MozillaFirefox/MozillaFirefox.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Sun, 15 Nov 2020 09:35:28 +0100
branchfirefox82
changeset 1150 2faa589360df
parent 1148 7ffbf55add92
child 1151 8df86bf11fc1
permissions -rw-r--r--
82.0.3
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
1108
33b03cfb3747 bugfixes, improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1107
diff changeset
     1
-------------------------------------------------------------------
1150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     2
Mon Nov  9 10:15:52 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     4
- Mozilla Firefox 82.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     6
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     7
Mon Nov  2 09:00:13 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
     9
- Mozilla Firefox 82.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    10
  * few bugfixes for introduced regressions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    12
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    13
Thu Oct 15 20:44:47 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    15
- Mozilla Firefox 82.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    16
  * https://www.mozilla.org/en-US/firefox/82.0/releasenotes/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    17
  MFSA 2020-45 (bsc#1177872)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    18
  * CVE-2020-15969 (bmo#1666570)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    19
    Use-after-free in usersctp
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    20
  * CVE-2020-15254 (bmo#1668514)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    21
    Undefined behavior in bounded channel of crossbeam rust crate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    22
  * CVE-2020-15680 (bmo#1658881)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    23
    Presence of external protocol handlers could be determined
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    24
    through image tags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    25
  * CVE-2020-15681 (bmo#1666568)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    26
    Multiple WASM threads may have overwritten each others' stub
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    27
    table entries
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    28
  * CVE-2020-15682 (bmo#1636654)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    29
    The domain associated with the prompt to open an external
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    30
    protocol could be spoofed to display the incorrect origin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    31
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    32
    bmo#1662760, bmo#1663439, bmo#1666140)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    33
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    34
  * CVE-2020-15684 (bmo#1653764, bmo#1661402, bmo#1662259,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    35
    bmo#1664257)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
    36
    Memory safety bugs fixed in Firefox 82
1148
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
    37
- requires
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
    38
  * NSPR 4.29
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
    39
  * NSS 3.57
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
    40
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
    41
-------------------------------------------------------------------
1147
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    42
Thu Oct  1 20:00:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    43
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    44
- Mozilla Firefox 81.0.1
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    45
  * https://www.mozilla.org/en-US/firefox/81.0.1/releasenotes/
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    46
- remove obsolete python2 build requires
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    47
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    48
-------------------------------------------------------------------
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    49
Wed Sep 30 18:49:10 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    50
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
    51
- Increase disk requirements in _constraints to match current needs
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    52
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    53
-------------------------------------------------------------------
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    54
Fri Sep 18 06:22:40 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    55
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    56
- Mozilla Firefox 81.0
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    57
  * https://www.mozilla.org/en-US/firefox/81.0/releasenotes
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    58
  MFSA 2020-42 (bsc#1176756)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    59
  * CVE-2020-15675 (bmo#1654211)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    60
    Use-After-Free in WebGL
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    61
  * CVE-2020-15677 (bmo#1641487)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    62
    Download origin spoofing via redirect
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    63
  * CVE-2020-15676 (bmo#1646140)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    64
    XSS when pasting attacker-controlled data into a
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    65
    contenteditable element
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    66
  * CVE-2020-15678 (bmo#1660211)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    67
    When recursing through layers while scrolling, an iterator
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    68
    may have become invalid, resulting in a potential use-after-
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    69
    free scenario
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    70
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    71
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    72
  * CVE-2020-15674 (bmo#1656063, bmo#1656064, bmo#1656067, bmo#1660293)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    73
    Memory safety bugs fixed in Firefox 81
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    74
- requires
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    75
  NSPR 4.28
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    76
  NSS 3.56
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    77
- removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    78
  * mozilla-system-nspr.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    79
  * mozilla-bmo1661715.patch
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    80
  * mozilla-silence-no-return-type.patch
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    81
- skip post-build-checks for 15.0 and 15.1
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    82
- add revert-795c8762b16b.patch to fix LTO builds with gcc
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    83
  (related to bmo#1644409)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
    84
- require python3-curses as workaround to fix i586 build
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    85
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
    86
-------------------------------------------------------------------
1143
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    87
Thu Sep 17 11:45:31 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    88
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    89
- Use %limit_build macro again for aarch64 and armv7, instead of
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    90
  the new memoryperjob _constraints to use more workers
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    91
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    92
-------------------------------------------------------------------
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    93
Sat Sep  5 17:43:26 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    94
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    95
- add mozilla-bmo1661715.patch to fix Flash plugin
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    96
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    97
-------------------------------------------------------------------
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    98
Wed Sep  2 17:11:19 UTC 2020 - Manfred Hollstein <manfred.h@gmx.net>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
    99
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   100
- Mozilla Firefox 80.0.1: Bug fixes:
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   101
  * Fixed a performance regression when encountering new intermediate
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   102
    CA certificates (bmo#1661543)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   103
  * Fixed crashes possibly related to GPU resets (bmo#1627616)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   104
  * Fixed rendering on some sites using WebGL (bmo#1659225)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   105
  * Fixed the zoom-in keyboard shortcut on Japanese language builds
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   106
    (bmo#1661895)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   107
  * Fixed download issues related to extensions and cookies
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   108
    (bmo#1655190)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   109
- added mozilla-silence-no-return-type.patch
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   110
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   111
-------------------------------------------------------------------
1142
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
   112
Tue Aug 25 19:30:15 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
   113
1143
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   114
- more whitelisting (/dev/random) for sandbox in relation to FIPS
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   115
  (bsc#1174284)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   116
- improve langpack builds to use dedicated objdirs and make it
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
   117
  parallel again
1142
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
   118
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
   119
-------------------------------------------------------------------
1141
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   120
Sat Aug 22 06:52:01 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   121
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   122
- Mozilla Firefox 80.0
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   123
  MFSA 2020-36 (bsc#1175686)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   124
  * CVE-2020-15663 (bmo#1643199)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   125
    Downgrade attack on the Mozilla Maintenance Service could
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   126
    have resulted in escalation of privilege
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   127
  * CVE-2020-15664 (bmo#1658214)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   128
    Attacker-induced prompt for extension installation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   129
  * CVE-2020-12401 (bmo#1631573)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   130
    Timing-attack on ECDSA signature generation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   131
  * CVE-2020-6829 (bmo#1631583)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   132
    P-384 and P-521 vulnerable to an electro-magnetic side
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   133
    channel attack on signature generation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   134
  * CVE-2020-12400 (bmo#1623116)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   135
    P-384 and P-521 vulnerable to a side channel attack on
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   136
    modular inversion
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   137
  * CVE-2020-15665 (bmo#1651636)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   138
    Address bar not reset when choosing to stay on a page after
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   139
    the beforeunload dialog is shown
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   140
  * CVE-2020-15666 (bmo#1450853)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   141
    MediaError message property leaks cross-origin response
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   142
    status
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   143
  * CVE-2020-15667 (bmo#1653371)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   144
    Heap overflow when processing an update file
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   145
  * CVE-2020-15668 (bmo#1651520)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   146
    Data Race when reading certificate information
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   147
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   148
    bmo#1656957)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   149
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   150
- requires
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   151
  * NSPR 4.27
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   152
  * NSS 3.55
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   153
- added mozilla-system-nspr.patch (bmo#1661096)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   154
- exclude ga-IE locale as it's failing to build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   155
- rollback parallelize locale build because it breaks bookmarks
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   156
  (boo#1167976)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   157
- preserve original default bookmark file during langpack build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   158
  (boo#1167976)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   159
- add some ccache output during build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   160
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
   161
-------------------------------------------------------------------
1140
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   162
Thu Aug 20 13:07:33 UTC 2020 - Martin Liška <mliska@suse.cz>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   163
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   164
- Use new memoryperjob _constraints instead of %limit_build macro.
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   165
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   166
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   167
Mon Aug 10 09:19:38 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   168
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   169
- use ccache for build
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   170
- replace versioned RPM deps with requires_ge
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   171
- parallelize locale build
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   172
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   173
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   174
Thu Aug  6 14:37:16 UTC 2020 - Yunhe Guo <i@guoyunhe.me>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   175
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   176
- Change *.appdata.xml location to latest AppStream standard
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   177
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   178
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   179
Thu Jul 23 21:00:34 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   180
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   181
- Mozilla Firefox 79.0
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   182
  MFSA 2020-30 (bsc#1174538)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   183
  * CVE-2020-15652 (bmo#1634872)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   184
    Potential leak of redirect targets when loading scripts in a worker
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   185
  * CVE-2020-6514 (bmo#1642792)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   186
    WebRTC data channel leaks internal address to peer
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   187
  * CVE-2020-15655 (bmo#1645204)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   188
    Extension APIs could be used to bypass Same-Origin Policy
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   189
  * CVE-2020-15653 (bmo#1521542)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   190
    Bypassing iframe sandbox when allowing popups
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   191
  * CVE-2020-6463 (bmo#1635293)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   192
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   193
  * CVE-2020-15656 (bmo#1647293)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   194
    Type confusion for special arguments in IonMonkey
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   195
  * CVE-2020-15658 (bmo#1637745)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   196
    Overriding file type when saving to disk
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   197
  * CVE-2020-15657 (bmo#1644954)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   198
    DLL hijacking due to incorrect loading path
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   199
  * CVE-2020-15654 (bmo#1648333)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   200
    Custom cursor can overlay user interface
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   201
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1638856,
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   202
    bmo#1643613, bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646220,
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   203
    bmo#1646787, bmo#1649347, bmo#1650811, bmo#1651678)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   204
    Memory safety bugs fixed in Firefox 79
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   205
- updated dependency requirements:
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   206
  * mozilla-nspr >= 4.26
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   207
  * mozilla-nss >= 3.54
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   208
  * rust >= 1.43
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   209
  * rust-cbindgen >= 0.14.3
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   210
- removed obsolete patch
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   211
  mozilla-bmo1463035.patch
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   212
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
   213
-------------------------------------------------------------------
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   214
Tue Jul 21 21:31:20 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   215
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   216
- fixed syntax issue in desktop file (boo#1174360)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   217
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   218
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   219
Fri Jul 17 15:07:45 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   220
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   221
- Add mozilla-libavcodec58_91.patch to link against updated
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   222
  soversion of libavcodec (58.91) with ffmpeg >= 4.3.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   223
  (patch provided by Atri Bhattacharya <badshah400@gmail.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   224
- enable MOZ_USE_XINPUT2 for TW (again) (boo#1173320)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   225
  (Plasma 5.19.3 is now in TW)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   226
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   227
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   228
Sat Jul 11 11:08:06 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   229
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   230
- Mozilla Firefox 78.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   231
  * Fixed an accessibility regression in reader mode (bmo#1650922)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   232
  * Made the address bar more resilient to data corruption in the
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   233
    user profile (bmo#1649981)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   234
  * Fixed a regression opening certain external applications (bmo#1650162)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   235
  MFSA 2020-28
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   236
  * CVE pending (bmo#1644076)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   237
    X-Frame-Options bypass using object or embed tags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   238
- added desktop file actions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   239
- do not use XINPUT2 for the moment until Plasma 5.19.3 has landed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   240
  (boo#1173993)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   241
- rework langpack integration (boo#1173991)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   242
  * ship XPIs instead of directories
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   243
  * allow addon sideloading
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   244
  * mark signatures for langpacks non-mandatory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   245
  * do not autodisable user profile scopes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   246
- Google API key is not usable for geolocation service
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   247
- fix pipewire support for TW (boo#1172903)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   248
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   249
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   250
Wed Jul  1 07:15:02 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   251
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   252
- Mozilla Firefox 78.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   253
  * Fixed an issue which could cause installed search engines to not
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   254
    be visible when upgrading from a previous release.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   255
- enable MOZ_USE_XINPUT2 for TW (boo#1173320)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   256
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   257
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   258
Sun Jun 28 07:17:13 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   259
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   260
- Mozilla Firefox 78.0
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
   261
  * startup notifications now using Gtk instead of libnotify
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   262
  * PDF downloads now show an option to open the PDF directly in Firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   263
  * Protections Dashboard (about:protections)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   264
  * WebRTC not interrupted by screensaver anymore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   265
  * disabled TLS 1.0 and 1.1 by default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   266
  MFSA 2020-24 (bsc#1173576)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   267
  * CVE-2020-12415 (bmo#1586630)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   268
    AppCache manifest poisoning due to url encoded character processing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   269
  * CVE-2020-12416 (bmo#1639734)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   270
    Use-after-free in WebRTC VideoBroadcaster
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   271
  * CVE-2020-12417 (bmo#1640737)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   272
    Memory corruption due to missing sign-extension for ValueTags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   273
    on ARM64
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   274
  * CVE-2020-12418 (bmo#1641303)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   275
    Information disclosure due to manipulated URL object
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   276
  * CVE-2020-12419 (bmo#1643874)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   277
    Use-after-free in nsGlobalWindowInner
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   278
  * CVE-2020-12420 (bmo#1643437)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   279
    Use-After-Free when trying to connect to a STUN server
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   280
  * CVE-2020-12402 (bmo#1631597)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   281
    RSA Key Generation vulnerable to side-channel attack
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   282
  * CVE-2020-12421 (bmo#1308251)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   283
    Add-On updates did not respect the same certificate trust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   284
    rules as software updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   285
  * CVE-2020-12422 (bmo#1450353)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   286
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   287
  * CVE-2020-12423 (bmo#1642400)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   288
    DLL Hijacking due to searching %PATH% for a library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   289
  * CVE-2020-12424 (bmo#1562600)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   290
    WebRTC permission prompt could have been bypassed by a
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   291
    compromised content process
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   292
  * CVE-2020-12425 (bmo#1634738)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   293
    Out of bound read in Date.parse()
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   294
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187, bmo#1637682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   295
    Memory safety bugs fixed in Firefox 78
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
   296
- requires
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   297
  * NSS >= 3.53.1
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
   298
  * nodejs >= 10.21
1133
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
   299
  * Gtk+3 >= 3.14
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   300
- removed obsolete patches
1133
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
   301
  * mozilla-s390-bigendian.patch
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   302
  * mozilla-bmo1634646.patch
1134
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
   303
- Add mozilla-pipewire-0-3.patch for openSUSE >= 15.2 to build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
   304
  WebRTC with pipewire support to enable screen sharing under
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
   305
  Wayland; also add BuildRequires: pkgconfig(libpipewire-0.3)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
   306
  appropriately (boo#1172903).
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   307
- adding SLE12 compatibility in spec file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   308
- add patches for s390x
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   309
  * mozilla-bmo1602730.patch (bmo#1602730)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   310
  * mozilla-bmo1626236.patch (bmo#1626236)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   311
  * mozilla-bmo998749.patch (bmo#998749)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   312
  * mozilla-s390x-skia-gradient.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   313
- update create-tar.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
   314
- Use same _constraints for ppc64 (BE) as ppc64le to avoid oom build failure
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
   315
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
   316
-------------------------------------------------------------------
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   317
Wed Jun 10 07:17:15 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   318
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   319
- Exclude armv6, since it is unbuildable since about 3 years
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   320
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   321
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   322
Wed Jun  3 21:39:11 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   323
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   324
- Mozilla Firefox 77.0.1
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   325
  * Disable automatic selection of DNS over HTTPS providers during
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   326
    a test to enable wider deployment in a more controlled way
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   327
    (bmo#1642723)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   328
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   329
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   330
Fri May 29 11:49:36 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   331
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   332
- Mozilla Firefox 77.0
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   333
  * view and manage web certificates more easily on the new
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   334
    about:certificate page
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   335
  * improvements in accessibility
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   336
  * significant improvements to JavaScript debugging
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   337
  MFSA 2020-20 (bsc#1172402)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   338
  * CVE-2020-12399 (bmo#1631576)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   339
    Timing attack on DSA signatures in NSS library
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   340
    (fixed with external NSS >= 3.52.1)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   341
  * CVE-2020-12405 (bmo#1631618)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   342
    Use-after-free in SharedWorkerService
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   343
  * CVE-2020-12406 (bmo#1639590)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   344
    JavaScript type confusion with NativeTypes
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   345
  * CVE-2020-12407 (bmo#1637112)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   346
    WebRender leaking GPU memory when using border-image CSS
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   347
    directive
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   348
  * CVE-2020-12408 (bmo#1623888)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   349
    URL spoofing when using IP addresses
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   350
  * CVE-2020-12409 (bmo#1619305, bmo#1632717)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   351
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   352
  * CVE-2020-12411 (bmo#1620972, bmo#1625333)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   353
    Memory safety bugs fixed in Firefox 77
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
   354
- requires
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
   355
  * NSS >= 3.52.1
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
   356
  * rust-cbindgen >= 1.14.1
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   357
  * clang >= 5
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   358
- added mozilla-bmo1634646.patch as part of fixing PGO build
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
   359
  (still not working)
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
   360
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
   361
-------------------------------------------------------------------
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   362
Wed May 13 12:21:13 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   363
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   364
- change again _constraints for ppc64le use <physicalmemory>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   365
  and increase limit_build in spec file to reduce max_jobs.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   366
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   367
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   368
Sat May  9 11:45:39 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   369
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   370
- Mozilla Firefox 76.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   371
  * Fixed a bug causing some add-ons such as Amazon Assistant to see
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   372
    multiple onConnect events, impairing functionality (bmo#1635637)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   373
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   374
-------------------------------------------------------------------
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   375
Fri May  1 11:59:58 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   376
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   377
- Mozilla Firefox 76.0
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   378
  * Lockwise improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   379
  * Improvements in Picture-in-Picture feature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   380
  * Support Audio Worklets
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   381
  MFSA-2020-16 (bsc#1171186)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   382
  * CVE-2020-12387 (bmo#1545345)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   383
    Use-after-free during worker shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   384
  * CVE-2020-12388 (bmo#1618911)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   385
    Sandbox escape with improperly guarded Access Tokens
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   386
  * CVE-2020-12389 (bmo#1554110)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   387
    Sandbox escape with improperly separated process types
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   388
  * CVE-2020-6831 (bmo#1632241)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   389
    Buffer overflow in SCTP chunk input validation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   390
  * CVE-2020-12390 (bmo#1141959)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   391
    Incorrect serialization of nsIPrincipal.origin for IPv6 addresses
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   392
  * CVE-2020-12391 (bmo#1457100)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   393
    Content-Security-Policy bypass using object elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   394
  * CVE-2020-12392 (bmo#1614468)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   395
    Arbitrary local file access with 'Copy as cURL'
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   396
  * CVE-2020-12393 (bmo#1615471)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   397
    Devtools' 'Copy as cURL' feature did not fully escape
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   398
    website-controlled data, potentially leading to command injection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   399
  * CVE-2020-12394 (bmo#1628288)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   400
    URL spoofing in location bar when unfocussed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   401
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704, bmo#1624098,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   402
    bmo#1625749, bmo#1626382, bmo#1628076, bmo#1631508)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   403
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   404
  * CVE-2020-12396 (bmo#1339601, bmo#1611938, bmo#1620488,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   405
    bmo#1622291, bmo#1627644)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   406
    Memory safety bugs fixed in Firefox 76
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   407
- requires
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   408
  * NSS >= 3.51.1
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   409
  * nasm >= 2.14
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   410
- removed obsolete patch mozilla-bmo1622013.patch
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   411
- fix URI creation for KDE file selector integration (boo#1160331)
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   412
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   413
-------------------------------------------------------------------
1124
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   414
Tue Apr  7 12:18:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   415
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   416
- Mozilla Firefox 75.0
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   417
  * https://www.mozilla.org/en-US/firefox/75.0/releasenotes
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   418
  MFSA 2020-12 (bsc#1168874)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   419
  * CVE-2020-6821 (bmo#1625404)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   420
    Uninitialized memory could be read when using the WebGL
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   421
    copyTexSubImage method
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   422
  * CVE-2020-6822 (bmo#1544181)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   423
    Out of bounds write in GMPDecodeData when processing large images
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   424
  * CVE-2020-6823 (bmo#1614919)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   425
    Malicious Extension could obtain auth codes from OAuth login flows
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   426
  * CVE-2020-6824 (bmo#1621853)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   427
    Generated passwords may be identical on the same site between
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   428
    separate private browsing sessions
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   429
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   430
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   431
  * CVE-2020-6826 (bmo#1613009,bmo#1613195,bmo#1616734,bmo#1617488,
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   432
    bmo#1619229,bmo#1620719,bmo#1624897)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   433
    Memory safety bugs fixed in Firefox 75
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   434
- removed obsolete patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   435
  mozilla-bmo1609538.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   436
- requires
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   437
  * rust >= 1.41
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   438
  * rust-cbindgen >= 0.13.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   439
  * mozilla-nss >= 3.51
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   440
  * nodejs10 >= 10.19
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   441
- fix build issue in libvpx for i586 via mozilla-bmo1622013.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   442
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   443
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   444
Mon Apr  6 11:19:24 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   445
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   446
- increase _constraints memory for ppc64le
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   447
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   448
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   449
Fri Apr  3 15:23:28 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   450
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   451
- Mozilla Firefox 74.0.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   452
  MFSA 2020-11 (boo#1168630)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   453
  * CVE-2020-6819 (bmo#1620818)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   454
    Use-after-free while running the nsDocShell destructor
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   455
  * CVE-2020-6820 (bmo#1626728)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   456
    Use-after-free when handling a ReadableStream
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   457
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   458
-------------------------------------------------------------------
1123
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   459
Wed Mar 25 07:30:39 UTC 2020 - Marcus Meissner <meissner@suse.com>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   460
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   461
- mozilla-sandbox-fips.patch: allow /proc/sys/crypto/fips_enabled
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   462
  to be read, as openssl 1.1.1 FIPS aborts if it cannot access it
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   463
  (bsc#1167132)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   464
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   465
-------------------------------------------------------------------
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   466
Sat Mar  7 08:51:06 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   467
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   468
- Mozilla Firefox 74.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   469
  * https://www.mozilla.org/en-US/firefox/74.0/releasenotes/
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   470
  MFSA 2020-08 (bsc#1166238)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   471
  * CVE-2020-6805 (bmo#1610880)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   472
    Use-after-free when removing data about origins
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   473
  * CVE-2020-6806 (bmo#1612308)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   474
    BodyStream::OnInputStreamReady was missing protections against
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   475
    state confusion
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   476
  * CVE-2020-6807 (bmo#1614971)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   477
    Use-after-free in cubeb during stream destruction
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   478
  * CVE-2020-6808 (bmo#1247968)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   479
    URL Spoofing via javascript: URL
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   480
  * CVE-2020-6809 (bmo#1420296)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   481
    Web Extensions with the all-urls permission could access local
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   482
    files
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   483
  * CVE-2020-6810 (bmo#1432856)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   484
    Focusing a popup while in fullscreen could have obscured the
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   485
    fullscreen notification
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   486
  * CVE-2020-6811 (bmo#1607742)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   487
    Devtools' 'Copy as cURL' feature did not fully escape
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   488
    website-controlled data, potentially leading to command injection
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   489
  * CVE-2019-20503 (bmo#1613765)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   490
    Out of bounds reads in sctp_load_addresses_from_init
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   491
  * CVE-2020-6812 (bmo#1616661)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   492
    The names of AirPods with personally identifiable information
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   493
    were exposed to websites with camera or microphone permission
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   494
  * CVE-2020-6813 (bmo#1605814)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   495
    @import statements in CSS could bypass the Content Security
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   496
    Policy nonce feature
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   497
  * CVE-2020-6814 (bmo#1592078,bmo#1604847,bmo#1608256,bmo#1612636,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   498
    bmo#1614339)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   499
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   500
  * CVE-2020-6815 (bmo#1181957,bmo#1557732,bmo#1557739,bmo#1611457,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   501
    bmo#1612431)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   502
    Memory and script safety bugs fixed in Firefox 74
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   503
- requires
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   504
  * NSPR 4.25
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   505
  * NSS 3.50
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   506
  * rust-cbindgen 0.13.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   507
- removed obsolete patches
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   508
  mozilla-bmo1610814.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   509
  mozilla-cubeb-noreturn.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   510
- add mozilla-bmo1609538.patch to fix wayland issues with mutter 3.36
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   511
  (bmo#1609538, boo#1166471)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   512
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   513
-------------------------------------------------------------------
1122
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   514
Wed Feb 26 08:12:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   515
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   516
- big endian fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   517
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   518
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   519
Tue Feb 25 14:17:00 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   520
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   521
- Fix build on aarch64/armv7 with:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   522
  * mozilla-bmo1610814.patch (boo#1164845, bmo#1610814)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   523
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   524
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   525
Thu Feb 20 13:40:59 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   526
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   527
- Mozilla Firefox 73.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   528
  * Resolved problems connecting to the RBC Royal Bank website
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   529
    (bmo#1613943)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   530
  * Fixed Firefox unexpectedly exiting when leaving Print Preview mode
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   531
    (bmo#1611133)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   532
  * Fixed crashes when playing encrypted content on some Linux systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   533
    (bmo#1614535, boo#1164646)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   534
- start in wayland mode when running under wayland session
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   535
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   536
-------------------------------------------------------------------
1121
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   537
Sun Feb  9 07:45:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   538
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   539
- Mozilla Firefox 73.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   540
  * Added support for setting a default zoom level applicable for all
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   541
    web content
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   542
  * High-contrast mode has been updated to allow background images
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   543
  * Improved audio quality when playing back audio at a faster or
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   544
    slower speed
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   545
  * Added NextDNS as alternative option for DNS over HTTPS
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   546
  MFSA 2020-05 (bsc#1163368)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   547
  * CVE-2020-6796 (bmo#1610426)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   548
    Missing bounds check on shared memory read in the parent process
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   549
  * CVE-2020-6797 (bmo#1596668) (MacOS X only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   550
    Extensions granted downloads.open permission could open arbitrary
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   551
    applications on Mac OSX
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   552
  * CVE-2020-6798 (bmo#1602944)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   553
    Incorrect parsing of template tag could result in JavaScript injection
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   554
  * CVE-2020-6799 (bmo#1606596) (Windows only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   555
    Arbitrary code execution when opening pdf links from other
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   556
    applications, when Firefox is configured as default pdf reader
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   557
  * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851,
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   558
    bmo#1608580,bmo#1608785,bmo#1605777)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   559
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   560
  * CVE-2020-6801 (bmo#1601024,bmo#1601712,bmo#1604836,bmo#1606492)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   561
    Memory safety bugs fixed in Firefox 73
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   562
- updated requirements
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   563
  * rust >= 1.39
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   564
  * NSS >= 3.49.2
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   565
  * rust-cbindgen >= 0.12.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   566
- rebased patches
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   567
- removed obsolete patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   568
  * mozilla-bmo1601707.patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   569
- switched to cairo-gtk3-wayland build
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   570
  (to fully enable wayland MOZ_ENABLE_WAYLAND=1 needs to be set)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   571
- disabled elfhack due to failing packager
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   572
  https://github.com/openSUSE/firefox-maintenance/issues/28
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   573
- disabled PGO due to build failure
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   574
  https://github.com/openSUSE/firefox-maintenance/issues/29
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   575
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   576
-------------------------------------------------------------------
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   577
Tue Jan 28 07:30:16 UTC 2020 - Stasiek Michalski <stasiek@michalski.cc>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   578
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   579
- Use a symbolic icon from branding internals
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   580
- Pixmaps no longer required for the desktops
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   581
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   582
-------------------------------------------------------------------
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   583
Wed Jan 22 10:30:21 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   584
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   585
- Mozilla Firefox 72.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   586
  * Various stability fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   587
  * Fixed issues opening files with spaces in their path (bmo#1601905)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   588
  * Fixed a hang opening about:logins when a master password is set
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   589
    (bmo#1606992)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   590
  * Fixed a web compatibility issue with CSS Shadow Parts which
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   591
    shipped in Firefox 72 (bmo#1604989)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   592
  * Fixed inconsistent playback performance for fullscreen 1080p
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   593
    videos on some systems (bmo#1608485)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   594
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   595
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   596
Tue Jan 21 12:59:54 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   597
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   598
- Fix build for aarch64/ppc64le (do not update config.sub file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   599
  for libbacktrace)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   600
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   601
-------------------------------------------------------------------
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   602
Wed Jan  8 08:19:12 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   603
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   604
- Mozilla Firefox 72.0.1
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   605
  MFSA 2020-03 (bsc#1160498)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   606
  * CVE-2019-17026 (bmo#1607443)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   607
    IonMonkey type confusion with StoreElementHole and FallibleStoreElement
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   608
- Mozilla Firefox 72.0
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   609
  * block fingerprinting scripts by default
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   610
  * new notification pop-ups
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   611
  * Picture-in-picture video
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   612
  MFSA 2020-01 (bsc#1160305)
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   613
  * CVE-2019-17016 (bmo#1599181)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   614
    Bypass of @namespace CSS sanitization during pasting
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   615
  * CVE-2019-17017 (bmo#1603055)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   616
    Type Confusion in XPCVariant.cpp
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   617
  * CVE-2019-17020 (bmo#1597645)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   618
    Content Security Policy not applied to XSL stylesheets applied
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   619
    to XML documents
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   620
  * CVE-2019-17022 (bmo#1602843)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   621
    CSS sanitization does not escape HTML tags
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   622
  * CVE-2019-17023 (bmo#1590001) (fixed in NSS FIXME)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   623
    NSS may negotiate TLS 1.2 or below after a TLS 1.3
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   624
    HelloRetryRequest had been sent
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   625
  * CVE-2019-17024 (bmo#1507180,bmo#1595470,bmo#1598605,bmo#1601826)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   626
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   627
  * CVE-2019-17025 (bmo#1328295,bmo#1328300,bmo#1590447,bmo#1590965
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   628
    bmo#1595692,bmo#1597321,bmo#1597481)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   629
    Memory safety bugs fixed in Firefox 72
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   630
- update create-tar.sh to skip compare-locales
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   631
- requires NSPR 4.24 and NSS 3.48
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   632
- removed usage of browser-plugins convention for NPAPI plugins
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   633
  from start wrapper and changed the RPM macro to the
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   634
  /usr/$LIB/mozilla/plugins location (boo#1160302)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   635
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   636
-------------------------------------------------------------------
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   637
Mon Dec  2 08:24:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   638
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   639
- Mozilla Firefox 71.0
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   640
  * Improvements to Lockwise, our integrated password manager
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   641
  * More information about Enhanced Tracking Protection in action
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   642
  * Native MP3 decoding on Windows, Linux, and macOS
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   643
  * Configuration page (about:config) reimplemented in HTML
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   644
  * New kiosk mode functionality, which allows maximum screen space
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   645
    for customer-facing displays
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   646
  MFSA 2019-36
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   647
  * CVE-2019-11756 (bmo#1508776)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   648
    Use-after-free of SFTKSession object
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   649
  * CVE-2019-17008 (bmo#1546331)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   650
    Use-after-free in worker destruction
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   651
  * CVE-2019-13722 (bmo#1580156) (Windows only)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   652
    Stack corruption due to incorrect number of arguments in WebRTC code
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   653
  * CVE-2019-17014 (bmo#1322864)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   654
    Dragging and dropping a cross-origin resource, incorrectly loaded
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   655
    as an image, could result in information disclosure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   656
  * CVE-2019-17010 (bmo#1581084)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   657
    Use-after-free when performing device orientation checks
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   658
  * CVE-2019-17005 (bmo#1584170)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   659
    Buffer overflow in plain text serializer
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   660
  * CVE-2019-17011 (bmo#1591334)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   661
    Use-after-free when retrieving a document in antitracking
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   662
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667, bmo#1567209
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   663
    bmo#1580288, bmo#1585760, bmo#1592502)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   664
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   665
  * CVE-2019-17013 (bmo#1298509, bmo#1472328, bmo#1577439, bmo#1577937
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   666
    bmo#1580320, bmo#1584195, bmo#1585106, bmo#1586293, bmo#1593865
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   667
    bmo#1594181)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   668
    Memory safety bugs fixed in Firefox 71
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   669
- requires
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   670
  NSPR >= 4.23
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   671
  NSS >= 3.47.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   672
  rust/cargo >= 1.37
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   673
- reactivate webrtc for platforms where it was disabled
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   674
- updated create-tar.sh to cover buildid and origin repo information
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   675
  -> removed obsolete source-stamp.txt
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   676
- removed obsolete patches
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   677
  mozilla-bmo1511604.patch
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   678
  mozilla-openaes-decl.patch
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   679
- changed locale building procedure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   680
  * removed obsolete compare-locales.tar.xz
1118
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
   681
- added mozilla-bmo1601707.patch to fix gcc/LTO builds
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
   682
  (bmo#1601707, boo#1158466)
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   683
- added mozilla-bmo849632.patch to fix big endian issues in skia
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   684
  used for WebGL
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   685
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   686
-------------------------------------------------------------------
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   687
Fri Nov  1 14:16:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   688
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   689
- Mozilla Firefox 70.0.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   690
  * Fix for an issue that caused some websites or page elements using
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   691
    dynamic JavaScript to fail to load. (bmo#1592136)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   692
  * Title bar no longer shows in full screen view (bmo#1588747)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   693
- added mozilla-bmo1504834-part4.patch to fix some visual issues on
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   694
  big endian platforms
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   695
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   696
-------------------------------------------------------------------
1112
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   697
Sun Oct 20 20:19:31 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   698
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   699
- Mozilla Firefox 70.0
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   700
  * more privacy protections from Enhanced Tracking Protection
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   701
  * Firefox Lockwise passwordmanager
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   702
  * Improvements to core engine components, for better browsing on more sites
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   703
  * Improved privacy and security indicators
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   704
  MFSA 2019-34
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   705
  * CVE-2018-6156 (bmo#1480088)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   706
    Heap buffer overflow in FEC processing in WebRTC
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   707
  * CVE-2019-15903 (bmo#1584907)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   708
    Heap overflow in expat library in XML_GetCurrentLineNumber
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   709
  * CVE-2019-11757 (bmo#1577107)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   710
    Use-after-free when creating index updates in IndexedDB
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   711
  * CVE-2019-11759 (bmo#1577953)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   712
    Stack buffer overflow in HKDF output
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   713
  * CVE-2019-11760 (bmo#1577719)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   714
    Stack buffer overflow in WebRTC networking
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   715
  * CVE-2019-11761 (bmo#1561502)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   716
    Unintended access to a privileged JSONView object
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   717
  * CVE-2019-11762 (bmo#1582857)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   718
    document.domain-based origin isolation has same-origin-property violation
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   719
  * CVE-2019-11763 (bmo#1584216)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   720
    Incorrect HTML parsing results in XSS bypass technique
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   721
  * CVE-2019-11765 (bmo#1562582)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   722
    Incorrect permissions could be granted to a website
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   723
  * CVE-2019-17000 (bmo#1441468)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   724
    CSP bypass using object tag with data: URI
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   725
  * CVE-2019-17001 (bmo#1587976)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   726
    CSP bypass using object tag when script-src 'none' is specified
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   727
  * CVE-2019-17002 (bmo#1561056)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   728
    upgrade-insecure-requests was not being honored for links dragged and dropped
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   729
  * CVE-2019-11764 (bmo#1558522, bmo#1577061, bmo#1548044, bmo#1571223,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   730
    bmo#1573048, bmo#1578933, bmo#1575217, bmo#1583684, bmo#1586845, bmo#1581950,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   731
    bmo#1583463, bmo#1586599)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   732
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   733
- requires
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   734
    rust/cargo >= 1.36
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   735
    NSPR >= 4.22
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   736
    NSS >= 3.46.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   737
    rust-cbindgen >= 0.9.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   738
- removed obsolete patches
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   739
    mozilla-bmo1573381.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   740
    mozilla-nestegg-big-endian.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   741
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   742
-------------------------------------------------------------------
1111
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   743
Sun Oct 13 08:58:12 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   744
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   745
- Mozilla Firefox 69.0.3
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   746
  * Fixed Yahoo mail users being prompted to download files when
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   747
    clicking on emails (bmo#1582848)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   748
- devel package build can easily be disabled now
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   749
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   750
-------------------------------------------------------------------
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   751
Thu Oct  3 08:40:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   752
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   753
- Mozilla Firefox 69.0.2
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   754
  * Fixed a crash when editing files on Office 365 websites (bmo#1579858)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   755
  * Fixed a Linux-only crash when changing the playback speed while
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   756
    watching YouTube videos (bmo#1582222)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   757
- updated supported locale list
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   758
- Allow to build without profile guided optimizations (boo#1040589)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   759
  (contributed by Bernhard Wiedemann)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   760
- Make build verbose (contributed by Martin Liška)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   761
- remove obsolete kde.js setting (boo#1151186) and related patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   762
  firefox-add-kde.js-in-order-to-survive-PGO-build.patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   763
- update create-tar.sh to latest revision and adjusted tar_stamps
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   764
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   765
- extension preferences moved from branding package to core package
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   766
  (packaging but not branding specific)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   767
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   768
-------------------------------------------------------------------
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   769
Thu Sep 19 13:31:16 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   770
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   771
- Mozilla Firefox 69.0.1
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   772
  * Fixed external programs launching in the background when clicking
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   773
    a link from inside Firefox to launch them (bmo#1570845)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   774
  * Usability improvements to the Add-ons Manager for users with
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   775
    screen readers (bmo#1567600)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   776
  * Fixed the Captive Portal notification bar not being dismissable
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   777
    in some situations after login is complete (bmo#1578633)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   778
  * Fixed the maximum size of fonts in Reader Mode when zoomed (bmo#1578454)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   779
  * Fixed missing stacks in the Developer Tools Performance section
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   780
    (bmo#1578354)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   781
  MFSA 2019-31
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   782
  * CVE-2019-11754 (bmo#1580506)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   783
    Pointer Lock is enabled with no user notification
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   784
- disable DOH by default
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   785
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   786
-------------------------------------------------------------------
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   787
Thu Sep  5 13:02:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   788
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   789
- Mozilla Firefox 69.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   790
  * Enhanced Tracking Protection (ETP) for stronger privacy protections
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   791
  * Block Autoplay feature is enhanced to give users the option to block
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   792
    any video
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   793
  * Users in the US or using the en-US browser, can get a new “New Tab”
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   794
    page experience connecting to the best of Pocket's content.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   795
  * Support for the Web Authentication HmacSecret extension via
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   796
    Windows Hello introduced.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   797
  * Support for receiving multiple video codecs with this release makes
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   798
    it easier for WebRTC conferencing services to mix video from
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   799
    different clients.
1107
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   800
  MFSA 2019-25 (boo#1149324)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   801
  * CVE-2019-11741 (bmo#1539595)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   802
    Isolate addons.mozilla.org and accounts.firefox.com
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   803
  * CVE-2019-5849 (bmo#1555838)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   804
    Out-of-bounds read in Skia
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   805
  * CVE-2019-11737 (bmo#1388015)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   806
    Content security policy directives ignore port and path if host is a wildcard
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   807
  * CVE-2019-11734 (bmo#1352875,bmo#1536227,bmo#1557208,bmo#1560641)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   808
    Memory safety bugs fixed in Firefox 69
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   809
  * CVE-2019-11735 (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   810
    bmo#1565744,bmo#1568858,bmo#1570358)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   811
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   812
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   813
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   814
- requires
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   815
  * rust/cargo >= 1.35
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   816
  * rust-cbindgen >= 0.9.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   817
  * mozilla-nss >= 3.45
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   818
- rebased patches
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   819
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   820
-------------------------------------------------------------------
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   821
Wed Sep  4 15:38:40 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   822
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   823
- added a bunch of patches mainly for big endian platforms
1109
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
   824
  * mozilla-bmo1504834-part1.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
   825
  * mozilla-bmo1504834-part2.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
   826
  * mozilla-bmo1504834-part3.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   827
  * mozilla-bmo1511604.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   828
  * mozilla-bmo1554971.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   829
  * mozilla-bmo1573381.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   830
  * mozilla-nestegg-big-endian.patch
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   831
  * mozilla-bmo1512162.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   832
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   833
-------------------------------------------------------------------
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   834
Fri Aug 30 20:49:11 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   835
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   836
- Mozilla Firefox 68.1.0
1100
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   837
  MFSA 2019-26
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   838
  * CVE-2019-11751 (bmo#1572838; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   839
    Malicious code execution through command line parameters
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   840
  * CVE-2019-11746 (bmo#1564449)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   841
    Use-after-free while manipulating video
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   842
  * CVE-2019-11744 (bmo#1562033)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   843
    XSS by breaking out of title and textarea elements using innerHTML
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   844
  * CVE-2019-11742 (bmo#1559715)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   845
    Same-origin policy violation with SVG filters and canvas to steal
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   846
    cross-origin images
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   847
  * CVE-2019-11736 (bmo#1551913, bmo#1552206; Windows only))
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   848
    File manipulation and privilege escalation in Mozilla Maintenance Service
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   849
  * CVE-2019-11753 (bmo#1574980; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   850
    Privilege escalation with Mozilla Maintenance Service in custom
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   851
    Firefox installation location
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   852
  * CVE-2019-11752 (bmo#1501152)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   853
    Use-after-free while extracting a key value in IndexedDB
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   854
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   855
    Sandbox escape through Firefox Sync
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   856
  * CVE-2019-11743 (bmo#1560495)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   857
    Cross-origin access to unload event attributes
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   858
  * CVE-2019-11748 (bmo#1564588)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   859
    Persistence of WebRTC permissions in a third party context
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   860
  * CVE-2019-11749 (bmo#1565374)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   861
    Camera information available without prompting using getUserMedia
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   862
  * CVE-2019-11750 (bmo#1568397)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   863
    Type confusion in Spidermonkey
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   864
  * CVE-2019-11738 (bmo#1452037)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   865
    Content security policy bypass through hash-based sources in directives
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   866
  * CVE-2019-11747 (bmo#1564481)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   867
    'Forget about this site' removes sites from pre-loaded HSTS list
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   868
  * CVE-2019-11735i (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   869
    bmo#1565744,bmo#1568858,bmo#1570358)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   870
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   871
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   872
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   873
- switched package to ESR branch
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   874
- added mozilla-bmo1568145.patch to make builds reproducible
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   875
- removed upstreamed patch mozilla-gcc-internal-compiler-error.patch
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   876
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   877
-------------------------------------------------------------------
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   878
Sun Aug 18 17:29:25 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   879
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   880
- Mozilla Firefox 68.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   881
  * Fixed a bug causing some special characters to be cut off from
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   882
    the end of the search terms when searching from the URL bar
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   883
    (bmo#1560228)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   884
  * Allow fonts to be loaded via file:// URLs when opening a page
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   885
    locally (bmo#1565942)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   886
  * Printing emails from the Outlook web app no longer prints only
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   887
    the header and footer (bmo#1567105)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   888
  * Fixed a bug causing some images not to be displayed on reload,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   889
    including on Google Maps (bmo# 1565542)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   890
  * Fixed an error when starting external applications configured
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   891
    as URI handlers (bmo#1567614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   892
  MFSA 2019-24 (boo#1145665)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   893
  * CVE-2019-11733: Stored passwords in 'Saved Logins' can be
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   894
    copied without master password entry (bmo#1565780)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   895
- drop fix-build-after-y2038-changes-in-glibc.patch, upstream
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   896
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   897
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   898
Fri Aug 16 16:49:24 UTC 2019 - Jonathan Brielmaier <jbrielmaier@suse.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   899
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   900
- Fix crash when typing in the URL bar on ppc64le (bmo#1512162).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   901
  The upstream patch doesn't resolve the issue on TW, but compiling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   902
  with -O1 does. Do this until we have a proper fix.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   903
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   904
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   905
Thu Aug  1 14:25:02 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   907
- Update build constraints to fix arm builds
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   908
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   909
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   910
Fri Jul 19 08:11:27 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   911
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   912
- Mozilla Firefox 68.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   913
  * Fixed missing Full Screen button when watching videos in full
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   914
    screen mode on HBO GO (bmo#1562837)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   915
  * Fixed a bug causing incorrect messages to appear for some
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   916
    locales when sites try to request the use of the Storage
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   917
    Access API (bmo#1558503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   918
  * Users in Russian regions may have their default search engine
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   919
    changed (bmo#1565315)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   920
  * Built-in search engines in some locales do not function
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   921
    correctly (bmo#1565779)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   922
  * SupportMenu policy doesn't always work (bmo#1553290)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   923
  * Allow the privacy.file_unique_origin pref to be controlled by
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   924
    policy (bmo#1563759)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   925
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   926
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   927
Thu Jul 11 10:51:39 UTC 2019 - Jiri Slaby <jslaby@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   928
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   929
- add fix-build-after-y2038-changes-in-glibc.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   930
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   931
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   932
Wed Jul 10 13:47:41 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   933
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   934
- Generate langpacks sequentially to avoid file corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   935
  from racy file writes (boo#1137970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   936
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   937
-------------------------------------------------------------------
1097
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   938
Mon Jul  8 13:30:35 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   939
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   940
- Mozilla Firefox 68.0
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   941
  * Dark mode in reader view
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   942
  * Improved extension security and discovery
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   943
  * Cryptomining and fingerprinting protections are added to strict
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   944
    content blocking settings in Privacy & Security preferences
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   945
  * Camera and microphone access now require an HTTPS connection
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   946
  MFSA 2019-21 (bsc#1140868)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   947
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   948
    Sandbox escape via installation of malicious languagepack
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   949
  * CVE-2019-11711 (bmo#1552541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   950
    Script injection within domain through inner window reuse
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   951
  * CVE-2019-11712 (bmo#1543804)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   952
    Cross-origin POST requests can be made with NPAPI plugins by
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   953
    following 308 redirects
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   954
  * CVE-2019-11713 (bmo#1528481)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   955
    Use-after-free with HTTP/2 cached stream
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   956
  * CVE-2019-11714 (bmo#1542593)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   957
    NeckoChild can trigger crash when accessed off of main thread
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   958
  * CVE-2019-11729 (bmo#1515342)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   959
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   960
  * CVE-2019-11715 (bmo#1555523)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   961
    HTML parsing error can contribute to content XSS
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   962
  * CVE-2019-11716 (bmo#1552632)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   963
    globalThis not enumerable until accessed
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   964
  * CVE-2019-11717 (bmo#1548306)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   965
    Caret character improperly escaped in origins
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   966
  * CVE-2019-11718 (bmo#1408349)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   967
    Activity Stream writes unsanitized content to innerHTML
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   968
  * CVE-2019-11719 (bmo#1540541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   969
    Out-of-bounds read when importing curve25519 private key
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   970
  * CVE-2019-11720 (bmo#1556230)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   971
    Character encoding XSS vulnerability
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   972
  * CVE-2019-11721 (bmo#1256009)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   973
    Domain spoofing through unicode latin 'kra' character
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   974
  * CVE-2019-11730 (bmo#1558299)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   975
    Same-origin policy treats all files in a directory as having the
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   976
    same-origin
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   977
  * CVE-2019-11723 (bmo#1528335)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   978
    Cookie leakage during add-on fetching across private browsing boundaries
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   979
  * CVE-2019-11724 (bmo#1512511)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   980
    Retired site input.mozilla.org has remote troubleshooting permissions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   981
  * CVE-2019-11725 (bmo#1483510)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   982
    Websocket resources bypass safebrowsing protections
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   983
  * CVE-2019-11727 (bmo#1552208)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   984
    PKCS#1 v1.5 signatures can be used for TLS 1.3
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   985
  * CVE-2019-11728 (bmo#1552993)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   986
    Port scanning through Alt-Svc header
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   987
  * CVE-2019-11710 (bmo#1549768, bmo#1548611, bmo#1533842, bmo#1537692,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   988
    bmo#1540590, bmo#1551907, bmo#1510345, bmo#1535482, bmo#1535848,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   989
    bmo#1547472, bmo#1547760, bmo#1507696, bmo#1544180)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   990
    Memory safety bugs fixed in Firefox 68
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   991
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   992
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   993
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   994
- requires
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   995
  * NSS 3.44.1
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   996
  * rust/cargo 1.34
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   997
  * rust-cbindgen 0.8.7
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   998
- rebased patches
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   999
  * mozilla-aarch64-startup-crash.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1000
  * mozilla-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1001
  * mozilla-nongnome-proxies.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1002
  * firefox-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1003
- use new create-tar.sh and add tar_stamps for package definitions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1004
- added patches imported from SLE flavour
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1005
  * mozilla-gcc-internal-compiler-error.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1006
  * mozilla-bmo1005535.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1007
  * mozilla-ppc-altivec_static_inline.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1008
  * mozilla-reduce-rust-debuginfo.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1009
  * mozilla-s390-bigendian.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1010
  * mozilla-s390-context.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1011
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  1012
-------------------------------------------------------------------
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1013
Mon Jul  2 14:15:17 UTC 2019 - Martin Liška <mliska@suse.cz>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1014
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1015
- Enable PGO for x86_64.
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  1016
  * added firefox-add-kde.js-in-order-to-survive-PGO-build.patch
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1017
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1018
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1019
Thu Jun 20 06:20:59 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1020
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1021
- Mozilla Firefox 67.0.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1022
  MFSA 2019-19 (boo#1138872)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1023
  * CVE-2019-11708 (bmo#1559858)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1024
    sandbox escape using Prompt:Open
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1025
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1026
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1027
Tue Jun 18 18:36:15 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1028
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1029
- Mozilla Firefox 67.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1030
  MFSA 2019-18 (boo#1138614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1031
  * CVE-2019-11707 (bmo#1544386)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1032
    Type confusion in Array.pop
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1033
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1034
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1035
Thu Jun 12 14:56:32 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1036
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1037
- Mozilla Firefox 67.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1038
  * Fixed: Fix JavaScript error ("TypeError: data is null in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1039
    PrivacyFilter.jsm") in console which may significantly degrade
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1040
    sessionstore reliability and performance (bmo#1553413)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1041
  * Fixed: Proxy authentication dialog box repeatedly pops up
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1042
    asking to authenticate after upgrading to Firefox 67 (bmo#1548804)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1043
  * Fixed: Pearson MyCloud breaks if FIDO U2F is not Chrome's
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1044
    implementation (bmo#1551282)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1045
  * Fixed: Starting in safe mode on Linux or macOS causes Firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1046
    to think on the subsequent launch that the profile is too
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1047
    recent to be used with this version of Firefox (bmo#1556612)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1048
  * Fixed: Linux distribution users can't easily install/use
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1049
    additional/different languages using the built-in preferences
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1050
    UI (bmo#1554744)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1051
  * Fixed: Developer tools users can't copy the href/src content
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1052
    from various HTML tags via the context menu in the Inspector
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1053
    markup view (bmo#1552275)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1054
  * Fixed: Custom home page is broken with clearing data on shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1055
    settings applied (bmo#1554167)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1056
  * Fixed: Performance-regression for eclipse RAP based applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1057
    (bmo#1555962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1058
  * Fixed: macOS 10.15 crash fix (bmo#1556076)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1059
  * Fixed: Can't start two downloads in parallel via <a download>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1060
    anymore (bmo#1542912)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1061
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1062
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1063
Thu Jun  6 06:49:51 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1064
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1065
- Mozilla Firefox 67.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1066
  * enable enhanced tracking protection by default for new users
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1067
  * upgrade of Facebook container to version 2.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1068
  * new version of Firefox Lockwise (password management)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1069
  * new version of Firefox Monitor
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1070
  * Firefox Send improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1071
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  1072
-------------------------------------------------------------------
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  1073
Sun May 19 20:40:30 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
1093
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1074
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1075
- Mozilla Firefox 67.0
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1076
  * Firefox 67 will be able to run different Firefox installs side by side
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1077
    https://blog.nightly.mozilla.org/2019/01/14/moving-to-a-profile-per-install-architecture/
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1078
  * Tabs can now be pinned from the Page Actions menu in the address bar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1079
  * Users can block known cryptominers and fingerprinters in the
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1080
    Custom settings or their Content Blocking preferences
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1081
  * The Import Data from Another Browser feature is now also available
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1082
    from the File menu
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1083
  * Firefox will now protect you against running older versions which
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1084
    can lead to data corruption and stability issues
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1085
  * Easier access to your list of saved logins from the main menu and
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1086
    login autocomplete
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1087
  * We’ve added a toolbar menu for your Firefox Account to provide more
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1088
    transparency for when you are synced, sharing data across devices
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1089
    and with Firefox. Personalize the appearance of the menu with your
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1090
    own avatar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  1091
  * Enable FIDO U2F API, and permit registrations for Google Accounts