MozillaFirefox/MozillaFirefox.changes
branchfirefox87
changeset 1156 c3d884659acf
parent 1155 b8c834aafde2
child 1157 57fc0524b50c
--- a/MozillaFirefox/MozillaFirefox.changes	Wed Mar 17 12:24:14 2021 +0100
+++ b/MozillaFirefox/MozillaFirefox.changes	Sat Mar 27 21:45:50 2021 +0100
@@ -1,9 +1,41 @@
 -------------------------------------------------------------------
-Wed Mar 17 09:18:35 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
+Sat Mar 27 10:40:46 UTC 2021 - Manfred Hollstein <manfred.h@gmx.net>
+
+- Switch to clang_build globally; just on TW/x86_64 it does not work
+  due to unreolved externals `__rust_probestack' - disable clang_build
+  then.
+- useccache: Add conditionals to enable/disable ccache.
+
+-------------------------------------------------------------------
+Tue Mar 23 16:42:19 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
 
 - Mozilla Firefox 87.0
-- requires NSS 3.62
-- removed obsolete BigEndian ICU build workaround
+  * requires NSS 3.62
+  * removed obsolete BigEndian ICU build workaround
+  * rebased patches
+  MFSA 2021-10 (bsc#1183942)
+  * CVE-2021-23981 (bmo#1692832)
+    Texture upload into an unbound backing buffer resulted in an
+    out-of-bound read
+  * CVE-2021-23982 (bmo#1677046)
+    Internal network hosts could have been probed by a malicious
+    webpage
+  * CVE-2021-23983 (bmo#1692684)
+    Transitions for invalid ::marker properties resulted in memory
+    corruption
+  * CVE-2021-23984 (bmo#1693664)
+    Malicious extensions could have spoofed popup information
+  * CVE-2021-23985 (bmo#1659129)
+    Devtools remote debugging feature could have been enabled
+    without indication to the user
+  * CVE-2021-23986 (bmo#1692623)
+    A malicious extension could have performed credential-less
+    same origin policy violations
+  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
+    bmo#1690718)
+    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9
+  * CVE-2021-23988 (bmo#1684994, bmo#1686653)
+    Memory safety bugs fixed in Firefox 87
 
 -------------------------------------------------------------------
 Tue Mar 16 14:26:35 UTC 2021 - Martin Liška <mliska@suse.cz>