2016 - astieger@suse.com
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6005
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6006
- Mozilla Firefox 47.0.1:
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6007
  * Selenium WebDriver may cause Firefox to crash at startup
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6008
    (bmo#1280854)
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6009
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6010
-------------------------------------------------------------------
920
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  6011
Wed Jun 15 07:52:18 UTC 2016 - wr@rosenauer.org
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  6012
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  6013
- mozilla-binutils-visibility.patch to fix build issues with
921
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  6014
  gcc/binutils combination used in Leap 42.2 (boo#984637)
920
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  6015
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  6016
-------------------------------------------------------------------
919
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6017
Tue Jun 14 08:35:03 UTC 2016 - badshah400@gmail.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6018
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6019
- Update mozilla-gtk3_20.patch to latest version from Fedora.
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6020
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6021
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6022
Mon Jun 13 20:28:01 UTC 2016 - agraf@suse.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6023
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6024
- Fix running on 48bit va aarch64 (bsc#984126)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6025
  * add patch mozilla-aarch64-48bit-va.patch
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6026
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6027
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6028
Mon Jun 13 15:27:13 UTC 2016 - wr@rosenauer.org
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6029
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6030
- fix XUL dialog button order under KDE session (boo#984403)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6031
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  6032
-------------------------------------------------------------------
916
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6033
Tue Jun  7 19:47:25 UTC 2016 - wr@rosenauer.org
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6034
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6035
- update to Firefox 47.0 (boo#983549)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6036
  * Enable VP9 video codec for users with fast machines
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6037
  * Embedded YouTube videos now play with HTML5 video if Flash is
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6038
    not installed
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6039
  * View and search open tabs from your smartphone or another
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6040
    computer in a sidebar
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6041
  * Allow no-cache on back/forward navigations for https resources
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6042
  security fixes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6043
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6044
    (boo#983638)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6045
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6046
     bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6047
     bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6048
     bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6049
     bmo#1269729, bmo#1273202, bmo#1273701)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6050
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6051
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6052
    Buffer overflow parsing HTML5 fragments
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6053
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6054
    Use-after-free deleting tables from a contenteditable document
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6055
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6056
    Addressbar spoofing though the SELECT element
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6057
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6058
    Out-of-bounds write with WebGL shader
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6059
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6060
    Partial same-origin-policy through setting location.host
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6061
    through data URI
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6062
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6063
    Use-after-free when textures are used in WebGL operations
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6064
    after recycle pool destruction
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6065
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6066
    Incorrect icon displayed on permissions notifications
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6067
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6068
    Entering fullscreen and persistent pointerlock without user
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6069
    permission
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6070
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6071
    Information disclosure of disabled plugins through CSS
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6072
    pseudo-classes
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6073
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6074
    Java applets bypass CSP protections
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6075
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6076
    bmo#1221620, bmo#1241034, bmo#1241037)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6077
    Network Security Services (NSS) vulnerabilities
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6078
    fixed by requiring NSS 3.23
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6079
  packaging changes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6080
  * cleanup configure options (boo#981695):
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6081
    - notably remove GStreamer support which is gone from FF
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6082
  * remove obsolete patches
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6083
    - mozilla-libproxy.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6084
    - mozilla-repo.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6085
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6086
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6087
Wed May 25 16:36:23 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6088
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6089
- The conditional testing for gcc was failing for different
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6090
  openSUSE versions, drop it and apply patches unconditionally.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6091
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6092
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6093
Mon May 23 15:30:27 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6094
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6095
- Add patches to fix building with gcc6:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6096
  + mozilla-gcc6.patch: fix building with gcc >= 6.1; patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6097
    taken from upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6098
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6099
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6100
    from unified compilation because #include <cmath> in other
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6101
    source files causes gcc6 compilation failure; patch taken from
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6102
    upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6103
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6104
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6105
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6106
Fri May 13 00:00:00 CEST 2016 - dsterba@suse.cz
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6107
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6108
- enable build with PIE and full relro on x86_64 (boo#980384)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6109
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  6110
-------------------------------------------------------------------
914
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6111
Wed May  4 10:27:43 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6112
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6113
- update to Firefox 46.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6114
  Fixed:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6115
  * Search plugin issue for various locales
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6116
  * Add-on signing certificate expiration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6117
  * Service worker update issue
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6118
  * Build issue when jit is disabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6119
  * Limit Sync registration updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6120
- removed now obsolete mozilla-jit_branch64.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6121
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6122
-------------------------------------------------------------------
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6123
Tue May  3 15:47:18 UTC 2016 - normand@linux.vnet.ibm.com
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6124
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6125
- add mozilla-jit_branch64.patch to avoid PowerPC build failure
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6126
  (from bmo#1266366)
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6127
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6128
-------------------------------------------------------------------
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6129
Wed Apr 27 08:39:28 UTC 2016 - badshah400@gmail.com
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6130
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6131
- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6132
  version from Fedora).
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6133
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6134
-------------------------------------------------------------------
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6135
Wed Apr 27 06:09:30 UTC 2016 - wr@rosenauer.org
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6136
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6137
- update to Firefox 46.0 (boo#977333)
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6138
  * Improved security of the JavaScript Just In Time (JIT) Compiler
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6139
  * WebRTC fixes to improve performance and stability
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6140
  * Added support for document.elementsFromPoint
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6141
  * Added HKDF support for Web Crypto API
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6142
  * requires NSPR 4.12 and NSS 3.22.3
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6143
  * added patch to fix unchecked return value
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6144
    mozilla-check_return.patch
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6145
  * Gtk3 builds not supported at the moment
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6146
  security fixes:
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6147
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6148
    (boo#977373, boo#977375, boo#977376)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6149
    Miscellaneous memory safety hazards
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6150
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6151
    Privilege escalation through file deletion by Maintenance Service updater
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6152
    (Windows only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6153
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6154
    Content provider permission bypass allows malicious application
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6155
    to access data (Android only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6156
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6157
    (bmo#1252330, bmo#1261776, boo#977379)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6158
    Use-after-free and buffer overflow in Service Workers
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6159
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6160
    Disclosure of user actions through JavaScript with motion and
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6161
    orientation sensors (only affects mobile variants)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6162
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6163
    Buffer overflow in libstagefright with CENC offsets
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6164
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6165
    CSP not applied to pages sent with multipart/x-mixed-replace
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6166
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6167
    Elevation of privilege with chrome.tabs.update API in web extensions
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6168
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6169
    Write to invalid HashMap entry through JavaScript.watch()
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6170
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6171
    Firefox Health Reports could accept events from untrusted domains
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6172
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6173
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6174
Thu Apr 21 12:00:28 UTC 2016 - badshah400@gmail.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6175
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6176
- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6177
  gtk >= 3.20 (patch synced to Fedora's version).
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6178
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6179
-------------------------------------------------------------------
907
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6180
Tue Apr 12 19:11:30 UTC 2016 - badshah400@gmail.com
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6181
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6182
- Compile against gtk3 depending on whether the macro
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6183
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6184
  level); macro is undefined by default and so gtk2 is used as the
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6185
  default toolkit.
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6186
- Add BuildRequires for additional packages needed when building
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6187
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6188
  pkgconfig(gtk+-3.0) >= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6189
- Add firefox-gtk3_20.patch to fix appearance with gtk3 >= 3.20;
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6190
  patch taken from Fedora (bmo#1230955).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6191
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6192
-------------------------------------------------------------------
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6193
Mon Apr 11 22:49:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6194
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6195
- Mozilla Firefox 45.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6196
  * Fix an issue impacting the cookie header when third-party
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6197
    cookies are blocked (bmo#1257861)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6198
  * Fix a web compatibility regression impacting the srcset
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6199
    attribute of the image tag (bmo#1259482)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6200
  * Fix a crash impacting the video playback with Media Source
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6201
    Extension (bmo#1258562)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6202
  * Fix a regression impacting some specific uploads (bmo#1255735)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6203
  * Fix a regression with the copy and paste with some old versions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6204
    of some Gecko applications like Thunderbird (bmo#1254980)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6205
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6206
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6207
Fri Mar 18 08:52:58 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6208
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6209
- Mozilla Firefox 45.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6210
  * Fix a regression causing search engine settings to be lost in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6211
    some context (bmo#1254694)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6212
  * Bring back non-standard jar: URIs to fix a regression in IBM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6213
    iNotes (bmo#1255139)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6214
  * XSLTProcessor.importStylesheet was failing when <import> was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6215
    used (bmo#1249572)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6216
  * Fix an issue which could cause the list of search provider to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6217
    be empty (bmo#1255605)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6218
  * Fix a regression when using the location bar (bmo#1254503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6219
  * Fix some loading issues when Accept third-party cookies: was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6220
    set to Never (bmo#1254856)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6221
  * Disabled Graphite font shaping library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6222
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6223
-------------------------------------------------------------------
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6224
Sun Mar  6 19:52:13 UTC 2016 - wr@rosenauer.org
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6225
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6226
- update to Firefox 45.0 (boo#969894)
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6227
  * requires NSPR 4.12 / NSS 3.21.1
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6228
  * Instant browser tab sharing through Hello
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6229
  * Synced Tabs button in button bar
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6230
  * Tabs synced via Firefox Accounts from other devices are now shown
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6231
    in dropdown area of Awesome Bar when searching
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6232
  * Introduce a new preference (network.dns.blockDotOnion) to allow
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6233
    blocking .onion at the DNS level
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6234
  * Tab Groups (Panorama) feature removed
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6235
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6236
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6237
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6238
    Local file overwriting and potential privilege escalation through
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6239
    CSP reports
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6240
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6241
    CSP reports fail to strip location information for embedded iframe pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6242
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6243
    Linux video memory DOS with Intel drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6244
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6245
    Memory leak in libstagefright when deleting an array during MP4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6246
    processing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6247
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6248
    Displayed page address can be overridden
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6249
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6250
    Service Worker Manager out-of-bounds read in Service Worker Manager
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6251
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6252
    Use-after-free in HTML5 string parser
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6253
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6254
    Use-after-free in SetBody
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6255
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6256
    Use-after-free when using multiple WebRTC data channels
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6257
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6258
    Memory corruption when modifying a file being read by FileReader
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6259
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6260
    Use-after-free during XML transformations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6261
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6262
    Addressbar spoofing though history navigation and Location protocol
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6263
    property
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6264
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6265
    Same-origin policy violation using perfomance.getEntries and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6266
    history navigation with session restore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6267
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6268
    Buffer overflow in Brotli decompression
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6269
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6270
    Memory corruption with malicious NPAPI plugin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6271
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6272
    CVE-2016-1976/CVE-2016-1972
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6273
    WebRTC and LibVPX vulnerabilities found through code inspection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6274
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6275
    Use-after-free in GetStaticInstance in WebRTC
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6276
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6277
    Out-of-bounds read in HTML parser following a failed allocation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6278
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6279
    Buffer overflow during ASN.1 decoding in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6280
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6281
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6282
    Use-after-free during processing of DER encoded keys in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6283
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6284
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6285
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6286
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6287
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6288
    Font vulnerabilities in the Graphite 2 library
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6289
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6290
-------------------------------------------------------------------
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6291
Sat Mar  5 15:27:00 UTC 2016 - olaf@aepfle.de
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6292
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6293
- Remove B_CNT from symbols.zip filename to reduce build-compare noise
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6294
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6295
-------------------------------------------------------------------
903
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6296
Fri Feb 26 16:22:52 UTC 2016 - astieger@suse.com
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6297
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6298
- fix build problems on i586, caused by too large unified compile
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6299
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6300
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6301
-------------------------------------------------------------------
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6302
Thu Feb 11 07:51:34 UTC 2016 - wr@rosenauer.org
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6303
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6304
- update to Firefox 44.0.2
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6305
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6306
    Same-origin-policy violation using Service Workers with plugins
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6307
  * Fix issue which could lead to the removal of stored passwords
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6308
    under certain circumstances (bmo#1242176)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6309
  * Allows spaces in cookie names (bmo#1244505)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6310
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6311
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6312
  * Fix a crash in cache networking (bmo#1244076)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6313
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6314
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6315
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6316
Sat Jan 30 08:28:17 UTC 2016 - dmueller@suse.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6317
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6318
- build fixes for arm/aarch64:
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6319
  * disable webrtc for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6320
  * switch away from openGL-ES backend to default for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6321
   since it almost never builds
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6322
  * reenable neon
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6323
- reenable webrtc for powerpc as it seems to build
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6324
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6325
-------------------------------------------------------------------
900
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
  6326
Sun Jan 24 09:33:15 UTC 2016 - wr@rosenauer.org
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
  6327
902
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6328
- update to Firefox 44.0
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6329
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6330
    Miscellaneous memory safety hazards
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6331
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6332
    Out of Memory crash when parsing GIF format images
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6333
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6334
    Buffer overflow in WebGL after out of memory allocation
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6335
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6336
    Firefox allows for control characters to be set in cookie names
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6337
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6338
    Missing delay following user click events in protocol handler dialog
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6339
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6340
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6341
    (fixed by requiring NSS 3.21)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6342
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6343
    Addressbar spoofing attacks boo#963643
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6344
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6345
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6346
    Unsafe memory manipulation found through code inspection
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6347
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6348
    Application Reputation service disabled in Firefox 43
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6349
  * requires NSPR 4.11
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6350
  * requires NSS 3.21
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
  6351
- prepare mozilla-kde.patch for Gtk3 builds
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6352
- rebased patches
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
  6353
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
  6354
-------------------------------------------------------------------
897
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6355
Mon Jan 11 08:04:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6356
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6357
- Mozilla Firefox 43.0.4:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6358
  * Re-enable SHA-1 certificates to prevent outdated
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6359
    man-in-the-middle security devices from interfering with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6360
    properly secured SSL/TLS connections (bmo#1236975)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6361
  * Fix for startup crash for users of a third party antivirus tool
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6362
    (bmo#1235537)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6363
- The following change was previously in the package as a patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6364
  * Multi-user GNU/Linux download folders can be created
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6365
   (bmo#1233434), removed mozilla-bmo1233434.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6366
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6367
-------------------------------------------------------------------
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
  6368
Tue Dec 29 20:29:35 UTC 2015 - wr@rosenauer.org
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6369
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6370
- update to Firefox 43.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6371
  * requires NSS 3.20.2 to fix
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6372
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6373
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6374
    server signature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6375
  * various changes to support Windows update (SHA-1 vs. SHA-2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6376
  * workaround Youtube user agent detection issue (bmo#1233970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6377
- fix file download regression for multi user systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6378
  (bmo#1233434) (mozilla-bmo1233434.patch)
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
  6379
- explicitely requires libXcomposite-devel
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6380
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6381
-------------------------------------------------------------------
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6382
Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6383
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6384
- update to Firefox 43.0 (bnc#959277)
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6385
  * Improved API support for m4v video playback
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6386
  * Users can opt-in to receive search suggestions from the Awesome Bar
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6387
  * WebRTC streaming on multiple monitors
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6388
  * User selectable second block list for Private Browsing's Tracking
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6389
    Protection
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6390
  security fixes:
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6391
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6392
    Miscellaneous memory safety hazards
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6393
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6394
    Crash with JavaScript variable assignment with unboxed objects
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6395
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6396
    Same-origin policy violation using perfomance.getEntries and
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6397
    history navigation
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6398
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6399
    Firefox allows for control characters to be set in cookies
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6400
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6401
    Use-after-free in WebRTC when datachannel is used after being
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6402
    destroyed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6403
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6404
    Integer overflow allocating extremely large textures
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6405
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6406
    Cross-origin information leak through web workers error events
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6407
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6408
    Hash in data URI is incorrectly parsed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6409
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6410
    DOS due to malformed frames in HTTP/2
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6411
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6412
    Linux file chooser crashes on malformed images due to flaws in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6413
    Jasper library
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6414
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6415
    (bmo#1201183, bmo#1178033, bmo#1199400)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6416
    Buffer overflows found through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6417
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6418
    Underflow through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6419
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6420
    Integer overflow in MP4 playback in 64-bit versions
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6421
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6422
    Integer underflow and buffer overflow processing MP4 metadata in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6423
    libstagefright
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6424
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6425
    Privilege escalation vulnerabilities in WebExtension APIs
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6426
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6427
    Cross-site reading attack through data and view-source URIs
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6428
- rebased patches
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6429
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6430
-------------------------------------------------------------------
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6431
Sun Nov 15 19:52:20 UTC 2015 - wr@rosenauer.org
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6432
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6433
- Add desktop menu action for private browsing window to desktop
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6434
  file (boo#954747)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6435
- remove obsolete patch mozilla-bmo1005535.patch completely from
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6436
  source package to avoid automatic check failures
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6437
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6438
-------------------------------------------------------------------
885
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6439
Sat Oct 31 19:50:03 UTC 2015 - wr@rosenauer.org
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6440
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6441
- update to Firefox 42.0 (bnc#952810)
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6442
  * Private Browsing with Tracking Protection blocks certain Web
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6443
    elements that could be used to record your behavior across sites
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6444
  * Control Center that contains site security and privacy controls
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6445
  * Login Manager improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6446
  * WebRTC improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6447
  * Indicator added to tabs that play audio with one-click muting
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6448
  * Media Source Extension for HTML5 video available for all sites
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6449
  security fixes:
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6450
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6451
    Miscellaneous memory safety hazards
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6452
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6453
    Information disclosure through NTLM authentication
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6454
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6455
    CSP bypass due to permissive Reader mode whitelist
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6456
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6457
    Firefox for Android addressbar can be removed after fullscreen mode
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6458
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6459
    Reading sensitive profile files through local HTML file on Android
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6460
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6461
    disabling scripts in Add-on SDK panels has no effect
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6462
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6463
    Trailing whitespace in IP address hostnames can bypass same-origin policy
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6464
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6465
    Buffer overflow during image interactions in canvas
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6466
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6467
    Android intents can be used on Firefox for Android to open privileged files
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6468
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6469
    XSS attack through intents on Firefox for Android
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6470
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6471
    Crash when accessing HTML tables with accessibility tools on OS X
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6472
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6473
    CORS preflight is bypassed when non-standard Content-Type headers
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6474
    are received
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6475
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6476
    Memory corruption in libjar through zip files
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6477
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6478
    Certain escaped characters in host of Location-header are being
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6479
    treated as non-escaped
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6480
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6481
    JavaScript garbage collection crash with Java applet
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6482
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6483
    (bmo#1188010, bmo#1204061, bmo#1204155)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6484
    Vulnerabilities found through code inspection
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6485
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6486
    Mixed content WebSocket policy bypass through workers
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6487
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6488
    (bmo#1202868, bmo#1205157)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6489
    NSS and NSPR memory corruption issues
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6490
    (fixed in mozilla-nspr and mozilla-nss packages)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6491
- requires NSPR >= 4.10.10 and NSS >= 3.19.4
885
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6492
- removed obsolete patches
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6493
  * mozilla-arm-disable-edsp.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6494
  * mozilla-icu-strncat.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6495
  * mozilla-skia-be-le.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6496
  * toolkit-download-folder.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6497
- fixed build with enable-libproxy (bmo#1220399)
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6498
  * mozilla-libproxy.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6499
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6500
-------------------------------------------------------------------
884
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6501
Thu Oct 15 08:25:54 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6502
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6503
- update to Firefox 41.0.2 (bnc#950686)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6504
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6505
    Cross-origin restriction bypass using Fetch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6506
- added explicit appdata provides (bnc#949983)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6507
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6508
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6509
Sun Oct  4 09:20:56 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6510
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6511
- do not build with --enable-stdcxx-compat
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6512
  (this starts to fail build on various toolchain combinations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6513
  and is not required for openSUSE builds in general
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6514
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6515
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6516
Thu Oct  1 09:49:57 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6517
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6518
- update to Firefox 41.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6519
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6520
    (bmo#1209124)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6521
  * Fix potential hangs with Flash plugins (bmo#1185639)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6522
  * Fix a regression in the bookmark creation (bmo#1206376)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6523
  * Fix a startup crash with some Intel Media Accelerator 3150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6524
    graphic cards (bmo#1207665)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6525
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6526
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6527
-------------------------------------------------------------------
883
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6528
Sat Sep 19 20:23:29 UTC 2015 - wr@rosenauer.org
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6529
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6530
- update to Firefox 41.0 (bnc#947003)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6531
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6532
    Miscellaneous memory safety hazards
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6533
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6534
    Memory leak in mozTCPSocket to servers
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6535
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6536
    Out of bounds read in QCMS library with ICC V4 profile attributes
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6537
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6538
    Site attribute spoofing on Android by pasting URL with unknown scheme
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6539
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6540
    Arbitrary file manipulation by local user through Mozilla updater
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6541
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6542
    Buffer overflow in libvpx while parsing vp9 format video
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6543
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6544
    Crash when using debugger with SavedStacks in JavaScript
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6545
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6546
    URL spoofing in reader mode
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6547
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6548
    Use-after-free with shared workers and IndexedDB
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6549
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6550
    Buffer overflow while decoding WebM video
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6551
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6552
    Use-after-free while manipulating HTML media content
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6553
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6554
    Out-of-bounds read during 2D canvas display on Linux 16-bit
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6555
    color depth systems
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6556
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6557
    Scripted proxies can access inner window
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6558
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6559
    JavaScript immutable property enforcement can be bypassed
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6560
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6561
    Dragging and dropping images exposes final URL after redirects
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6562
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6563
    Errors in the handling of CORS preflight request headers
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6564
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6565
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6566
    CVE-2015-7180
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6567
    Vulnerabilities found through code inspection
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6568
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6569
    bmo#1190526) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6570
    Memory safety errors in libGLES in the ANGLE graphics library
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6571
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6572
    Information disclosure via the High Resolution Time API
882
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6573
- rebased patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6574
- removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6575
  * mozilla-arm64-libjpeg-turbo.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6576
883
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6577
------------------------------------------------------------------
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6578
Thu Aug 27 06:03:51 UTC 2015 - wr@rosenauer.org
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6579
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6580
- update to Firefox 40.0.3 (bnc#943550)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6581
  * Disable the asynchronous plugin initialization (bmo#1198590)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6582
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6583
  * Fix a regression with some Japanese fonts used in the <input>
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6584
    field (bmo#1194055)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6585
  * On some sites, the selection in a select combox box using the
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6586
    mouse could be broken (bmo#1194733)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6587
  security fixes
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6588
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6589
    Use-after-free when resizing canvas element during restyling
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6590
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6591
    Add-on notification bypass through data URLs
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6592
882
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6593
-------------------------------------------------------------------
875
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6594
Fri Aug  7 07:49:49 UTC 2015 - wr@rosenauer.org
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6595
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6596
- update to Firefox 40.0 (bnc#940806)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6597
  * Added protection against unwanted software downloads
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6598
  * Suggested Tiles show sites of interest, based on categories
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6599
    from your recent browsing history
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6600
  * Hello allows adding a link to conversations to provide context
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6601
    on what the conversation will be about
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6602
  * New style for add-on manager based on the in-content
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6603
    preferences style
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6604
  * Improved scrolling, graphics, and video playback performance
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6605
    with off main thread compositing (GNU/Linux only)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6606
  * Graphic blocklist mechanism improved: Firefox version ranges
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6607
    can be specified, limiting the number of devices blocked
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6608
  security fixes:
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6609
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6610
    Miscellaneous memory safety hazards
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6611
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6612
    Out-of-bounds read with malformed MP3 file
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6613
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6614
    Use-after-free in MediaStream playback
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6615
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6616
    Redefinition of non-configurable JavaScript object properties
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6617
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6618
    Overflow issues in libstagefright
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6619
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6620
    Arbitrary file overwriting through Mozilla Maintenance Service
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6621
    with hard links (only affected Windows)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6622
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6623
    Out-of-bounds write with Updater and malicious MAR file
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6624
    (does not affect openSUSE RPM packages which do not ship the
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6625
     updater)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6626
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6627
    Feed protocol with POST bypasses mixed content protections
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6628
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6629
    Crash when using shared memory in JavaScript
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6630
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6631
    Heap overflow in gdk-pixbuf when scaling bitmap images
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6632
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6633
    Buffer overflows on Libvpx when decoding WebM video
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6634
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6635
    Vulnerabilities found through code inspection
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6636
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6637
    Mozilla Content Security Policy allows for asterisk wildcards
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6638
    in violation of CSP specification
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6639
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6640
    Use-after-free in XMLHttpRequest with shared workers
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6641
- added mozilla-no-stdcxx-check.patch
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6642
- removed obsolete patches
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
  6643
  * mozilla-add-glibcxx_use_cxx11_abi.patch
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6644
  * firefox-multilocale-chrome.patch
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
  6645
- rebased patches
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6646
- requires version 40 of the branding package
871
4c6e8495720b beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 869
diff changeset
  6647
- removed browser/searchplugins/ location as it's not valid anymore
867
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6648
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6649
-------------------------------------------------------------------
870
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6650
Fri Aug  7 07:09:39 UTC 2015 - wr@rosenauer.org
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6651
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6652
- security update to Firefox 39.0.3 (bnc#940918)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6653
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6654
    Same origin violation and local file stealing via PDF reader
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6655
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6656
-------------------------------------------------------------------
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6657
Wed Jul  1 06:43:02 UTC 2015 - wr@rosenauer.org
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6658
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6659
- update to Firefox 39.0 (bnc#935979)
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6660
  * Share Hello URLs with social networks
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6661
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6662
  * SafeBrowsing malware detection lookups enabled for downloads
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6663
    (Mac OS X and Linux)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6664
  * Support for new Unicode 8.0 skin tone emoji
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6665
  * Removed support for insecure SSLv3 for network communications
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6666
  * Disable use of RC4 except for temporarily whitelisted hosts
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6667
  * NPAPI Plug-in performance improved via asynchronous initialization
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6668
  security fixes:
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6669
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6670
    Miscellaneous memory safety hazards
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6671
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6672
    Local files or privileged URLs in pages can be opened into new tabs
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6673
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6674
    Type confusion in Indexed Database Manager
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6675
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6676
    Out-of-bound read while computing an oscillator rendering range in Web Audio
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6677
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6678
    Use-after-free in Content Policy due to microtask execution error
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6679
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6680
    ECDSA signature validation fails to handle some signatures correctly
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6681
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6682
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6683
    Use-after-free in workers while using XMLHttpRequest
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6684
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6685
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6686
    Vulnerabilities found through code inspection
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6687
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6688
    Key pinning is ignored when overridable errors are encountered
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6689
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6690
    OS X crash reports may contain entered key press information
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6691
    (not relevant under Linux)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6692
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6693
    Privilege escalation in PDF.js
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6694
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6695
    NSS accepts export-length DHE keys with regular DHE cipher suites
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6696
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6697
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6698
    NSS incorrectly permits skipping of ServerKeyExchange
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6699
    (this fix is shipped by NSS 3.19.1 externally)
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6700
- dropped mozilla-prefer_plugin_pref.patch as this feature is
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6701
  likely not worth maintaining further
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6702
- rebased patches
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6703
- require NSS 3.19.2
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6704
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6705
-------------------------------------------------------------------
862
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6706
Thu Jun 18 10:30:18 UTC 2015 - schwab@suse.de
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6707
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6708
- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6709
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6710
-------------------------------------------------------------------
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6711
Sun Jun  7 07:09:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6712
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6713
- update to Firefox 38.0.6
855
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
  6714
  * fixes bmo#1171730 which is not really relevant to oS builds
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
  6715
- fix KDE regression from 38.0.5 builds (bsc#933439)
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6716
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6717
-------------------------------------------------------------------
853
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6718
Sat May 23 21:13:49 UTC 2015 - wr@rosenauer.org
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6719
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6720
- update to Firefox 38.0.5
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6721
  * Keep track of articles and videos with Pocket
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6722
  * Clean formatting for articles and blog posts with Reader View
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6723
  * Share the active tab or window in a Hello conversation
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6724
- add changes file as source for SRPM (bsc#932142)
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6725
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6726
-------------------------------------------------------------------
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6727
Fri May 15 10:40:19 UTC 2015 - normand@linux.vnet.ibm.com
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6728
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6729
- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6730
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6731
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6732
-------------------------------------------------------------------
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6733
Fri May 15 07:37:46 UTC 2015 - wr@rosenauer.org
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6734
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6735
- update to Firefox 38.0.1
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6736
  stability and regression fixes
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6737
  * Systems with first generation NVidia Optimus graphics cards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6738
    may crash on start-up
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6739
  * Users who import cookies from Google Chrome can end up with
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6740
    broken websites
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6741
  * Large animated images may fail to play and may stop other
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6742
    images from loading
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6743
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6744
-------------------------------------------------------------------
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6745
Sun May 10 07:07:49 UTC 2015 - wr@rosenauer.org
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6746
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6747
- update to Firefox 38.0 (bnc#930622)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6748
  * New tab-based preferences
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6749
  * Ruby annotation support
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6750
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6751
  security fixes:
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6752
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6753
    Miscellaneous memory safety hazards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6754
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6755
    Buffer overflow parsing H.264 video with Linux Gstreamer
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6756
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6757
    Buffer overflow with SVG content and CSS
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6758
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6759
    Referrer policy ignored when links opened by middle-click and
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6760
    context menu
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6761
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6762
    Out-of-bounds read and write in asm.js validation
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6763
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6764
    Use-after-free during text processing with vertical text enabled
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6765
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6766
    Use-after-free due to Media Decoder Thread creation during shutdown
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6767
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6768
    Buffer overflow when parsing compressed XML
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6769
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6770
    Buffer overflow and out-of-bounds read while parsing MP4 video
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6771
    metadata
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6772
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6773
    Untrusted site hosting trusted page can intercept webchannel
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6774
    responses
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6775
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6776
    Privilege escalation through IPC channel messages
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6777
- requires NSS 3.18.1
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6778
- removed obsolete patches:
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6779
  * mozilla-skia-bmo1136958.patch
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6780
- remove gnomevfs build options as it is removed from sources
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6781
- rebased patches
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6782
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6783
-------------------------------------------------------------------
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6784
Fri Apr 17 16:39:20 UTC 2015 - wr@rosenauer.org
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6785
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6786
- update to Firefox 37.0.2 (bnc#928116)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6787
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6788
    Memory corruption during failed plugin initialization
845
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
  6789
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
  6790
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6791
Fri Apr  3 08:27:24 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6792
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6793
- update to Firefox 37.0.1 (bnc#926166)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6794
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6795
    Loading privileged content through Reader mode
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6796
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6797
    Certificate verification bypass through the HTTP/2 Alt-Svc header
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6798
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6799
-------------------------------------------------------------------
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6800
Sat Mar 28 09:46:48 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6801
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6802
- update to Firefox 37.0 (bnc#925368)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6803
  * Heartbeat user rating system
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6804
  * Yandex set as default search provider for the Turkish locale
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6805
  * Bing search now uses HTTPS for secure searching
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6806
  * Improved protection against site impersonation via OneCRL
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6807
    centralized certificate revocation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6808
  * Opportunistically encrypt HTTP traffic where the server supports
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6809
    HTTP/2 AltSvc
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6810
  * some more behaviour changes for TLS
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6811
  security fixes:
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6812
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6813
    Miscellaneous memory safety hazards
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6814
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6815
    Use-after-free when using the Fluendo MP3 GStreamer plugin
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6816
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6817
    Add-on lightweight theme installation approval bypassed through
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6818
    MITM attack
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6819
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6820
    resource:// documents can load privileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6821
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6822
    Out of bounds read in QCMS library
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6823
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6824
    Cursor clickjacking with flash and images (OS X only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6825
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6826
    Incorrect memory management for simple-type arrays in WebRTC
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6827
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6828
    CORS requests should not follow 30x redirections after preflight
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6829
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6830
    Memory corruption crashes in Off Main Thread Compositing
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6831
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6832
    Use-after-free due to type confusion flaws
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6833
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6834
    Same-origin bypass through anchor navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6835
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6836
    PRNG weakness allows for DNS poisoning on Android (only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6837
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6838
    Windows can retain access to privileged content on navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6839
    to unprivileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6840
- removed obsolete patches
837
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 836
diff changeset
  6841
  * mozilla-bmo1088588.patch
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6842
  * mozilla-bmo1108834.patch
836
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6843
- requires NSPR 4.10.8
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6844
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6845
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6846
Tue Mar 24 15:35:24 UTC 2015 - dvaleev@suse.com
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6847
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6848
- Fix builds with skia on Power
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6849
  mozilla-skia-be-le.patch (patch from #bmo1136958)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6850
  mozilla-bmo1108834.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6851
  mozilla-bmo1005535.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6852
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6853
-------------------------------------------------------------------
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6854
Sat Mar 21 09:03:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6855
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
  6856
- update to Firefox 36.0.4 (bnc#923534)
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6857
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6858
    Privilege escalation through SVG navigation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6859
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6860
    Code execution through incorrect JavaScript bounds checking
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6861
    elimination
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6862
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6863
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6864
Fri Mar 20 15:02:33 UTC 2015 - dimstar@opensuse.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6865
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6866
- Copy the icons to /usr/share/icons instead of symlinking them:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6867
  in preparation for containerized apps (e.g. xdg-app) as well as
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6868
  AppStream metadata extraction, there are a couple locations that
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6869
  need to be real files for system integration (.desktop files,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6870
  icons, mime-type info).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6871
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6872
-------------------------------------------------------------------
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6873
Sat Mar  7 07:40:56 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6874
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6875
- update to Firefox 36.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6876
  Bugfixes:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6877
  * Disable the usage of the ANY DNS query type (bmo#1093983)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6878
  * Hello may become inactive until restart (bmo#1137469)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6879
  * Print preferences may not be preserved (bmo#1136855)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6880
  * Hello contact tabs may not be visible (bmo#1137141)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6881
  * Accept hostnames that include an underscore character ("_")
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6882
    (bmo#1136616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6883
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6884
  * Option -remote has been restored (bmo#1080319)
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
  6885
- added mozilla-skia-bmo1136958.patch to fix build issues for
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
  6886
  ARM and PPC
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6887
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6888
-------------------------------------------------------------------
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6889
Fri Feb 20 22:53:39 UTC 2015 - wr@rosenauer.org
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6890
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6891
- update to Firefox 36.0 (bnc#917597)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6892
  * mozilla-xremote-client was removed
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6893
  * added libclearkey.so media plugin
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6894
  * Pinned tiles on the new tab page can be synced
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6895
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6896
    more scalable, and more responsive web.
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6897
  * Locale added: Uzbek (uz)
835
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6898
  security fixes:
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6899
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6900
    Miscellaneous memory safety hazards
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6901
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6902
    Invoking Mozilla updater will load locally stored DLL files
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6903
    (Windows only)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6904
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6905
    Appended period to hostnames can bypass HPKP and HSTS protections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6906
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6907
    Malicious WebGL content crash when writing strings
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6908
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6909
    TLS TURN and STUN connections silently fail to simple TCP connections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6910
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6911
    Use-after-free in IndexedDB
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6912
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6913
    Buffer overflow in libstagefright during MP4 video playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6914
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6915
    Double-free when using non-default memory allocators with a
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6916
    zero-length XHR
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6917
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6918
    Out-of-bounds read and write while rendering SVG content
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6919
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6920
    Buffer overflow during CSS restyling
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6921
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6922
    Buffer underflow during MP3 playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6923
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6924
    Crash using DrawTarget in Cairo graphics library
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6925
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6926
    Use-after-free in Developer Console date with OpenType Sanitiser
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6927
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6928
    Reading of local files through manipulation of form autocomplete
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6929
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6930
    Local files or privileged URLs in pages can be opened into new tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6931
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6932
    UI Tour whitelisted sites in background tab can spoof foreground
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6933
    tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6934
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6935
    Caja Compiler JavaScript sandbox bypass
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6936
- rebased patches
830
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6937
- requires NSS 3.17.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6938
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6939
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6940
Sat Jan 31 18:37:38 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6941
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6942
- update to Firefox 35.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6943
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6944
  * Kerberos authentication did not work with alias (bmo#1108971)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6945
  * SVG / CSS animation had a regression causing rendering issues on
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6946
    websites like openstreemap.org (bmo#1083079)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6947
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6948
  * document.baseURI did not get updated to document.location after
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6949
    base tag was removed from DOM for site with a CSP (bmo#1121857)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6950
  * With a Right-to-left (RTL) version of Firefox, the text selection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6951
    could be broken (bmo#1104036)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6952
  * CSP had a change in behavior with regard to case sensitivity
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6953
    resources loading (bmo#1122445)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6954
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6955
-------------------------------------------------------------------
826
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
  6956
Sat Jan 10 18:36:37 UTC 2015 - wr@rosenauer.org
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
  6957
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
  6958
- update to Firefox 35.0 (bnc#910669)
827
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6959
  notable features:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6960
  * Firefox Hello with new rooms-based conversations model
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6961
  * Implemented HTTP Public Key Pinning Extension (for enhanced
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6962
    authentication of encrypted connections)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6963
  security fixes:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6964
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6965
    Miscellaneous memory safety hazards
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6966
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6967
    Uninitialized memory use during bitmap rendering
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6968
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6969
    sendBeacon requests lack an Origin header
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6970
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6971
    Cookie injection through Proxy Authenticate responses
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6972
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6973
    Read of uninitialized memory in Web Audio
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6974
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6975
    Read-after-free in WebRTC
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6976
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6977
    Gecko Media Plugin sandbox escape
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6978
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6979
    Delegated OCSP responder certificates failure with
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6980
    id-pkix-ocsp-nocheck extension
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6981
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6982
    XrayWrapper bypass through DOM objects
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  6983
- rebased patches
809
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6984
- dropped explicit support for everything older than 12.3
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6985
  (including SLES11)
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6986
  * merge firefox-kde.patch and firefox-kde-114.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6987
  * dropped mozilla-sle11.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6988
- reworked specfile to build conditionally based on release channel
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6989
  either Firefox or Firefox Developer Edition
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6990
- added mozilla-openaes-decl.patch to fix implicit declarations
819
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
  6991
- obsolete tracker-miner-firefox < 0.15 because it leads to startup
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
  6992
  crashes (bnc#908892)
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  6993
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  6994
-------------------------------------------------------------------
820
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6995
Sat Dec 13 22:13:00 UTC 2014 - Led <ledest@gmail.com>
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6996
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6997
- fix bashism in mozilla.sh script
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6998
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6999
-------------------------------------------------------------------
813
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7000
Sat Nov 29 21:23:03 UTC 2014 - wr@rosenauer.org
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7001
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7002
- update to Firefox 34.0.5 (bnc#908009)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7003
  * Default search engine changed to Yahoo! for North America
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7004
  * Default search engine changed to Yandex for Belarusian, Kazakh,
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7005
    and Russian locales
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7006
  * Improved search bar (en-US only)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7007
  * Firefox Hello real-time communication client
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7008
  * Easily switch themes/personas directly in the Customizing mode
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7009
  * Implementation of HTTP/2 (draft14) and ALPN
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7010
  * Disabled SSLv3
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7011
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7012
    Miscellaneous memory safety hazards
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7013
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7014
    XBL bindings accessible via improper CSS declarations
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7015
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7016
    XMLHttpRequest crashes with some input streams
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7017
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7018
    CSP leaks redirect data via violation reports
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7019
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7020
    Use-after-free during HTML5 parsing
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7021
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7022
    Buffer overflow while parsing media content
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7023
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7024
    Bad casting from the BasicThebesLayer to BasicContainerLayer
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  7025
- rebased patches
806
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 805
diff changeset
  7026
- limit linker memory usage for %ix86
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  7027
- rebased patches
805
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
  7028
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
  7029
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7030
Fri Nov  7 20:14:32 UTC 2014 - wr@rosenauer.org
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7031
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7032
- update to Firefox 33.1
802
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  7033
  * Adding DuckDuckGo as a search option (upstream)
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  7034
  * Forget Button added
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  7035
  * Enhanced Tiles
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  7036
  * Privacy tour introduced
797
3b2d52457c91 fix typo on Recommends
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 789
diff changeset
  7037
- fix typo in GStreamer Recommends
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7038
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7039
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7040
Tue Nov  4 18:00:35 UTC 2014 - guillaume@opensuse.org
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7041
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7042
- Disable elf-hack for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7043
- Enable EGL for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7044
- Limit RAM usage during link for %arm
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7045
- Fix _constraints for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7046
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7047
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7048
Mon Nov  3 11:36:04 UTC 2014 - dmueller@suse.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7049
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7050
- use proper macros for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7051
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7052
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7053
Mon Nov  3 11:26:23 UTC 2014 - josua.mayer97@gmail.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7054
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7055
- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7056
  to fix compiling.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7057
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7058
  linking on arm.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7059
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  7060
-------------------------------------------------------------------
788
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7061
Thu Oct 30 11:31:05 UTC 2014 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7062
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7063
- update to Firefox 33.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7064
  * Fix a startup crash with some combination of hardware and drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7065
  33.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7066
  * Firefox displays a black screen at start-up with certain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7067
    graphics drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7068
- adjusted _constraints for ARM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7069
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  7070
-------------------------------------------------------------------
786
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  7071
Tue Oct 28 15:23:09 UTC 2014 - josua.mayer97@gmail.com
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  7072
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  7073
- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)
785
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
  7074
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
  7075
-------------------------------------------------------------------
781
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  7076
Sat Oct 25 08:45:43 UTC 2014 - wr@rosenauer.org
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  7077
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  7078
- define /usr/share/myspell as additional dictionary location
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  7079
  and remove add-plugins.sh finally (bnc#900639)
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  7080
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  7081
-------------------------------------------------------------------
780
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  7082
Sun Oct 19 12:59:28 UTC 2014 - vindex17@outlook.it
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  7083
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  7084
- use Firefox default optimization flags instead of -Os
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  7085
- specfile cleanup
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  7086
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  7087
-------------------------------------------------------------------
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7088
Wed Oct 15 08:05:33 UTC 2014 - wr@rosenauer.org
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7089
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7090
- fix build for all ppc by not enabling elf-hack
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7091
  (bnc#901213)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7092
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7093
-------------------------------------------------------------------
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  7094
Sat Oct 11 08:48:24 UTC 2014 - wr@rosenauer.org
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  7095
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7096
- update to Firefox 33.0 (bnc#900941)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7097
  New features:
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7098
  * OpenH264 support (sandboxed)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7099
  * Enhanced Tiles
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7100
  * Improved search experience through the location bar
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7101
  * Slimmer and faster JavaScript strings
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7102
  * New CSP (Content Security Policy) backend
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7103
  * Support for connecting to HTTP proxy over HTTPS
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7104
  * Improved reliability of the session restoration
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7105
  * Proprietary window.crypto properties/functions removed
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7106
  Security:
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7107
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7108
    Miscellaneous memory safety hazards
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7109
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7110
    Buffer overflow during CSS manipulation
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7111
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7112
    Web Audio memory corruption issues with custom waveforms
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7113
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7114
    Out-of-bounds write with WebM video
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7115
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7116
    Further uninitialized memory use during GIF rendering
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7117
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7118
    Use-after-free interacting with text directionality
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7119
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7120
    Key pinning bypasses
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7121
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7122
    Inconsistent video sharing within iframe
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7123
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7124
    Accessing cross-origin objects via the Alarms API
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7125
    (only relevant for installed web apps)
765
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
  7126
- requires NSPR 4.10.7
773
22545f50497c update to 33.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 769
diff changeset
  7127
- requires NSS 3.17.1
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  7128
- removed obsolete patches:
773
22545f50497c update to 33.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 769
diff changeset
  7129
  * mozilla-ppc.patch
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  7130
  * mozilla-libproxy-compat.patch
774
f61bd1cd52c2 added basic appstream appdata information
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 773
diff changeset
  7131
- added basic appdata information
769
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7132
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7133
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7134
Sat Sep 20 13:33:51 UTC 2014 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7135
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7136
- update to Firefox 32.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7137
  * just a version bump for our builds
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7138
  * fixed the in application update process for certain environments
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7139
    (in application update is not enabled in openSUSE and Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7140
    is unaffected in any case)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7141
- build with --disable-optimize for 13.1 and above for i586 to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7142
  workaround miscompilations (bnc#896624)
767
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 765
diff changeset
  7143
- use some more build flags to align with upstream
765
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
  7144
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
  7145
-------------------------------------------------------------------
761
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7146
Sat Sep 13 16:58:16 UTC 2014 - wr@rosenauer.org
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7147
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7148
- update to Firefox 32.0.1
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7149
  * fixed stability issues for computers with multiple graphics cards
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7150
  * mixed content icon may be incorrectly displayed instead of lock
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7151
    icon for SSL sites in 32.0 (
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7152
  * WebRTC: setRemoteDescription() silently fails if no success
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7153
    callback is specified (bmo#1063971)
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7154
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7155
-------------------------------------------------------------------
759
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7156
Sun Aug 31 07:44:54 UTC 2014 - wr@rosenauer.org
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7157
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7158
- update to Firefox 32.0 (bnc#894370)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7159
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7160
    Miscellaneous memory safety hazards
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7161
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7162
    Use-after-free during DOM interactions with SVG
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7163
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7164
    Uninitialized memory use during GIF rendering
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7165
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7166
    Out-of-bounds read in Web Audio audio timeline
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7167
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7168
    Use-after-free setting text directionality
748
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7169
- rebased patches
756
e4fa9844604e update to beta8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 753
diff changeset
  7170
- requires NSS 3.16.4
748
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7171
- removed upstreamed patch
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7172
  * mozilla-aarch64-bmo-810631.patch
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7173
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7174
-------------------------------------------------------------------
759
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7175
Wed Aug 20 13:50:58 CEST 2014 - behlert@suse.de
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7176
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7177
- adapted _constraints, used more than 3900MB on s390x during
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7178
  last build
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7179
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7180
-------------------------------------------------------------------
753
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7181
Sun Jul 20 18:11:44 UTC 2014 - wr@rosenauer.org
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7182
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7183
- update to Firefox 31.0 (bnc#887746)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7184
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7185
    Miscellaneous memory safety hazards
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7186
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7187
    Buffer overflow during Web Audio buffering for playback
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7188
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7189
    Use-after-free in Web Audio due to incorrect control message ordering
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7190
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7191
    Toolbar dialog customization event spoofing
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7192
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7193
    Use-after-free with FireOnStateChange event
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7194
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7195
    Exploitable WebGL crash with Cesium JavaScript library
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7196
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7197
    Use-after-free while when manipulating certificates in the trusted cache
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7198
    (solved with NSS 3.16.2 requirement)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7199
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7200
    Crash in Skia library when scaling high quality images
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7201
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7202
    (bmo#1015973, bmo#1026022, bmo#997795)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7203
    Certificate parsing broken by non-standard character encoding
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7204
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7205
    IFRAME sandbox same-origin access through redirect
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7206
- use EGL on ARM
746
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7207
- rebased patches
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7208
- requires NSS 3.16.2
753
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7209
- requires python-devel (not only python)
746
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7210
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7211
-------------------------------------------------------------------
744
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7212
Mon Jun  9 08:28:17 UTC 2014 - wr@rosenauer.org
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7213
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7214
- update to Firefox 30.0 (bnc#881874)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7215
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7216
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7217
     bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7218
     bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7219
     bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7220
     bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7221
     bmo#1009952, bmo#1011007)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7222
    Miscellaneous memory safety hazards (rv:30.0)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7223
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7224
    (bmo#989994, bmo#999274, bmo#1005584)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7225
    Use-after-free and out of bounds issues found using Address
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7226
    Sanitizer
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7227
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7228
    Clickjacking through cursor invisability after Flash interaction
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7229
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7230
    Use-after-free in Event Listener Manager
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7231
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7232
    Use-after-free with SMIL Animation Controller
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7233
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7234
    Buffer overflow in Web Audio Speex resampler
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7235
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7236
    Buffer overflow in Gamepad API
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7237
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7238
    Out of bounds write in NSPR
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7239
- rebased patches
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7240
- removed obsolete patches
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7241
  * firefox-browser-css.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7242
  * mozilla-aarch64-bmo-962488.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7243
  * mozilla-aarch64-bmo-963023.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7244
  * mozilla-aarch64-bmo-963024.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7245
  * mozilla-aarch64-bmo-963027.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7246
  * mozilla-ppc64-xpcom.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7247
  * mozilla-ppc64le-javascript.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7248
  * mozilla-ppc64le-libffi.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7249
  * mozilla-ppc64le-mfbt.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7250
  * mozilla-ppc64le-webrtc.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7251
  * mozilla-ppc64le-xpcom.patch
744
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7252
  * mozilla-ppc64le-build.patch
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7253
- requires NSPR 4.10.6
725
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
  7254
- enabled GStreamer 1.0 usage for 13.2 and above
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
  7255
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
  7256
-------------------------------------------------------------------
738
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7257
Sat May 10 06:09:37 UTC 2014 - wr@rosenauer.org
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7258
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7259
- update to Firefox 29.0.1
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7260
  * Seer disabled by default (bmo#1005958)
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7261
  * Session Restore failed with a corrupted sessionstore.js file
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7262
    (bmo#1001167)
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7263
  * pdf.js printing white page (bmo#1003707, bnc#876833)
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7264
- general.useragent.locale gets overwritten with en-US while it
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7265
  should be using the active langpack's setting
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7266
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7267
-------------------------------------------------------------------
727
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7268
Sat Apr 26 12:18:07 UTC 2014 - wr@rosenauer.org
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7269
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7270
- update to Firefox 29.0 (bnc#875378)
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7271
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7272
    Miscellaneous memory safety hazards
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7273
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7274
    Web Audio memory corruption issues
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7275
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7276
    Out of bounds read while decoding JPG images
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7277
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7278
    Buffer overflow when using non-XBL object as XBL
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7279
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7280
    Use-after-free in the Text Track Manager for HTML video
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7281
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7282
    Out-of-bounds write in Cairo
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7283
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7284
    Privilege escalation through Web Notification API
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7285
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7286
    Cross-site scripting (XSS) using history navigations
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7287
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7288
    Use-after-free in imgLoader while resizing images
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7289
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7290
    Incorrect IDNA domain name matching for wildcard certificates
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7291
    (fixed by NSS 3.16)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7292
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7293
    Use-after-free in nsHostResolver
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7294
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7295
    Debugger can bypass XrayWrappers with JavaScript
727
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7296
- rebased patches
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7297
- removed obsolete patches
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7298
  * firefox-browser-css.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7299
  * mozilla-aarch64-599882cfb998.diff
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7300
  * mozilla-aarch64-bmo-963028.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7301
  * mozilla-aarch64-bmo-963029.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7302
  * mozilla-aarch64-bmo-963030.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7303
  * mozilla-aarch64-bmo-963031.patch
716
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7304
- requires NSS 3.16
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7305
- added mozilla-icu-strncat.patch to fix post build checks
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7306
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7307
-------------------------------------------------------------------
715
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7308
Mon Apr  7 15:34:31 UTC 2014 - dmueller@suse.com
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7309
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7310
- add mozilla-aarch64-599882cfb998.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7311
      mozilla-aarch64-bmo-810631.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7312
      mozilla-aarch64-bmo-962488.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7313
      mozilla-aarch64-bmo-963030.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7314
      mozilla-aarch64-bmo-963027.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7315
      mozilla-aarch64-bmo-963028.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7316
      mozilla-aarch64-bmo-963029.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7317
      mozilla-aarch64-bmo-963023.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7318
      mozilla-aarch64-bmo-963024.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7319
      mozilla-aarch64-bmo-963031.patch: AArch64 porting
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7320
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7321
-------------------------------------------------------------------
714
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7322
Mon Mar 24 16:18:44 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7323
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7324
- Add patch for bmo#973977
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7325
  * mozilla-ppc64-xpcom.patch
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7326
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7327
-------------------------------------------------------------------
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7328
Mon Mar 24 14:29:12 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7329
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7330
- Refresh mozilla-ppc64le-xpcom.patch patch
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7331
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7332
-------------------------------------------------------------------
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7333
Fri Mar 21 19:01:42 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7334
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7335
- Adapt mozilla-ppc64le-xpcom.patch to Mozilla > 24.0 build system
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7336
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7337
-------------------------------------------------------------------
711
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
  7338
Sun Mar 16 13:39:15 UTC 2014 - wr@rosenauer.org
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
  7339
712
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7340
- update to Firefox 28.0 (bnc#868603)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7341
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7342
    Miscellaneous memory safety hazards
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7343
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7344
    Out of bounds read during WAV file decoding
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7345
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7346
    crypto.generateCRMFRequest does not validate type of key
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7347
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7348
    Spoofing attack on WebRTC permission prompt
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7349
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7350
    onbeforeunload and Javascript navigation DOS
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7351
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7352
    WebGL content injection from one domain to rendering in another
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7353
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7354
    Content Security Policy for data: documents not preserved by
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7355
    session restore
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7356
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7357
    Information disclosure through polygon rendering in MathML
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7358
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7359
    Memory corruption in Cairo during PDF font rendering
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7360
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7361
    SVG filters information disclosure through feDisplacementMap
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7362
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7363
    Privilege escalation using WebIDL-implemented APIs
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7364
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7365
    Use-after-free in TypeObject
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7366
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7367
    Out-of-bounds read/write through neutering ArrayBuffer objects
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7368
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7369
    Out-of-bounds write through TypedArrayObject after neutering
707
bfa2e0576454 update to 28.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 705
diff changeset
  7370
- requires NSPR 4.10.3 and NSS 3.15.5
712
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7371
- new build dependency (and recommends):
703
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7372
  * libpulse
710
5341dc98d26c update of PPC64LE patches taken from
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 707
diff changeset
  7373
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
711
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
  7374
- rebased patches
703
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7375
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7376
-------------------------------------------------------------------
704
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7377
Mon Feb 17 11:59:28 UTC 2014 - wr@rosenauer.org
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7378
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7379
- update to Firefox 27.0.1
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7380
  * Fixed stability issues with Greasemonkey and other JS that used
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7381
    ClearTimeoutOrInterval
714
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7382
  * JS math correctness issue (bmo#941381)
704
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7383
- incorporate Google API key for geolocation (bnc#864170)
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7384
- updated list of "other" locales in RPM requirements
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7385
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7386
-------------------------------------------------------------------
699
f810fbe5fece update to 27.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 697
diff changeset
  7387
Tue Jan 28 15:45:41 UTC 2014 - wr@rosenauer.org
f810fbe5fece update to 27.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 697
diff changeset
  7388
700
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7389
- update to Firefox 27.0 (bnc#861847)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7390
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7391
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7392
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7393
    Clone protected content with XBL scopes
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7394
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7395
    UI selection timeout missing on download prompts
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7396
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7397
    Incorrect use of discarded images by RasterImage
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7398
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7399
    Information disclosure with *FromPoint on iframes
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7400
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7401
    Profile path leaks to Android system log
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7402
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7403
    XSLT stylesheets treated as styles in Content Security Policy
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7404
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7405
    Use-after-free with imgRequestProxy and image proccessing
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7406
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7407
    Cross-origin information leak through web workers
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7408
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7409
    Firefox default start page UI content invokable by script
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7410
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7411
    Crash when using web workers with asm.js
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7412
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7413
    (bmo#934545, bmo#930874, bmo#930857)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7414
    NSS ticket handling issues
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7415
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7416
    Inconsistent JavaScript handling of access to Window objects
691
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7417
- requires NSS 3.15.4 or higher
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7418
- rebased/reworked patches
697
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
  7419
- removed obsolete mozilla-bug929439.patch
691
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7420
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7421
-------------------------------------------------------------------
692
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7422
Thu Dec 12 21:19:54 UTC 2013 - uweigand@de.ibm.com
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7423
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7424
- Add support for powerpc64le-linux.
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7425
  * mozilla-ppc64le.patch: general support
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7426
  * mozilla-libffi-ppc64le.patch: libffi backport
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7427
  * mozilla-xpcom-ppc64le.patch: port xpcom
697
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
  7428
- Add build fix from mainline.
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
  7429
  * mozilla-bug929439.patch
692
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7430
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7431
-------------------------------------------------------------------
688
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
  7432
Sun Dec  8 20:26:23 UTC 2013 - wr@rosenauer.org
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
  7433
689
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7434
- update to Firefox 26.0 (bnc#854367, bnc#854370)
686
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7435
  * rebased patches
688
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
  7436
  * requires NSPR 4.10.2 and NSS 3.15.3.1
689
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7437
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7438
    Miscellaneous memory safety hazards
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7439
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7440
    Application Installation doorhanger persists on navigation
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7441
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7442
    Character encoding cross-origin XSS attack
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7443
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7444
    Sandbox restrictions not applied to nested object elements
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7445
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7446
    Use-after-free in event listeners
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7447
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7448
    Use-after-free during Table Editing
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7449
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7450
    Potential overflow in JavaScript binary search algorithms
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7451
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7452
    Segmentation violation when replacing ordered list elements
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7453
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7454
    Linux clipboard information disclosure though selection paste
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7455
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7456
    Trust settings for built-in roots ignored during EV certificate
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7457
    validation
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7458
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7459
    Use-after-free in synthetic mouse movement
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7460
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7461
    GetElementIC typed array stubs can be generated outside observed
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7462
    typesets
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7463
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7464
    JPEG information leak
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7465
  * MFSA 2013-117 (bmo#946351)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7466
    Mis-issued ANSSI/DCSSI certificate
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7467
    (fixed via NSS 3.15.3.1)
686
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7468
- removed gecko.js preference file as GStreamer is enabled by
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7469
  default now
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7470
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7471
-------------------------------------------------------------------
681
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
  7472
Thu Oct 24 18:16:19 UTC 2013 - wr@rosenauer.org
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
  7473
682
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7474
- update to Firefox 25.0 (bnc#847708)
680
be770d3cbc02 Firefox 25 beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 676
diff changeset
  7475
  * rebased patches
681
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
  7476
  * requires NSS 3.15.2 or above
682
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7477
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7478
    Miscellaneous memory safety hazards
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7479
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7480
    Spoofing addressbar through SELECT element
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7481
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7482
    Access violation with XSLT and uninitialized data
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7483
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7484
    Improperly initialized memory and overflows in some JavaScript
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7485
    functions
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7486
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7487
    Writing to cycle collected object during image decoding
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7488
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7489
    Use-after-free when updating offline cache
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7490
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7491
    Security bypass of PDF.js checks using iframes
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7492
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7493
    (bmo#915210, bmo#915576, bmo#916685)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7494
    Miscellaneous use-after-free issues found through ASAN fuzzing
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7495
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7496
    Memory corruption in workers
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7497
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7498
    Use-after-free in HTML document templates
676
ed32bb3eb2f0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 672
diff changeset
  7499
ed32bb3eb2f0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 672
diff changeset
  7500
-------------------------------------------------------------------
672
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7501
Tue Sep 24 07:31:30 UTC 2013 - wr@rosenauer.org
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7502
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7503
- as GStreamer is not automatically required anymore but loaded
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7504
  dynamically if available, require it explicitely
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7505
- recommend optional GStreamer plugins for comprehensive media
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7506
  support
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7507
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7508
-------------------------------------------------------------------
666
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7509
Mon Sep 16 11:59:18 UTC 2013 - lnussel@suse.de
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7510
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7511
- move greek to the translations-common package (bnc#840551)
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7512
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7513
-------------------------------------------------------------------
664
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7514
Sat Sep 14 14:39:58 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7515
666
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7516
- update to Firefox 24.0 (bnc#840485)
667
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7517
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7518
    Miscellaneous memory safety hazards
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7519
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7520
    Improper state in HTML5 Tree Builder with templates
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7521
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7522
    Integer overflow in ANGLE library
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7523
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7524
    Use-after-free in Animation Manager during stylesheet cloning
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7525
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7526
    NativeKey continues handling key messages after widget is destroyed
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7527
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7528
    Use-after-free with select element
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7529
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7530
    Calling scope for new Javascript objects can lead to memory corruption
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7531
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7532
    Uninitialized data in IonMonkey
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7533
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7534
    Compartment mismatch re-attaching XBL-backed nodes
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7535
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7536
    Buffer overflow with multi-column, lists, and floats
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7537
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7538
    Memory corruption involving scrolling
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7539
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7540
    User-defined properties on DOM proxies get the wrong "this" object
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7541
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7542
    GC hazard with default compartments and frame chain restoration
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7543
- enable gstreamer explicitely via pref (gecko.js)
663
faf4f017af5c require NSS 3.15.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 661
diff changeset
  7544
- require NSS 3.15.1
661
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7545
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7546
-------------------------------------------------------------------
664
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7547
Mon Aug 26 07:35:36 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7548
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7549
- update to Firefox 23.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7550
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7551
    (bmo#901527)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7552
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7553
-------------------------------------------------------------------
661
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7554
Sun Aug  4 18:30:11 UTC 2013 - wr@rosenauer.org
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7555
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7556
- update to Firefox 23.0 (bnc#833389)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7557
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7558
    Miscellaneous memory safety hazards
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7559
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7560
    Use after free mutating DOM during SetBody
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7561
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7562
    Buffer underflow when generating CRMF requests
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7563
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7564
    Crash during WAV audio file decoding
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7565
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7566
    Document URI misrepresentation and masquerading
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7567
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7568
    CRMF requests allow for code execution and XSS attacks
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7569
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7570
    Bypass of XrayWrappers using XBL Scopes
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7571
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7572
    Wrong principal used for validating URI for some Javascript
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7573
    components
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7574
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7575
    Same-origin bypass with web workers and XMLHttpRequest
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7576
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7577
    Local Java applets may read contents of local file system
653
38c67b6b2f37 Aurora 23 (20130616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 650
diff changeset
  7578
- requires NSPR 4.10 and NSS 3.15
659
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7579
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7580
-------------------------------------------------------------------
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7581
Wed Jul  3 17:14:35 UTC 2013 - dmueller@suse.com
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7582
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7583
- fix build on ARM (/-g/ matches /-grecord-switches/)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7584
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7585
-------------------------------------------------------------------
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7586
Sat Jun 22 17:48:06 UTC 2013 - wr@rosenauer.org
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7587
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7588
- update to Firefox 22.0 (bnc#825935)
650
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7589
  * removed obsolete patches
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7590
    + mozilla-qcms-ppc.patch
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7591
    + mozilla-gstreamer-760140.patch
659
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7592
  * GStreamer support does not build on 12.1 anymore (build only
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7593
    on 12.2 and later)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7594
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7595
    Miscellaneous memory safety hazards
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7596
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7597
    Memory corruption found using Address Sanitizer
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7598
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7599
    Privileged content access and execution via XBL
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7600
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7601
    Arbitrary code execution within Profiler
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7602
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7603
    Execution of unmapped memory through onreadystatechange event
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7604
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7605
    Data in the body of XHR HEAD requests leads to CSRF attacks
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7606
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7607
    SVG filters can lead to information disclosure
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7608
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7609
    PreserveWrapper has inconsistent behavior
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7610
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7611
    Sandbox restrictions not applied to nested frame elements
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7612
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7613
    X-Frame-Options ignored when using server push with multi-part
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7614
    responses
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7615
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7616
    XrayWrappers can be bypassed to run user defined methods in a
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7617
    privileged context
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7618
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7619
    getUserMedia permission dialog incorrectly displays location
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7620
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7621
    Homograph domain spoofing in .com, .net and .name
650
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7622
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7623
-------------------------------------------------------------------
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7624
Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7625
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7626
- Fix qcms altivec include (mozilla-qcms-ppc.patch)
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7627
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7628
-------------------------------------------------------------------
647
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7629
Fri May 10 05:25:39 UTC 2013 - wr@rosenauer.org
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7630
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7631
- update to Firefox 21.0 (bnc#819204)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7632
  * removed upstreamed patch firefox-712763.patch
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7633
  * removed disabled mozilla-disable-neon-option.patch
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7634
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7635
    Miscellaneous memory safety hazards
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7636
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7637
    Privileged access for content level constructor
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7638
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7639
    File input control has access to full path
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7640
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7641
    Use-after-free with video and onresize event
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7642
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7643
    Uninitialized functions in DOMSVGZoomEvent
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7644
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7645
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7646
    Memory corruption found using Address Sanitizer
645
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7647
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7648
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7649
Tue Apr  9 06:41:31 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7650
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7651
- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7652
  (remove mozilla-gstreamer-1.patch)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7653
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7654
-------------------------------------------------------------------
640
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7655
Fri Apr  5 17:04:11 UTC 2013 - schwab@linux-m68k.org
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7656
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7657
- Explicitly disable WebRTC support on non-x86, the configure script
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7658
  disables it only half-heartedly
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7659
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7660
-------------------------------------------------------------------
639
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7661
Fri Mar 29 22:15:21 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7662
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7663
- update to Firefox 20.0 (bnc#813026)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7664
  * requires NSPR 4.9.5 and NSS 3.14.3
640
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7665
  * mozilla-webrtc-ppc.patch included upstream
639
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7666
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7667
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7668
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7669
    Out-of-bounds write in Cairo library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7670
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7671
    WebGL crash with Mesa graphics driver on Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7672
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7673
    Bypass of SOW protections allows cloning of protected nodes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7674
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7675
    Bypass of tab-modal dialog origin disclosure
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7676
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7677
    Cross-site scripting (XSS) using timed history navigations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7678
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7679
    Memory corruption while rendering grayscale PNG images
625
9f6e14430916 Bug 806917 - support GStreamer 1.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 624
diff changeset
  7680
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)
633
7c6f56a37ed6 armv7hl build fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 629 631
diff changeset
  7681
7c6f56a37ed6 armv7hl build fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 629 631
diff changeset
  7682
-------------------------------------------------------------------
631
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7683
Tue Mar 12 23:08:15 UTC 2013 - dmueller@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7684
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7685
- build fixes for armv7hl:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7686
  * disable debug build as armv7hl does not have enough memory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7687
  * disable webrtc on armv7hl as it is non-compiling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7688
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7689
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7690
Thu Mar  7 19:03:32 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7691
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7692
- update to Firefox 19.0.2 (bnc#808243)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7693
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7694
    Use-after-free in HTML Editor
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7695
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7696
-------------------------------------------------------------------
623
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7697
Thu Feb 28 22:06:36 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7698
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7699
- update to Firefox 19.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7700
  * blocklist updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7701
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7702
-------------------------------------------------------------------
615
fb49ee6e3828 Firefox 19.0 goes release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 613
diff changeset
  7703
Sat Feb 16 07:08:55 UTC 2013 - wr@rosenauer.org
fb49ee6e3828 Firefox 19.0 goes release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 613
diff changeset
  7704
619
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7705
- update to Firefox 19.0 (bnc#804248)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7706
  * MFSA 2013-21/CVE-2013-0783/2013-0784
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7707
    Miscellaneous memory safety hazards
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7708
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7709
    Out-of-bounds read in image rendering
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7710
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7711
    Wrapped WebIDL objects can be wrapped again
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7712
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7713
    Web content bypass of COW and SOW security wrappers
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7714
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7715
    Privacy leak in JavaScript Workers
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7716
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7717
    Use-after-free in nsImageLoadingContent
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7718
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7719
    Phishing on HTTPS connection through malicious proxy
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7720
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7721
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7722
    Use-after-free, out of bounds read, and buffer overflow issues
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7723
    found using Address Sanitizer
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7724
- removed obsolete patches
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7725
  * mozilla-webrtc.patch
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7726
  * mozilla-gstreamer-803287.patch
616
f46af22f1079 Bug 712763 - Backout changes from bug 669272 to keep original window order when restoring a session
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 615
diff changeset
  7727
- added patch to fix session restore window order (bmo#712763)
613
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 611
diff changeset
  7728
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 611
diff changeset
  7729
-------------------------------------------------------------------
611
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7730
Sat Feb  2 08:40:52 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7731
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7732
- update to Firefox 18.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7733
  * blocklist and CTP updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7734
  * fixes in JS engine
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7735
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7736
-------------------------------------------------------------------
604
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7737
Wed Jan 16 20:51:55 UTC 2013 - wr@rosenauer.org
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7738
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7739
- update to Firefox 18.0.1
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7740
  * blocklist updates
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7741
  * backed out bmo#677092 (removed patch)
609
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 604
diff changeset
  7742
  * fixed problems involving HTTP proxy transactions
604
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7743
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7744
-------------------------------------------------------------------
603
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7745
Sat Jan 12 17:25:11 UTC 2013 - schwab@linux-m68k.org
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7746
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7747
- Fix WebRTC to build on powerpc
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7748
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7749
-------------------------------------------------------------------
600
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7750
Sun Jan  6 21:54:18 UTC 2013 - wr@rosenauer.org
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7751
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7752
- update to Firefox 18.0 (bnc#796895)
601
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7753
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7754
    Miscellaneous memory safety hazards
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7755
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7756
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7757
    Use-after-free and buffer overflow issues found using Address Sanitizer
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7758
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7759
    Buffer Overflow in Canvas
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7760
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7761
    URL spoofing in addressbar during page loads
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7762
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7763
    Use-after-free when displaying table with many columns and column groups
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7764
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7765
    Touch events are shared across iframes
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7766
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7767
    Crash due to handling of SSL on threads
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7768
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7769
    AutoWrapperChanger fails to keep objects alive during garbage collection
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7770
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7771
    Compartment mismatch with quickstubs returned values
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7772
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7773
    Event manipulation in plugin handler to bypass same-origin policy
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7774
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7775
    Address space layout leaked in XBL objects
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7776
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7777
    Buffer overflow in Javascript string concatenation
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7778
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7779
    Memory corruption in XBL with XML bindings containing SVG
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7780
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7781
    Chrome Object Wrapper (COW) bypass through changing prototype
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7782
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7783
    Privilege escalation through plugin objects
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7784
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7785
    Use-after-free in serializeToStream
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7786
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7787
    Use-after-free in ListenerManager
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7788
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7789
    Use-after-free in Vibrate
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7790
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7791
    Use-after-free in Javascript Proxy objects
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7792
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7793
- removed obsolete SLE11 patches (mozilla-gcc43*)
585
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7794
- reenable WebRTC
600
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7795
- added mozilla-libproxy-compat.patch for libproxy API compat
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7796
  on openSUSE 11.2 and earlier
601
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7797
- backed out restartless language packs as it broke multi-locale
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7798
  setup (bmo#677092, bmo#818468)
585
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7799
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7800
-------------------------------------------------------------------
595
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7801
Thu Nov 29 19:56:51 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7802
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7803
- update to Firefox 17.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7804
  * revert some useragent changes introduced in 17.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7805
  * leaving private browsing with social enabled doesn't reset all
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7806
    social components (bmo#815042)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7807
- fix KDE integration for file dialogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7808
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7809
-------------------------------------------------------------------
585
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7810
Tue Nov 20 19:52:02 UTC 2012 - wr@rosenauer.org
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7811
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7812
- update to Firefox 17.0 (bnc#790140)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7813
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7814
    Miscellaneous memory safety hazards
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7815
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7816
    Buffer overflow while rendering GIF images
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7817
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7818
    evalInSanbox location context incorrectly applied
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7819
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7820
    Crash when combining SVG text on path with CSS
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7821
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7822
    Javascript: URLs run in privileged context on New Tab page
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7823
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7824
    Memory corruption in str_unescape
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7825
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7826
    XMLHttpRequest inherits incorrect principal within sandbox
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7827
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7828
    XrayWrappers exposes chrome-only properties when not in chrome
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7829
    compartment
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7830
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7831
    Improper security filtering for cross-origin wrappers
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7832
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7833
    Improper character decoding in HZ-GB-2312 charset
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7834
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7835
    Script entered into Developer Toolbar runs with chrome privileges
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7836
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7837
    Frames can shadow top.location
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7838
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7839
    CSS and HTML injection through Style Inspector
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7840
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7841
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7842
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7843
    Use-after-free and buffer overflow issues found using Address
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7844
    Sanitizer
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7845
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7846
    Use-after-free, buffer overflow, and memory corruption issues
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7847
    found using Address Sanitizer
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7848
- rebased patches
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7849
- disabled WebRTC since build is broken (bmo#776877)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7850
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7851
-------------------------------------------------------------------
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7852
Tue Nov 20 15:42:55 UTC 2012 - pcerny@suse.com
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7853
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7854
- build on SLE11
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7855
  * mozilla-gcc43-enums.patch
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7856
  * mozilla-gcc43-template_hacks.patch
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7857
  * mozilla-gcc43-templates_instantiation.patch
568
2c74c5927ea2 first working Aurora 18 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 563
diff changeset
  7858
2c74c5927ea2 first working Aurora 18 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 563
diff changeset
  7859
-------------------------------------------------------------------
572
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7860
Wed Oct 24 08:27:29 UTC 2012 - wr@rosenauer.org
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7861
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7862
- update to Firefox 16.0.2 (bnc#786522)
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7863
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7864
    (bmo#800666, bmo#793121, bmo#802557)
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7865
    Fixes for Location object issues
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7866
- bring back Obsoletes for libproxy's mozjs plugin for distributions
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7867
  before 12.2 to avoid crashes
539
b1134fe91f9a merge latest changes from firefox16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 536
diff changeset
  7868
414
88a71e903038 update to 12.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 410
diff changeset
  7869
-------------------------------------------------------------------
563
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7870
Thu Oct 11 01:51:16 UTC 2012 - wr@rosenauer.org
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7871
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7872
- update to Firefox 16.0.1 (bnc#783533)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7873
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7874
    Miscellaneous memory safety hazards
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7875
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7876
    defaultValue security checks not applied
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7877
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7878
-------------------------------------------------------------------
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7879
Sun Oct  7 21:40:14 UTC 2012 - wr@rosenauer.org
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7880
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7881
- update to Firefox 16.0 (bnc#783533)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7882
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7883
    Miscellaneous memory safety hazards
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7884
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7885
    select element persistance allows for attacks
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7886
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7887
    Continued access to initial origin after setting document.domain
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7888
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7889
    Some DOMWindowUtils methods bypass security checks
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7890
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7891
    DOS and crash with full screen and history navigation
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7892
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7893
    Crash with invalid cast when using instanceof operator
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7894
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7895
    GetProperty function can bypass security checks
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7896
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7897
    top object and location property accessible by plugins
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7898
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7899
    Chrome Object Wrapper (COW) does not disallow acces to privileged
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7900
    functions or properties
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7901
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7902
    Spoofing and script injection through location.hash
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7903
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7904
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7905
    Use-after-free, buffer overflow, and out of bounds read issues
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7906
    found using Address Sanitizer
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7907
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7908
    CVE-2012-4188
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7909
    Heap memory corruption issues found using Address Sanitizer
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7910
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7911
    Use-after-free in the IME State Manager
533
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7912
- requires NSPR 4.9.2
529
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7913
- improve GStreamer integration (bmo#760140)
533
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7914
- removed upstreamed mozilla-crashreporter-restart-args.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7915
- webapprt now included
536
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 533
diff changeset
  7916
- use kmozillahelper's new REVEAL command (bnc#777415)
538
be682f8c9361 revert API version change for kmozillahelper
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 536
diff changeset
  7917
  (requires mozilla-kde4-integration >= 0.6.4)
563
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7918
- updated translations-other with new languages
529
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7919
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7920
-------------------------------------------------------------------
541
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7921
Mon Sep 10 19:37:56 UTC 2012 - wr@rosenauer.org
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7922
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7923
- update to Firefox 15.0.1 (bnc#779936)
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7924
  * Sites visited while in Private Browsing mode could be found
547
65364282c9bc Aurora 20121003
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 543
diff changeset
  7925
    through manual browser cache inspection (bmo#787743)
541
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7926
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7927
-------------------------------------------------------------------
533
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7928
Sun Aug 26 13:47:43 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7929
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7930
- update to Firefox 15.0 (bnc#777588)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7931
  * MFSA 2012-57/CVE-2012-1970
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7932
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7933
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7934
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7935
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7936
    Use-after-free issues found using Address Sanitizer
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7937
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7938
    Location object can be shadowed using Object.defineProperty
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7939
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7940
    Escalation of privilege through about:newtab
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7941
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7942
    Memory corruption with bitmap format images with negative height
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7943
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7944
    WebGL use-after-free and memory corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7945
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7946
    SVG buffer overflow and use-after-free issues
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7947
  * MFSA 2012-64/CVE-2012-3971
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7948
    Graphite 2 memory corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7949
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7950
    Out-of-bounds read in format-number in XSLT
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7951
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7952
    HTTPMonitor extension allows for remote debugging without explicit
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7953
    activation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7954
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7955
    DOMParser loads linked resources in extensions when parsing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7956
    text/html
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7957
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7958
    Incorrect site SSL certificate data display
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7959
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7960
    Location object security checks bypassed by chrome code
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7961
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7962
    Web console eval capable of executing chrome-privileged code
471
73b631ab214b adding fixes to spec file and changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 463
diff changeset
  7963
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
513
7a651f368dd8 changelog update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 500
diff changeset
  7964
- GStreamer is only used for MP4 (no WebM, OGG)
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7965
- updated filelist
529
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7966
- moved browser specific preferences to correct location
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7967
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7968
-------------------------------------------------------------------
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7969
Sun Jul 29 08:34:39 UTC 2012 - aj@suse.de
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7970
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7971
- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7972
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7973
-------------------------------------------------------------------
500
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7974
Sat Jul 14 19:31:51 UTC 2012 - wr@rosenauer.org
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7975
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7976
- update to 14.0.1 (bnc#771583)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7977
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7978
    Miscellaneous memory safety hazards
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7979
  * MFSA 2012-43/CVE-2012-1950
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7980
    Incorrect URL displayed in addressbar through drag and drop
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7981
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7982
    Gecko memory corruption
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7983
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7984
    Spoofing issue with location
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7985
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7986
    XSS through data: URLs
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7987
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7988
    Improper filtering of javascript in HTML feed-view
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7989
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7990
    use-after-free in nsGlobalWindow::PageHidden
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7991
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7992
    Same-compartment Security Wrappers can be bypassed
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7993
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7994
    Out of bounds read in QCMS
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7995
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7996
    X-Frame-Options header ignored when duplicated
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7997
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7998
    JSDependentString::undepend string conversion results in memory
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7999
    corruption
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8000
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8001
    Content Security Policy 1.0 implementation errors cause data
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8002
    leakage
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8003
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8004
    feed: URLs with an innerURI inherit security context of page
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8005
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8006
    Code execution through javascript: URLs
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8007
- license change from tri license to MPL-2.0
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8008
- fix crashreporter restart option (bmo#762780)
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8009
- require NSS 3.13.5
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8010
- remove mozjs pacrunner obsoletes again for now
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8011
- adopted mozilla-prefer_plugin_pref.patch
500
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8012
- PPC fixes:
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8013
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8014
  * add patches for bmo#750620 and bmo#746112
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  8015
  * fix xpcshell segfault on ppc
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8016
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8017
-------------------------------------------------------------------
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8018
Fri Jun 15 12:37:09 UTC 2012 - wr@rosenauer.org
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8019
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8020
- update to Firefox 13.0.1
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8021
  * bugfix release
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  8022
- obsolete libproxy's mozjs pacrunner (bnc#759123)
457
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  8023
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  8024
-------------------------------------------------------------------
462
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8025
Sat Jun  2 08:22:51 UTC 2012 - wr@rosenauer.org
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8026
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8027
- update to Firefox 13.0 (bnc#765204)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8028
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8029
    Miscellaneous memory safety hazards
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8030
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8031
    Content Security Policy inline-script bypass
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8032
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8033
    Information disclosure though Windows file shares and shortcut
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8034
    files
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8035
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8036
    Use-after-free while replacing/inserting a node in a document
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8037
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8038
    Buffer overflow and use-after-free issues found using Address
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8039
    Sanitizer
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8040
- require NSS 3.13.4
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8041
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8042
- fix sound notifications when filename/path contains a whitespace
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8043
  (bmo#749739)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8044
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8045
-------------------------------------------------------------------
457
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  8046
Wed May 23 14:40:16 UTC 2012 - adrian@suse.de
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  8047
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  8048
- fix build on arm
435
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8049
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8050
-------------------------------------------------------------------
462
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8051
Wed May 16 05:34:01 UTC 2012 - wr@rosenauer.org
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8052
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8053
- reenabled crashreporter for Factory/12.2
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8054
  (fix in mozilla-gcc47.patch)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8055
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  8056
-------------------------------------------------------------------
435
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8057
Sat Apr 21 10:02:37 UTC 2012 - wr@rosenauer.org
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8058
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8059
- update to Firefox 12.0 (bnc#758408)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8060
  * rebased patches
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8061
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8062
    Miscellaneous memory safety hazards
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8063
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8064
    use-after-free in IDBKeyRange
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8065
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8066
    Invalid frees causes heap corruption in gfxImageSurface
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8067
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8068
    Potential XSS via multibyte content processing errors
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8069
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8070
    Potential memory corruption during font rendering using cairo-dwrite
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8071
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8072
    WebGL.drawElements may read illegal video memory due to
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8073
    FindMaxUshortElement error
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8074
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8075
    Page load short-circuit can lead to XSS
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8076
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8077
    Ambiguous IPv6 in Origin headers may bypass webserver access
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8078
    restrictions
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8079
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8080
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8081
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8082
    Crash with WebGL content using textImage2D
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8083
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8084
    Off-by-one error in OpenType Sanitizer
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8085
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8086
    HTTP Redirections and remote content can be read by javascript errors
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8087
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8088
    Potential site identity spoofing when loading RSS and Atom feeds
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8089
- added mozilla-libnotify.patch to allow fallback from libnotify
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8090
  to xul based events if no notification-daemon is running
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8091
- gcc 4.7 fixes
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8092
  * mozilla-gcc47.patch
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8093
  * disabled crashreporter temporarily for Factory
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  8094
- recommend libcanberra0 for proper sound notifications
414
88a71e903038 update to 12.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 410
diff changeset
  8095
407
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  8096
-------------------------------------------------------------------
408
475395d00191 Firefox 11 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 407
diff changeset
  8097
Fri Mar  9 21:47:07 UTC 2012 - wr@rosenauer.org
475395d00191 Firefox 11 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 407
diff changeset
  8098
475395d00191 Firefox 11 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 407
diff changeset
  8099
- update to Firefox 11.0 (bnc#750044)
410
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8100
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8101
    XSS with Drag and Drop and Javascript: URL
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8102
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8103
    SVG issues found with Address Sanitizer
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8104
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8105
    XSS with multiple Content Security Policy headers
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8106
  * MFSA 2012-16/CVE-2012-0458
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8107
    Escalation of privilege with Javascript: URL as home page
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8108
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8109
    Crash when accessing keyframe cssText after dynamic modification
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8110
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8111
    window.fullScreen writeable by untrusted content
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8112
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8113
    CVE-2012-0463
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8114
    Miscellaneous memory safety hazards
407
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  8115
- ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  8116
- explicitely build-require X libs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  8117
404
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8118
-------------------------------------------------------------------
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8119
Mon Mar  5 13:31:48 UTC 2012 - vdziewiecki@suse.com
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8120
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8121
- add Provides: browser(npapi) FATE#313084
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8122
398
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8123
-------------------------------------------------------------------
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8124
Fri Feb 17 17:41:11 UTC 2012 - pcerny@suse.com
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8125
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8126
- better plugin directory resolution (bnc#747320)
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8127
386
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8128
-------------------------------------------------------------------
387
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8129
Thu Feb 16 08:47:31 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8130
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8131
- update to Firefox 10.0.2 (bnc#747328)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8132
  * CVE-2011-3026 (bmo#727401)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8133
    libpng: integer overflow leading to heap-buffer overflow
386
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8134
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8135
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8136
Thu Feb  9 09:26:11 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8137
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8138
- update to Firefox 10.0.1 (bnc#746616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8139
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8140
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8141
378
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8142
-------------------------------------------------------------------
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8143
Tue Feb  7 10:40:58 UTC 2012 - dvaleev@suse.com
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8144
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8145
- Use YARR interpreter instead of PCRE on platforms where YARR JIT
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8146
  is not supported, since PCRE doesnt build (bmo#691898)
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8147
- fix ppc64 build (bmo#703534)
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8148
373
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8149
-------------------------------------------------------------------
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8150
Mon Jan 30 09:41:59 UTC 2012 - wr@rosenauer.org
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8151
375
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8152
- update to Firefox 10.0 (bnc#744275)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8153
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8154
    Miscellaneous memory safety hazards
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8155
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8156
    <iframe> element exposed across domains via name attribute
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8157
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8158
    Child nodes from nsDOMAttribute still accessible after removal
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8159
    of nodes
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8160
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8161
    Frame scripts calling into untrusted objects bypass security
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8162
    checks
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8163
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8164
    Uninitialized memory appended when encoding icon images may
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8165
    cause information disclosure
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8166
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8167
    Potential Memory Corruption When Decoding Ogg Vorbis files
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8168
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8169
    Crash with malformed embedded XSLT stylesheets
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8170
- KDE integration has been disabled since it needs refactoring
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8171
- removed obsolete ppc64 patch
373
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8172
371
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8173
-------------------------------------------------------------------
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8174
Sun Jan 22 12:08:07 UTC 2012 - joop.boonen@opensuse.org
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8175
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8176
- Disable neon for arm as it doesn't build correctly
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8177
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8178
-------------------------------------------------------------------
366
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8179
Fri Dec 23 17:02:01 UTC 2011 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8180
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8181
- update to Firefox 9.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8182
  * (strongparent) parentNode of element gets lost (bmo#335998)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8183
364
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8184
-------------------------------------------------------------------
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8185
Sun Dec 18 09:58:52 UTC 2011 - adrian@suse.de
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8186
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8187
- fix arm build, don't package crashreporter there
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8188
363
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8189
-------------------------------------------------------------------
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8190
Sun Dec 18 09:52:08 UTC 2011 - wr@rosenauer.org
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8191
364
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8192
- update to Firefox 9 (bnc#737533)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8193
  * MFSA 2011-53/CVE-2011-3660
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8194
    Miscellaneous memory safety hazards (rv:9.0)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8195
  * MFSA 2011-54/CVE-2011-3661 (bmo#691299)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8196
    Potentially exploitable crash in the YARR regular expression
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8197
    library
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8198
  * MFSA 2011-55/CVE-2011-3658 (bmo#708186)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8199
    nsSVGValue out-of-bounds access
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8200
  * MFSA 2011-56/CVE-2011-3663 (bmo#704482)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8201
    Key detection without JavaScript via SVG animation
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8202
  * MFSA 2011-58/VE-2011-3665 (bmo#701259)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8203
    Crash scaling <video> to extreme sizes
363
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8204
358
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8205
-------------------------------------------------------------------
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8206
Sun Nov 27 03:51:54 UTC 2011 - mgorse@suse.com
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8207
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8208
- Fix accessibility under GNOME 3 (bnc#732898)
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8209
355
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8210
-------------------------------------------------------------------
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8211
Sat Nov 12 15:16:38 UTC 2011 - dvaleev@suse.com
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8212
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8213
- fix ppc64 build
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8214
350
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8215
-------------------------------------------------------------------
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8216
Sun Nov  6 08:20:59 UTC 2011 - wr@rosenauer.org
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8217
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8218
- update to Firefox 8 (bnc#728520)
354
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8219
  * MFSA 2011-47/CVE-2011-3648 (bmo#690225)
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8220
    Potential XSS against sites using Shift-JIS
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8221
  * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8222
    Miscellaneous memory safety hazards
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8223
  * MFSA 2011-49/CVE-2011-3650 (bmo#674776)
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8224
    Memory corruption while profiling using Firebug
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8225
  * MFSA 2011-52/CVE-2011-3655 (bmo#672182)
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8226
    Code execution via NoWaiverWrapper
350
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8227
- rebased patches
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8228
344
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8229
-------------------------------------------------------------------
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8230
Thu Oct 20 12:34:47 UTC 2011 - wr@rosenauer.org
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8231
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8232
- enable telemetry prompt
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8233
337
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8234
-------------------------------------------------------------------
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8235
Fri Sep 30 10:52:36 UTC 2011 - wr@rosenauer.org
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8236
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8237
- update to minor release 7.0.1
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8238
  * fixed staged addon updates
339
db8b891eeb1e locale should always match the system one in a package environment
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 337
diff changeset
  8239
- set intl.locale.matchOS=true in the base package as it causes
db8b891eeb1e locale should always match the system one in a package environment
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 337
diff changeset
  8240
  too much confusion when it's only available with branding-openSUSE
337
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8241
334
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8242
-------------------------------------------------------------------
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8243
Fri Sep 23 11:22:22 UTC 2011 - wr@rosenauer.org
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8244
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8245
- update to Firefox 7 (bnc#720264)
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8246
  including
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8247
  * Improve Responsiveness with Memory Reductions
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8248
  * Instant Sync
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8249
  * WebSocket protocol 8
337
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8250
  * MFSA 2011-36/CVE-2011-2995/CVE-2011-2996/CVE-2011-2997
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8251
    Miscellaneous memory safety hazards
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8252
  * MFSA 2011-39/CVE-2011-3000 (bmo#655389)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8253
    Defense against multiple Location headers due to CRLF Injection
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8254
  * MFSA 2011-40/CVE-2011-2372/CVE-2011-3001
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8255
    Code installation through holding down Enter
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8256
  * MFSA 2011-41/CVE-2011-3002/CVE-2011-3003 (bmo#680840, bmo#682335)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8257
    Potentially exploitable WebGL crashes
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8258
  * MFSA 2011-42/CVE-2011-3232 (bmo#653672)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8259
    Potentially exploitable crash in the YARR regular expression
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8260
    library
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8261
  * MFSA 2011-43/CVE-2011-3004 (bmo#653926)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8262
    loadSubScript unwraps XPCNativeWrapper scope parameter
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8263
  * MFSA 2011-44/CVE-2011-3005 (bmo#675747)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8264
    Use after free reading OGG headers
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8265
  * MFSA 2011-45
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8266
    Inferring keystrokes from motion data
334
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8267
- removed obsolete mozilla-cairo-lcd.patch
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8268
- rebased patches
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8269
- removed XLIB_SKIP_ARGB_VISUALS=1 from environment in
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8270
  mozilla.sh.in (bnc#680758)
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8271
327
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8272
-------------------------------------------------------------------
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8273
Fri Sep 16 06:57:38 UTC 2011 - wr@rosenauer.org
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8274
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8275
- fixed loading of kde.js under KDE (bnc#718311)
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8276
312
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8277
-------------------------------------------------------------------
316
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8278
Wed Sep 14 07:02:04 UTC 2011 - wr@rosenauer.org
312
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8279
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8280
- add dbus-1-glib-devel to BuildRequires (not pulled in
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8281
  automatically anymore on 12.1)
316
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8282
- increase minversions for NSPR and NSS
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8283
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8284
-------------------------------------------------------------------
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8285
Fri Sep  9 20:44:15 UTC 2011 - wr@rosenauer.org
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8286
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8287
- recreated source archive to get correct source-stamp.txt
312
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8288
311
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8289
-------------------------------------------------------------------
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8290
Wed Sep  7 14:30:34 UTC 2011 - pcerny@suse.com
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8291
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8292
- security update to 6.0.2 (bnc#714931)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8293
  * Complete blocking of certificates issued by DigiNotar
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8294
    (bmo#683449)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8295
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8296
-------------------------------------------------------------------
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8297
Fri Sep  2 14:40:07 UTC 2011 - pcerny@suse.com
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8298
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8299
- security update to 6.0.1 (bnc#714931)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8300
  * MFSA 2011-34
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8301
    Protection against fraudulent DigiNotar certificates
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8302
    (bmo#682927)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8303
306
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8304
-------------------------------------------------------------------
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8305
Fri Aug 12 21:16:19 UTC 2011 - wr@rosenauer.org
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8306
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8307
- update to 6.0 (bnc#712224)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8308
  included security fixes MFSA 2011-29
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8309
  * CVE-2011-2989/CVE-2011-2991/CVE-2011-2992/CVE-2011-2985
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8310
    Miscellaneous memory safety hazards
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8311
  * CVE-2011-2993 (bmo#657267)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8312
    Unsigned scripts can call script inside signed JAR
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8313
  * CVE-2011-2988 (bmo#665934)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8314
    Heap overflow in ANGLE library
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8315
  * CVE-2011-0084 (bmo#648094)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8316
    Crash in SVGTextElement.getCharNumAtPosition()
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8317
  * CVE-2011-2990
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8318
    Credential leakage using Content Security Policy reports
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8319
  * CVE-2011-2986 (bmo#655836)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8320
    Cross-origin data theft using canvas and Windows D2D
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8321
- removed obsolete curl header dependency (mozilla-curl.patch)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8322
289
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8323
-------------------------------------------------------------------
292
058eaa15d5d8 update to 6.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 291
diff changeset
  8324
Fri Jul 22 13:34:12 UTC 2011 - wr@rosenauer.org
058eaa15d5d8 update to 6.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 291
diff changeset
  8325
058eaa15d5d8 update to 6.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 291
diff changeset
  8326
- update to 6.0b3
289
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8327
  * removed obsolete patches
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8328
    - firefox-shellservice.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8329
    - mozilla-gio.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8330
    - mozilla-ppc-ipc.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8331
    - firefox-linkorder.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8332
    - firefox-no-sync-l10n.patch
293
3fd4e37e5e52 fix symbolstore.py for linux3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 292
diff changeset
  8333
- recognize linux3 as platform for symbolstore.py
289
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8334
288
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8335
-------------------------------------------------------------------
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8336
Fri Jul  1 19:53:18 CEST 2011 - vuntz@opensuse.org
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8337
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8338
- Add x-scheme-handler/ftp to the MimeType key in the .desktop, to
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8339
  let desktops know that Firefox can deal with ftp: URIs.
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8340
286
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8341
-------------------------------------------------------------------
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8342
Fri Jul  1 06:45:08 UTC 2011 - wr@rosenauer.org
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8343
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8344
- create upstream branding package again (supposedly empty)
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8345
  (bnc#703401)
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8346
- fix build on SLE11 (changes do not affect/are not applied for
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8347
  later versions)
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8348
283
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8349
-------------------------------------------------------------------
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8350
Wed Jun 22 06:41:17 UTC 2011 - wr@rosenauer.org
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8351
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8352
- enable startup notification (bnc#701465)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8353
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8354
-------------------------------------------------------------------
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8355
Mon Jun 20 19:37:01 UTC 2011 - wr@rosenauer.org
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8356
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8357
- update to 5.0 final
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8358
- included fixes for security issues: (bnc#701296, bnc#700578)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8359
  * MFSA 2011-19/CVE-2011-2374 CVE-2011-2375
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8360
    Miscellaneous memory safety hazards
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8361
  * MFSA 2011-20/CVE-2011-2373 (bmo#617247)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8362
    Use-after-free vulnerability when viewing XUL document with
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8363
    script disabled
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8364
  * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8365
    Memory corruption due to multipart/x-mixed-replace images
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8366
  * MFSA 2011-22/CVE-2011-2371 (bmo#664009)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8367
    Integer overflow and arbitrary code execution in
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8368
    Array.reduceRight()
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8369
  * MFSA 2011-25/CVE-2011-2366
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8370
    Stealing of cross-domain images using WebGL textures
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8371
  * MFSA 2011-26/CVE-2011-2367 CVE-2011-2368
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8372
    Multiple WebGL crashes
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8373
  * MFSA 2011-27/CVE-2011-2369 (bmo#650001)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8374
    XSS encoding hazard with inline SVG
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8375
  * MFSA 2011-28/CVE-2011-2370 (bmo#645699)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8376
    Non-whitelisted site can trigger xpinstall
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8377
279
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8378
-------------------------------------------------------------------
282
78a523efc513 fix build for 12.1 and above by building dump_syms dynamic
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 281
diff changeset
  8379
Mon Jun 20 09:17:42 UTC 2011 - wr@rosenauer.org
281
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8380
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8381
- update to 5.0b7
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8382
  * updated supported locales
282
78a523efc513 fix build for 12.1 and above by building dump_syms dynamic
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 281
diff changeset
  8383
- do not build dump_syms static (not needed for us)
78a523efc513 fix build for 12.1 and above by building dump_syms dynamic
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 281
diff changeset
  8384
  -> fix build for openSUSE 12.1 and above
281
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8385
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8386
-------------------------------------------------------------------
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8387
Wed Jun 15 14:59:32 UTC 2011 - wr@rosenauer.org
279
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8388
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8389
- update to 5.0b6
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8390
- include proper revision information into the build
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8391
- speedier find-external-requires.sh
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8392
263
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8393
-------------------------------------------------------------------
277
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8394
Tue May 31 06:53:55 UTC 2011 - wr@rosenauer.org
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8395
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8396
- update to 5.0b3
263
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8397
- transformed to standalone Firefox (not xulrunner based)
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8398
  (with new Firefox rapid release cycle it makes no sense anymore)
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8399
  * imported all relevant xulrunner patches
277
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8400
- do not compile in build timestamp
263
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8401
252
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8402
-------------------------------------------------------------------
281
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8403
Fri Apr 15 07:08:53 UTC 2011 - wr@rosenauer.org
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8404
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8405
- security update to 4.0.1 (bnc#689281)
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8406
  * MFSA 2011-12/ CVE-2011-0069 CVE-2011-0070 CVE-2011-0079
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8407
    CVE-2011-0080 CVE-2011-0081
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8408
    Miscellaneous memory safety hazards
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8409
  * MFSA 2011-17/CVE-2011-0068 (bmo#623791)
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8410
    WebGLES vulnerabilities
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8411
  * MFSA 2011-18/CVE-2011-1202 (bmo#640339)
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8412
    XSLT generate-id() function heap address leak
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8413
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8414
-------------------------------------------------------------------
252
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8415
Wed Mar 30 11:24:36 UTC 2011 - wr@rosenauer.org
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8416
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8417
- add all available icon sizes
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8418
247
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8419
-------------------------------------------------------------------
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8420
Tue Mar 29 11:55:53 UTC 2011 - cfarrell@novell.com
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8421
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8422
- license update: MPLv1.1 or GPLv2+ or LGPLv2+
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8423
  Sync licenses with Fedora. MPL does not state ^or later^
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8424
236
a4f5954df3a3 update for 2.0/4.0rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 230
diff changeset
  8425
-------------------------------------------------------------------
239
99a267a3f1d3 update to rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 238
diff changeset
  8426
Fri Mar 18 08:49:15 UTC 2011 - wr@rosenauer.org
99a267a3f1d3 update to rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 238
diff changeset
  8427
99a267a3f1d3 update to rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 238
diff changeset
  8428
- update to version 4.0rc2
238
d537c4a65693 fixed rpm macros (bnc#679950)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 236
diff changeset
  8429
- fixed rpm macros delivered with devel package (bnc#679950)
236
a4f5954df3a3 update for 2.0/4.0rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 230
diff changeset
  8430
230
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8431
-------------------------------------------------------------------
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8432
Wed Feb 23 07:52:04 UTC 2011 - wr@rosenauer.org
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8433
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8434
- update to version 4.0b12
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8435
- rebased patches
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8436
223
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8437
-------------------------------------------------------------------
229
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8438
Fri Feb  4 09:32:50 UTC 2011 - wr@rosenauer.org
226
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8439
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8440
- update to version 4.0b11
229
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8441
  * loads of bugfixes compared to last beta
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8442
  * added "Do Not Track" option
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8443
- rebased patches
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8444
- disable testpilot
226
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8445
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8446
-------------------------------------------------------------------
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8447
Fri Jan 28 08:56:12 UTC 2011 - wr@rosenauer.org
223
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8448
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8449
- set correct desktop file name within KDE for 11.4 and up
225
5a7504b93699 Provide devel package with helper script and rpm macros for easier addon packaging. (patch submitted from Ludwig Nussel)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 223
diff changeset
  8450
- add devel package with macros for extensions (from lnussel@suse.de)
223
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8451
221
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8452
-------------------------------------------------------------------
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8453
Sat Jan 22 22:21:52 UTC 2011 - wr@rosenauer.org
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8454
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8455
- update to version 4.0b10
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8456
- removed obsolete firefox-shell-bmo624267.patch
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8457
- testpilot moved to distribution/extensions
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8458
- updated locale provides and removed bn-IN from locales
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8459
210
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8460
-------------------------------------------------------------------
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8461
Tue Jan 11 06:13:40 UTC 2011 - wr@rosenauer.org
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8462
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8463
- update to version 4.0b9
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8464
- added x-scheme-handler for http and https to desktop file for
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8465
  newer Gnome environments
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8466
- fixed default browser check/set for GIO (bmo#611953)
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8467
  (mozilla-shellservice.patch)
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8468
- removed obsolete firefox-appname.patch (integrated into
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8469
  shellservice patch)
217
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8470
- renamed desktop file to firefox.desktop for 11.4 and newer
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8471
  (bnc#664211)
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8472
- removed support for 10.3 and older from the spec file
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8473
- removed obsolete "Ximian" categories from desktop file
210
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8474
207
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8475
-------------------------------------------------------------------
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8476
Mon Jan  3 17:35:46 CET 2011 - meissner@suse.de
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8477
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8478
- Mirror ac_add_options --disable-ipc from xulrunner for PowerPC.
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8479
203
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8480
-------------------------------------------------------------------
206
80e6366ea8ce update for 2.0b8/4.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 203
diff changeset
  8481
Wed Dec 15 07:49:45 UTC 2010 - wr@rosenauer.org
80e6366ea8ce update for 2.0b8/4.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 203
diff changeset
  8482
80e6366ea8ce update for 2.0b8/4.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 203
diff changeset
  8483
- update to version 4.0beta8
203
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8484
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8485
-------------------------------------------------------------------
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8486
Tue Nov 30 14:19:59 UTC 2010 - wr@rosenauer.org
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8487
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8488
- major update to version 4.0beta7
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8489
  * based on mozilla-xulrunner20
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8490
  * far too many internal changes to list
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8491
195
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8492
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8493
Wed Oct 27 07:12:14 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8494
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8495
- security update to 3.6.12 (bnc#649492)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8496
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8497
    Heap buffer overflow mixing document.write and DOM insertion
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8498
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8499
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8500
Wed Oct  6 07:13:52 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8501
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8502
- security update to 3.6.11 (bnc#645315)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8503
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8504
    Miscellaneous memory safety hazards
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8505
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8506
    Buffer overflow and memory corruption using document.write
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8507
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8508
    Use-after-free error in nsBarProp
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8509
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8510
    Dangling pointer vulnerability in LookupGetterOrSetter
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8511
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8512
    XSS in gopher parser when parsing hrefs
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8513
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8514
    Cross-site information disclosure via modal calls
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8515
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8516
    SSL wildcard certificate matching IP addresses
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8517
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8518
    Unsafe library loading vulnerabilities
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8519
  * MFSA 2010-72/CVE-2010-3173
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8520
    Insecure Diffie-Hellman key exchange
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8521
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8522
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8523
Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8524
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8525
- update to 3.6.10
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8526
  * fixing startup topcrash (bmo#594699)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8527
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8528
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8529
Thu Aug 26 07:40:28 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8530
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8531
- security update to 3.6.9 (bnc#637303)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8532
  * MFSA 2010-49/CVE-2010-3169
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8533
    Miscellaneous memory safety hazards
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8534
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8535
    Frameset integer overflow vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8536
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8537
    Dangling pointer vulnerability using DOM plugin array
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8538
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8539
    Heap buffer overflow in nsTextFrameUtils::TransformText
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8540
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8541
    Dangling pointer vulnerability in nsTreeSelection
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8542
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8543
    XUL tree removal crash and remote code execution
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8544
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8545
    Dangling pointer vulnerability in nsTreeContentView
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8546
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8547
    Crash and remote code execution in normalizeDocument
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8548
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8549
    SJOW creates scope chains ending in outer object
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8550
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8551
    UTF-7 XSS by overriding document charset using <object> type
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8552
    attribute
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8553
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8554
    Copy-and-paste or drag-and-drop into designMode document allows
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8555
    XSS
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8556
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8557
    Information leak via XMLHttpRequest statusText
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8558
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8559
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8560
Wed Jul 28 08:33:14 CEST 2010 - meissner@suse.de
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8561
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8562
- disable crash reporter for non x86/x86_64 to make it build.
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8563
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8564
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8565
Sat Jul 24 12:42:58 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8566
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8567
- security update to 3.6.8 (bnc#622506)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8568
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8569
    Dangling pointer crash regression from plugin parameter array
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8570
    fix
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8571
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8572
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8573
Fri Jul 16 06:48:44 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8574
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8575
- security update to 3.6.7 (bnc#622506)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8576
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8577
    Miscellaneous memory safety hazards
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8578
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8579
    DOM attribute cloning remote code execution vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8580
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8581
    Use-after-free error in NodeIterator
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8582
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8583
    Plugin parameter EnsureCachedAttrParamArrays remote code
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8584
    execution vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8585
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8586
    Arbitrary code execution using SJOW and fast native function
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8587
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8588
    nsCSSValue::Array index integer overflow
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8589
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8590
    nsTreeSelection dangling pointer remote code execution
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8591
    vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8592
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8593
    Remote code execution using malformed PNG image
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8594
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8595
    Cross-origin data disclosure via Web Workers and importScripts
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8596
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8597
    Same-origin bypass using canvas context
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8598
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8599
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8600
    character to vanish
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8601
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8602
    Multiple location bar spoofing vulnerabilities
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8603
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8604
    Cross-domain data theft using CSS
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8605
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8606
    Cross-origin data leakage from script filename in error messages
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8607
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8608
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8609
Sun Jun 27 20:24:31 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8610
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8611
- update to 3.6.6 release
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8612
  * modifies the crash protection feature to increase the amount 
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8613
    of time that plugins are allowed to be non-responsive before 
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8614
    being terminated.
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8615
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8616
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8617
Wed Jun 23 14:40:35 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8618
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8619
- update to final 3.6.4 release (bnc#603356)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8620
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8621
    CVE-2010-1203
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8622
    Crashes with evidence of memory corruption (rv:1.9.2.4)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8623
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8624
    Freed object reuse across plugin instances
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8625
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8626
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8627
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8628
    Integer Overflow in XSLT Node Sorting
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8629
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8630
    focus() behavior can be used to inject or steal keystrokes
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8631
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8632
    Content-Disposition: attachment ignored if
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8633
    Content-Type: multipart also present
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8634
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8635
    User tracking across sites using Math.random()
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8636
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8637
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8638
Mon Jun  7 07:07:33 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8639
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8640
- update to 3.6.4(build6)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8641
64
7bb1edb78dd5 Update to 1.9.2.4/3.6.4pre to prepare the bigger Lorentz merge
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 63
diff changeset
  8642
-------------------------------------------------------------------
67
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8643
Sun Apr 18 09:42:40 CEST 2010 - wr@rosenauer.org
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8644
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8645
- security update to 3.6.4 (Lorentz)
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8646
  * enable crashreporter also for x86-64
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8647
  * Flash runs in a separate process to avoid crashing Firefox
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8648
    (ix86 only; x86-64 still uses nspluginwrapper)
64
7bb1edb78dd5 Update to 1.9.2.4/3.6.4pre to prepare the bigger Lorentz merge
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 63
diff changeset
  8649
63
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8650
-------------------------------------------------------------------
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8651
Thu Apr  1 11:15:38 UTC 2010 - wr@rosenauer.org
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8652
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8653
- security update to 3.6.3
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8654
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8655
    Re-use of freed object due to scope confusion
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8656
59
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8657
-------------------------------------------------------------------
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8658
Thu Mar 18 06:43:33 CET 2010 - wr@rosenauer.org
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8659
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8660
- security update to version 3.6.2 (bnc#586567)
63
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8661
  * MFSA 2010-08/CVE-2010-1028
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8662
    WOFF heap corruption due to integer overflow
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8663
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8664
    Deleted frame reuse in multipart/x-mixed-replace image
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8665
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8666
    XSS via plugins and unprotected Location object
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8667
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8668
    Crashes with evidence of memory corruption
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8669
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8670
    XSS using addEventListener and setTimeout on a wrapped object
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8671
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8672
    Content policy bypass with image preloading
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8673
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8674
    Browser chrome defacement via cached XUL stylesheets
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8675
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8676
    Asynchronous Auth Prompt attaches to wrong window
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8677
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8678
    Crashes with evidence of memory corruption
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8679
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8680
    Dangling pointer vulnerability in nsTreeContentView
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8681
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8682
    Dangling pointer vulnerability in nsPluginArray
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8683
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8684
    Chrome privilege escalation via forced URL drag and drop
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8685
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8686
    Update NSS to support TLS renegotiation indication
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8687
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8688
    Image src redirect to mailto: URL opens email editor
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8689
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8690
    XMLDocument::load() doesn't check nsIContentPolicy
59
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8691
52
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8692
-------------------------------------------------------------------
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8693
Mon Jan 18 09:42:50 CET 2010 - wr@rosenauer.org
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8694
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8695
- update to 3.6rc2 (already named 3.6.0)
59
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8696
- removed obsolete orbit-devel build requirement
52
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8697
46
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8698
-------------------------------------------------------------------
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8699
Wed Jan  6 17:15:40 CET 2010 - wr@rosenauer.org
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8700
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8701
- major update to 3.6rc1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8702
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8703
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8704
Fri Dec 25 09:39:42 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8705
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8706
- update to version 3.5.7 (bnc#568011)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8707
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8708
    proxy servers that support NTLM auth (bmo#535193)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8709
- added missing lockdown preferences (bnc#567131)
46
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8710
39
f3cc5e946292 Add Firefox changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 31
diff changeset
  8711
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8712
Thu Dec 17 20:06:38 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8713
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8714
- readded firefox-ui-lockdown.patch (bnc#546158)
39
f3cc5e946292 Add Firefox changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 31
diff changeset
  8715
31
529467fa14cf MozillaFirefox changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 19
diff changeset
  8716
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8717
Thu Dec  3 21:53:59 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8718
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8719
- security update to version 3.5.6 (bnc#559807)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8720
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8721
    Crashes with evidence of memory corruption (rv:1.9.1.6)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8722
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8723
    Memory safety fixes in liboggplay media library
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8724
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8725
    Integer overflow, crash in libtheora video library
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8726
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8727
    NTLM reflection vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8728
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8729
    Location bar spoofing vulnerabilities
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8730
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8731
    Privilege escalation via chrome window.opener
19
f21a8e50d93d BNC#561027 - firefox urlbar style broken -> stripped down patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 18
diff changeset
  8732
- fixed firefox-browser-css.patch (bnc#561027)
18
c4da314d7975 Update to 1.9.2b5/3.6b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 12
diff changeset
  8733
12
1f7c3dc01e1c Prepare MozillaFirefox for KDE integration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 5
diff changeset
  8734
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8735
Mon Nov 23 22:31:21 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8736
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8737
- rebased patches for fuzz=0
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8738
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8739
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8740
Thu Nov  5 19:49:33 UTC 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8741
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8742
- update to version 3.5.5 (bnc#553172)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8743
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8744
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8745
Sat Oct 17 23:19:23 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8746
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8747
- security update to version 3.5.4 (bnc#545277)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8748
  * MFSA 2009-52/CVE-2009-3370 (bmo#511615)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8749
    Form history vulnerable to stealing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8750
  * MFSA 2009-53/CVE-2009-3274 (bmo#514823)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8751
    Local downloaded file tampering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8752
  * MFSA 2009-54/CVE-2009-3371 (bmo#514554)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8753
    Crash with recursive web-worker calls
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8754
  * MFSA 2009-55/CVE-2009-3372 (bmo#500644)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8755
    Crash in proxy auto-configuration regexp parsing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8756
  * MFSA 2009-56/CVE-2009-3373 (bmo#511689)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8757
    Heap buffer overflow in GIF color map parser
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8758
  * MFSA 2009-57/CVE-2009-3374 (bmo#505988)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8759
    Chrome privilege escalation in XPCVariant::VariantDataToJS()
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8760
  * MFSA 2009-59/CVE-2009-1563 (bmo#516396, bmo#516862)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8761
    Heap buffer overflow in string to number conversion
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8762
  * MFSA 2009-61/CVE-2009-3375 (bmo#503226)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8763
    Cross-origin data theft through document.getSelection()
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8764
  * MFSA 2009-62/CVE-2009-3376 (bmo#511521)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8765
    Download filename spoofing with RTL override
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8766
  * MFSA 2009-63/CVE-2009-3377/CVE-2009-3379/CVE-2009-3378
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8767
    Upgrade media libraries to fix memory safety bugs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8768
  * MFSA 2009-64/CVE-2009-3380/CVE-2009-3381/CVE-2009-3383
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8769
    Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8770
- removed upstreamed patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8771
  * firefox-bug506901.patch 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8772
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8773
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8774
Wed Oct  7 20:11:24 CEST 2009 - llunak@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8775
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8776
- fix KDE button order in one more place (bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8777
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8778
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8779
Fri Oct  2 20:26:49 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8780
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8781
- improve UI colors to be usable with dark themes at all 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8782
  (firefox-browser-css.patch) (bnc#503351)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8783
- extend list of supported architectures as ABI identifier
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8784
  (mozilla-abi.patch) (bnc#543460)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8785
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8786
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8787
Mon Sep 14 00:07:55 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8788
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8789
- added KDE integration patch from llunak@novell.com  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8790
  (firefox-kde.patch)  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8791
  * support for knotify, making -kde4-addon obsolete  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8792
  * KDE-specific support functional (bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8793
- do not build libnkgnomevfs (bmo#512671) (firefox-no-gnomevfs)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8794
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8795
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8796
Thu Sep 10 09:34:26 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8797
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8798
- security update to version 3.5.3 (bnc#534458)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8799
  * MFSA 2009-47/CVE-2009-3069/CVE-2009-3070/CVE-2009-3071/
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8800
    CVE-2009-3072/CVE-2009-3073/CVE-2009-3074/CVE-2009-3075
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8801
    Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8802
  * MFSA 2009-49/CVE-2009-3077 (bmo#506871)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8803
    TreeColumns dangling pointer vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8804
  * MFSA 2009-50/CVE-2009-3078 (bmo#453827)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8805
    Location bar spoofing via tall line-height Unicode characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8806
  * MFSA 2009-51/CVE-2009-3079 (bmo#454363)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8807
    Chrome privilege escalation with FeedWriter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8808
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8809
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8810
Wed Aug 19 22:14:07 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8811
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8812
- renamed patch firefox-contextmenu-gnome to firefox-cross-desktop
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8813
  as it contains more tweaks to handle non-Gnome environments and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8814
  especially KDE integration: 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8815
  * added the ability to set the KDE default browser 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8816
    (still part of bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8817
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8818
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8819
Sat Aug  8 00:14:18 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8820
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8821
- split -translations package into -common and -other
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8822
  (bnc#529180)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8823
- remove "set as background" from context menu if not running in
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8824
  Gnome (part of bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8825
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8826
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8827
Fri Jul 31 09:01:57 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8828
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8829
- security update to version 3.5.2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8830
  * MFSA 2009-38/CVE-2009-2470 (bmo#459524)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8831
    Data corruption with SOCKS5 reply containing DNS name longer
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8832
    than 15 characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8833
  * MFSA 2009-44/CVE-2009-2654 (bmo#451898)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8834
    Location bar and SSL indicator spoofing via window.open() on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8835
    invalid URL
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8836
  * MFSA 2009-45
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8837
    Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8838
  * MFSA 2009-46 (bmo#498897)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8839
    Chrome privilege escalation due to incorrectly cached wrapper
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8840
  * various other stability fixes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8841
- export MOZ_APP_LAUNCHER in the startscript (bmo#453689)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8842
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8843
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8844
Tue Jul 28 14:54:46 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8845
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8846
- fixed %exclude usage
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8847
- fixed preferences' advanced pane for fresh profiles (bmo#506901)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8848
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8849
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8850
Wed Jul 15 20:13:19 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8851
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8852
- security update to version 3.5.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8853
  * MFSA 2009-41
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8854
    Corrupt JIT state after deep return from native function
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8855
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8856
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8857
Mon Jul  6 12:33:47 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8858
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8859
- added mozilla-linkorder.patch to fix build with --as-needed
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8860
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8861
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8862
Tue Jun 30 08:52:00 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8863
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8864
- update to final version 3.5 (20090623)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8865
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8866
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8867
Tue Jun 23 09:39:50 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8868
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8869
- fixed build by linking to a real file
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8870
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8871
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8872
Thu Jun 18 10:19:40 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8873
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8874
- update to version 3.5rc2 (20090617)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8875
- BuildRequire mozilla-xulrunner191 = 1.9.1.0
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8876
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8877
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8878
Sat Jun  6 15:59:02 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8879
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8880
- update to version 3.5b99 (20090604)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8881
- BuildRequire mozilla-xulrunner191 = 1.9.1b99
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8882
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8883
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8884
Wed May 27 08:03:16 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8885
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8886
- fixed typos in improved xulrunner dependencies
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8887
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8888
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8889
Mon May 11 18:25:12 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8890
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8891
- use non-localized Downloads folder (bnc#501724)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8892
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8893
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8894
Mon May  4 07:57:50 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8895
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8896
- update to new major version 3.5b4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8897
  * based on Gecko 1.9.1 (mozilla-xulrunner191)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8898
  * Private Browsing Mode
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8899
  * TraceMonkey JavaScript engine
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8900
  * Geolocation support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8901
  * native JSON and web worker threads support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8902
  * speculative parsing for faster content rendering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8903
  * Some HTML5 support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8904
- updated firefox.schemas
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8905
- improved firefox-no-update.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8906
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8907
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8908
Tue Apr 28 10:47:54 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8909
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8910
- security update to 3.0.10
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8911
  * MFSA 2009-23/CVE-2009-1313 (bmo#489647)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8912
      Crash in nsTextFrame::ClearTextRun()
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8913
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8914
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8915
Thu Apr 16 13:52:21 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8916
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8917
- security update to 3.0.9 (bnc#495473)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8918
  * MFSA 2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304/CVE-2009-1305
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8919
      Crashes with evidence of memory corruption (rv:1.9.0.9)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8920
  * MFSA 2009-15/CVE-2009-0652 (bmo#479336)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8921
      URL spoofing with box drawing character
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8922
  * MFSA 2009-16/CVE-2009-1306 (bmo#474536)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8923
      jar: scheme ignores the content-disposition: header on the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8924
      inner URI
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8925
  * MFSA 2009-17/CVE-2009-1307 (bmo#481342)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8926
      Same-origin violations when Adobe Flash loaded via
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8927
      view-source: scheme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8928
  * MFSA 2009-18/CVE-2009-1308 (bmo#481558)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8929
      XSS hazard using third-party stylesheets and XBL bindings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8930
  * MFSA 2009-19/CVE-2009-1309 (bmo#482206,478433)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8931
      Same-origin violations in XMLHttpRequest and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8932
      XPCNativeWrapper.toString
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8933
  * MFSA 2009-20/CVE-2009-1310 (bmo#483086)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8934
      Malicious search plugins can inject code into arbitrary sites
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8935
  * MFSA 2009-21/CVE-2009-1311 (bmo#471962)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8936
      POST data sent to wrong site when saving web page with
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8937
      embedded frame
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8938
  * MFSA 2009-22/CVE-2009-1312 (bmo#475636)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8939
      Firefox allows Refresh header to redirect to javascript: URIs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8940
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8941
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8942
Fri Mar 27 09:43:43 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8943
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8944
- security update to 1.9.0.8 (bnc#488955,489411)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8945
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8946
      Crash and remote code execution in XSL transformation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8947
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8948
      Arbitrary code execution via XUL tree moveToEdgeShift
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8949
- allow RPM provides for stuff besides shared libraries
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8950
  (e.g. mime-types)
12
1f7c3dc01e1c Prepare MozillaFirefox for KDE integration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 5
diff changeset
  8951
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  8952
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8953
Sun Mar  1 11:08:58 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8954
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8955
- security update to 3.0.7 (bnc#478625)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8956
  * MFSA 2009-07 - Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8957
    CVE-2009-0771 - Layout Engine Crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8958
    CVE-2009-0772 - Layout Engine Crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8959
    CVE-2009-0773 - crashes in the JavaScript engine
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8960
    CVE-2009-0774 - Layout Engine Crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8961
  * MFSA 2009-08/CVE-2009-0775 - (bmo#474456)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8962
    Mozilla Firefox XUL Linked Clones Double Free Vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8963
  * MFSA 2009-09/CVE-2009-0776 (bmo#414540)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8964
    XML data theft via RDFXMLDataSource and cross-domain redirect
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8965
  * MFSA 2009-10/CVE-2009-0040 (bmo#478901)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8966
    Upgrade PNG library to fix memory safety hazards
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8967
  * MFSA 2009-11/CVE-2009-0777 (bmo#452979)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8968
    URL spoofing with invisible control characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8969
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8970
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8971
Wed Feb  4 18:58:59 EST 2009 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8972
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8973
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8974
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8975
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8976
Wed Jan 28 13:48:00 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8977
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8978
- security update to 3.0.6 (bnc#470074)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8979
  * MFSA 2009-06/CVE-2009-0358: Directives to not cache pages ignored
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8980
    (bmo#441751)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8981
  * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8982
    HTTPOnly cookies (bmo#380418)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8983
  * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8984
    local .desktop files (bmo#460425)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8985
  * MFSA 2009-03/CVE-2009-0355: Local file stealing with SessionStore
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8986
    (bmo#466937)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8987
  * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8988
    and window.eval (bmo#468581)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8989
  * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8990
    evidence of memory corruption (rv:1.9.0.6) (bmo#452913, 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8991
    bmo#449006, bmo#331088, bmo#401042, bmo#416461, bmo#422283,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8992
    bmo#422301, bmo#431705, bmo#437142, bmo#421839, bmo#420697,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8993
    bmo#461027)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8994
  * (non security) added lv locale
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8995
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8996
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8997
Thu Jan 22 11:09:42 EST 2009 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8998
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8999
- Fix the wrapper script for PowerPC 64-bits (bnc#464753)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9000
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9001
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9002
Wed Dec 17 13:13:25 EST 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9003
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9004
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9005
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9006
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9007
Mon Dec 15 16:41:57 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9008
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9009
- security update to 1.9.0.5 (bnc#455804)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9010
  for details
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9011
  http://www.mozilla.org/security/known-vulnerabilities/firefox30.html
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9012
  * removed aboutRights workaround again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9013
  * added et locale
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9014
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9015
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9016
Tue Nov 25 10:14:45 EST 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9017
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9018
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9019
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9020
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9021
Sat Nov 22 13:26:03 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9022
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9023
- replace license agreement with about:rights toolbar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9024
  (backported from upcoming FF 3.0.5) (bnc#436054, bmo#456439)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9025
  (it's always displayed in en-US)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9026
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9027
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9028
Fri Nov 21 03:11:41 EST 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9029
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9030
- Update firefox-lockdown-ui.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9031
  * Print Setup is now properly locked down. bnc#431028
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9032
  * Bookmark editing it now properly locked down. bnc#439335
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9033
  * Bookmars are properly hidden.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9034
  * History is properly locked down. bnc#439343
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9035
  * Make sure the search bar is not put back when resetting the 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9036
    toolbar. bnc#439358
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9037
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9038
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9039
Thu Nov 20 18:49:19 CST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9040
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9041
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9042
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9043
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9044
Thu Nov 13 08:22:13 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9045
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9046
- lockdown cleanup
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9047
  * removed gecko-lockdown.patch from Firefox (it's in xulrunner)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9048
  * stripped out some toolkit stuff from firefox-ui-lockdown
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9049
  * added extra default preferences for lockdown
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9050
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9051
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9052
Wed Nov 12 17:55:19 CST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9053
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9054
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9055
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9056
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9057
Tue Nov 11 09:15:59 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9058
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9059
- update to security/maintenance release 3.0.4 (bnc#439841)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9060
  * support additional locales (bg, cy, eo, oc)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9061
- removed obsolete configure option (enable-gconf)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9062
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9063
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9064
Fri Nov  7 15:39:54 CST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9065
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9066
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9067
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9068
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9069
Tue Nov  4 23:27:03 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9070
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9071
- moved gconf schema into branding packages (bnc#441646)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9072
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9073
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9074
Tue Oct 28 16:16:14 EDT 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9075
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9076
- Fix missing %endif (for fix for bnc#434283)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9077
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9078
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9079
Mon Oct 27 17:05:02 EDT 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9080
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9081
- Add disable_show_passwords to firefox.schemas. (FATE #301534)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9082
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9083
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9084
Mon Oct 27 11:57:29 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9085
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9086
- make biarch dependencies work correctly (bnc#434283)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9087
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9088
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9089
Thu Oct 23 10:14:22 EDT 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9090
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9091
- Added firefox-ui-lockdown.patch and gecko-lockdown.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9092
  * Lockdown: FATE#302023, FATE#302024
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9093
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9094
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9095
Mon Oct  6 14:55:48 CEST 2008 - sbrabec@suse.cz
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9096
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9097
- Conflict with other branding providers (FATE#304881).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9098
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9099
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9100
Mon Sep 29 12:27:43 CDT 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9101
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9102
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9103
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9104
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9105
Mon Sep 29 11:36:30 CDT 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9106
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9107
- Remove a reference to a stale patch.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9108
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9109
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9110
Sun Sep 28 18:19:26 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9111
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9112
- update to regression fix release 3.0.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9113
  * Fixed a problem where users were unable to retrieve saved
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9114
    passwords or save new passwords (bmo#454708, bnc#429179#c20,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9115
    CVE-2008-4063, CVE-2008-4064, CVE-2008-3836, andCVE-2008-4070)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9116
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9117
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9118
Thu Sep 25 14:47:13 CDT 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9119
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9120
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9121
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9122
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9123
Mon Sep 15 13:45:16 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9124
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9125
- update to security/maintenance release 3.0.2 (bnc#429179)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9126
- removed unused files from sources
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9127
- fix more rpmlint complaints and provide a config file to filter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9128
  false positives
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9129
- disable Gnome crashreporter as it has no value
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9130
- brought man-page up to date for the firefox stub
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9131
  (removing firefox-bin reference)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9132
- en-US locale not longer packaged in translations subpackage
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9133
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9134
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9135
Fri Aug 15 18:56:26 CDT 2008 - maw@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9136
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9137
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9138
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9139
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9140
Mon Aug  4 09:26:05 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9141
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9142
- Tweak branding split
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9143
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9144
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9145
Tue Jul 29 15:02:47 CEST 2008 - vuntz@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9146
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9147
- Create branding package (bnc#390752):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9148
  + search-addons.tar.bz2, bookmarks.html.suse and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9149
    firefox-suse-default-prefs.js will be moved to
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9150
    MozillaFirefox-branding-openSUSE
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9151
  + create a MozillaFirefox-branding-upstream package
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9152
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9153
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9154
Mon Jul 28 20:54:22 CEST 2008 - mauro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9155
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9156
- Update to stability/security release 3.0.1 (bnc#407573) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9157
  (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9158
  + MFSA 2008-36  Crash with malformed GIF file on Mac OS X
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9159
  + MFSA 2008-35 Command-line URLs launch multiple tabs when 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9160
    Firefox not running
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9161
  + MFSA 2008-34 Remote code execution by overflowing CSS reference counter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9162
- Set browser.shell.checkDefaultBrowser to true (bnc#404119) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9163
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9164
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9165
Tue Jun 17 18:49:33 CEST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9166
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9167
- Merge changes from the build service (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9168
  (bnc#400001 and SWAMP#18164).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9169
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9170
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9171
Tue Jun 17 14:40:04 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9172
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9173
- update to version 3.0
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9174
- fixed double entry in bookmarks for www.opensuse.org (bnc#396980
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9175
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9176
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9177
Thu May 15 13:45:51 CEST 2008 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9178
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9179
- Add Planet SUSE, forums.o.o and How to participate to default
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9180
  URLs.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9181
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9182
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9183
Fri May  2 16:25:24 CEST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9184
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9185
- network.protocol-handler.app.* prefs are no longer supported;
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9186
  remove references to them from firefox-suse-default-prefs.js
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9187
  (bnc#383697).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9188
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9189
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9190
Thu Apr  3 01:42:34 CEST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9191
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9192
- Update to Firefox 3.0b5 (2.9.95) (thanks, Wolfgang).
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9193
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9194
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9195
Wed Mar 26 01:05:18 CET 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9196
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9197
- Merge changes from the build service (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9198
- Update to the fourth Firefox 3.0 Beta (2.9.94):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9199
  + Based upon the Gecko 1.9 Web rendering platform, which improves
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9200
    performance, stability, and rendering correctness; it also
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9201
    boasts a considerable simplification in its code
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9202
  + Security improvements:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9203
    * One-click site info
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9204
    * Malware Protection
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9205
    * New Web Forgery Protection page
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9206
    * New SSL error pages
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9207
    * Add-ons and Plugin version check
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9208
    * Secure add-on updates
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9209
    * Effective top-level domain (eTLD) service to better restrict
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9210
      cookies and other restricted content to a single domain
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9211
    * Better protection against cross-site JSON data leaks
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9212
  + Usability improvements:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9213
    * Easier password management
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9214
    * Simplified add-on installation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9215
    * New Download Manager
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9216
    * Resumable downloading
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9217
    * Full page zoom
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9218
    * Podcasts and Videocasts can be associated with your media
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9219
      playback tools
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9220
    * Tab scrolling and quickmenu
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9221
    * Save what you were doing: Firefox will prompt users to save
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9222
      tabs on exit
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9223
    * Optimized Open in Tabs behavior
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9224
    * Location and Search bar size can now be customized with a
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9225
      simple resizer item
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9226
    * Text selection improvements
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9227
    * Find toolbar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9228
    * Improved integration with Linux: Firefox's default icons,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9229
      buttons, and menu styles now use the native GTK theme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9230
  + Personalization improvements:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9231
    * Star button: quickly add bookmarks from the location bar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9232
      with a single click; a second click lets you file and tag them
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9233
    * Tags: associate keywords with your bookmarks to sort them
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9234
      by topic
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9235
    * Location bar & auto-complete
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9236
    * Smart Bookmarks Folder
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9237
    * Places Organizer: view, organize and search through all
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9238
      of your bookmarks, tags, and browsing history with multiple
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9239
      views and smart folders to store your frequent searches
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9240
    * Web-based protocol handlers
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9241
    * Download & Install Add-ons
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9242
    * Easy to use Download Actions
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9243
  + Improved platform for web developers:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9244
    * New graphics and font handling: new graphics and text
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9245
      rendering architectures in Gecko 1.9 provides rendering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9246
      improvements in CSS, SVG as well as improved display of
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9247
      fonts with ligatures and complex scripts
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9248
    * Color management: (set gfx.color_management.enabled on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9249
      in about:config and restart the browser to enable.);
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9250
      Firefox can now adjust images with embedded color profiles
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9251
    * Offline support: enables web applications to provide
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9252
      offline functionality (website authors must add support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9253
      for offline browsing to their site for this feature
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9254
      to be available to users)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9255
  + Improved performance:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9256
    * Speed: improvements to the JavaScript engine as well as
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9257
      profile guided optimizations have resulted in significant
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9258
      improvements in performance; compared to Firefox 2,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9259
      web applications like Google Mail and Zoho Office run
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9260
      twice as fast in Firefox 3 Beta 4, and the popular
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9261
      SunSpider test from Apple shows improvements over
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9262
      previous releases
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9263
    * Memory usage: Several new technologies work together to
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9264
      reduce the amount of memory used by Firefox 3 Beta 4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9265
      over a web browsing session;  memory cycles are broken
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9266
      and collected by an automated cycle collector, a new
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9267
      memory allocator reduces fragmentation, hundreds of leaks
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9268
      have been fixed, and caching strategies have been tuned
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9269
    * Reliability: A user's bookmarks, history, cookies, and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9270
      preferences are now stored in a transactionally secure
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9271
      database format which will prevent data loss even if their
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9272
      system crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9273
- This version depends upon the mozilla-xulrunner190 package
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9274
- Drop various stale packages, respin several that have been
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9275
  kept around, and add a few new ones.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9276
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9277
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9278
Mon Feb 11 18:18:14 CET 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9279
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9280
- Security update to version 2.0.0.12 (bnc#354469):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9281
  + MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9282
    overlay
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9283
  + MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9284
    redirect
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9285
  + MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9286
    text files
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9287
  + MFSA 2008-08/CVE-2008-0591 File action dialog tampering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9288
  + MFSA 2008-06/CVE-2008-0419 Web browsing history and forward
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9289
    navigation stealing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9290
  + MFSA 2008-05/CVE-2008-0418 Directory traversal via chrome: URI
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9291
  + MFSA 2008-04/CVE-2008-0417 Stored password corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9292
  + MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS, Remote
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9293
    Code Execution
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9294
  + MFSA 2008-02/CVE-2008-0414 Multiple file input focus stealing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9295
    vulnerabilities
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9296
  + MFSA 2008-01/CVE-2008-0412 Crashes with evidence of memory
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9297
    corruption (rv:1.8.1.12)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9298
- Reference libaoss.so in start script (bnc#117079)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9299
- Remove mozilla-canvas-1.8.1.10.patch, as it has been upstreamed
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9300
- Update firefox-ui-lockdown.patch (FATE#301534, FATE#302023, and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9301
  FATE#302024)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9302
- Add application/x-xpinstall mime type to MozillaFirefox.desktop
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9303
- Add MozillaFirefox.xml to bind .xpi to application/x-xpinstall
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9304
  in desktop.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9305
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9306
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9307
Thu Jan 17 17:52:47 CET 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9308
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9309
- Add mozilla-maxpathlen.patch (#354150 and bmo #412610).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9310
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9311
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9312
Fri Dec 21 18:46:50 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9313
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9314
- Add firefox-348446-empty-lists.patch (bnc#348446).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9315
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9316
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9317
Wed Dec  5 02:21:26 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9318
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9319
- Respin proxy-dev.patch (bnc#340678) -- thanks, Anders!
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9320
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9321
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9322
Tue Nov 27 18:25:25 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9323
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9324
- Security update to version 2.0.0.10 (#341905, #341591):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9325
  + MFSA 2007-39  Referer-spoofing via window.location race condition
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9326
  + MFSA 2007-38 Memory corruption vulnerabilities (rv:1.8.1.10)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9327
  + MFSA 2007-37 jar: URI scheme XSS hazard
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9328
  + Fixes for regressions introduced in 2.0.0.8
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9329
  + Updated dbus.patch, startup.patch, misc.dif, and configure.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9330
- Add mozilla-gcc4.3-fixes.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9331
- Add mozilla-canvas-1.8.1.10.patch (#341591#c10).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9332
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9333
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9334
Mon Nov 26 18:27:25 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9335
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9336
- Build with -ftree-vrp -fwrapv, per advice in #342603#c17.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9337
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9338
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9339
Tue Nov 13 17:49:01 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9340
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9341
- Add firefox-gcc4.3-fixes.patch.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9342
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9343
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9344
Fri Oct 19 02:04:45 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9345
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9346
- Security update to version 2.0.0.8 (#332512) (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9347
  * MFSA 2007-29 Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9348
  * MFSA 2007-30 onUnload Tailgating
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9349
  * MFSA 2007-31 Digest authentication request splitting
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9350
  * MFSA 2007-32 File input focus stealing vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9351
  * MFSA 2007-33 XUL pages can hide the window titlebar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9352
  * MFSA 2007-34 Possible file stealing through sftp protocol
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9353
  * MFSA 2007-35 XPCNativeWraper pollution using Script object
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9354
  complete advisories on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9355
  http://www.mozilla.org/projects/security/known-vulnerabilities.html
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9356
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9357
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9358
Sun Sep 23 19:49:12 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9359
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9360
- Don't explicitly require libaoss.so (#326751).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9361
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9362
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9363
Fri Sep 14 23:13:06 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9364
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9365
- Update the Novell Support search plugin in search-addons.tar.bz2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9366
  (#297261)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9367
- Set the browser.tabs.loadFolderAndReplace preference to false
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9368
  by default (#230759).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9369
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9370
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9371
Wed Sep 12 15:21:06 CEST 2007 - dmueller@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9372
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9373
- fix hardlinks accross partitions 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9374
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9375
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9376
Thu Sep  6 16:07:12 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9377
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9378
- Add http://software.opensuse.org/search?baseproject=openSUSE:10.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9379
  to the default bookmarks (#308223).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9380
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9381
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9382
Mon Sep  3 22:33:09 CEST 2007 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9383
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9384
- move last change a bit further in specfile 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9385
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9386
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9387
Fri Aug 31 18:36:16 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9388
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9389
- Mark a .png file as nonexecutable. 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9390
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9391
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9392
Tue Aug 28 16:44:08 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9393
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9394
- Minor .spec update (#305193)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9395
  + Remove two obsolete patches
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9396
  + Correct releasedate
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9397
  + Include only the officially supported locales.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9398
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9399
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9400
Wed Aug 22 17:53:03 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9401
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9402
- Merge changes from the build service (thanks, Wolfgang):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9403
  + Provide locale dependency information (#302288)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9404
  + Add x11-session.patch, supporting X11 session management
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9405
    (#227047)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9406
  + Update to version 2.0.0.6
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9407
    * MFSA 2007-26  Privilege escalation through chrome-loaded 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9408
                    about:blank windows
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9409
    * MFSA 2007-27  Unescaped URIs passed to external programs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9410
                    (only relevant on Windows)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9411
- Use %fdupes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9412
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9413
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9414
Tue Aug 21 09:45:35 CEST 2007 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9415
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9416
- Adjust bookmarks: Add news.opensuse.org, use new software.o.o
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9417
  page.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9418
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9419
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9420
Thu Aug 16 14:57:27 CEST 2007 - mauro@suse.de 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9421
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9422
- Revert previous change.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9423
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9424
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9425
Tue Aug 14 11:58:23 CEST 2007 - mauro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9426
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9427
- Added support for ymp in the mimetypes.rdf
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9428
- Added OneClickInstallUrlHandler for handing the actual call from firefox.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9429
- Fixes bnc #295677 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9430
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9431
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9432
Mon Jul 23 18:57:07 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9433
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9434
- Security update to version 2.0.0.5 (#288115) which has fixes for:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9435
MFSA 2007-18
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9436
    CVE-2007-3734 - Browser flaws
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9437
    CVE-2007-3735 - Javascript flaws
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9438
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9439
MFSA 2007-19
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9440
    CVE-2007-3736
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9441
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9442
MFSA 2007-20
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9443
    CVE-2007-3089
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9444
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9445
MFSA 2007-21
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9446
    CVE-2007-3737
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9447
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9448
MFSA 2007-22
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9449
    CVE-2007-3285
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9450
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9451
MFSA 2007-23
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9452
    CVE-2007-3670
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9453
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9454
MFSA 2007-24
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9455
    CVE-2007-3656
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9456
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9457
MFSA 2007-25
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9458
    CVE-2007-3738
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9459
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9460
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9461
Thu Jun 21 15:59:01 CEST 2007 - adrian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9462
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9463
- fix changelog entry order
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9464
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9465
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9466
Mon Jun 18 13:22:42 CDT 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9467
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9468
- Use mozilla.sh.in from the build service (#230681).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9469
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9470
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9471
Tue Jun  5 15:55:08 CEST 2007 - sbrabec@suse.cz
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9472
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9473
- Removed invalid desktop category "Application" (#254654).
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9474
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9475
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9476
Mon Jun  4 19:53:35 CDT 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9477
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9478
- Security update to version 2.0.0.4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9479
- Refresh configure.patch, startup.patch, and visibility.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9480
- Now use l10n-%{version}.tar.bz2 instead of l10n.tar.bz2.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9481
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9482
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9483
Mon Apr 30 16:49:55 CEST 2007 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9484
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9485
- added unzip to BuildRequires 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9486
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9487
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9488
Wed Apr 18 14:16:44 CEST 2007 - mfabian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9489
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9490
- add Japanese to the languages which get PANGO enabled in the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9491
  start script to support the Japanese combining characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9492
  U+3099 U+309A (see bugzilla #262718 comment #29).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9493
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9494
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9495
Mon Mar 12 11:06:10 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9496
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9497
- Package gconf stuff.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9498
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9499
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9500
Wed Feb 21 16:37:25 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9501
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9502
- Security update to 2.0.0.2 (#244923), which covers:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9503
  + mfsa2007-01
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9504
    * CVE-2007-0775 - layout engine crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9505
    * CVE-2007-0776 - SVG
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9506
    * CVE-2007-0777 - javascript engine corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9507
  + mfsa2007-02
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9508
    * CVE-2007-0995 - Invalid trailing characters in HTML tag attributes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9509
    * CVE-2007-0996 - Child frame character set inheritance
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9510
    * CVE-2006-6077 - Injected password forms
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9511
  + mfsa2007-02
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9512
  + mfsa2007-03
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9513
    * CVE-2007-0078
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9514
  + mfsa2007-04
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9515
    * CVE-2007-0079
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9516
  + mfsa2007-05
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9517
    * CVE-2007-0780
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9518
    * CVE-2007-0800
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9519
  + mfsa2007-06
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9520
    * CVE-2007-0008 - client flaw
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9521
    * CVE-2007-0009 - server flaw
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9522
  + mfsa2007-07
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9523
    * CVE-2007-0981
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9524
- Updates mozilla.sh.in (#230681)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9525
- Fixes #232209
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9526
- Updates the man page (#243037)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9527
- Properly propagates exit codes (#241492)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9528
- Adds em-356370.patch (#217374)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9529
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9530
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9531
Thu Jan 25 10:16:56 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9532
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9533
- Fixup the Gnome paths, keeping in closer sync with the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9534
 buildservice.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9535
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9536
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9537
Thu Jan 18 09:27:54 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9538
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9539
- Gnome is now in /usr, so remove references to /opt/gnome
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9540
- Install firefox.png with the executable bit not set.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9541
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9542
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9543
Wed Jan 10 12:57:39 CET 2007 - meissner@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9544
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9545
- readd MozillaFirebird provides (was incorrect in removing it).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9546
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9547
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9548
Mon Jan  8 11:16:08 CET 2007 - meissner@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9549
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9550
- Do not provide MozillaFirebird, just obsolete it.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9551
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9552
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9553
Fri Dec  1 02:22:49 CET 2006 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9554
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9555
- Update gecko-lockdown.patch (#220616).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9556
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9557
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9558
Thu Nov 30 19:02:54 CET 2006 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9559
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9560
- Update firefox-suse-default-prefs.js, adding
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9561
  'pref("browser.backspace_action", 2);' (#217374)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9562
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9563
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9564
Thu Nov 30 08:17:28 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9565
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9566
- Fix last change (#224431).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9567
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9568
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9569
Wed Nov 29 11:45:47 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9570
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9571
- Change download bookmark (#224431).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9572
- Rename bookmark folder to openSUSE.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9573
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9574
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9575
Tue Nov 28 08:09:48 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9576
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9577
- Sync from Buildservice with following critical fixes (thanks
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9578
  Wolfgang Rosenauer!):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9579
  * fixed system-proxies.patch to actually work (#223881).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9580
  * Rearrange Bookmarks to pass trademark review.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9581
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9582
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9583
Mon Nov 27 19:40:44 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9584
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9585
- Fix tango theme (#223796).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9586
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9587
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9588
Mon Nov 27 17:40:50 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9589
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9590
- Use www.opensuse.org as home page.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9591
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9592
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9593
Sun Nov 12 11:28:00 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9594
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9595
- Set novell.com as home page.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9596
- Update from BuildService (thanks Wolfgang!):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9597
  - fixed crash in htmlparser (#217257, bmo #358797)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9598
  - added gconf2 as PreReq (#212505)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9599
  - added 32bit libaoss.so as requirement (#216266)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9600
  - Removed SUSE searchplugin (Portal not available anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9601
    (#216054)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9602
  - Removed obsolete xul-picker.patch and system-nspr.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9603
  - Fixed building on 10.1 and 10.0 (dbus)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9604
  - Removed obsolete throbber preference
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9605
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9606
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9607
Thu Nov  9 19:09:46 CET 2006 - jhargadon@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9608
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9609
- updated tango theme 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9610
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9611
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9612
Sun Oct 29 12:05:46 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9613
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9614
- Another fix for 214125, patch by Wolfgang Rosenauer.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9615
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9616
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9617
Thu Oct 26 06:58:59 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9618
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9619
- Fix gcc warnings about undefined operations, patch by
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9620
  Robert O'Callahan.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9621
- Update system-proxies.patch to fix error box (214125), patch by
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9622
  Robert O'Callahan.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9623
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9624
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9625
Mon Oct 23 21:54:54 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9626
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9627
- Update to current CVS version of 2.0.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9628
- Use www.opensuse.org as default home page for now (#203547).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9629
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9630
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9631
Sat Oct 21 08:53:50 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9632
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9633
- Disable non-working plasticfox and tango themes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9634
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9635
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9636
Fri Oct 20 20:16:29 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9637
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9638
- Fix building of locales.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9639
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9640
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9641
Fri Oct 20 11:27:23 CEST 2006 - mkoenig@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9642
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9643
- update to version 2.0rc3:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9644
  * New features: Visual Refresh, Built-in phishing protection,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9645
    Enhanced search capabilities, Improved tabbed browsing,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9646
    Resuming your browsing session, Previewing and subscribing 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9647
    to Web feeds, Inline spell checking, Live Titles,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9648
    Improved Add-ons manager, JavaScript 1.7, Extended search 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9649
    plugin format, Updates to the extension system, 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9650
    Client-side session and persistent storage, SVG text
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9651
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9652
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9653
Tue Oct 17 11:26:44 CEST 2006 - meissner@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9654
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9655
- disabled debugging.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9656
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9657
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9658
Tue Sep 12 20:27:02 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9659
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9660
- security update to version 1.5.0.7
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9661
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9662
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9663
Mon Aug 21 12:53:50 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9664
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9665
- added greasemonkey helper change (#199920)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9666
- fixed packager.mk for new make version
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9667
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9668
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9669
Fri Aug 11 20:51:48 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9670
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9671
- fixed crash in dbus component (patch by thoenig #197928) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9672
- use external adresses for PAC configuration (#196506)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9673
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9674
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9675
Mon Aug  7 09:26:58 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9676
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9677
- added symlink for Firefox 1.0.x compatibility
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9678
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9679
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9680
Sat Jul 29 08:48:53 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9681
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9682
- update to regression release 1.5.0.6 (#195043)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9683
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9684
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9685
Thu Jul 27 06:20:36 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9686
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9687
- security update to version 1.5.0.5 (#195043)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9688
  * observer-lock.patch integrated now
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9689
- fixed leak in JS' liveconnect (#186066)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9690
- fixed desktop file for old distributions
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9691
  (StartupNotify=false)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9692
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9693
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9694
Thu Jun 29 20:13:28 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9695
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9696
- fixed printing crash if the last used printer is not available
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9697
  anymore (#187013)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9698
  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9699
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9700
Fri Jun 16 22:11:22 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9701
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9702
- added 48x48 icon (#185777)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9703
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9704
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9705
Mon Jun 12 20:20:02 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9706
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9707
- fix overwrite confirmation for GTK filesaver (#179531)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9708
- get network.negotiate-auth.trusted-uris and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9709
  network.negotiate-auth.delegation-uris from gconf if
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9710
  system-settings are enabled (#184489)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9711
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9712
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9713
Thu Jun  1 20:34:43 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9714
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9715
- update to security/stability release 1.5.0.4 (#179011)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9716
- moved locale-global prefs to browserconfig.properties (#177881)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9717
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9718
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9719
Tue May 23 21:11:11 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9720
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9721
- complete implementation of startup-notification (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9722
  (including autoconf and remote support)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9723
- different home-pages for SLE10 and SL (#177881)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9724
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9725
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9726
Tue May 16 06:27:26 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9727
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9728
- fixed potential deadlock in nsObserverList::RemoveObserver
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9729
  (#173986, bmo #338069)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9730
- base startup notification on libstartup-notification (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9731
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9732
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9733
Thu May 11 09:39:27 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9734
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9735
- save printer settings properly (#174082, bmo #324072)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9736
- added startup notification support for showing load activity
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9737
  in Gnome and to avoid focus stealing prevention (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9738
- added StartupNotify=true to desktop file (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9739
- provide legacy symlink for NLD9 update compatibility (#173138)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9740
- fixed system-proxies patch to avoid unwanted wpad requests
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9741
  (#171743, #167613)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9742
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9743
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9744
Mon May  8 14:55:52 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9745
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9746
- preconfigure the theme according to the used desktop (#151163)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9747
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9748
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9749
Thu Apr 27 10:24:07 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9750
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9751
- last minute change for 1.5.0.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9752
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9753
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9754
Wed Apr 26 14:23:33 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9755
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9756
- security update to 1.5.0.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9757
- fix for typo in postscript.patch
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9758
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9759
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9760
Tue Apr 25 14:14:51 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9761
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9762
- fixed iframe crash (#169039, bmo #334515)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9763
- fixed img tag misuse (#168710, bmo #334341)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9764
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9765
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9766
Mon Apr 24 08:04:16 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9767
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9768
- improved postscript output (bmo #334485)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9769
- changed defaults for printer properties (#6534)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9770
- overwrite gnome-vfs' file protocol by providing "desktop-launch"
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9771
  (#131501)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9772
- get available paper sizes from CUPS (#65482)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9773
- replaced/removed complicated gconfd reload in %post (#167989)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9774
- fixed memory leak in clipboard caching (bmo #289897)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9775
  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9776
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9777
Tue Apr 11 08:35:53 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9778
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9779
- added (optional) plastikfox theme (#151163)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9780
- get some more security related patches (#148876)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9781
- finally fixed the default proxy configuration by adding a new
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9782
  UI option (#132398)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9783
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9784
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9785
Mon Apr  3 11:41:13 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9786
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9787
- fixed keyword fixup patch (#162532)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9788
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9789
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9790
Tue Mar 28 07:17:04 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9791
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9792
- don't use keyword fixup for pasted text (#160034, bmo #331522)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9793
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9794
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9795
Mon Mar 20 09:28:58 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9796
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9797
- added Tango theme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9798
- fixed reading proxies from gconf (#132398)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9799
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9800
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9801
Sun Mar 12 09:04:05 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9802
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9803
- tweaked bookmarks (fixed URLs)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9804
- added Khmer (km-*) to pango locales (#157397)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9805
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9806
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9807
Sat Mar  4 21:08:45 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9808
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9809
- fixed crash with multipart JPEGs (bmo #328684) (#140416)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9810
- got latest security fixes from upstream (#148876)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9811
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9812
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9813
Wed Feb 22 13:24:58 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9814
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9815
- fixed plugin loading when launched from Thunderbird (#151614)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9816
- merged dbus reconnection patch (#150042)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9817
- default to autodetect proxy (network.proxy.type=4) (#151811)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9818
- added GTK category to desktop file
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9819
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9820
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9821
Tue Feb 14 06:45:24 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9822
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9823
- modified lockdown patches (#67281, #67282)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9824
- applied set of security patches (#148876) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9825
  bmo bugs: 282105, 307989, 315625, 320459, 323634, 325403, 325947
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9826
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9827
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9828
Tue Feb  7 20:09:43 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9829
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9830
- fixed disabling of Pango (#148788)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9831
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9832
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9833
Thu Feb  2 21:51:30 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9834
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9835
- define gssapi lib explicitely (#147670)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9836
- use only official Firefox-Icon
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9837
- changed home-download patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9838
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9839
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9840
Sun Jan 29 09:54:49 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9841
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9842
- throbber URL is default again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9843
- removed firefox-showpass patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9844
- removed additional CA certs from builtin NSS
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9845
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9846
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9847
Fri Jan 27 17:55:21 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9848
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9849
- got some l10n changes from 1.8.0 branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9850
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9851
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9852
Fri Jan 27 08:15:09 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9853
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9854
- final 1.5.0.1 version
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9855
- make it possible to choose $HOME as download directory
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9856
  (#144894, bmo #300856)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9857
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9858
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9859
Wed Jan 25 21:33:43 CET 2006 - mls@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9860
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9861
- converted neededforbuild to BuildRequires
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9862
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9863
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9864
Sun Jan 22 17:06:57 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9865
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9866
- disable Pango if MOZ_ENABLE_PANGO is not set 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9867
  and no typical language which needs Pango is used (#143428)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9868
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9869
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9870
Wed Jan 18 10:27:30 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9871
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9872
- fixed DumpStackToFile() for glibc 2.4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9873
- added default (font) settings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9874
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9875
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9876
Thu Jan 12 10:23:58 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9877
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9878
- update to 1.5.0.1pre (20060111)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9879
- updated man-page
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9880
- fixed hovered tab close button
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9881
- only Requires mozilla-nspr instead of PreReq since
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9882
  there is no postinstall registration necessary anymore
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9883
- use system NSS from CODE10 on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9884
- use -fstack-protector where available
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9885
- changed unixproxy component to work on older distributions
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9886
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9887
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9888
Mon Jan  2 13:39:09 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9889
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9890
- added unixproxy component written by Robert O'Callahan (#132398)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9891
  (bmo #66057)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9892
- added official translations
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9893
- preload libaoss for plugin sound (#117079)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9894
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9895
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9896
Wed Dec 28 08:16:03 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9897
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9898
- get some patches from 1.8.0 branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9899
- readded modification to gconf-backend (bmo #321315)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9900
- readded lockdown stuff
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9901
- enable additional extension install directory (#120329)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9902
  (/usr/lib/browser-extensions/firefox)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9903
- added patch to make the XUL filechooser optional
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9904
  (MOZ_XUL_PICKER)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9905
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9906
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9907
Wed Dec 14 16:08:12 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9908
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9909
- fixed patch for parsing -remote parameter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9910
- removed default-plugin patch (not needed anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9911
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9912
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9913
Fri Dec  9 17:21:29 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9914
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9915
- fix to ignore X composite extension (#135373)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9916
- fixed parsing of -remote parameters (#134396)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9917
- activated locales as released
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9918
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9919
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9920
Tue Nov 29 21:33:13 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9921
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9922
- update to 1.5 (20051128)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9923
- don't override startup URL when changing Gecko versions (#135314)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9924
- added patch for GTK2 handling (#134831)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9925
- readded add-plugins stuff for compatibility
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9926
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9927
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9928
Fri Nov 18 07:41:41 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9929
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9930
- update to 1.5rc3 (20051117) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9931
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9932
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9933
Mon Oct 31 08:58:14 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9934
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9935
- updated l10n archive (20051030)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9936
- fixed postinstall script to copy plugin links instead of files
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9937
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9938
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9939
Fri Oct 28 06:43:27 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9940
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9941
- update to 1.5rc1 (20051027)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9942
- fixed profile locking on FAT partitions (bmo #313360)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9943
- introduced an rpath again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9944
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9945
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9946
Wed Oct 19 20:03:48 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9947
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9948
- update to snapshot 1.5 (20051019)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9949
- moved installation to /usr/%{_lib}/firefox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9950
- added dbus component to be able to get network status from
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9951
  NetworkManager (bmo #312793)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9952
- remove all update UI for application
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9953
- removed diable-gconf (no registration at build time anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9954
- removed rebuild-databases.sh (no system registration anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9955
- open links in new windows (#128087)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9956
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9957
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9958
Thu Oct  6 20:44:53 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9959
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9960
- update to Firefox 1.5b2 (20051005)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9961
- added supported translations
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9962
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9963
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9964
Sat Oct  1 15:09:18 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9965
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9966
- update to Firefox 1.5b1 (20050930) RPM version 1.4.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9967
- removed rebuild-databases.sh calls
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9968
- removed add-plugins.sh calls and corresponding triggers
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9969
- enabled SVG and Canvas support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9970
- fixed gconf urlhandler registration
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9971
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9972
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9973
Tue Sep 20 10:24:16 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9974
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9975
- security update to 1.0.7 (#117619)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9976
  * MFSA 2005-57: IDN heap overrun using soft-hyphens (bmo #307259)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9977
    (enabled IDN pref again)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9978
  * MFSA 2005-58: 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9979
      CAN-2005-2701 Heap overrun in XBM image processing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9980
      CAN-2005-2702 Crash on "zero-width non-joiner" sequence
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9981
      CAN-2005-2703 XMLHttpRequest header spoofing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9982
      CAN-2005-2704 Object spoofing using XBL <implements>
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9983
      CAN-2005-2705 JavaScript integer overflow
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9984
      CAN-2005-2706 Privilege escalation using about: scheme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9985
      CAN-2005-2707 Chrome window spoofing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9986
                    Regression fixes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9987
- register beagle extension if it gets installed (#116787)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9988
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9989
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9990
Tue Sep 13 15:41:37 CEST 2005 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9991
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9992
- Change SUSE bookmarks.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9993
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9994
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9995
Sun Sep 11 17:05:07 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9996
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9997
- disable IDN per default (#116070)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9998
- unlocalize bookmarks (#114279)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9999
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10000
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10001
Thu Sep  8 08:52:13 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10002
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10003
- fixed some filemodes (#114849)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10004
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10005
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10006
Sun Sep  4 00:03:53 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10007
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10008
- fixed gconf-backend patch to be able to use
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10009
  system prefs (#114054)
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10010
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10011
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10012
Thu Sep  1 13:22:17 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10013
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10014
- changed default font to sans-serif (#114464)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10015
- removed de-de parts of the bookmark-links (#114279)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10016
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10017
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10018
Mon Aug 22 06:10:12 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10019
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10020
- install gconf schema for lockdown also on non-NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10021
- added backports (firefox-backports.patch)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10022
  * gtk_im_context_set_cursor_location() is not used (bmo #281339)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10023
  * fixed crash in imgCacheValidator::OnStartRequest() 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10024
    (bmo #293307)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10025
- workaround for linking with pangoxft and pangox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10026
  (broken by gtk 2.8 update) (#105764)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10027
- remove extensions on deinstallation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10028
- include dragonegg (kparts) plugin (#105468)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10029
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10030
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10031
Thu Aug 18 13:08:55 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10032
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10033
- fixed regression in profile locking change (bmo #303633)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10034
- added rtsp handler to global config (#104434)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10035
- don't blacklist help: protocol (bmo #304833)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10036
- fixed Gdk-WARNING at startup (gtk.patch)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10037
- fixed crash with gtk 2.7 (bmo #300226, bnc #104586)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10038
- fixed installation of the beagle plugin
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10039
- update industrial theme to 1.0.11 (#104564)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10040
- included lockdownV2 (removed obsolete gconf.diff)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10041
- linked firefox-bin with rpath to progdir
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10042
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10043
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10044
Fri Aug  5 09:51:26 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10045
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10046
- fixed profile locking (bmo #151188)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10047
- install beagle extension globally
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10048
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10049
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10050
Fri Jul 29 06:58:24 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10051
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10052
- don't require and provide NSS libs (#98002)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10053
- fixed printing error 'You cannot print while in print preview'
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10054
  (#96991, bmo #302445)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10055
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10056
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10057
Wed Jul 27 09:34:12 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10058
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10059
- fixed Firefox on ppc (stack-direction.patch) (#97359)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10060
- removed open-pref from startscript as it is done
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10061
  automatically now (#73042)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10062
- updated Novell searchplugins
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10063
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10064
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10065
Mon Jul 25 12:32:13 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10066
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10067
- GTK filechooser is now modal (#8533)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10068
- backed out patch to add tooltips to print-preview
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10069
  because it breaks localization
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10070
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10071
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10072
Fri Jul 22 10:54:39 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10073
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10074
- fixed another problem in printing patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10075
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10076
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10077
Tue Jul 19 10:44:59 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10078
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10079
- fixed error in ft-xft-ps2.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10080
- disabled stripping in spec instead of patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10081
- added NSPR to PreReq
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10082
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10083
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10084
Mon Jul 18 08:43:24 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10085
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10086
- fixed some more regressions with final 1.0.6
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10087
- fixed width calculation in Postscript module (bmo #290292)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10088
- fixed plugin event starvation (bnc #94749, #94751, bmo #301161)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10089
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10090
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10091
Fri Jul 15 11:24:47 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10092
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10093
- searchplugins can now be installed per profile (#8176)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10094
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10095
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10096
Fri Jul 15 06:54:02 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10097
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10098
- update to 1.0.6 which restores API compatibility
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10099
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10100
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10101
Tue Jul 12 06:20:37 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10102
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10103
- update to 1.0.5 final (#88509)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10104
- don't strip explicitely
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10105
- don't ship beagle.xpi
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10106
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10107
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10108
Wed Jul  6 14:13:09 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10109
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10110
- update to 1.0.5-pre (20050705)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10111
- use RPM_OPT_FLAGS for NSS component
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10112
- fixed implicit declarations and uninitialized used variables
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10113
- added patch for bmo #87969
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10114
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10115
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10116
Tue Jul  5 10:17:16 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10117
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10118
- fixed regression from security update (#95069, bmo #298478)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10119
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10120
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10121
Mon Jun 27 21:46:58 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10122
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10123
- don't use system-prefs by default on NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10124
- removed basic lockdown stuff for SUSE Linux
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10125
  (it's not needed and caused problems: bnc #75418)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10126
- fixed NLD lockdown patch (bnc #75418)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10127
- don't write prefs back to gconf for now
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10128
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10129
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10130
Wed Jun 22 07:32:42 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10131
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10132
- new NLD lockdown patch which is syncing user prefs to gconf
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10133
- update to 1.0.5pre security-release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10134
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10135
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10136
Thu Jun  9 06:56:02 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10137
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10138
- new revision of NLD lockdown patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10139
- fixed remote usage behaviour in start script (bnc #41903)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10140
- got more bugfixes from the branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10141
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10142
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10143
Thu Jun  2 10:31:48 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10144
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10145
- fixed neededforbuild
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10146
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10147
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10148
Wed Jun  1 20:15:25 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10149
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10150
- fixed IDN for 64bit platforms (bmo #236425, bnc #46268)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10151
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10152
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10153
Fri May 20 15:12:06 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10154
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10155
- fixed keybinding for KP separator (bnc #84147)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10156
- pulled security related patch from upstream branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10157
- update plastikfox theme to version 1.6
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10158
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10159
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10160
Thu May 12 06:16:25 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10161
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10162
- update to final 1.0.4 release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10163
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10164
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10165
Tue May 10 06:38:05 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10166
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10167
- update to 1.0.4 security release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10168
- removed s390(x) patches (upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10169
- made two more files %verify (81692)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10170
- updated NLD lockdown patch (81304)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10171
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10172
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10173
Thu Apr 28 09:45:53 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10174
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10175
- use static NSPR libs from new location
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10176
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10177
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10178
Sat Apr 23 15:56:08 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10179
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10180
- activate usage of system NSPR for distributions after 9.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10181
- add patch to be able to use systen NSPR at all
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10182
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10183
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10184
Fri Apr 22 02:06:06 CEST 2005 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10185
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10186
- use mozilla-gcc4.patch 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10187
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10188
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10189
Thu Apr 21 12:51:19 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10190
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10191
- don't execute gconf magic within build environment
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10192
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10193
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10194
Sat Apr 16 13:05:37 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10195
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10196
- update to final 1.0.3 release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10197
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10198
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10199
Fri Apr 15 00:10:54 CEST 2005 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10200
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10201
- fix problem in postinstall script 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10202
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10203
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10204
Wed Apr 14 09:20:02 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10205
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10206
- included fixed lockdown patch for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10207
- linked proxies within Firefox with gnome settings (NLD)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10208
- added gconfd restart procedure to install script 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10209
  (only needed if gconf changes are done) (#76852)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10210
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10211
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10212
Sat Apr  2 21:03:11 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10213
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10214
- update to security pre-release 1.0.3 (#75692)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10215
  * Manual plug-in install, javascript vulnerability (bmo #288556)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10216
  * Access memory vulnerability (bmo #288688)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10217
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10218
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10219
Fri Apr  1 11:32:44 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10220
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10221
- added advanced lockdown features for ZLM integration (NLD-only)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10222
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10223
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10224
Tue Mar 22 12:33:15 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10225
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10226
- update to final 1.0.2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10227
- use new theme handling on NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10228
- added default-plugin-less-annoying from mozilla
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10229
- use GTK2 for Flash
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10230
- use system NSPR on SUSE releases after 9.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10231
- made startscript PIS aware 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10232
- set g-application-name correctly (bmo #281979)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10233
- added man-page
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10234
- use GTK system colors
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10235
- modify useragent string and add vendor id
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10236
- activate smooth-scrolling by default (#74310)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10237
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10238
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10239
Tue Mar 22 08:59:06 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10240
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10241
- don't register beagle automatically (#74062)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10242
- added default bookmarks for SUSE LINUX
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10243
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10244
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10245
Mon Mar 21 18:20:39 CET 2005 - max@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10246
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10247
- Fixed a typo in the shell code that handles inclusion of the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10248
  Acrobat Reader plugin (#70861).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10249
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10250
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10251
Thu Mar 17 21:01:11 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10252
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10253
- updates from upcoming 1.0.2 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10254
- added again logic to use Adobe Reader 7 (#70861)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10255
- fixed crash in ICO decoding (#67142, bmo #245631)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10256
- preinstall beagle extension (#72920)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10257
- bugfixes in trigger scripts
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10258
- fixed industrial theming for Gnome (#72918)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10259
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10260
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10261
Sat Mar 12 12:42:16 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10262
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10263
- fixed more security related bugs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10264
  (bmo #284551, #284627, #285595)
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10265
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10266
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10267
Wed Mar  9 21:42:05 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10268
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10269
- update also GNOME desktop file (#71810)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10270
- added firefox-gnome.png to filelist
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10271
- use correct Firefox icon
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10272
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10273
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10274
Mon Mar  7 20:47:00 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10275
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10276
- disable inclusion of acrobat plugin again (#70861)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10277
- don't use gconfd in registration phase (#66381) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10278
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10279
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10280
Mon Mar  7 16:13:29 CET 2005 - adrian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10281
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10282
- use standard icon again for the default desktop file and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10283
  add a Gnome-only desktop file for the Gnome icon
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10284
- add plastikfox chrome theme to fix button order within KDE
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10285
- add patch for automatic theme selection for KDE and Gnome
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10286
- do register extensions in rebuild-databases.sh instead of %install,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10287
  to fix needed timestamps
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10288
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10289
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10290
Fri Mar  4 07:54:47 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10291
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10292
- extend add-plugins to recognize Java 1.5 (#66909)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10293
- changed comment in desktop-file (#66867)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10294
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10295
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10296
Tue Feb 22 09:33:44 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10297
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10298
- make --display parameter working in all cases (bnc #66043)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10299
- revised postscript patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10300
- final 1.0.1 codebase
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10301
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10302
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10303
Mon Feb 21 13:09:30 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10304
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10305
- added patch to create Postscript level 2 (instead of 3)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10306
  (special thanks to Jungshik Shin)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10307
- disabled freetype explicitly to be able to use the above patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10308
  (freetype wasn't used anymore since some time anyway)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10309
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10310
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10311
Fri Feb 18 09:10:10 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10312
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10313
- got more patches from branch to get another IDN fix and to
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10314
  fix bug #51019
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10315
- enabled IDN again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10316
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10317
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10318
Wed Feb 16 09:20:39 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10319
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10320
- bumped version number to 1.0.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10321
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10322
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10323
Tue Feb 15 10:26:04 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10324
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10325
- got updates from 1.0.1 branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10326
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10327
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10328
Thu Feb 10 06:57:33 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10329
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10330
- additional fireflashing fix (#50635, bmo #280664)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10331
- some more security related fixes 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10332
  (bmo #268483, #273498, #277322)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10333
- fire up GTK2 filepicker if GNOME is running
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10334
  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10335
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10336
Tue Feb  8 07:51:13 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10337
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10338
- some prefs are ignored (bmo #261934)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10339
- disabled default IDN (#50566)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10340
- fixed some more bugzilla.mozilla.org bugs:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10341
  #276482, #280056, #280603
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10342
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10343
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10344
Sun Feb  6 13:10:12 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10345
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10346
- use same desktop categories for Professional and NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10347
- added some lockdown stuff for printing and page saving
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10348
  (bmo #280488)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10349
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10350
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10351
Wed Feb  2 13:58:53 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10352
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10353
- modified gconf.diff to honor ignore_hosts (bmo #280742)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10354
- added a JS crasher fix (bmo #268535)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10355
- added more fixes (bmo #255441, #273024, #275405, #275634)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10356
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10357
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10358
Fri Jan 28 12:39:37 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10359
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10360
- added gplflash inclusion
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10361
- improved JRE inclusion
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10362
- reactivated usage of Acrobat Reader plugin
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10363
  (ready for acroread 7)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10364
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10365
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10366
Sat Jan 22 13:16:47 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10367
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10368
- added some backported bugfixes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10369
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10370
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10371
Sat Dec 18 10:30:11 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10372
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10373
- updated industrial theme to 1.0.9
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10374
- use slightly changed icon for menu-entry (bnc #275)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10375
- use original desktop file for NLD again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10376
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10377
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10378
Thu Dec 16 19:37:48 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10379
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10380
- newer patch for GNOME associations (bnc #362)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10381
- fix overwriting of files with GTK picker (Ximian #65068)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10382
- readded the industrial default theme patch for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10383
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10384
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10385
Wed Dec 15 11:50:56 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10386
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10387
- activate GTK filepicker for NLD again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10388
- fix for GNOME helper applications with parameters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10389
- make GNOME associations the default on NLD
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10390
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10391
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10392
Sat Dec  4 16:11:01 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10393
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10394
- fixed build on s390/s390x
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10395
- added patch to be able to install-global without running X
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10396
  (bmo #265859)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10397
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10398
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10399
Thu Nov 18 21:48:05 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10400
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10401
- update industrial theme to 1.0.8 (still not activated)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10402
- added patch to make home-directory the default download dir
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10403
  (on NLD is still used Desktop)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10404
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10405
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10406
Thu Nov 11 09:01:58 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10407
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10408
- made initial window height smaller again 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10409
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10410
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10411
Tue Nov  9 09:09:06 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10412
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10413
- update to final 1.0 release (20041109)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10414
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10415
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10416
Thu Nov  4 08:22:36 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10417
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10418
- update to 1.0rc2 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10419
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10420
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10421
Sat Oct 30 21:27:29 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10422
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10423
- added missing s390(x) patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10424
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10425
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10426
Wed Oct 27 07:26:25 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10427
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10428
- update to 1.0rc1 codebase
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10429
- printing via XFT/fontconfig
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10430
- freetype changes to avoid API conflicts with newer freetype2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10431
- fixed build for s390/s390x
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10432
- removed AMD64 patch (included upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10433
- added translations sub-package
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10434
- removed "Show folder" patch for NLD (resolved upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10435
- don't use gnome-filepicker patch for NLD for now
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10436
- removed hppa buildfix (included upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10437
- removed untitled.patch (bmo #24068) resolved by (bmo #262478)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10438
- use make -C browser/installer now to prepare installation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10439
- don't check for default browser at startup (#47587)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10440
- updated industrial.jar (0.99.13) (disabled)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10441
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10442
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10443
Fri Oct 15 13:51:54 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10444
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10445
- inherit locale from system
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10446
- fixed chrome registration
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10447
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10448
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10449
Wed Oct  6 23:11:01 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10450
 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10451
 - disable gconf settings as default (Ximian #67718)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10452
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10453
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10454
Wed Oct  6 07:04:05 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10455
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10456
- fixed inclusion of RealPlayer plugin again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10457
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10458
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10459
Tue Oct  5 10:09:04 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10460
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10461
- small important fix in firefox-download.patch (Ximian #65472) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10462
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10463
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10464
Sun Oct  3 00:02:09 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10465
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10466
- added security-fix from 0.10.1 (mozilla.org #259708) (#46687)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10467
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10468
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10469
Fri Oct  1 12:49:38 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10470
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10471
- final fix for downloading to Desktop folder (Ximian #65756)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10472
- remove Postscript from printer names (Ximian #65560)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10473
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10474
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10475
Thu Sep 30 16:14:10 CEST 2004 - shprasad@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10476
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10477
- Modified the MozillaFirefox.desktop file.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10478
  Changed the name 'Firefox' to 'Firefox Web Browser'.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10479
  Also changed it for all languages.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10480
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10481
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10482
Wed Sep 29 15:54:46 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10483
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10484
- fix inclusion of RealPlayer plugin (Ximian #65711) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10485
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10486
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10487
Mon Sep 27 17:51:24 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10488
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10489
- Update the industrial default patch, for some reason it didn't
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10490
  take before.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10491
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10492
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10493
Fri Sep 24 07:34:48 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10494
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10495
- fix for Ximian #65176 (mozilla.org #240068)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10496
- revised patch for update function (Ximian #65615)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10497
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10498
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10499
Thu Sep 23 20:21:39 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10500
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10501
- Uncomment the patch which tells the UI that industrial is the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10502
  default.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10503
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10504
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10505
Thu Sep 23 12:38:06 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10506
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10507
- open Nautilus on NLD for 'Show folder' in download settings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10508
  (Ximian #65472) by sragavan@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10509
- save to Desktop folder if selected (Ximian #65756)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10510
  by sragavan@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10511
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10512
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10513
Wed Sep 22 10:23:01 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10514
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10515
- synced NLD package with 9.2 version
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10516
- GTK2 filepicker does now ask for confirmation when overwriting
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10517
  files (Ximian #65068) by sagarwala@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10518
- no direct update function (Ximian #65615) by rganesan@novell.com 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10519
- throbber linked to Novell (Ximian #66283) by rganesan@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10520
- make industrial the default theme for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10521
  (Ximian #65542) by joeshaw@suse.de
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10522
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10523
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10524
Mon Sep 20 22:00:55 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10525
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10526
- Add default bookmarks.  Ximian #65546.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10527
- Add the industrial theme, but it's not the default yet.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10528
- Remove acroread from add-plugins because it's badly behaved.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10529
  Ximian #65499.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10530
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10531
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10532
Mon Sep 20 17:57:38 CEST 2004 - federico@ximian.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10533
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10534
- Added MozillaFirefox-toplevel-window-height.diff for
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10535
  http://bugzilla.ximian.com/show_bug.cgi?id=65543
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10536
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10537
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10538
Sun Sep 19 15:42:30 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10539
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10540
- use GNOME system prefs only for NLD by default 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10541
  (fixes bug #45575)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10542
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10543
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10544
Fri Sep 17 08:59:32 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10545
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10546
- joeshaw@suse.de: Update GConf patch so that proxy settings work 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10547
  correctly (Ximian #64461)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10548
- don't search Java on every path (Ximian #65383)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10549
- added some missing fixes for official release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10550
- added new java package name for triggers (#45257)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10551
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10552
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10553
Sat Sep 11 13:25:41 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10554
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10555
- update to official 1.0PR (0.10)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10556
- adopted gnome-filepicker patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10557
- removed obsolete CUPS hack from start-script 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10558
  (Ximian #65635, #65560)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10559
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10560
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10561
Thu Sep  9 21:35:42 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10562
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10563
- fixed endianess on AMD64 in JS component (#34743)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10564
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10565
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10566
Mon Sep  6 17:33:07 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10567
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10568
- fixed filelist
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10569
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10570
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10571
Mon Sep  6 13:48:03 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10572
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10573
- update to 1.0PR (aka 0.10) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10574
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10575
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10576
Fri Sep  3 21:35:47 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10577
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10578
- added ppc64 patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10579
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10580
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10581
Thu Sep  2 03:08:59 CEST 2004 - dave@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10582
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10583
- Fixed up the .desktop installation on nld 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10584
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10585
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10586
Wed Sep  1 15:05:48 CEST 2004 - shprasad@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10587
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10588
- Doesn't ask to set Firefox as default web-browser. 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10589
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10590
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10591
Tue Aug 31 14:01:18 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10592
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10593
- next new version for filepicker stuff
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10594
- deactivated native filepicker for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10595
- update to snapshot (20040831)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10596
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10597
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10598
Tue Aug 24 17:35:52 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10599
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10600
- new version of gnome-filepicker patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10601
- added patch for config
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10602
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10603
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10604
Fri Aug 20 17:12:48 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10605
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10606
- update to snapshot (20040820) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10607
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10608
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10609
Thu Aug 19 08:46:42 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10610
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10611
- added workaround for mozilla bug #246313
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10612
  (Firefox does not start: getting "cannot open display" error)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10613
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10614
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10615
Wed Aug 18 15:07:22 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10616
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10617
- added some patches from Ximian
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10618
  - use GNOME filepicker
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10619
  - use more gconf settings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10620
  - set startup homepage to Novell
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10621
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10622
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10623
Tue Aug 17 13:12:35 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10624
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10625
- update to pre-1.0.0 (20040817)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10626
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10627
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10628
Thu Aug  5 06:27:41 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10629
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10630
- security update to 0.9.3 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10631
  (including #43312 and others)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10632
- handle RealPlayer 9 plugin
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10633
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10634
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10635
Mon Aug  2 15:11:51 CEST 2004 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10636
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10637
- recode desktop file to utf-8
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10638
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10639
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10640
Wed Jul 28 08:46:31 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10641
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10642
- added fix against certificate spoofing (#43312) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10643
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10644
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10645
Fri Jul 23 06:31:41 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10646
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10647
- update to 0.9.2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10648
- added workaround for extension registry 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10649
- removed old (incompatible) mozex extension
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10650
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10651
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10652
Tue Jun 29 06:27:59 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10653
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10654
- update to 0.9.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10655
- added hint to run as root first
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10656
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10657
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10658
Tue Jun 15 12:42:28 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10659
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10660
- update to 0.9 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10661
- added patch for newer freetype
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10662
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10663
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10664
Fri Apr  2 10:31:45 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10665
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10666
- removing relocation of TEMP directory (#34391)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10667
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10668
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10669
Mon Mar 29 11:43:51 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10670
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10671
- update to 0.8.0+ (20040503)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10672
- removed firefox logos and activate official branding for
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10673
  milestone builds
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10674
- changed profile-dir to .firefox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10675
- added some needed files
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10676
- enabled gnomevfs extension 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10677
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10678
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10679
Fri Mar 26 18:09:34 CET 2004 - uli@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10680
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10681
- fixed hang during build on s390* (bug #35440)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10682
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10683
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10684
Wed Mar  3 06:52:00 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10685
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10686
- removed unused patches for GTK2 build 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10687
- more fixes for (#35179)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10688
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10689
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10690
Mon Mar  1 07:32:52 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10691
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10692
- improved start-script to interact with thunderbird (#35179) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10693
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10694
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10695
Thu Feb 26 06:57:05 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10696
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10697
- use official releasedate
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10698
- added official (trademarked) artwork
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10699
- added firefox icon to /usr/share/pixmaps
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10700
- cleaned up spec-file (there will be no GTK1 version)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10701
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10702
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10703
Tue Feb 24 16:43:17 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10704
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10705
- fixed optimization for non-x86 archs 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10706
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10707
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10708
Tue Feb 24 07:43:35 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10709
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10710
- adopted file-list and build options to original distribution 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10711
- added prdtoa fix (#32963)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10712
- added hook for static firefox build to rebuild-databases.sh
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10713
- added compiler flags for security/ (nss-opt.patch) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10714
- included mozex (mozex.mozdev.org)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10715
- added -Os as optimization flag
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10716
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10717
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10718
Mon Feb  9 21:59:37 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10719
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10720
- renamed to MozillaFirefox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10721
- update to final version 0.8 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10722
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10723
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10724
Fri Feb  6 08:39:15 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10725
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10726
- update to Firebird 0.8 (20040205)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10727
- added mips build fix
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10728
- set PS printer list in MozillaFirebird.sh 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10729
- use lib64 again for biarch platforms
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10730
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10731
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10732
Sat Jan 10 10:33:54 CET 2004 - adrian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10733
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10734
- build as user
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10735
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10736
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10737
Fri Aug 22 11:32:07 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10738
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10739
- upstream sync for 0.6.1post
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10740
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10741
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10742
Sun Aug 10 22:01:12 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10743
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10744
- removed dmoz from searchplugins-filelist
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10745
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10746
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10747
Fri Aug  8 10:30:50 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10748
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10749
- update to 0.6.1post (TRUNK)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10750
- use -fno-strict-aliasing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10751
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10752
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10753
Thu Jul 31 11:25:39 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10754
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10755
- update to 0.6.1 (MOZILLA_1_4_BRANCH)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10756
- synchronized with mozilla-source
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10757
- created file-list
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10758
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10759
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10760
Thu Jul 10 09:45:49 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10761
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10762
- update to snapshot 20030709
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10763
- fixed generation of symlink MozillaFirebird-xremote-client
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10764
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10765
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10766
Fri Jun 20 06:53:08 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10767
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10768
- update to snapshot 20030622 (0.7pre) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10769
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10770
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10771
Mon May 19 08:54:46 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10772
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10773
- update to snapshot 20030518 (0.6) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10774
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10775
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10776
Sun May  7 10:11:16 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10777
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10778
- update to snapshot 20030507 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10779
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10780
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10781
Wed Apr 30 13:26:43 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10782
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10783
- initial SuSE package 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10784