MozillaFirefox/MozillaFirefox.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Sun, 04 Jun 2017 10:34:32 +0200
changeset 979 f82a374a310d
parent 977 224d8137f02c
child 981 593707d5c013
permissions -rw-r--r--
Firefox 54.0b13 rebased patches removed mozilla-shared-nss-db.patch updated l10n_changesets.txt
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
893
86f72f1e98a4 prepare Gtk3 based builds on a feature branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 892
diff changeset
     1
-------------------------------------------------------------------
979
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     2
Sun Jun  4 07:57:41 UTC 2017 - wr@rosenauer.org
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     3
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     4
- update to Firefox 54.0b13
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     5
- requires NSPR 4.14 and NSS 3.30.2
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     6
- requires rust 1.15.1
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     7
- removed mozilla-shared-nss-db.patch as it seems to be a rather
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     8
  unused feature
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
     9
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
    10
-------------------------------------------------------------------
977
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
    11
Thu Jun  1 04:25:05 UTC 2017 - kah0922@gmail.com
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
    12
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
    13
- remove -fno-inline-small-functions and explicitely optimize with
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
    14
  -O2 for openSUSE > 13.2/Leap 42 to work with gcc7 (boo#1040105)
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
    15
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
    16
-------------------------------------------------------------------
967
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
    17
Wed Apr 26 12:37:38 UTC 2017 - wr@rosenauer.org
964
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
    18
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
    19
- switch to Mozilla's geolocation service (boo#1026989)
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
    20
- removed mozilla-preferences.patch obsoleted by overriding via
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
    21
  firefox.js
967
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
    22
- fixed KDE integration to avoid crash caused by filepicker
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
    23
  (boo#1015998)
964
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
    24
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
    25
-------------------------------------------------------------------
960
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
    26
Mon Apr 17 12:52:10 UTC 2017 - wr@rosenauer.org
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
    27
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
    28
- update to Firefox 53.0
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
    29
  * requires NSS 3.29.5
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    30
  * Lightweight themes are now applied in private browsing windows
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    31
  * Reader Mode now displays estimated reading time for the page
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    32
  * Two new 'compact' themes available in Firefox, dark and light,
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    33
    based on the Firefox Developer Edition theme
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    34
  * Ended Firefox Linux support for processors older than Pentium 4
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    35
    and AMD Opteron
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    36
  * Refresh of the media controls user interface
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    37
  * Shortened titles on tabs are faded out instead of using ellipsis
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    38
    for improved readability
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    39
  * Media playback on new tabs is blocked until the tab is visible
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    40
  * Permission notifications have a cleaner design and cannot be
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
    41
    easily missed
962
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    42
  MFSA 2017-10
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    43
  * CVE-2017-5456 (bmo#1344415)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    44
    Sandbox escape allowing local file system access
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    45
  * CVE-2017-5442 (bmo#1347979)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    46
    Use-after-free during style changes
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    47
  * CVE-2017-5443 (bmo#1342661)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    48
    Out-of-bounds write during BinHex decoding
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    49
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    50
     bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    51
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    52
    Firefox ESR 52.1
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    53
  * CVE-2017-5464 (bmo#1347075)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    54
    Memory corruption with accessibility and DOM manipulation
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    55
  * CVE-2017-5465 (bmo#1347617)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    56
    Out-of-bounds read in ConvolvePixel
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    57
  * CVE-2017-5466 (bmo#1353975)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    58
    Origin confusion when reloading isolated data:text/html URL
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    59
  * CVE-2017-5467 (bmo#1347262)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    60
    Memory corruption when drawing Skia content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    61
  * CVE-2017-5460 (bmo#1343642)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    62
    Use-after-free in frame selection
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    63
  * CVE-2017-5461 (bmo#1344380)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    64
    Out-of-bounds write in Base64 encoding in NSS
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    65
  * CVE-2017-5448 (bmo#1346648)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    66
    Out-of-bounds write in ClearKeyDecryptor
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    67
  * CVE-2017-5449 (bmo#1340127)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    68
    Crash during bidirectional unicode manipulation with animation
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    69
  * CVE-2017-5446 (bmo#1343505)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    70
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    71
  * CVE-2017-5447 (bmo#1343552)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    72
    Out-of-bounds read during glyph processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    73
  * CVE-2017-5444 (bmo#1344461)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    74
    Buffer overflow while parsing application/http-index-format content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    75
  * CVE-2017-5445 (bmo#1344467)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    76
    Uninitialized values used while parsing application/http-index-format
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    77
    content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    78
  * CVE-2017-5468 (bmo#1329521)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    79
    Incorrect ownership model for Private Browsing information
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    80
  * CVE-2017-5469 (bmo#1292534)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    81
    Potential Buffer overflow in flex-generated code
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    82
  * CVE-2017-5440 (bmo#1336832)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    83
    Use-after-free in txExecutionState destructor during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    84
  * CVE-2017-5441 (bmo#1343795)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    85
    Use-after-free with selection during scroll events
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    86
  * CVE-2017-5439 (bmo#1336830)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    87
    Use-after-free in nsTArray Length() during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    88
  * CVE-2017-5438 (bmo#1336828)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    89
    Use-after-free in nsAutoPtr during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    90
  * CVE-2017-5437 (bmo#1343453)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    91
    Vulnerabilities in Libevent library
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    92
  * CVE-2017-5436 (bmo#1345461)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    93
    Out-of-bounds write with malicious font in Graphite 2
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    94
  * CVE-2017-5435 (bmo#1350683)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    95
    Use-after-free during transaction processing in the editor
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    96
  * CVE-2017-5434 (bmo#1349946)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    97
    Use-after-free during focus handling
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    98
  * CVE-2017-5433 (bmo#1347168)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
    99
    Use-after-free in SMIL animation functions
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   100
  * CVE-2017-5432 (bmo#1346654)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   101
    Use-after-free in text input selection
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   102
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   103
     bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   104
     bmo#1346140, bmo#1346419, bmo#1348143, bmo#1349621,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   105
     bmo#1349719, bmo#1353476)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   106
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   107
  * CVE-2017-5459 (bmo#1333858)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   108
    Buffer overflow in WebGL
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   109
  * CVE-2017-5458 (bmo#1229426)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   110
    Drag and drop of javascript: URLs can allow for self-XSS
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   111
  * CVE-2017-5455 (bmo#1341191)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   112
    Sandbox escape through internal feed reader APIs
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   113
  * CVE-2017-5454 (bmo#1349276)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   114
    Sandbox escape allowing file system read access through file picker
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   115
  * CVE-2017-5451 (bmo#1273537)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   116
    Addressbar spoofing with onblur event
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   117
  * CVE-2017-5453 (bmo#1321247)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   118
    HTML injection into RSS Reader feed preview page through
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   119
    TITLE element
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   120
  * CVE-2017-5462 (bmo#1345089)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
   121
    DRBG flaw in NSS
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
   122
- removed browser(npapi) provides as these plugins are deprecated
953
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   123
- switch used compiler to gcc5 (FF requires gcc >= 4.9 now) for
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   124
  Leap 42
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   125
- Gtk2 is not longer an option; switched to Gtk3
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   126
- apply MOZ_USE_XINPUT2=1 for better touchpad and touchscreen support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   127
  (boo#1032003)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   128
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   129
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   130
Mon Apr  3 06:16:26 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   131
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   132
- update to Firefox 52.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   133
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   134
  * Fix loading tab icons on session restore (bmo#1338009)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   135
  * Fix a crash on startup on Linux (bmo#1345413)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   136
  * Fix new installs erroneously not prompting to change the default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   137
    browser setting (bmo#1343938)
953
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   138
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   139
-------------------------------------------------------------------
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   140
Mon Mar 20 15:35:57 UTC 2017 - wr@rosenauer.org
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   141
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
   142
- disable rust usage for everything but x86(-64)
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
   143
- explicitely add libffi build requirement
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
   144
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
   145
-------------------------------------------------------------------
946
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
   146
Fri Mar 17 15:43:29 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
   147
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
   148
- update to Firefox 52.0.1 (boo#1029822)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
   149
  MFSA 2017-08
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
   150
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
   151
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
   152
-------------------------------------------------------------------
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   153
Thu Mar  9 12:30:14 UTC 2017 - wr@rosenauer.org
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   154
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   155
- reenable ALSA support which was removed by default upstream
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   156
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   157
-------------------------------------------------------------------
944
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
   158
Sat Mar  4 16:57:45 UTC 2017 - wr@rosenauer.org
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
   159
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   160
- update to Firefox 52.0 (boo#1028391)
944
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
   161
  * requires NSS >= 3.28.3
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   162
  * Pages containing insecure password fields now display a warning
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   163
    directly within username and password fields.
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   164
  * Send and open a tab from one device to another with Sync
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   165
  * Removed NPAPI support for plugins other than Flash. Silverlight,
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   166
    Java, Acrobat and the like are no longer supported.
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   167
  * Removed Battery Status API to reduce fingerprinting of users by
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   168
    trackers
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   169
  * MFSA 2017-05
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   170
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   171
                   (bmo#1334933)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   172
    CVE-2017-5401: Memory Corruption when handling ErrorResult
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   173
                   (bmo#1328861)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   174
    CVE-2017-5402: Use-after-free working with events in FontFace
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   175
                   objects (bmo#1334876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   176
    CVE-2017-5403: Use-after-free using addRange to add range to an
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   177
                   incorrect root object (bmo#1340186)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   178
    CVE-2017-5404: Use-after-free working with ranges in selections
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   179
                   (bmo#1340138)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   180
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   181
                   (bmo#1306890)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   182
    CVE-2017-5407: Pixel and history stealing via floating-point
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   183
                   timing side channel with SVG filters (bmo#1336622)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   184
    CVE-2017-5410: Memory corruption during JavaScript garbage
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   185
                   collection incremental sweeping (bmo#1330687)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   186
    CVE-2017-5408: Cross-origin reading of video captions in violation
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   187
                   of CORS (bmo#1313711)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   188
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   189
    CVE-2017-5413: Segmentation fault during bidirectional operations
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   190
                   (bmo#1337504)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   191
    CVE-2017-5414: File picker can choose incorrect default directory
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   192
                   (bmo#1319370)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   193
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   194
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   195
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   196
                   (bmo#791597)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   197
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   198
                   seccomp-bpf filter is running (bmo#1257361)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   199
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   200
                   startup (bmo#1295542)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   201
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   202
                   authorization responses (bmo#1338876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   203
    CVE-2017-5419: Repeated authentication prompts lead to DOS
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   204
                   attack (bmo#1312243)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   205
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   206
                   location (bmo#1284395)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   207
    CVE-2017-5405: FTP response codes can cause use of
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   208
                   uninitialized values for ports (bmo#1336699)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   209
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   210
    CVE-2017-5422: DOS attack by using view-source: protocol
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   211
                   repeatedly in one hyperlink (bmo#1295002)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   212
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   213
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
   214
                   Firefox ESR 45.8
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   215
- removed obsolete patches
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   216
  * mozilla-binutils-visibility.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   217
  * mozilla-check_return.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   218
  * mozilla-disable-skia-be.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   219
  * mozilla-skia-overflow.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   220
  * mozilla-skia-ppc-endianess.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   221
- rebased patches
943
ace605efe50f latest beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 942
diff changeset
   222
- enable rust usage for Tumbleweed
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   223
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
   224
-------------------------------------------------------------------
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   225
Fri Jan 27 20:25:59 UTC 2017 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   226
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   227
- Mozilla Firefox 51.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   228
  - Multiprocess incompatibility did not correctly register with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   229
    some add-ons (bmo#1333423)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   230
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   231
-------------------------------------------------------------------
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   232
Fri Jan 20 13:57:56 UTC 2017 - wr@rosenauer.org
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   233
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   234
- update to Firefox 51.0
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   235
  * requires NSPR >= 4.13.1, NSS >= 3.28.1
936
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   236
  * Added support for FLAC (Free Lossless Audio Codec) playback
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   237
  * Added support for WebGL 2
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   238
  * Added Georgian (ka) and Kabyle (kab) locales
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   239
  * Support saving passwords for forms without 'submit' events
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   240
  * Improved video performance for users without GPU acceleration
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   241
  * Zoom indicator is shown in the URL bar if the zoom level is not
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   242
    at default level
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   243
  * View passwords from the prompt before saving them
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   244
  * Remove Belarusian (be) locale
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
   245
  * Use Skia for content rendering (Linux)
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   246
  * MFSA 2017-01
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   247
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   248
                   ASLR and DEP (bmo#1325200, boo#1021814)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   249
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   250
    CVE-2017-5377: Memory corruption with transforms to create
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   251
                   gradients in Skia (bmo#1306883, boo#1021826)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   252
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   253
                   (bmo#1312001, bmo#1330769, boo#1021818)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   254
    CVE-2017-5379: Use-after-free in Web Animations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   255
                   (bmo#1309198,boo#1021827)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   256
    CVE-2017-5380: Potential use-after-free during DOM manipulations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   257
                   (bmo#1322107, boo#1021819)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   258
    CVE-2017-5390: Insecure communication methods in Developer Tools
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   259
                   JSON viewer (bmo#1297361, boo#1021820)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   260
    CVE-2017-5389: WebExtensions can install additional add-ons via
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   261
                   modified host requests (bmo#1308688, boo#1021828)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   262
    CVE-2017-5396: Use-after-free with Media Decoder
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   263
                   (bmo#1329403, boo#1021821)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   264
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   265
                   and save to arbitrary filesystem locations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   266
		   (bmo#1017616, boo#1021830)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   267
    CVE-2017-5382: Feed preview can expose privileged content errors
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   268
                   and exceptions (bmo#1295322, boo#1021831)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   269
    CVE-2017-5383: Location bar spoofing with unicode characters
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   270
                   (bmo#1323338, bmo#1324716, boo#1021822)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   271
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   272
                   (bmo#1255474, boo#1021832)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   273
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   274
                   response headers (bmo#1295945, boo#1021833)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   275
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   276
                   extensions (bmo#1319070, boo#1021823)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   277
    CVE-2017-5394: Android location bar spoofing using fullscreen and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   278
                   JavaScript events (bmo#1222798)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   279
    CVE-2017-5391: Content about: pages can load privileged about: pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   280
                   (bmo#1309310, boo#1021835)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   281
    CVE-2017-5392: Weak references using multiple threads on weak proxy
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   282
                   objects lead to unsafe memory usage (bmo#1293709)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   283
		   (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   284
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   285
                   mozAddonManager (bmo#1309282, boo#1021837)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   286
    CVE-2017-5395: Android location bar spoofing during scrolling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   287
                   (bmo#1293463) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   288
    CVE-2017-5387: Disclosure of local file existence through TRACK
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   289
                   tag error messages (bmo#1295023, boo#1021839)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   290
    CVE-2017-5388: WebRTC can be used to generate a large amount of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   291
                   UDP traffic for DDOS attacks
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   292
		   (bmo#1281482, boo#1021840)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   293
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   294
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   295
                   Firefox ESR 45.7 (boo#1021824)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   296
- switch Firefox to Gtk3 for Tumbleweed
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   297
- removed obsolete patches
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   298
  * mozilla-flex_buffer_overrun.patch
939
3604ed712e16 51.0 as submitted to official openSUSE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 938
diff changeset
   299
- updated RPM locale support tag
3604ed712e16 51.0 as submitted to official openSUSE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 938
diff changeset
   300
- improve recognition of LANGUAGE env variable (boo#1017174)
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   301
- add upstream patch to fix PPC64LE (bmo#1319389)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   302
  (mozilla-skia-ppc-endianess.patch)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   303
- fix build without skia (big endian archs) (bmo#1319374)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
   304
  (mozilla-disable-skia-be.patch)
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   305
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   306
-------------------------------------------------------------------
933
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   307
Mon Dec 12 21:18:41 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   308
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   309
- update to Firefox 50.1.0 (boo#1015422)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   310
  * MFSA 2016-94
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   311
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   312
    CVE-2016-9899: Use-after-free while manipulating DOM events and
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   313
                   audio elements (bmo#1317409)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   314
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   315
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   316
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   317
    CVE-2016-9898: Use-after-free in Editor while manipulating
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   318
                   DOM subtrees (bmo#1314442)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   319
    CVE-2016-9900: Restricted external resources can be loaded by
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   320
                   SVG images through data URLs (bmo#1319122)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   321
    CVE-2016-9904: Cross-origin information leak in shared atoms
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   322
                   (bmo#1317936)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   323
    CVE-2016-9901: Data from Pocket server improperly sanitized
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   324
                   before execution (bmo#1320057)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   325
    CVE-2016-9902: Pocket extension does not validate the origin
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   326
                   of events (bmo#1320039)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   327
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   328
                   (bmo#1315435)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   329
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   330
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
   331
                   Firefox ESR 45.6
933
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   332
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   333
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   334
Fri Dec  9 17:57:22 UTC 2016 - cgrobertson@novell.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   335
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   336
- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   337
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   338
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   339
Thu Dec  1 02:49:45 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   340
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   341
- update to Firefox 50.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   342
  * Firefox crashes with 3rd party Chinese IME when using IME text
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   343
    (50.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   344
  security fixes (in 50.0.1): (boo#1012807)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   345
  * MFSA 2016-91
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   346
    CVE-2016-9078: data: URL can inherit wrong origin after an
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   347
                   HTTP redirect (bmo#1317641)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   348
  security fixes (in 50.0.2) (boo#1012964)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   349
  * MFSA 2016-92
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   350
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   351
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
   352
-------------------------------------------------------------------
932
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   353
Mon Nov 14 21:07:03 UTC 2016 - wr@rosenauer.org
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   354
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   355
- update to Firefox 50.0 (boo#1009026)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   356
  * requires NSS 3.26.2
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   357
  new features
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   358
  * Updates to keyboard shortcuts
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   359
    Set a preference to have Ctrl+Tab cycle through tabs in recently
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   360
    used order
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   361
    View a page in Reader Mode by using Ctrl+Alt+R
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   362
  * Added option to Find in page that allows users to limit search to
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   363
    whole words only
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   364
  * Added download protection for a large number of executable file
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   365
    types on Windows, Mac and Linux
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   366
  * Fixed rendering of dashed and dotted borders with rounded corners
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   367
    (border-radius)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   368
  * Added a built-in Emoji set for operating systems without native
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   369
    Emoji fonts (Windows 8.0 and lower and Linux)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   370
  * Blocked versions of libavcodec older than 54.35.1
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   371
  * additional locale
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   372
  security fixes:
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   373
  * MFSA 2016-89
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   374
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   375
                   (bmo#1292443)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   376
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   377
    CVE-2016-5293: Write to arbitrary file with updater and moz
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   378
                   maintenance service using updater.log hardlink
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   379
		   (Windows only) (bmo#1246945)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   380
    CVE-2016-5294: Arbitrary target directory for result files of
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   381
                   update process (Windows only) (bmo#1246972)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   382
    CVE-2016-5297: Incorrect argument length checking in Javascript
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   383
                   (bmo#1303678)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   384
    CVE-2016-9064: Addons update must verify IDs match between
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   385
                   current and new versions (bmo#1303418)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   386
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   387
                   (Android only) (bmo#1306696)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   388
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   389
                   nsScriptLoadHandler (bmo#1299686)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   390
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   391
                   (bmo#1301777, bmo#1308922 (CVE-2016-9069))
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   392
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   393
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   394
                   (bmo#1300083) (Windows only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   395
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   396
                   and use it to gain elevated privileges (bmo#1295324)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   397
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   398
                   to cross-origin images, allowing timing attacks on them
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   399
		   (bmo#1298552)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   400
    CVE-2016-5291: Same-origin policy violation using local HTML file
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   401
                    and saved shortcut file (bmo#1292159)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   402
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   403
                   arbitrary files as SYSTEM (Windows only) (bmo#1247239)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   404
    CVE-2016-5298: SSL indicator can mislead the user about the real
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   405
                   URL visited (bmo#1227538) (Android only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   406
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   407
                   signature-level permission can be accessed by an
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   408
		   application installed beforehand that defines the
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   409
		   same permissions (bmo#1245791) (Android only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   410
    CVE-2016-9061: API Key (glocation) in broadcast protected with
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   411
                   signature-level permission can be accessed by an
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   412
		   application installed beforehand that defines the
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   413
		   same permissions (Android only) (bmo#1245795)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   414
    CVE-2016-9062: Private browsing browser traces (android) in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   415
                   browser.db and wal file (Android only) (bmo#1294438)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   416
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   417
                   (bmo#1281071)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   418
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   419
                   (bmo#1289273)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   420
    CVE-2016-9074: Insufficient timing side-channel resistance in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   421
                   divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   422
    CVE-2016-9076: select dropdown menu can be used for URL bar
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   423
                   spoofing on e10s (bmo#1276976)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   424
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   425
                   in expat (bmo#1274777)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   426
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   427
                   (bmo#1285003)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   428
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   429
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   430
- make aarch64 build more similar to x86_64 build (remove conditionals
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   431
  that don't seem to be necessary anymore)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   432
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
   433
-------------------------------------------------------------------
931
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   434
Mon Oct 24 09:41:17 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   435
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   436
- Mozilla Firefox 49.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   437
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   438
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   439
  * Asynchronous rendering of the Flash plugins is now enabled by
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   440
    default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   441
  * Change D3D9 default fallback preference to prevent graphical
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   442
    artifacts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   443
  * Network issue prevents some users from seeing the Firefox UI on
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   444
    startup
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   445
  * Web compatibility issue with file uploads
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   446
  * Web compatibility issue with Array.prototype.values
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   447
  * Diagnostic information on timing for tab switching
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   448
  * Fix a Canvas filters graphics issue affecting HTML5 apps
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   449
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
   450
-------------------------------------------------------------------
930
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   451
Wed Oct 12 20:42:28 UTC 2016 - badshah400@gmail.com
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   452
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   453
- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   454
  and fixes have been incorporated by upstream.
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   455
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   456
-------------------------------------------------------------------
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   457
Fri Sep 23 20:36:39 UTC 2016 - astieger@suse.com
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   458
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   459
- Mozilla Firefox 49.0.1:
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   460
  * Mitigate a startup crash issue caused by Websense - bmo#1304783
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   461
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
   462
-------------------------------------------------------------------
929
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   463
Tue Sep 20 07:09:52 UTC 2016 - wr@rosenauer.org
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   464
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   465
- update to Firefox 49.0 (boo#999701)
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   466
  new features
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   467
  * Updated Firefox Login Manager to allow HTTPS pages to use saved
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   468
    HTTP logins.
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   469
  * Added features to Reader Mode that make it easier on the eyes and
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   470
    the ears
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   471
  * Improved video performance for users on systems that support
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   472
    SSE3 without hardware acceleration
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   473
  * Added context menu controls to HTML5 audio and video that let users
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   474
    loops files or play files at 1.25x speed
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   475
  * Improvements in about:memory reports for tracking font memory usage
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   476
  security related
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   477
  * MFSA 2016-85
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   478
    CVE-2016-2827 (bmo#1289085) - Out-of-bounds read in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   479
    mozilla::net::IsValidReferrerPolicy
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   480
    CVE-2016-5270 (bmo#1291016) - Heap-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   481
    nsCaseTransformTextRunFactory::TransformString
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   482
    CVE-2016-5271 (bmo#1288946) - Out-of-bounds read in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   483
    PropertyProvider::GetSpacingInternal
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   484
    CVE-2016-5272 (bmo#1297934) - Bad cast in nsImageGeometryMixin
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   485
    CVE-2016-5273 (bmo#1280387) - crash in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   486
    mozilla::a11y::HyperTextAccessible::GetChildOffset
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   487
    CVE-2016-5276 (bmo#1287721) - Heap-use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   488
    mozilla::a11y::DocAccessible::ProcessInvalidationList
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   489
    CVE-2016-5274 (bmo#1282076) - use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   490
    nsFrameManager::CaptureFrameState
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   491
    CVE-2016-5277 (bmo#1291665) - Heap-use-after-free in nsRefreshDriver::Tick
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   492
    CVE-2016-5275 (bmo#1287316) - global-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   493
    mozilla::gfx::FilterSupport::ComputeSourceNeededRegions
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   494
    CVE-2016-5278 (bmo#1294677) - Heap-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   495
    nsBMPEncoder::AddImageFrame
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   496
    CVE-2016-5279 (bmo#1249522) - Full local path of files is available
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   497
    to web pages after drag and drop
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   498
    CVE-2016-5280 (bmo#1289970) - Use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   499
    mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   500
    CVE-2016-5281 (bmo#1284690) - use-after-free in DOMSVGLength
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   501
    CVE-2016-5282 (bmo#932335) - Don't allow content to request favicons
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   502
    from non-whitelisted schemes
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   503
    CVE-2016-5283 (bmo#928187) - <iframe src> fragment timing attack can
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   504
    reveal cross-origin data
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   505
    CVE-2016-5284 (bmo#1303127) - Add-on update site certificate pin expiration
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   506
    CVE-2016-5256 - Memory safety bugs fixed in Firefox 49
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   507
    CVE-2016-5257 - Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   508
- removed obsolete patches:
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   509
  * mozilla-aarch64-48bit-va.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   510
  * mozilla-exclude-nametablecpp.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   511
  * mozilla-old_configure-bmo1282843.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   512
- added patch mozilla-skia-overflow.patch (bmo#1304114)
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   513
- requires NSS 3.25
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   514
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
   515
-------------------------------------------------------------------
928
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
   516
Tue Aug 30 20:25:38 UTC 2016 - astieger@suse.com
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
   517
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
   518
- Mozilla Firefox 48.0.2:
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
   519
  * Mitigate a startup crash issue caused on Windows (bmo#1291738)
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
   520
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
   521
-------------------------------------------------------------------
927
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   522
Sat Aug 20 10:58:26 UTC 2016 - astieger@suse.com
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   523
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   524
- Mozilla Firefox 48.0.1:
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   525
  * Fix an audio regression impacting some major websites
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   526
    (bmo#1295296)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   527
  * Fix a top crash in the JavaScript engine (bmo#1290469)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   528
  * Fix a startup crash issue caused by Websense (bmo#1291738)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   529
  * Fix a different behavior with e10s / non-e10s on <select> and
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   530
    mouse events (bmo#1291078)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   531
  * Fix a top crash caused by plugin issues (bmo#1264530)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   532
  * Fix a shutdown issue (bmo#1276920)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   533
  * Fix a crash in WebRTC
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   534
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
   535
-------------------------------------------------------------------
925
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
   536
Mon Aug 15 11:24:00 UTC 2016 - wr@rosenauer.org
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
   537
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
   538
- added upstream patch so system plugins/extensions are correctly
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
   539
  loaded again on x86-64 (bmo#1282843)
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
   540
  (mozilla-old_configure-bmo1282843.patch)
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
   541
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
   542
-------------------------------------------------------------------
926
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   543
Fri Aug  5 13:47:12 UTC 2016 - pcerny@suse.com
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   544
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   545
- Fix for possible buffer overrun (bsc#990856)
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   546
  CVE-2016-6354 (bmo#1292534)
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   547
  [mozilla-flex_buffer_overrun.patch]
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   548
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   549
-------------------------------------------------------------------
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   550
Wed Aug  3 03:38:47 UTC 2016 - badshah400@gmail.com
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   551
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   552
- Update mozilla-gtk3_20.patch to latest version from Fedora.
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   553
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
   554
-------------------------------------------------------------------
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   555
Mon Aug  1 12:37:05 UTC 2016 - wr@rosenauer.org
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   556
924
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   557
- update to Firefox 48.0 (boo#991809)
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   558
  * requires NSS 3.24
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   559
  * Process separation (e10s) is enabled for some of you
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   560
  * Add-ons that have not been verified and signed by Mozilla will not load
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   561
  * WebRTC embetterments
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   562
  * The media parser has been redeveloped using the Rust programming
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   563
    language
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   564
  * better Canvas performance with speedy Skia support
924
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   565
  security fixes:
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   566
  * MFSA 2016-62/CVE-2016-2835/CVE-2016-2836
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   567
    Miscellaneous memory safety hazards
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   568
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   569
    Favicon network connection can persist when page is closed
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   570
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   571
    Buffer overflow rendering SVG with bidirectional content
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   572
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   573
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   574
  * MFSA 2016-66/CVE-2016-5251 (bmo#1255570)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   575
    Location bar spoofing via data URLs with malformed/invalid mediatypes
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   576
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   577
    Stack underflow during 2D graphics rendering
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   578
  * MFSA 2016-68/CVE-2016-0718 (bmo#1236923)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   579
    Out-of-bounds read during XML parsing in Expat library
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   580
  * MFSA 2016-69/CVE-2016-5253 (bmo#1246944)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   581
    Arbitrary file manipulation by local user through Mozilla updater
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   582
    and callback application path parameter (Windows-only)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   583
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   584
    Use-after-free when using alt key and toplevel menus
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   585
  * MFSA 2016-71/CVE-2016-5255 (bmo#1212356)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   586
    Crash in incremental garbage collection in JavaScript
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   587
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   588
    Use-after-free in DTLS during WebRTC session shutdown
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   589
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   590
    Use-after-free in service workers with nested sync events
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   591
  * MFSA 2016-74/CVE-2016-5260 (bmo#1280294)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   592
    Form input type change from password to text can store plain
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   593
    text password in session restore file
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   594
  * MFSA 2016-75/CVE-2016-5261 (bmo#1287266)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   595
    Integer overflow in WebSockets during data buffering
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   596
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   597
    Scripts on marquee tag can execute in sandboxed iframes
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   598
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   599
    Buffer overflow in ClearKey Content Decryption Module (CDM)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   600
    during video playback
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   601
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   602
    Type confusion in display transformation
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   603
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   604
    Use-after-free when applying SVG effects
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   605
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   606
    Same-origin policy violation using local HTML file and saved shortcut file
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   607
  * MFSA 2016-81/CVE-2016-5266 (bmo#1226977)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   608
    Information disclosure and local file manipulation through drag and drop
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   609
  * MFSA 2016-82/CVE-2016-5267 (bmo#1284372)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   610
    Addressbar spoofing with right-to-left characters on Firefox for Android
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   611
    (Android only)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   612
  * MFSA 2016-83/CVE-2016-5268 (bmo#1253673)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   613
    Spoofing attack through text injection into internal error pages
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   614
  * MFSA 2016-84/CVE-2016-5250 (bmo#1254688)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
   615
    Information disclosure through Resource Timing API during page navigation
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   616
- removed obsolete mozilla-gcc6.patch
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   617
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
   618
-------------------------------------------------------------------
921
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   619
Fri Jul 29 01:26:13 UTC 2016 - badshah400@gmail.com
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   620
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   621
- Update description and screenshots in appdata.xml file.
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   622
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   623
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   624
Sat Jul 23 20:13:08 UTC 2016 - antoine.belvire@laposte.net
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   625
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   626
- Fix Firefox crash on startup on i586 (boo#986541):
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   627
  * Add -fno-delete-null-pointer-checks and
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   628
    -fno-inline-small-functions to CFLAGS
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   629
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   630
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   631
Tue Jul 19 20:12:11 UTC 2016 - mailaender@opensuse.org
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   632
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   633
- Update the appdata.xml file (replace Windows XP screenshot)
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   634
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   635
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   636
Wed Jun 29 09:25:41 UTC 2016 - astieger@suse.com
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   637
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   638
- Mozilla Firefox 47.0.1:
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   639
  * Selenium WebDriver may cause Firefox to crash at startup
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   640
    (bmo#1280854)
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   641
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   642
-------------------------------------------------------------------
920
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
   643
Wed Jun 15 07:52:18 UTC 2016 - wr@rosenauer.org
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
   644
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
   645
- mozilla-binutils-visibility.patch to fix build issues with
921
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
   646
  gcc/binutils combination used in Leap 42.2 (boo#984637)
920
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
   647
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
   648
-------------------------------------------------------------------
919
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   649
Tue Jun 14 08:35:03 UTC 2016 - badshah400@gmail.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   650
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   651
- Update mozilla-gtk3_20.patch to latest version from Fedora.
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   652
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   653
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   654
Mon Jun 13 20:28:01 UTC 2016 - agraf@suse.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   655
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   656
- Fix running on 48bit va aarch64 (bsc#984126)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   657
  * add patch mozilla-aarch64-48bit-va.patch
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   658
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   659
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   660
Mon Jun 13 15:27:13 UTC 2016 - wr@rosenauer.org
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   661
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   662
- fix XUL dialog button order under KDE session (boo#984403)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   663
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
   664
-------------------------------------------------------------------
916
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   665
Tue Jun  7 19:47:25 UTC 2016 - wr@rosenauer.org
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   666
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   667
- update to Firefox 47.0 (boo#983549)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   668
  * Enable VP9 video codec for users with fast machines
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   669
  * Embedded YouTube videos now play with HTML5 video if Flash is
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   670
    not installed
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   671
  * View and search open tabs from your smartphone or another
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   672
    computer in a sidebar
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   673
  * Allow no-cache on back/forward navigations for https resources
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   674
  security fixes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   675
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   676
    (boo#983638)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   677
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   678
     bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   679
     bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   680
     bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   681
     bmo#1269729, bmo#1273202, bmo#1273701)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   682
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   683
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   684
    Buffer overflow parsing HTML5 fragments
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   685
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   686
    Use-after-free deleting tables from a contenteditable document
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   687
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   688
    Addressbar spoofing though the SELECT element
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   689
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   690
    Out-of-bounds write with WebGL shader
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   691
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   692
    Partial same-origin-policy through setting location.host
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   693
    through data URI
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   694
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   695
    Use-after-free when textures are used in WebGL operations
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   696
    after recycle pool destruction
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   697
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   698
    Incorrect icon displayed on permissions notifications
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   699
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   700
    Entering fullscreen and persistent pointerlock without user
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   701
    permission
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   702
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   703
    Information disclosure of disabled plugins through CSS
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   704
    pseudo-classes
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   705
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   706
    Java applets bypass CSP protections
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   707
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   708
    bmo#1221620, bmo#1241034, bmo#1241037)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   709
    Network Security Services (NSS) vulnerabilities
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   710
    fixed by requiring NSS 3.23
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   711
  packaging changes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   712
  * cleanup configure options (boo#981695):
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   713
    - notably remove GStreamer support which is gone from FF
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   714
  * remove obsolete patches
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   715
    - mozilla-libproxy.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   716
    - mozilla-repo.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   717
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   718
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   719
Wed May 25 16:36:23 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   720
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   721
- The conditional testing for gcc was failing for different
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   722
  openSUSE versions, drop it and apply patches unconditionally.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   723
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   724
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   725
Mon May 23 15:30:27 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   726
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   727
- Add patches to fix building with gcc6:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   728
  + mozilla-gcc6.patch: fix building with gcc >= 6.1; patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   729
    taken from upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   730
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   731
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   732
    from unified compilation because #include <cmath> in other
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   733
    source files causes gcc6 compilation failure; patch taken from
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   734
    upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   735
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   736
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   737
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   738
Fri May 13 00:00:00 CEST 2016 - dsterba@suse.cz
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   739
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   740
- enable build with PIE and full relro on x86_64 (boo#980384)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   741
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
   742
-------------------------------------------------------------------
914
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   743
Wed May  4 10:27:43 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   744
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   745
- update to Firefox 46.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   746
  Fixed:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   747
  * Search plugin issue for various locales
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   748
  * Add-on signing certificate expiration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   749
  * Service worker update issue
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   750
  * Build issue when jit is disabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   751
  * Limit Sync registration updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   752
- removed now obsolete mozilla-jit_branch64.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   753
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
   754
-------------------------------------------------------------------
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   755
Tue May  3 15:47:18 UTC 2016 - normand@linux.vnet.ibm.com
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   756
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   757
- add mozilla-jit_branch64.patch to avoid PowerPC build failure
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   758
  (from bmo#1266366)
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   759
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   760
-------------------------------------------------------------------
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   761
Wed Apr 27 08:39:28 UTC 2016 - badshah400@gmail.com
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   762
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   763
- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   764
  version from Fedora).
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   765
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   766
-------------------------------------------------------------------
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   767
Wed Apr 27 06:09:30 UTC 2016 - wr@rosenauer.org
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   768
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   769
- update to Firefox 46.0 (boo#977333)
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   770
  * Improved security of the JavaScript Just In Time (JIT) Compiler
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   771
  * WebRTC fixes to improve performance and stability
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   772
  * Added support for document.elementsFromPoint
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   773
  * Added HKDF support for Web Crypto API
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   774
  * requires NSPR 4.12 and NSS 3.22.3
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   775
  * added patch to fix unchecked return value
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   776
    mozilla-check_return.patch
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   777
  * Gtk3 builds not supported at the moment
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   778
  security fixes:
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   779
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   780
    (boo#977373, boo#977375, boo#977376)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   781
    Miscellaneous memory safety hazards
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   782
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   783
    Privilege escalation through file deletion by Maintenance Service updater
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   784
    (Windows only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   785
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   786
    Content provider permission bypass allows malicious application
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   787
    to access data (Android only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   788
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   789
    (bmo#1252330, bmo#1261776, boo#977379)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   790
    Use-after-free and buffer overflow in Service Workers
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   791
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   792
    Disclosure of user actions through JavaScript with motion and
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   793
    orientation sensors (only affects mobile variants)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   794
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   795
    Buffer overflow in libstagefright with CENC offsets
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   796
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   797
    CSP not applied to pages sent with multipart/x-mixed-replace
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   798
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   799
    Elevation of privilege with chrome.tabs.update API in web extensions
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   800
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   801
    Write to invalid HashMap entry through JavaScript.watch()
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
   802
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   803
    Firefox Health Reports could accept events from untrusted domains
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   804
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
   805
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   806
Thu Apr 21 12:00:28 UTC 2016 - badshah400@gmail.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   807
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   808
- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   809
  gtk >= 3.20 (patch synced to Fedora's version).
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   810
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   811
-------------------------------------------------------------------
907
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   812
Tue Apr 12 19:11:30 UTC 2016 - badshah400@gmail.com
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   813
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   814
- Compile against gtk3 depending on whether the macro
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   815
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   816
  level); macro is undefined by default and so gtk2 is used as the
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   817
  default toolkit.
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   818
- Add BuildRequires for additional packages needed when building
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   819
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   820
  pkgconfig(gtk+-3.0) >= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   821
- Add firefox-gtk3_20.patch to fix appearance with gtk3 >= 3.20;
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   822
  patch taken from Fedora (bmo#1230955).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   823
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
   824
-------------------------------------------------------------------
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   825
Mon Apr 11 22:49:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   826
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   827
- Mozilla Firefox 45.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   828
  * Fix an issue impacting the cookie header when third-party
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   829
    cookies are blocked (bmo#1257861)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   830
  * Fix a web compatibility regression impacting the srcset
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   831
    attribute of the image tag (bmo#1259482)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   832
  * Fix a crash impacting the video playback with Media Source
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   833
    Extension (bmo#1258562)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   834
  * Fix a regression impacting some specific uploads (bmo#1255735)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   835
  * Fix a regression with the copy and paste with some old versions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   836
    of some Gecko applications like Thunderbird (bmo#1254980)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   837
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   838
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   839
Fri Mar 18 08:52:58 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   840
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   841
- Mozilla Firefox 45.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   842
  * Fix a regression causing search engine settings to be lost in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   843
    some context (bmo#1254694)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   844
  * Bring back non-standard jar: URIs to fix a regression in IBM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   845
    iNotes (bmo#1255139)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   846
  * XSLTProcessor.importStylesheet was failing when <import> was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   847
    used (bmo#1249572)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   848
  * Fix an issue which could cause the list of search provider to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   849
    be empty (bmo#1255605)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   850
  * Fix a regression when using the location bar (bmo#1254503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   851
  * Fix some loading issues when Accept third-party cookies: was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   852
    set to Never (bmo#1254856)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   853
  * Disabled Graphite font shaping library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   855
-------------------------------------------------------------------
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   856
Sun Mar  6 19:52:13 UTC 2016 - wr@rosenauer.org
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   857
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   858
- update to Firefox 45.0 (boo#969894)
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   859
  * requires NSPR 4.12 / NSS 3.21.1
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   860
  * Instant browser tab sharing through Hello
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   861
  * Synced Tabs button in button bar
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   862
  * Tabs synced via Firefox Accounts from other devices are now shown
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   863
    in dropdown area of Awesome Bar when searching
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   864
  * Introduce a new preference (network.dns.blockDotOnion) to allow
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   865
    blocking .onion at the DNS level
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   866
  * Tab Groups (Panorama) feature removed
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   867
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   868
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   869
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   870
    Local file overwriting and potential privilege escalation through
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   871
    CSP reports
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   872
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   873
    CSP reports fail to strip location information for embedded iframe pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   874
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   875
    Linux video memory DOS with Intel drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   876
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   877
    Memory leak in libstagefright when deleting an array during MP4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   878
    processing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   879
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   880
    Displayed page address can be overridden
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   881
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   882
    Service Worker Manager out-of-bounds read in Service Worker Manager
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   883
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   884
    Use-after-free in HTML5 string parser
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   885
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   886
    Use-after-free in SetBody
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   887
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   888
    Use-after-free when using multiple WebRTC data channels
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   889
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   890
    Memory corruption when modifying a file being read by FileReader
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   891
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   892
    Use-after-free during XML transformations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   893
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   894
    Addressbar spoofing though history navigation and Location protocol
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   895
    property
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   896
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   897
    Same-origin policy violation using perfomance.getEntries and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   898
    history navigation with session restore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   899
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   900
    Buffer overflow in Brotli decompression
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   901
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   902
    Memory corruption with malicious NPAPI plugin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   903
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   904
    CVE-2016-1976/CVE-2016-1972
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   905
    WebRTC and LibVPX vulnerabilities found through code inspection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   906
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   907
    Use-after-free in GetStaticInstance in WebRTC
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   908
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   909
    Out-of-bounds read in HTML parser following a failed allocation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   910
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   911
    Buffer overflow during ASN.1 decoding in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   912
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   913
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   914
    Use-after-free during processing of DER encoded keys in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   915
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   916
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   917
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   918
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   919
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
   920
    Font vulnerabilities in the Graphite 2 library
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   921
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   922
-------------------------------------------------------------------
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   923
Sat Mar  5 15:27:00 UTC 2016 - olaf@aepfle.de
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   924
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   925
- Remove B_CNT from symbols.zip filename to reduce build-compare noise
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   926
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
   927
-------------------------------------------------------------------
903
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   928
Fri Feb 26 16:22:52 UTC 2016 - astieger@suse.com
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   929
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   930
- fix build problems on i586, caused by too large unified compile
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   931
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   932
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   933
-------------------------------------------------------------------
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   934
Thu Feb 11 07:51:34 UTC 2016 - wr@rosenauer.org
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   935
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   936
- update to Firefox 44.0.2
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   937
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   938
    Same-origin-policy violation using Service Workers with plugins
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   939
  * Fix issue which could lead to the removal of stored passwords
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   940
    under certain circumstances (bmo#1242176)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   941
  * Allows spaces in cookie names (bmo#1244505)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   942
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   943
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   944
  * Fix a crash in cache networking (bmo#1244076)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   945
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   946
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
   947
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   948
Sat Jan 30 08:28:17 UTC 2016 - dmueller@suse.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   949
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   950
- build fixes for arm/aarch64:
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   951
  * disable webrtc for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   952
  * switch away from openGL-ES backend to default for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   953
   since it almost never builds
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   954
  * reenable neon
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   955
- reenable webrtc for powerpc as it seems to build
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   956
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
   957
-------------------------------------------------------------------
900
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
   958
Sun Jan 24 09:33:15 UTC 2016 - wr@rosenauer.org
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
   959
902
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   960
- update to Firefox 44.0
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   961
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   962
    Miscellaneous memory safety hazards
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   963
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   964
    Out of Memory crash when parsing GIF format images
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   965
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   966
    Buffer overflow in WebGL after out of memory allocation
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   967
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   968
    Firefox allows for control characters to be set in cookie names
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   969
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   970
    Missing delay following user click events in protocol handler dialog
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   971
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   972
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   973
    (fixed by requiring NSS 3.21)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   974
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   975
    Addressbar spoofing attacks boo#963643
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   976
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   977
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   978
    Unsafe memory manipulation found through code inspection
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   979
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
   980
    Application Reputation service disabled in Firefox 43
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   981
  * requires NSPR 4.11
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   982
  * requires NSS 3.21
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
   983
- prepare mozilla-kde.patch for Gtk3 builds
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   984
- rebased patches
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
   985
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
   986
-------------------------------------------------------------------
897
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   987
Mon Jan 11 08:04:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   988
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   989
- Mozilla Firefox 43.0.4:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   990
  * Re-enable SHA-1 certificates to prevent outdated
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   991
    man-in-the-middle security devices from interfering with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   992
    properly secured SSL/TLS connections (bmo#1236975)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   993
  * Fix for startup crash for users of a third party antivirus tool
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   994
    (bmo#1235537)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   995
- The following change was previously in the package as a patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   996
  * Multi-user GNU/Linux download folders can be created
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   997
   (bmo#1233434), removed mozilla-bmo1233434.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   998
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
   999
-------------------------------------------------------------------
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
  1000
Tue Dec 29 20:29:35 UTC 2015 - wr@rosenauer.org
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1001
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1002
- update to Firefox 43.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1003
  * requires NSS 3.20.2 to fix
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1004
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1005
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1006
    server signature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1007
  * various changes to support Windows update (SHA-1 vs. SHA-2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1008
  * workaround Youtube user agent detection issue (bmo#1233970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1009
- fix file download regression for multi user systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1010
  (bmo#1233434) (mozilla-bmo1233434.patch)
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
  1011
- explicitely requires libXcomposite-devel
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1012
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  1013
-------------------------------------------------------------------
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1014
Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1015
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1016
- update to Firefox 43.0 (bnc#959277)
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1017
  * Improved API support for m4v video playback
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1018
  * Users can opt-in to receive search suggestions from the Awesome Bar
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1019
  * WebRTC streaming on multiple monitors
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1020
  * User selectable second block list for Private Browsing's Tracking
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1021
    Protection
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1022
  security fixes:
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1023
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1024
    Miscellaneous memory safety hazards
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1025
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1026
    Crash with JavaScript variable assignment with unboxed objects
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1027
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1028
    Same-origin policy violation using perfomance.getEntries and
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1029
    history navigation
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1030
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1031
    Firefox allows for control characters to be set in cookies
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1032
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1033
    Use-after-free in WebRTC when datachannel is used after being
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1034
    destroyed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1035
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1036
    Integer overflow allocating extremely large textures
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1037
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1038
    Cross-origin information leak through web workers error events
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1039
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1040
    Hash in data URI is incorrectly parsed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1041
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1042
    DOS due to malformed frames in HTTP/2
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1043
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1044
    Linux file chooser crashes on malformed images due to flaws in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1045
    Jasper library
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1046
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1047
    (bmo#1201183, bmo#1178033, bmo#1199400)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1048
    Buffer overflows found through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1049
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1050
    Underflow through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1051
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1052
    Integer overflow in MP4 playback in 64-bit versions
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1053
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1054
    Integer underflow and buffer overflow processing MP4 metadata in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1055
    libstagefright
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1056
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1057
    Privilege escalation vulnerabilities in WebExtension APIs
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1058
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  1059
    Cross-site reading attack through data and view-source URIs
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1060
- rebased patches
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1061
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  1062
-------------------------------------------------------------------
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1063
Sun Nov 15 19:52:20 UTC 2015 - wr@rosenauer.org
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1064
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1065
- Add desktop menu action for private browsing window to desktop
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1066
  file (boo#954747)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1067
- remove obsolete patch mozilla-bmo1005535.patch completely from
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1068
  source package to avoid automatic check failures
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1069
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1070
-------------------------------------------------------------------
885
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1071
Sat Oct 31 19:50:03 UTC 2015 - wr@rosenauer.org
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1072
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1073
- update to Firefox 42.0 (bnc#952810)
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1074
  * Private Browsing with Tracking Protection blocks certain Web
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1075
    elements that could be used to record your behavior across sites
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1076
  * Control Center that contains site security and privacy controls
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1077
  * Login Manager improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1078
  * WebRTC improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1079
  * Indicator added to tabs that play audio with one-click muting
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  1080
  * Media Source Extension for HTML5 video available for all sites
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1081
  security fixes:
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1082
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1083
    Miscellaneous memory safety hazards
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1084
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1085
    Information disclosure through NTLM authentication
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1086
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  1087
    CSP bypass due to permissive Reader mode whitelist
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rose