MozillaFirefox/MozillaFirefox.changes
branchfirefox62
changeset 1071 8dc7d19e8298
parent 1070 18f97bd2c2bf
child 1072 84c1339de259
--- a/MozillaFirefox/MozillaFirefox.changes	Sat Aug 25 18:07:14 2018 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Wed Sep 26 08:34:14 2018 +0200
@@ -1,9 +1,65 @@
 -------------------------------------------------------------------
-Sat Aug 25 15:56:51 UTC 2018 - wr@rosenauer.org
-
-- update to Firefox 62.0b20
+Sat Sep 22 09:03:53 UTC 2018 - astieger@suse.com
+
+- Mozilla Firefox 62.0.2:
+  MFSA 2018-22
+  * CVE-2018-12385 (boo#1109363, bmo#1490585)
+    Crash in TransportSecurityInfo due to cached data
+  * Unvisited bookmarks can once again be autofilled in the address
+    bar
+  * Fix WebGL rendering issues
+  * Fix fallback on startup when a language pack is missing
+  * Avoid crash when sharing a profile with newer (as yet
+    unreleased) versions of Firefox
+  * Do not undo removal of search engines when using a language
+    pack
+  * Fixed rendering of some web sites
+  * Restored compatibility with some sites using deprecated TLS
+    settings
+- disable rust debug symbols to fix build on %ix86
+
+-------------------------------------------------------------------
+Mon Sep  3 10:47:43 UTC 2018 - wr@rosenauer.org
+
+- update to Firefox 62.0
+  * Firefox Home (the default New Tab) now allows users to display
+    up to 4 rows of top sites, Pocket stories, and highlights
+  * "Reopen in Container" tab menu option appears for users with
+    Containers that lets them choose to reopen a tab in a different
+    container
+  * In advance of removing all trust for Symantec-issued certificates
+    in Firefox 63, a preference was added that allows users to distrust
+    certificates issued by Symantec. To use this preference, go to
+    about:config in the address bar and set the preference
+    "security.pki.distrust_ca_policy" to 2.
+  * Support for CSS Shapes, allowing for richer web page layouts.
+    This goes hand in hand with a brand new Shape Path Editor in the
+    CSS inspector.
+  * CSS Variable Fonts (OpenType Font Variations) support, which makes
+    it possible to create beautiful typography with a single font file
+  * Added Canadian English (en-CA) locale
+  MFSA 2018-20 (bsc#1107343)
+  * CVE-2018-12377 (bmo#1470260)
+    Use-after-free in refresh driver timers
+  * CVE-2018-12378 (bmo#1459383)
+    Use-after-free in IndexedDB
+  * CVE-2018-12379 (bmo#1473113) (updater is disabled for us)
+    Out-of-bounds write with malicious MAR file
+  * CVE-2017-16541 (bmo#1412081)
+    Proxy bypass using automount and autofs
+  * CVE-2018-12381 (bmo#1435319)
+    Dragging and dropping Outlook email message results in page navigation
+  * CVE-2018-12382 (bmo#1479311) (Android only)
+    Addressbar spoofing with javascript URI on Firefox for Android
+  * CVE-2018-12383 (bmo#1475775)
+    Setting a master password post-Firefox 58 does not delete
+    unencrypted previously stored passwords
+  * CVE-2018-12375
+    Memory safety bugs fixed in Firefox 62
+  * CVE-2018-12376
+    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
 - requires NSS >= 3.38
-- removed obsolete patches
+- removed obsolete patch
   mozilla-bmo1464766.patch
 
 -------------------------------------------------------------------