MozillaFirefox/MozillaFirefox.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Wed, 15 Jun 2016 09:53:47 +0200
branchfirefox47
changeset 920 4e5807284ef0
parent 919 6838f0c032f8
child 921 4f801233e935
permissions -rw-r--r--
https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
893
86f72f1e98a4 prepare Gtk3 based builds on a feature branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 892
diff changeset
     1
-------------------------------------------------------------------
920
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
     2
Wed Jun 15 07:52:18 UTC 2016 - wr@rosenauer.org
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
     3
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
     4
- mozilla-binutils-visibility.patch to fix build issues with
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
     5
  gcc/binutils combination used in Leap 42.2
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
     6
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
     7
-------------------------------------------------------------------
919
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
     8
Tue Jun 14 08:35:03 UTC 2016 - badshah400@gmail.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
     9
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    10
- Update mozilla-gtk3_20.patch to latest version from Fedora.
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    11
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    12
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    13
Mon Jun 13 20:28:01 UTC 2016 - agraf@suse.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    14
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    15
- Fix running on 48bit va aarch64 (bsc#984126)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    16
  * add patch mozilla-aarch64-48bit-va.patch
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    17
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    18
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    19
Mon Jun 13 15:27:13 UTC 2016 - wr@rosenauer.org
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    20
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    21
- fix XUL dialog button order under KDE session (boo#984403)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    22
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
    23
-------------------------------------------------------------------
916
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    24
Tue Jun  7 19:47:25 UTC 2016 - wr@rosenauer.org
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    25
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    26
- update to Firefox 47.0 (boo#983549)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    27
  * Enable VP9 video codec for users with fast machines
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    28
  * Embedded YouTube videos now play with HTML5 video if Flash is
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    29
    not installed
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    30
  * View and search open tabs from your smartphone or another
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    31
    computer in a sidebar
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    32
  * Allow no-cache on back/forward navigations for https resources
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    33
  security fixes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    34
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    35
    (boo#983638)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    36
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    37
     bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    38
     bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    39
     bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    40
     bmo#1269729, bmo#1273202, bmo#1273701)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    41
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    42
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    43
    Buffer overflow parsing HTML5 fragments
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    44
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    45
    Use-after-free deleting tables from a contenteditable document
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    46
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    47
    Addressbar spoofing though the SELECT element
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    48
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    49
    Out-of-bounds write with WebGL shader
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    50
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    51
    Partial same-origin-policy through setting location.host
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    52
    through data URI
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    53
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    54
    Use-after-free when textures are used in WebGL operations
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    55
    after recycle pool destruction
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    56
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    57
    Incorrect icon displayed on permissions notifications
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    58
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    59
    Entering fullscreen and persistent pointerlock without user
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    60
    permission
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    61
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    62
    Information disclosure of disabled plugins through CSS
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    63
    pseudo-classes
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    64
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    65
    Java applets bypass CSP protections
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    66
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    67
    bmo#1221620, bmo#1241034, bmo#1241037)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    68
    Network Security Services (NSS) vulnerabilities
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    69
    fixed by requiring NSS 3.23
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    70
  packaging changes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    71
  * cleanup configure options (boo#981695):
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    72
    - notably remove GStreamer support which is gone from FF
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    73
  * remove obsolete patches
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    74
    - mozilla-libproxy.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    75
    - mozilla-repo.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    76
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    77
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    78
Wed May 25 16:36:23 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    79
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    80
- The conditional testing for gcc was failing for different
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    81
  openSUSE versions, drop it and apply patches unconditionally.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    82
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    83
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    84
Mon May 23 15:30:27 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    85
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    86
- Add patches to fix building with gcc6:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    87
  + mozilla-gcc6.patch: fix building with gcc >= 6.1; patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    88
    taken from upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    89
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    90
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    91
    from unified compilation because #include <cmath> in other
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    92
    source files causes gcc6 compilation failure; patch taken from
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    93
    upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    94
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    95
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    96
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    97
Fri May 13 00:00:00 CEST 2016 - dsterba@suse.cz
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    98
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
    99
- enable build with PIE and full relro on x86_64 (boo#980384)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   100
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   101
-------------------------------------------------------------------
914
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   102
Wed May  4 10:27:43 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   103
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   104
- update to Firefox 46.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   105
  Fixed:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   106
  * Search plugin issue for various locales
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   107
  * Add-on signing certificate expiration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   108
  * Service worker update issue
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   109
  * Build issue when jit is disabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   110
  * Limit Sync registration updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   111
- removed now obsolete mozilla-jit_branch64.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   112
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   113
-------------------------------------------------------------------
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   114
Tue May  3 15:47:18 UTC 2016 - normand@linux.vnet.ibm.com
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   115
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   116
- add mozilla-jit_branch64.patch to avoid PowerPC build failure
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   117
  (from bmo#1266366)
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   118
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   119
-------------------------------------------------------------------
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   120
Wed Apr 27 08:39:28 UTC 2016 - badshah400@gmail.com
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   121
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   122
- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   123
  version from Fedora).
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   124
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   125
-------------------------------------------------------------------
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   126
Wed Apr 27 06:09:30 UTC 2016 - wr@rosenauer.org
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   127
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   128
- update to Firefox 46.0 (boo#977333)
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   129
  * Improved security of the JavaScript Just In Time (JIT) Compiler
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   130
  * WebRTC fixes to improve performance and stability
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   131
  * Added support for document.elementsFromPoint
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   132
  * Added HKDF support for Web Crypto API
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   133
  * requires NSPR 4.12 and NSS 3.22.3
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   134
  * added patch to fix unchecked return value
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   135
    mozilla-check_return.patch
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   136
  * Gtk3 builds not supported at the moment
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   137
  security fixes:
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   138
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   139
    (boo#977373, boo#977375, boo#977376)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   140
    Miscellaneous memory safety hazards
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   141
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   142
    Privilege escalation through file deletion by Maintenance Service updater
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   143
    (Windows only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   144
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   145
    Content provider permission bypass allows malicious application
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   146
    to access data (Android only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   147
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   148
    (bmo#1252330, bmo#1261776, boo#977379)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   149
    Use-after-free and buffer overflow in Service Workers
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   150
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   151
    Disclosure of user actions through JavaScript with motion and
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   152
    orientation sensors (only affects mobile variants)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   153
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   154
    Buffer overflow in libstagefright with CENC offsets
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   155
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   156
    CSP not applied to pages sent with multipart/x-mixed-replace
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   157
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   158
    Elevation of privilege with chrome.tabs.update API in web extensions
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   159
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   160
    Write to invalid HashMap entry through JavaScript.watch()
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   161
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   162
    Firefox Health Reports could accept events from untrusted domains
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   163
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   164
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   165
Thu Apr 21 12:00:28 UTC 2016 - badshah400@gmail.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   166
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   167
- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   168
  gtk >= 3.20 (patch synced to Fedora's version).
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   169
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   170
-------------------------------------------------------------------
907
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   171
Tue Apr 12 19:11:30 UTC 2016 - badshah400@gmail.com
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   172
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   173
- Compile against gtk3 depending on whether the macro
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   174
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   175
  level); macro is undefined by default and so gtk2 is used as the
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   176
  default toolkit.
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   177
- Add BuildRequires for additional packages needed when building
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   178
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   179
  pkgconfig(gtk+-3.0) >= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   180
- Add firefox-gtk3_20.patch to fix appearance with gtk3 >= 3.20;
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   181
  patch taken from Fedora (bmo#1230955).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   182
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   183
-------------------------------------------------------------------
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   184
Mon Apr 11 22:49:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   185
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   186
- Mozilla Firefox 45.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   187
  * Fix an issue impacting the cookie header when third-party
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   188
    cookies are blocked (bmo#1257861)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   189
  * Fix a web compatibility regression impacting the srcset
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   190
    attribute of the image tag (bmo#1259482)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   191
  * Fix a crash impacting the video playback with Media Source
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   192
    Extension (bmo#1258562)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   193
  * Fix a regression impacting some specific uploads (bmo#1255735)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   194
  * Fix a regression with the copy and paste with some old versions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   195
    of some Gecko applications like Thunderbird (bmo#1254980)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   196
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   197
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   198
Fri Mar 18 08:52:58 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   199
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   200
- Mozilla Firefox 45.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   201
  * Fix a regression causing search engine settings to be lost in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   202
    some context (bmo#1254694)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   203
  * Bring back non-standard jar: URIs to fix a regression in IBM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   204
    iNotes (bmo#1255139)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   205
  * XSLTProcessor.importStylesheet was failing when <import> was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   206
    used (bmo#1249572)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   207
  * Fix an issue which could cause the list of search provider to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   208
    be empty (bmo#1255605)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   209
  * Fix a regression when using the location bar (bmo#1254503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   210
  * Fix some loading issues when Accept third-party cookies: was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   211
    set to Never (bmo#1254856)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   212
  * Disabled Graphite font shaping library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   213
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   214
-------------------------------------------------------------------
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   215
Sun Mar  6 19:52:13 UTC 2016 - wr@rosenauer.org
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   216
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   217
- update to Firefox 45.0 (boo#969894)
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   218
  * requires NSPR 4.12 / NSS 3.21.1
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   219
  * Instant browser tab sharing through Hello
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   220
  * Synced Tabs button in button bar
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   221
  * Tabs synced via Firefox Accounts from other devices are now shown
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   222
    in dropdown area of Awesome Bar when searching
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   223
  * Introduce a new preference (network.dns.blockDotOnion) to allow
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   224
    blocking .onion at the DNS level
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   225
  * Tab Groups (Panorama) feature removed
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   226
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   227
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   228
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   229
    Local file overwriting and potential privilege escalation through
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   230
    CSP reports
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   231
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   232
    CSP reports fail to strip location information for embedded iframe pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   233
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   234
    Linux video memory DOS with Intel drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   235
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   236
    Memory leak in libstagefright when deleting an array during MP4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   237
    processing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   238
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   239
    Displayed page address can be overridden
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   240
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   241
    Service Worker Manager out-of-bounds read in Service Worker Manager
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   242
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   243
    Use-after-free in HTML5 string parser
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   244
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   245
    Use-after-free in SetBody
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   246
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   247
    Use-after-free when using multiple WebRTC data channels
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   248
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   249
    Memory corruption when modifying a file being read by FileReader
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   250
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   251
    Use-after-free during XML transformations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   252
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   253
    Addressbar spoofing though history navigation and Location protocol
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   254
    property
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   255
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   256
    Same-origin policy violation using perfomance.getEntries and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   257
    history navigation with session restore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   258
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   259
    Buffer overflow in Brotli decompression
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   260
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   261
    Memory corruption with malicious NPAPI plugin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   262
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   263
    CVE-2016-1976/CVE-2016-1972
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   264
    WebRTC and LibVPX vulnerabilities found through code inspection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   265
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   266
    Use-after-free in GetStaticInstance in WebRTC
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   267
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   268
    Out-of-bounds read in HTML parser following a failed allocation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   269
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   270
    Buffer overflow during ASN.1 decoding in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   271
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   272
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   273
    Use-after-free during processing of DER encoded keys in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   274
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   275
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   276
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   277
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   278
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   279
    Font vulnerabilities in the Graphite 2 library
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   280
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   281
-------------------------------------------------------------------
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   282
Sat Mar  5 15:27:00 UTC 2016 - olaf@aepfle.de
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   283
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   284
- Remove B_CNT from symbols.zip filename to reduce build-compare noise
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   285
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   286
-------------------------------------------------------------------
903
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   287
Fri Feb 26 16:22:52 UTC 2016 - astieger@suse.com
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   288
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   289
- fix build problems on i586, caused by too large unified compile
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   290
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   291
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   292
-------------------------------------------------------------------
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   293
Thu Feb 11 07:51:34 UTC 2016 - wr@rosenauer.org
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   294
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   295
- update to Firefox 44.0.2
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   296
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   297
    Same-origin-policy violation using Service Workers with plugins
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   298
  * Fix issue which could lead to the removal of stored passwords
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   299
    under certain circumstances (bmo#1242176)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   300
  * Allows spaces in cookie names (bmo#1244505)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   301
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   302
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   303
  * Fix a crash in cache networking (bmo#1244076)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   304
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   305
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   306
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   307
Sat Jan 30 08:28:17 UTC 2016 - dmueller@suse.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   308
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   309
- build fixes for arm/aarch64:
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   310
  * disable webrtc for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   311
  * switch away from openGL-ES backend to default for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   312
   since it almost never builds
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   313
  * reenable neon
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   314
- reenable webrtc for powerpc as it seems to build
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   315
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   316
-------------------------------------------------------------------
900
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
   317
Sun Jan 24 09:33:15 UTC 2016 - wr@rosenauer.org
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
   318
902
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   319
- update to Firefox 44.0
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   320
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   321
    Miscellaneous memory safety hazards
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   322
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   323
    Out of Memory crash when parsing GIF format images
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   324
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   325
    Buffer overflow in WebGL after out of memory allocation
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   326
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   327
    Firefox allows for control characters to be set in cookie names
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   328
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   329
    Missing delay following user click events in protocol handler dialog
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   330
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   331
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   332
    (fixed by requiring NSS 3.21)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   333
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   334
    Addressbar spoofing attacks boo#963643
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   335
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   336
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   337
    Unsafe memory manipulation found through code inspection
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   338
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   339
    Application Reputation service disabled in Firefox 43
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   340
  * requires NSPR 4.11
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   341
  * requires NSS 3.21
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
   342
- prepare mozilla-kde.patch for Gtk3 builds
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   343
- rebased patches
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
   344
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
   345
-------------------------------------------------------------------
897
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   346
Mon Jan 11 08:04:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   347
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   348
- Mozilla Firefox 43.0.4:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   349
  * Re-enable SHA-1 certificates to prevent outdated
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   350
    man-in-the-middle security devices from interfering with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   351
    properly secured SSL/TLS connections (bmo#1236975)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   352
  * Fix for startup crash for users of a third party antivirus tool
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   353
    (bmo#1235537)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   354
- The following change was previously in the package as a patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   355
  * Multi-user GNU/Linux download folders can be created
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   356
   (bmo#1233434), removed mozilla-bmo1233434.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   357
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   358
-------------------------------------------------------------------
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
   359
Tue Dec 29 20:29:35 UTC 2015 - wr@rosenauer.org
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   360
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   361
- update to Firefox 43.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   362
  * requires NSS 3.20.2 to fix
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   363
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   364
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   365
    server signature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   366
  * various changes to support Windows update (SHA-1 vs. SHA-2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   367
  * workaround Youtube user agent detection issue (bmo#1233970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   368
- fix file download regression for multi user systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   369
  (bmo#1233434) (mozilla-bmo1233434.patch)
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
   370
- explicitely requires libXcomposite-devel
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   371
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
   372
-------------------------------------------------------------------
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   373
Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   374
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   375
- update to Firefox 43.0 (bnc#959277)
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   376
  * Improved API support for m4v video playback
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   377
  * Users can opt-in to receive search suggestions from the Awesome Bar
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   378
  * WebRTC streaming on multiple monitors
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   379
  * User selectable second block list for Private Browsing's Tracking
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   380
    Protection
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   381
  security fixes:
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   382
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   383
    Miscellaneous memory safety hazards
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   384
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   385
    Crash with JavaScript variable assignment with unboxed objects
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   386
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   387
    Same-origin policy violation using perfomance.getEntries and
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   388
    history navigation
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   389
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   390
    Firefox allows for control characters to be set in cookies
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   391
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   392
    Use-after-free in WebRTC when datachannel is used after being
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   393
    destroyed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   394
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   395
    Integer overflow allocating extremely large textures
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   396
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   397
    Cross-origin information leak through web workers error events
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   398
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   399
    Hash in data URI is incorrectly parsed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   400
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   401
    DOS due to malformed frames in HTTP/2
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   402
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   403
    Linux file chooser crashes on malformed images due to flaws in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   404
    Jasper library
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   405
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   406
    (bmo#1201183, bmo#1178033, bmo#1199400)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   407
    Buffer overflows found through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   408
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   409
    Underflow through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   410
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   411
    Integer overflow in MP4 playback in 64-bit versions
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   412
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   413
    Integer underflow and buffer overflow processing MP4 metadata in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   414
    libstagefright
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   415
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   416
    Privilege escalation vulnerabilities in WebExtension APIs
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   417
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
   418
    Cross-site reading attack through data and view-source URIs
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   419
- rebased patches
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   420
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
   421
-------------------------------------------------------------------
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   422
Sun Nov 15 19:52:20 UTC 2015 - wr@rosenauer.org
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   423
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   424
- Add desktop menu action for private browsing window to desktop
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   425
  file (boo#954747)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   426
- remove obsolete patch mozilla-bmo1005535.patch completely from
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   427
  source package to avoid automatic check failures
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   428
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   429
-------------------------------------------------------------------
885
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   430
Sat Oct 31 19:50:03 UTC 2015 - wr@rosenauer.org
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   431
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   432
- update to Firefox 42.0 (bnc#952810)
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   433
  * Private Browsing with Tracking Protection blocks certain Web
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   434
    elements that could be used to record your behavior across sites
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   435
  * Control Center that contains site security and privacy controls
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   436
  * Login Manager improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   437
  * WebRTC improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   438
  * Indicator added to tabs that play audio with one-click muting
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   439
  * Media Source Extension for HTML5 video available for all sites
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   440
  security fixes:
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   441
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   442
    Miscellaneous memory safety hazards
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   443
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   444
    Information disclosure through NTLM authentication
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   445
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   446
    CSP bypass due to permissive Reader mode whitelist
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   447
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   448
    Firefox for Android addressbar can be removed after fullscreen mode
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   449
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   450
    Reading sensitive profile files through local HTML file on Android
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   451
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   452
    disabling scripts in Add-on SDK panels has no effect
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   453
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   454
    Trailing whitespace in IP address hostnames can bypass same-origin policy
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   455
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   456
    Buffer overflow during image interactions in canvas
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   457
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   458
    Android intents can be used on Firefox for Android to open privileged files
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   459
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   460
    XSS attack through intents on Firefox for Android
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   461
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   462
    Crash when accessing HTML tables with accessibility tools on OS X
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   463
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   464
    CORS preflight is bypassed when non-standard Content-Type headers
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   465
    are received
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   466
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   467
    Memory corruption in libjar through zip files
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   468
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   469
    Certain escaped characters in host of Location-header are being
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   470
    treated as non-escaped
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   471
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   472
    JavaScript garbage collection crash with Java applet
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   473
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   474
    (bmo#1188010, bmo#1204061, bmo#1204155)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   475
    Vulnerabilities found through code inspection
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   476
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   477
    Mixed content WebSocket policy bypass through workers
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   478
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   479
    (bmo#1202868, bmo#1205157)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   480
    NSS and NSPR memory corruption issues
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   481
    (fixed in mozilla-nspr and mozilla-nss packages)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
   482
- requires NSPR >= 4.10.10 and NSS >= 3.19.4
885
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   483
- removed obsolete patches
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   484
  * mozilla-arm-disable-edsp.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   485
  * mozilla-icu-strncat.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   486
  * mozilla-skia-be-le.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   487
  * toolkit-download-folder.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   488
- fixed build with enable-libproxy (bmo#1220399)
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   489
  * mozilla-libproxy.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   490
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
   491
-------------------------------------------------------------------
884
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   492
Thu Oct 15 08:25:54 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   493
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   494
- update to Firefox 41.0.2 (bnc#950686)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   495
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   496
    Cross-origin restriction bypass using Fetch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   497
- added explicit appdata provides (bnc#949983)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   498
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   499
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   500
Sun Oct  4 09:20:56 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   501
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   502
- do not build with --enable-stdcxx-compat
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   503
  (this starts to fail build on various toolchain combinations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   504
  and is not required for openSUSE builds in general
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   505
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   506
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   507
Thu Oct  1 09:49:57 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   508
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   509
- update to Firefox 41.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   510
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   511
    (bmo#1209124)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   512
  * Fix potential hangs with Flash plugins (bmo#1185639)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   513
  * Fix a regression in the bookmark creation (bmo#1206376)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   514
  * Fix a startup crash with some Intel Media Accelerator 3150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   515
    graphic cards (bmo#1207665)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   516
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   517
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
   518
-------------------------------------------------------------------
883
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   519
Sat Sep 19 20:23:29 UTC 2015 - wr@rosenauer.org
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   520
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   521
- update to Firefox 41.0 (bnc#947003)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   522
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   523
    Miscellaneous memory safety hazards
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   524
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   525
    Memory leak in mozTCPSocket to servers
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   526
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   527
    Out of bounds read in QCMS library with ICC V4 profile attributes
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   528
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   529
    Site attribute spoofing on Android by pasting URL with unknown scheme
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   530
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   531
    Arbitrary file manipulation by local user through Mozilla updater
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   532
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   533
    Buffer overflow in libvpx while parsing vp9 format video
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   534
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   535
    Crash when using debugger with SavedStacks in JavaScript
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   536
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   537
    URL spoofing in reader mode
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   538
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   539
    Use-after-free with shared workers and IndexedDB
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   540
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   541
    Buffer overflow while decoding WebM video
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   542
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   543
    Use-after-free while manipulating HTML media content
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   544
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   545
    Out-of-bounds read during 2D canvas display on Linux 16-bit
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   546
    color depth systems
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   547
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   548
    Scripted proxies can access inner window
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   549
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   550
    JavaScript immutable property enforcement can be bypassed
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   551
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   552
    Dragging and dropping images exposes final URL after redirects
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   553
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   554
    Errors in the handling of CORS preflight request headers
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   555
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   556
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   557
    CVE-2015-7180
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   558
    Vulnerabilities found through code inspection
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   559
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   560
    bmo#1190526) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   561
    Memory safety errors in libGLES in the ANGLE graphics library
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   562
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   563
    Information disclosure via the High Resolution Time API
882
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
   564
- rebased patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
   565
- removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
   566
  * mozilla-arm64-libjpeg-turbo.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
   567
883
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   568
------------------------------------------------------------------
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   569
Thu Aug 27 06:03:51 UTC 2015 - wr@rosenauer.org
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   570
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   571
- update to Firefox 40.0.3 (bnc#943550)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   572
  * Disable the asynchronous plugin initialization (bmo#1198590)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   573
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   574
  * Fix a regression with some Japanese fonts used in the <input>
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   575
    field (bmo#1194055)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   576
  * On some sites, the selection in a select combox box using the
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   577
    mouse could be broken (bmo#1194733)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   578
  security fixes
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   579
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   580
    Use-after-free when resizing canvas element during restyling
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   581
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   582
    Add-on notification bypass through data URLs
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
   583
882
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
   584
-------------------------------------------------------------------
875
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   585
Fri Aug  7 07:49:49 UTC 2015 - wr@rosenauer.org
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   586
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   587
- update to Firefox 40.0 (bnc#940806)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   588
  * Added protection against unwanted software downloads
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   589
  * Suggested Tiles show sites of interest, based on categories
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   590
    from your recent browsing history
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   591
  * Hello allows adding a link to conversations to provide context
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   592
    on what the conversation will be about
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   593
  * New style for add-on manager based on the in-content
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   594
    preferences style
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   595
  * Improved scrolling, graphics, and video playback performance
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   596
    with off main thread compositing (GNU/Linux only)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   597
  * Graphic blocklist mechanism improved: Firefox version ranges
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   598
    can be specified, limiting the number of devices blocked
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   599
  security fixes:
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   600
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   601
    Miscellaneous memory safety hazards
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   602
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   603
    Out-of-bounds read with malformed MP3 file
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   604
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   605
    Use-after-free in MediaStream playback
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   606
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   607
    Redefinition of non-configurable JavaScript object properties
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   608
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   609
    Overflow issues in libstagefright
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   610
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   611
    Arbitrary file overwriting through Mozilla Maintenance Service
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   612
    with hard links (only affected Windows)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   613
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   614
    Out-of-bounds write with Updater and malicious MAR file
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   615
    (does not affect openSUSE RPM packages which do not ship the
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   616
     updater)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   617
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   618
    Feed protocol with POST bypasses mixed content protections
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   619
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   620
    Crash when using shared memory in JavaScript
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   621
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   622
    Heap overflow in gdk-pixbuf when scaling bitmap images
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   623
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   624
    Buffer overflows on Libvpx when decoding WebM video
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   625
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   626
    Vulnerabilities found through code inspection
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   627
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   628
    Mozilla Content Security Policy allows for asterisk wildcards
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   629
    in violation of CSP specification
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   630
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
   631
    Use-after-free in XMLHttpRequest with shared workers
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
   632
- added mozilla-no-stdcxx-check.patch
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
   633
- removed obsolete patches
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
   634
  * mozilla-add-glibcxx_use_cxx11_abi.patch
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
   635
  * firefox-multilocale-chrome.patch
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
   636
- rebased patches
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
   637
- requires version 40 of the branding package
871
4c6e8495720b beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 869
diff changeset
   638
- removed browser/searchplugins/ location as it's not valid anymore
867
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   639
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   640
-------------------------------------------------------------------
870
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   641
Fri Aug  7 07:09:39 UTC 2015 - wr@rosenauer.org
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   642
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   643
- security update to Firefox 39.0.3 (bnc#940918)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   644
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   645
    Same origin violation and local file stealing via PDF reader
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   646
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
   647
-------------------------------------------------------------------
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   648
Wed Jul  1 06:43:02 UTC 2015 - wr@rosenauer.org
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   649
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   650
- update to Firefox 39.0 (bnc#935979)
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   651
  * Share Hello URLs with social networks
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   652
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   653
  * SafeBrowsing malware detection lookups enabled for downloads
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   654
    (Mac OS X and Linux)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   655
  * Support for new Unicode 8.0 skin tone emoji
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   656
  * Removed support for insecure SSLv3 for network communications
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   657
  * Disable use of RC4 except for temporarily whitelisted hosts
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   658
  * NPAPI Plug-in performance improved via asynchronous initialization
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   659
  security fixes:
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   660
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   661
    Miscellaneous memory safety hazards
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   662
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   663
    Local files or privileged URLs in pages can be opened into new tabs
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   664
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   665
    Type confusion in Indexed Database Manager
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   666
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   667
    Out-of-bound read while computing an oscillator rendering range in Web Audio
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   668
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   669
    Use-after-free in Content Policy due to microtask execution error
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   670
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   671
    ECDSA signature validation fails to handle some signatures correctly
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   672
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   673
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   674
    Use-after-free in workers while using XMLHttpRequest
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   675
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   676
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   677
    Vulnerabilities found through code inspection
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   678
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   679
    Key pinning is ignored when overridable errors are encountered
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   680
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   681
    OS X crash reports may contain entered key press information
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   682
    (not relevant under Linux)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   683
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   684
    Privilege escalation in PDF.js
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   685
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   686
    NSS accepts export-length DHE keys with regular DHE cipher suites
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   687
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   688
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   689
    NSS incorrectly permits skipping of ServerKeyExchange
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
   690
    (this fix is shipped by NSS 3.19.1 externally)
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
   691
- dropped mozilla-prefer_plugin_pref.patch as this feature is
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
   692
  likely not worth maintaining further
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
   693
- rebased patches
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
   694
- require NSS 3.19.2
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
   695
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
   696
-------------------------------------------------------------------
862
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
   697
Thu Jun 18 10:30:18 UTC 2015 - schwab@suse.de
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
   698
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
   699
- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
   700
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
   701
-------------------------------------------------------------------
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
   702
Sun Jun  7 07:09:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
   703
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
   704
- update to Firefox 38.0.6
855
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
   705
  * fixes bmo#1171730 which is not really relevant to oS builds
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
   706
- fix KDE regression from 38.0.5 builds (bsc#933439)
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
   707
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
   708
-------------------------------------------------------------------
853
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   709
Sat May 23 21:13:49 UTC 2015 - wr@rosenauer.org
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   710
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   711
- update to Firefox 38.0.5
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   712
  * Keep track of articles and videos with Pocket
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   713
  * Clean formatting for articles and blog posts with Reader View
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   714
  * Share the active tab or window in a Hello conversation
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   715
- add changes file as source for SRPM (bsc#932142)
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   716
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
   717
-------------------------------------------------------------------
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   718
Fri May 15 10:40:19 UTC 2015 - normand@linux.vnet.ibm.com
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   719
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   720
- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   721
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   722
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   723
-------------------------------------------------------------------
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   724
Fri May 15 07:37:46 UTC 2015 - wr@rosenauer.org
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   725
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   726
- update to Firefox 38.0.1
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   727
  stability and regression fixes
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   728
  * Systems with first generation NVidia Optimus graphics cards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   729
    may crash on start-up
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   730
  * Users who import cookies from Google Chrome can end up with
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   731
    broken websites
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   732
  * Large animated images may fail to play and may stop other
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   733
    images from loading
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   734
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   735
-------------------------------------------------------------------
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   736
Sun May 10 07:07:49 UTC 2015 - wr@rosenauer.org
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   737
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   738
- update to Firefox 38.0 (bnc#930622)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   739
  * New tab-based preferences
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   740
  * Ruby annotation support
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   741
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   742
  security fixes:
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   743
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   744
    Miscellaneous memory safety hazards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   745
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   746
    Buffer overflow parsing H.264 video with Linux Gstreamer
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   747
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   748
    Buffer overflow with SVG content and CSS
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   749
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   750
    Referrer policy ignored when links opened by middle-click and
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   751
    context menu
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   752
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   753
    Out-of-bounds read and write in asm.js validation
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   754
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   755
    Use-after-free during text processing with vertical text enabled
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   756
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   757
    Use-after-free due to Media Decoder Thread creation during shutdown
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   758
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   759
    Buffer overflow when parsing compressed XML
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   760
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   761
    Buffer overflow and out-of-bounds read while parsing MP4 video
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   762
    metadata
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   763
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   764
    Untrusted site hosting trusted page can intercept webchannel
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   765
    responses
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   766
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
   767
    Privilege escalation through IPC channel messages
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   768
- requires NSS 3.18.1
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   769
- removed obsolete patches:
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   770
  * mozilla-skia-bmo1136958.patch
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   771
- remove gnomevfs build options as it is removed from sources
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
   772
- rebased patches
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   773
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   774
-------------------------------------------------------------------
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   775
Fri Apr 17 16:39:20 UTC 2015 - wr@rosenauer.org
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   776
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   777
- update to Firefox 37.0.2 (bnc#928116)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   778
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
   779
    Memory corruption during failed plugin initialization
845
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
   780
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
   781
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   782
Fri Apr  3 08:27:24 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   783
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   784
- update to Firefox 37.0.1 (bnc#926166)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   785
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   786
    Loading privileged content through Reader mode
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   787
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   788
    Certificate verification bypass through the HTTP/2 Alt-Svc header
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   789
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   790
-------------------------------------------------------------------
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   791
Sat Mar 28 09:46:48 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   792
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   793
- update to Firefox 37.0 (bnc#925368)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   794
  * Heartbeat user rating system
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   795
  * Yandex set as default search provider for the Turkish locale
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   796
  * Bing search now uses HTTPS for secure searching
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   797
  * Improved protection against site impersonation via OneCRL
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   798
    centralized certificate revocation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   799
  * Opportunistically encrypt HTTP traffic where the server supports
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   800
    HTTP/2 AltSvc
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   801
  * some more behaviour changes for TLS
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   802
  security fixes:
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   803
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   804
    Miscellaneous memory safety hazards
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   805
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   806
    Use-after-free when using the Fluendo MP3 GStreamer plugin
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   807
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   808
    Add-on lightweight theme installation approval bypassed through
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   809
    MITM attack
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   810
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   811
    resource:// documents can load privileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   812
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   813
    Out of bounds read in QCMS library
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   814
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   815
    Cursor clickjacking with flash and images (OS X only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   816
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   817
    Incorrect memory management for simple-type arrays in WebRTC
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   818
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   819
    CORS requests should not follow 30x redirections after preflight
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   820
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   821
    Memory corruption crashes in Off Main Thread Compositing
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   822
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   823
    Use-after-free due to type confusion flaws
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   824
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   825
    Same-origin bypass through anchor navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   826
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   827
    PRNG weakness allows for DNS poisoning on Android (only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   828
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   829
    Windows can retain access to privileged content on navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   830
    to unprivileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   831
- removed obsolete patches
837
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 836
diff changeset
   832
  * mozilla-bmo1088588.patch
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   833
  * mozilla-bmo1108834.patch
836
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   834
- requires NSPR 4.10.8
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   835
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   836
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   837
Tue Mar 24 15:35:24 UTC 2015 - dvaleev@suse.com
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   838
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   839
- Fix builds with skia on Power
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   840
  mozilla-skia-be-le.patch (patch from #bmo1136958)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   841
  mozilla-bmo1108834.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   842
  mozilla-bmo1005535.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   843
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
   844
-------------------------------------------------------------------
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   845
Sat Mar 21 09:03:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   846
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
   847
- update to Firefox 36.0.4 (bnc#923534)
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   848
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   849
    Privilege escalation through SVG navigation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   850
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   851
    Code execution through incorrect JavaScript bounds checking
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   852
    elimination
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   853
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   854
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   855
Fri Mar 20 15:02:33 UTC 2015 - dimstar@opensuse.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   856
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   857
- Copy the icons to /usr/share/icons instead of symlinking them:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   858
  in preparation for containerized apps (e.g. xdg-app) as well as
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   859
  AppStream metadata extraction, there are a couple locations that
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   860
  need to be real files for system integration (.desktop files,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   861
  icons, mime-type info).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   862
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
   863
-------------------------------------------------------------------
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   864
Sat Mar  7 07:40:56 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   865
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   866
- update to Firefox 36.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   867
  Bugfixes:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   868
  * Disable the usage of the ANY DNS query type (bmo#1093983)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   869
  * Hello may become inactive until restart (bmo#1137469)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   870
  * Print preferences may not be preserved (bmo#1136855)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   871
  * Hello contact tabs may not be visible (bmo#1137141)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   872
  * Accept hostnames that include an underscore character ("_")
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   873
    (bmo#1136616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   874
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   875
  * Option -remote has been restored (bmo#1080319)
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
   876
- added mozilla-skia-bmo1136958.patch to fix build issues for
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
   877
  ARM and PPC
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   878
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
   879
-------------------------------------------------------------------
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   880
Fri Feb 20 22:53:39 UTC 2015 - wr@rosenauer.org
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   881
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   882
- update to Firefox 36.0 (bnc#917597)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   883
  * mozilla-xremote-client was removed
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   884
  * added libclearkey.so media plugin
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   885
  * Pinned tiles on the new tab page can be synced
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   886
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   887
    more scalable, and more responsive web.
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   888
  * Locale added: Uzbek (uz)
835
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   889
  security fixes:
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   890
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   891
    Miscellaneous memory safety hazards
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   892
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   893
    Invoking Mozilla updater will load locally stored DLL files
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   894
    (Windows only)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   895
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   896
    Appended period to hostnames can bypass HPKP and HSTS protections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   897
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   898
    Malicious WebGL content crash when writing strings
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   899
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   900
    TLS TURN and STUN connections silently fail to simple TCP connections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   901
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   902
    Use-after-free in IndexedDB
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   903
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   904
    Buffer overflow in libstagefright during MP4 video playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   905
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   906
    Double-free when using non-default memory allocators with a
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   907
    zero-length XHR
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   908
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   909
    Out-of-bounds read and write while rendering SVG content
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   910
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   911
    Buffer overflow during CSS restyling
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   912
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   913
    Buffer underflow during MP3 playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   914
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   915
    Crash using DrawTarget in Cairo graphics library
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   916
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   917
    Use-after-free in Developer Console date with OpenType Sanitiser
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   918
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   919
    Reading of local files through manipulation of form autocomplete
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   920
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   921
    Local files or privileged URLs in pages can be opened into new tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   922
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   923
    UI Tour whitelisted sites in background tab can spoof foreground
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   924
    tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   925
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
   926
    Caja Compiler JavaScript sandbox bypass
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
   927
- rebased patches
830
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   928
- requires NSS 3.17.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   929
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   930
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   931
Sat Jan 31 18:37:38 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   932
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   933
- update to Firefox 35.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   934
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   935
  * Kerberos authentication did not work with alias (bmo#1108971)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   936
  * SVG / CSS animation had a regression causing rendering issues on
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   937
    websites like openstreemap.org (bmo#1083079)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   938
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   939
  * document.baseURI did not get updated to document.location after
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   940
    base tag was removed from DOM for site with a CSP (bmo#1121857)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   941
  * With a Right-to-left (RTL) version of Firefox, the text selection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   942
    could be broken (bmo#1104036)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   943
  * CSP had a change in behavior with regard to case sensitivity
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
   944
    resources loading (bmo#1122445)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   945
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
   946
-------------------------------------------------------------------
826
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
   947
Sat Jan 10 18:36:37 UTC 2015 - wr@rosenauer.org
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
   948
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
   949
- update to Firefox 35.0 (bnc#910669)
827
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   950
  notable features:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   951
  * Firefox Hello with new rooms-based conversations model
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   952
  * Implemented HTTP Public Key Pinning Extension (for enhanced
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   953
    authentication of encrypted connections)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   954
  security fixes:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   955
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   956
    Miscellaneous memory safety hazards
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   957
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   958
    Uninitialized memory use during bitmap rendering
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   959
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   960
    sendBeacon requests lack an Origin header
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   961
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   962
    Cookie injection through Proxy Authenticate responses
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   963
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   964
    Read of uninitialized memory in Web Audio
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   965
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   966
    Read-after-free in WebRTC
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   967
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   968
    Gecko Media Plugin sandbox escape
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   969
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   970
    Delegated OCSP responder certificates failure with
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   971
    id-pkix-ocsp-nocheck extension
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   972
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
   973
    XrayWrapper bypass through DOM objects
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
   974
- rebased patches
809
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   975
- dropped explicit support for everything older than 12.3
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   976
  (including SLES11)
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   977
  * merge firefox-kde.patch and firefox-kde-114.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   978
  * dropped mozilla-sle11.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   979
- reworked specfile to build conditionally based on release channel
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   980
  either Firefox or Firefox Developer Edition
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
   981
- added mozilla-openaes-decl.patch to fix implicit declarations
819
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
   982
- obsolete tracker-miner-firefox < 0.15 because it leads to startup
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
   983
  crashes (bnc#908892)
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
   984
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
   985
-------------------------------------------------------------------
820
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   986
Sat Dec 13 22:13:00 UTC 2014 - Led <ledest@gmail.com>
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   987
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   988
- fix bashism in mozilla.sh script
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   989
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
   990
-------------------------------------------------------------------
813
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   991
Sat Nov 29 21:23:03 UTC 2014 - wr@rosenauer.org
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   992
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   993
- update to Firefox 34.0.5 (bnc#908009)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   994
  * Default search engine changed to Yahoo! for North America
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   995
  * Default search engine changed to Yandex for Belarusian, Kazakh,
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   996
    and Russian locales
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   997
  * Improved search bar (en-US only)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   998
  * Firefox Hello real-time communication client
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
   999
  * Easily switch themes/personas directly in the Customizing mode
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1000
  * Implementation of HTTP/2 (draft14) and ALPN
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1001
  * Disabled SSLv3
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1002
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1003
    Miscellaneous memory safety hazards
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1004
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1005
    XBL bindings accessible via improper CSS declarations
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1006
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1007
    XMLHttpRequest crashes with some input streams
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1008
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1009
    CSP leaks redirect data via violation reports
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1010
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1011
    Use-after-free during HTML5 parsing
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1012
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1013
    Buffer overflow while parsing media content
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1014
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1015
    Bad casting from the BasicThebesLayer to BasicContainerLayer
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  1016
- rebased patches
806
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 805
diff changeset
  1017
- limit linker memory usage for %ix86
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  1018
- rebased patches
805
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
  1019
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
  1020
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1021
Fri Nov  7 20:14:32 UTC 2014 - wr@rosenauer.org
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1022
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1023
- update to Firefox 33.1
802
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  1024
  * Adding DuckDuckGo as a search option (upstream)
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  1025
  * Forget Button added
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  1026
  * Enhanced Tiles
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  1027
  * Privacy tour introduced
797
3b2d52457c91 fix typo on Recommends
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 789
diff changeset
  1028
- fix typo in GStreamer Recommends
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1029
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1030
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1031
Tue Nov  4 18:00:35 UTC 2014 - guillaume@opensuse.org
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1032
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1033
- Disable elf-hack for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1034
- Enable EGL for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1035
- Limit RAM usage during link for %arm
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1036
- Fix _constraints for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1037
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1038
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1039
Mon Nov  3 11:36:04 UTC 2014 - dmueller@suse.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1040
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1041
- use proper macros for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1042
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1043
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1044
Mon Nov  3 11:26:23 UTC 2014 - josua.mayer97@gmail.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1045
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1046
- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1047
  to fix compiling.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1048
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1049
  linking on arm.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1050
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  1051
-------------------------------------------------------------------
788
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1052
Thu Oct 30 11:31:05 UTC 2014 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1053
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1054
- update to Firefox 33.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1055
  * Fix a startup crash with some combination of hardware and drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1056
  33.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1057
  * Firefox displays a black screen at start-up with certain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1058
    graphics drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1059
- adjusted _constraints for ARM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1060
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  1061
-------------------------------------------------------------------
786
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  1062
Tue Oct 28 15:23:09 UTC 2014 - josua.mayer97@gmail.com
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  1063
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  1064
- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)
785
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
  1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
  1066
-------------------------------------------------------------------
781
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  1067
Sat Oct 25 08:45:43 UTC 2014 - wr@rosenauer.org
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  1068
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  1069
- define /usr/share/myspell as additional dictionary location
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  1070
  and remove add-plugins.sh finally (bnc#900639)
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  1071
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  1072
-------------------------------------------------------------------
780
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  1073
Sun Oct 19 12:59:28 UTC 2014 - vindex17@outlook.it
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  1074
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  1075
- use Firefox default optimization flags instead of -Os
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  1076
- specfile cleanup
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  1077
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  1078
-------------------------------------------------------------------
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1079
Wed Oct 15 08:05:33 UTC 2014 - wr@rosenauer.org
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1080
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1081
- fix build for all ppc by not enabling elf-hack
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1082
  (bnc#901213)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1083
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1084
-------------------------------------------------------------------
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  1085
Sat Oct 11 08:48:24 UTC 2014 - wr@rosenauer.org
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  1086
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1087
- update to Firefox 33.0 (bnc#900941)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  1088
  New features:
f1c5ccf4d1a7 changelog
Wolfgang Rosen