MozillaFirefox/MozillaFirefox.changes
branchfirefox116
changeset 1192 7612b8d8c46f
parent 1191 37e065158be7
child 1193 16de98d33e97
--- a/MozillaFirefox/MozillaFirefox.changes	Fri Aug 04 12:30:24 2023 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Sun Aug 27 10:23:20 2023 +0200
@@ -1,7 +1,95 @@
 -------------------------------------------------------------------
+Thu Aug 17 18:20:18 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 116.0.3
+  * Fixed an issue for OPFS users that broke access to files that
+    were locally cached in a previous version
+    (bmo#1847989, bmo#1847619)
+  * Fixed an issue that was breaking screensharing for some users
+    on Wayland (bmo#1841851)
+  * Fixed an issue where a fullscreen notification was persistently
+    being shown to a user, even after disabling it (bmo#1847901)
+  * Fixed an issue where Firefox would hang when doing a Google
+    search (bmo#1847066)
+
+-------------------------------------------------------------------
+Tue Aug 15 09:51:15 UTC 2023 - Adam Majer <adam.majer@suse.de>
+
+- After further testing on memory consumption during linking, it's
+  safe to remove most of the memory reducing options for ix86 linker.
+  A combination of these actually resulted in the OOM condition.
+  It's even possible to add basic debugging info while keeping
+  linker memory consumption at about 2GB
+
+-------------------------------------------------------------------
+Thu Aug 10 16:32:02 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 116.0.2
+  * fixes for other platforms
+
+-------------------------------------------------------------------
+Wed Aug  9 09:52:36 UTC 2023 - Adam Majer <adam.majer@suse.de>
+
+- Workarold ld bug causing OOM when linking on 32-bit
+- Remove -j1 limit on x86. The build runs on 64-bit kernel with a
+  32-bit userland. This means there is plenty of memory available
+  but userland is limited to just under 4GB per process.
+
+-------------------------------------------------------------------
+Sat Aug  5 17:46:22 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 116.0.1
+  * fixes for other platforms
+
+-------------------------------------------------------------------
+Sat Aug  5 10:04:18 UTC 2023 - Andreas Schwab <schwab@suse.de>
+
+- ship vaapitest binary for supported archs
+
+-------------------------------------------------------------------
+Fri Aug  4 09:55:05 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- re-enable ppc64le
+- ship v4l2test binary for supported archs
+- drop obsolete mozilla-bmo1775202.patch
+
+-------------------------------------------------------------------
 Sun Jul 30 19:55:49 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
 
 - Mozilla Firefox 116.0
+  * https://www.mozilla.org/en-US/firefox/116.0/releasenotes/
+  MFSA 2023-29 (bsc#1213746)
+  * CVE-2023-4045 (bmo#1833876)
+    Offscreen Canvas could have bypassed cross-origin restrictions
+  * CVE-2023-4046 (bmo#1837686)
+    Incorrect value used during WASM compilation
+  * CVE-2023-4047 (bmo#1839073)
+    Potential permissions request bypass via clickjacking
+  * CVE-2023-4048 (bmo#1841368)
+    Crash in DOMParser due to out-of-memory conditions
+  * CVE-2023-4049 (bmo#1842658)
+    Fix potential race conditions when releasing platform objects
+  * CVE-2023-4050 (bmo#1843038)
+    Stack buffer overflow in StorageManager
+  * CVE-2023-4051 (bmo#1821884)
+    Full screen notification obscured by file open dialog
+  * CVE-2023-4052 (bmo#1824420)
+    File deletion and privilege escalation through Firefox uninstaller
+  * CVE-2023-4053 (bmo#1839079)
+    Full screen notification obscured by external program
+  * CVE-2023-4054 (bmo#1840777)
+    Lack of warning when opening appref-ms files
+  * CVE-2023-4055 (bmo#1782561)
+    Cookie jar overflow caused unexpected cookie jar state
+  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
+    bmo#1842325, bmo#1843847)
+    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
+    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
+  * CVE-2023-4057 (bmo#1841682)
+    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
+    and Thunderbird 115.1
+  * CVE-2023-4058 (bmo#1819160, bmo#1828024)
+    Memory safety bugs fixed in Firefox 116
 - require NSS 3.91
 - remove obsolete mozilla-fix-top-level-asm.patch
 - re-enable LTO