MozillaFirefox/MozillaFirefox.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Sat, 13 Jun 2020 10:01:48 +0200
changeset 1133 0a44f639e5ee
parent 1132 443c3ab13827
child 1134 01a4849e2ed3
permissions -rw-r--r--
removed obsolete patch bumped Gtk requirement
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
1108
33b03cfb3747 bugfixes, improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1107
diff changeset
     1
-------------------------------------------------------------------
1132
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1131
diff changeset
     2
Fri Jun 12 21:02:45 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1131
diff changeset
     3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1131
diff changeset
     4
- Mozilla Firefox 78.0b6
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
     5
  * startup notifications now using Gtk instead of libnotify
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
     6
- requires
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
     7
  * NSS >= 3.53
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
     8
  * nodejs >= 10.21
1133
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
     9
  * Gtk+3 >= 3.14
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
    10
- removed obsolete patch
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
    11
  * mozilla-s390-bigendian.patch
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
    12
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
    13
-------------------------------------------------------------------
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    14
Wed Jun 10 07:17:15 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    15
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    16
- Exclude armv6, since it is unbuildable since about 3 years
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    17
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    18
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    19
Wed Jun  3 21:39:11 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    20
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    21
- Mozilla Firefox 77.0.1
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    22
  * Disable automatic selection of DNS over HTTPS providers during
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    23
    a test to enable wider deployment in a more controlled way
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    24
    (bmo#1642723)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    25
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    26
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    27
Fri May 29 11:49:36 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    28
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    29
- Mozilla Firefox 77.0
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    30
  * view and manage web certificates more easily on the new
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    31
    about:certificate page
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    32
  * improvements in accessibility
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    33
  * significant improvements to JavaScript debugging
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    34
  MFSA 2020-20 (bsc#1172402)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    35
  * CVE-2020-12399 (bmo#1631576)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    36
    Timing attack on DSA signatures in NSS library
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    37
    (fixed with external NSS >= 3.52.1)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    38
  * CVE-2020-12405 (bmo#1631618)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    39
    Use-after-free in SharedWorkerService
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    40
  * CVE-2020-12406 (bmo#1639590)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    41
    JavaScript type confusion with NativeTypes
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    42
  * CVE-2020-12407 (bmo#1637112)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    43
    WebRender leaking GPU memory when using border-image CSS
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    44
    directive
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    45
  * CVE-2020-12408 (bmo#1623888)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    46
    URL spoofing when using IP addresses
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    47
  * CVE-2020-12409 (bmo#1619305, bmo#1632717)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    48
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    49
  * CVE-2020-12411 (bmo#1620972, bmo#1625333)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    50
    Memory safety bugs fixed in Firefox 77
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
    51
- requires
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
    52
  * NSS >= 3.52.1
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
    53
  * rust-cbindgen >= 1.14.1
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    54
  * clang >= 5
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    55
- added mozilla-bmo1634646.patch as part of fixing PGO build
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
    56
  (still not working)
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
    57
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
    58
-------------------------------------------------------------------
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    59
Wed May 13 12:21:13 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    60
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    61
- change again _constraints for ppc64le use <physicalmemory>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    62
  and increase limit_build in spec file to reduce max_jobs.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    63
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    64
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    65
Sat May  9 11:45:39 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    66
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    67
- Mozilla Firefox 76.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    68
  * Fixed a bug causing some add-ons such as Amazon Assistant to see
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    69
    multiple onConnect events, impairing functionality (bmo#1635637)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    70
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    71
-------------------------------------------------------------------
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
    72
Fri May  1 11:59:58 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
    73
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
    74
- Mozilla Firefox 76.0
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    75
  * Lockwise improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    76
  * Improvements in Picture-in-Picture feature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    77
  * Support Audio Worklets
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    78
  MFSA-2020-16 (bsc#1171186)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    79
  * CVE-2020-12387 (bmo#1545345)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    80
    Use-after-free during worker shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    81
  * CVE-2020-12388 (bmo#1618911)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    82
    Sandbox escape with improperly guarded Access Tokens
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    83
  * CVE-2020-12389 (bmo#1554110)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    84
    Sandbox escape with improperly separated process types
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    85
  * CVE-2020-6831 (bmo#1632241)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    86
    Buffer overflow in SCTP chunk input validation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    87
  * CVE-2020-12390 (bmo#1141959)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    88
    Incorrect serialization of nsIPrincipal.origin for IPv6 addresses
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    89
  * CVE-2020-12391 (bmo#1457100)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    90
    Content-Security-Policy bypass using object elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    91
  * CVE-2020-12392 (bmo#1614468)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    92
    Arbitrary local file access with 'Copy as cURL'
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    93
  * CVE-2020-12393 (bmo#1615471)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    94
    Devtools' 'Copy as cURL' feature did not fully escape
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    95
    website-controlled data, potentially leading to command injection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    96
  * CVE-2020-12394 (bmo#1628288)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    97
    URL spoofing in location bar when unfocussed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    98
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704, bmo#1624098,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
    99
    bmo#1625749, bmo#1626382, bmo#1628076, bmo#1631508)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   100
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   101
  * CVE-2020-12396 (bmo#1339601, bmo#1611938, bmo#1620488,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   102
    bmo#1622291, bmo#1627644)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
   103
    Memory safety bugs fixed in Firefox 76
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   104
- requires
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   105
  * NSS >= 3.51.1
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   106
  * nasm >= 2.14
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   107
- removed obsolete patch mozilla-bmo1622013.patch
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   108
- fix URI creation for KDE file selector integration (boo#1160331)
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   109
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
   110
-------------------------------------------------------------------
1124
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   111
Tue Apr  7 12:18:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   112
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   113
- Mozilla Firefox 75.0
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   114
  * https://www.mozilla.org/en-US/firefox/75.0/releasenotes
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   115
  MFSA 2020-12 (bsc#1168874)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   116
  * CVE-2020-6821 (bmo#1625404)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   117
    Uninitialized memory could be read when using the WebGL
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   118
    copyTexSubImage method
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   119
  * CVE-2020-6822 (bmo#1544181)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   120
    Out of bounds write in GMPDecodeData when processing large images
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   121
  * CVE-2020-6823 (bmo#1614919)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   122
    Malicious Extension could obtain auth codes from OAuth login flows
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   123
  * CVE-2020-6824 (bmo#1621853)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   124
    Generated passwords may be identical on the same site between
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   125
    separate private browsing sessions
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   126
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   127
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   128
  * CVE-2020-6826 (bmo#1613009,bmo#1613195,bmo#1616734,bmo#1617488,
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   129
    bmo#1619229,bmo#1620719,bmo#1624897)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   130
    Memory safety bugs fixed in Firefox 75
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   131
- removed obsolete patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   132
  mozilla-bmo1609538.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   133
- requires
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   134
  * rust >= 1.41
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   135
  * rust-cbindgen >= 0.13.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   136
  * mozilla-nss >= 3.51
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   137
  * nodejs10 >= 10.19
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   138
- fix build issue in libvpx for i586 via mozilla-bmo1622013.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   139
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   140
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   141
Mon Apr  6 11:19:24 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   142
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   143
- increase _constraints memory for ppc64le
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   144
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   145
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   146
Fri Apr  3 15:23:28 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   147
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   148
- Mozilla Firefox 74.0.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   149
  MFSA 2020-11 (boo#1168630)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   150
  * CVE-2020-6819 (bmo#1620818)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   151
    Use-after-free while running the nsDocShell destructor
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   152
  * CVE-2020-6820 (bmo#1626728)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   153
    Use-after-free when handling a ReadableStream
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   154
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
   155
-------------------------------------------------------------------
1123
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   156
Wed Mar 25 07:30:39 UTC 2020 - Marcus Meissner <meissner@suse.com>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   157
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   158
- mozilla-sandbox-fips.patch: allow /proc/sys/crypto/fips_enabled
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   159
  to be read, as openssl 1.1.1 FIPS aborts if it cannot access it
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   160
  (bsc#1167132)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   161
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   162
-------------------------------------------------------------------
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   163
Sat Mar  7 08:51:06 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   164
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   165
- Mozilla Firefox 74.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   166
  * https://www.mozilla.org/en-US/firefox/74.0/releasenotes/
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   167
  MFSA 2020-08 (bsc#1166238)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   168
  * CVE-2020-6805 (bmo#1610880)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   169
    Use-after-free when removing data about origins
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   170
  * CVE-2020-6806 (bmo#1612308)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   171
    BodyStream::OnInputStreamReady was missing protections against
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   172
    state confusion
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   173
  * CVE-2020-6807 (bmo#1614971)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   174
    Use-after-free in cubeb during stream destruction
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   175
  * CVE-2020-6808 (bmo#1247968)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   176
    URL Spoofing via javascript: URL
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   177
  * CVE-2020-6809 (bmo#1420296)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   178
    Web Extensions with the all-urls permission could access local
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   179
    files
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   180
  * CVE-2020-6810 (bmo#1432856)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   181
    Focusing a popup while in fullscreen could have obscured the
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   182
    fullscreen notification
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   183
  * CVE-2020-6811 (bmo#1607742)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   184
    Devtools' 'Copy as cURL' feature did not fully escape
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   185
    website-controlled data, potentially leading to command injection
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   186
  * CVE-2019-20503 (bmo#1613765)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   187
    Out of bounds reads in sctp_load_addresses_from_init
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   188
  * CVE-2020-6812 (bmo#1616661)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   189
    The names of AirPods with personally identifiable information
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   190
    were exposed to websites with camera or microphone permission
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   191
  * CVE-2020-6813 (bmo#1605814)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   192
    @import statements in CSS could bypass the Content Security
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   193
    Policy nonce feature
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   194
  * CVE-2020-6814 (bmo#1592078,bmo#1604847,bmo#1608256,bmo#1612636,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   195
    bmo#1614339)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   196
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   197
  * CVE-2020-6815 (bmo#1181957,bmo#1557732,bmo#1557739,bmo#1611457,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   198
    bmo#1612431)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   199
    Memory and script safety bugs fixed in Firefox 74
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   200
- requires
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   201
  * NSPR 4.25
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   202
  * NSS 3.50
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   203
  * rust-cbindgen 0.13.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   204
- removed obsolete patches
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   205
  mozilla-bmo1610814.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   206
  mozilla-cubeb-noreturn.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   207
- add mozilla-bmo1609538.patch to fix wayland issues with mutter 3.36
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   208
  (bmo#1609538, boo#1166471)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   209
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
   210
-------------------------------------------------------------------
1122
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   211
Wed Feb 26 08:12:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   212
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   213
- big endian fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   214
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   215
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   216
Tue Feb 25 14:17:00 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   217
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   218
- Fix build on aarch64/armv7 with:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   219
  * mozilla-bmo1610814.patch (boo#1164845, bmo#1610814)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   220
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   221
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   222
Thu Feb 20 13:40:59 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   223
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   224
- Mozilla Firefox 73.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   225
  * Resolved problems connecting to the RBC Royal Bank website
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   226
    (bmo#1613943)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   227
  * Fixed Firefox unexpectedly exiting when leaving Print Preview mode
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   228
    (bmo#1611133)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   229
  * Fixed crashes when playing encrypted content on some Linux systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   230
    (bmo#1614535, boo#1164646)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   231
- start in wayland mode when running under wayland session
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   232
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
   233
-------------------------------------------------------------------
1121
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   234
Sun Feb  9 07:45:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   235
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   236
- Mozilla Firefox 73.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   237
  * Added support for setting a default zoom level applicable for all
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   238
    web content
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   239
  * High-contrast mode has been updated to allow background images
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   240
  * Improved audio quality when playing back audio at a faster or
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   241
    slower speed
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   242
  * Added NextDNS as alternative option for DNS over HTTPS
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   243
  MFSA 2020-05 (bsc#1163368)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   244
  * CVE-2020-6796 (bmo#1610426)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   245
    Missing bounds check on shared memory read in the parent process
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   246
  * CVE-2020-6797 (bmo#1596668) (MacOS X only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   247
    Extensions granted downloads.open permission could open arbitrary
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   248
    applications on Mac OSX
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   249
  * CVE-2020-6798 (bmo#1602944)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   250
    Incorrect parsing of template tag could result in JavaScript injection
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   251
  * CVE-2020-6799 (bmo#1606596) (Windows only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   252
    Arbitrary code execution when opening pdf links from other
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   253
    applications, when Firefox is configured as default pdf reader
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   254
  * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851,
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   255
    bmo#1608580,bmo#1608785,bmo#1605777)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   256
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   257
  * CVE-2020-6801 (bmo#1601024,bmo#1601712,bmo#1604836,bmo#1606492)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   258
    Memory safety bugs fixed in Firefox 73
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   259
- updated requirements
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   260
  * rust >= 1.39
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   261
  * NSS >= 3.49.2
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   262
  * rust-cbindgen >= 0.12.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   263
- rebased patches
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   264
- removed obsolete patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   265
  * mozilla-bmo1601707.patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   266
- switched to cairo-gtk3-wayland build
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   267
  (to fully enable wayland MOZ_ENABLE_WAYLAND=1 needs to be set)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   268
- disabled elfhack due to failing packager
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   269
  https://github.com/openSUSE/firefox-maintenance/issues/28
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   270
- disabled PGO due to build failure
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   271
  https://github.com/openSUSE/firefox-maintenance/issues/29
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   272
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   273
-------------------------------------------------------------------
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   274
Tue Jan 28 07:30:16 UTC 2020 - Stasiek Michalski <stasiek@michalski.cc>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   275
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   276
- Use a symbolic icon from branding internals
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   277
- Pixmaps no longer required for the desktops
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   278
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
   279
-------------------------------------------------------------------
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   280
Wed Jan 22 10:30:21 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   281
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   282
- Mozilla Firefox 72.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   283
  * Various stability fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   284
  * Fixed issues opening files with spaces in their path (bmo#1601905)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   285
  * Fixed a hang opening about:logins when a master password is set
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   286
    (bmo#1606992)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   287
  * Fixed a web compatibility issue with CSS Shadow Parts which
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   288
    shipped in Firefox 72 (bmo#1604989)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   289
  * Fixed inconsistent playback performance for fullscreen 1080p
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   290
    videos on some systems (bmo#1608485)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   291
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   292
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   293
Tue Jan 21 12:59:54 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   294
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   295
- Fix build for aarch64/ppc64le (do not update config.sub file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   296
  for libbacktrace)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   297
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   298
-------------------------------------------------------------------
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   299
Wed Jan  8 08:19:12 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   300
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   301
- Mozilla Firefox 72.0.1
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   302
  MFSA 2020-03 (bsc#1160498)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   303
  * CVE-2019-17026 (bmo#1607443)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   304
    IonMonkey type confusion with StoreElementHole and FallibleStoreElement
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   305
- Mozilla Firefox 72.0
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   306
  * block fingerprinting scripts by default
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   307
  * new notification pop-ups
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   308
  * Picture-in-picture video
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
   309
  MFSA 2020-01 (bsc#1160305)
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   310
  * CVE-2019-17016 (bmo#1599181)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   311
    Bypass of @namespace CSS sanitization during pasting
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   312
  * CVE-2019-17017 (bmo#1603055)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   313
    Type Confusion in XPCVariant.cpp
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   314
  * CVE-2019-17020 (bmo#1597645)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   315
    Content Security Policy not applied to XSL stylesheets applied
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   316
    to XML documents
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   317
  * CVE-2019-17022 (bmo#1602843)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   318
    CSS sanitization does not escape HTML tags
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   319
  * CVE-2019-17023 (bmo#1590001) (fixed in NSS FIXME)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   320
    NSS may negotiate TLS 1.2 or below after a TLS 1.3
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   321
    HelloRetryRequest had been sent
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   322
  * CVE-2019-17024 (bmo#1507180,bmo#1595470,bmo#1598605,bmo#1601826)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   323
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   324
  * CVE-2019-17025 (bmo#1328295,bmo#1328300,bmo#1590447,bmo#1590965
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   325
    bmo#1595692,bmo#1597321,bmo#1597481)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   326
    Memory safety bugs fixed in Firefox 72
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   327
- update create-tar.sh to skip compare-locales
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   328
- requires NSPR 4.24 and NSS 3.48
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   329
- removed usage of browser-plugins convention for NPAPI plugins
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   330
  from start wrapper and changed the RPM macro to the
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   331
  /usr/$LIB/mozilla/plugins location (boo#1160302)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   332
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
   333
-------------------------------------------------------------------
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   334
Mon Dec  2 08:24:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   335
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   336
- Mozilla Firefox 71.0
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   337
  * Improvements to Lockwise, our integrated password manager
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   338
  * More information about Enhanced Tracking Protection in action
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   339
  * Native MP3 decoding on Windows, Linux, and macOS
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   340
  * Configuration page (about:config) reimplemented in HTML
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   341
  * New kiosk mode functionality, which allows maximum screen space
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   342
    for customer-facing displays
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   343
  MFSA 2019-36
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   344
  * CVE-2019-11756 (bmo#1508776)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   345
    Use-after-free of SFTKSession object
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   346
  * CVE-2019-17008 (bmo#1546331)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   347
    Use-after-free in worker destruction
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   348
  * CVE-2019-13722 (bmo#1580156) (Windows only)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   349
    Stack corruption due to incorrect number of arguments in WebRTC code
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   350
  * CVE-2019-17014 (bmo#1322864)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   351
    Dragging and dropping a cross-origin resource, incorrectly loaded
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   352
    as an image, could result in information disclosure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   353
  * CVE-2019-17010 (bmo#1581084)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   354
    Use-after-free when performing device orientation checks
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   355
  * CVE-2019-17005 (bmo#1584170)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   356
    Buffer overflow in plain text serializer
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   357
  * CVE-2019-17011 (bmo#1591334)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   358
    Use-after-free when retrieving a document in antitracking
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   359
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667, bmo#1567209
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   360
    bmo#1580288, bmo#1585760, bmo#1592502)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   361
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   362
  * CVE-2019-17013 (bmo#1298509, bmo#1472328, bmo#1577439, bmo#1577937
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   363
    bmo#1580320, bmo#1584195, bmo#1585106, bmo#1586293, bmo#1593865
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   364
    bmo#1594181)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   365
    Memory safety bugs fixed in Firefox 71
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   366
- requires
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   367
  NSPR >= 4.23
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   368
  NSS >= 3.47.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   369
  rust/cargo >= 1.37
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   370
- reactivate webrtc for platforms where it was disabled
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   371
- updated create-tar.sh to cover buildid and origin repo information
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   372
  -> removed obsolete source-stamp.txt
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   373
- removed obsolete patches
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   374
  mozilla-bmo1511604.patch
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   375
  mozilla-openaes-decl.patch
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   376
- changed locale building procedure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   377
  * removed obsolete compare-locales.tar.xz
1118
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
   378
- added mozilla-bmo1601707.patch to fix gcc/LTO builds
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
   379
  (bmo#1601707, boo#1158466)
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   380
- added mozilla-bmo849632.patch to fix big endian issues in skia
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
   381
  used for WebGL
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   382
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   383
-------------------------------------------------------------------
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   384
Fri Nov  1 14:16:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   385
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   386
- Mozilla Firefox 70.0.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   387
  * Fix for an issue that caused some websites or page elements using
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   388
    dynamic JavaScript to fail to load. (bmo#1592136)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   389
  * Title bar no longer shows in full screen view (bmo#1588747)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   390
- added mozilla-bmo1504834-part4.patch to fix some visual issues on
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   391
  big endian platforms
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   392
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
   393
-------------------------------------------------------------------
1112
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   394
Sun Oct 20 20:19:31 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   395
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   396
- Mozilla Firefox 70.0
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   397
  * more privacy protections from Enhanced Tracking Protection
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   398
  * Firefox Lockwise passwordmanager
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   399
  * Improvements to core engine components, for better browsing on more sites
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   400
  * Improved privacy and security indicators
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   401
  MFSA 2019-34
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   402
  * CVE-2018-6156 (bmo#1480088)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   403
    Heap buffer overflow in FEC processing in WebRTC
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   404
  * CVE-2019-15903 (bmo#1584907)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   405
    Heap overflow in expat library in XML_GetCurrentLineNumber
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   406
  * CVE-2019-11757 (bmo#1577107)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   407
    Use-after-free when creating index updates in IndexedDB
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   408
  * CVE-2019-11759 (bmo#1577953)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   409
    Stack buffer overflow in HKDF output
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   410
  * CVE-2019-11760 (bmo#1577719)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   411
    Stack buffer overflow in WebRTC networking
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   412
  * CVE-2019-11761 (bmo#1561502)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   413
    Unintended access to a privileged JSONView object
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   414
  * CVE-2019-11762 (bmo#1582857)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   415
    document.domain-based origin isolation has same-origin-property violation
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   416
  * CVE-2019-11763 (bmo#1584216)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   417
    Incorrect HTML parsing results in XSS bypass technique
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   418
  * CVE-2019-11765 (bmo#1562582)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   419
    Incorrect permissions could be granted to a website
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   420
  * CVE-2019-17000 (bmo#1441468)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   421
    CSP bypass using object tag with data: URI
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   422
  * CVE-2019-17001 (bmo#1587976)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   423
    CSP bypass using object tag when script-src 'none' is specified
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   424
  * CVE-2019-17002 (bmo#1561056)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   425
    upgrade-insecure-requests was not being honored for links dragged and dropped
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   426
  * CVE-2019-11764 (bmo#1558522, bmo#1577061, bmo#1548044, bmo#1571223,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   427
    bmo#1573048, bmo#1578933, bmo#1575217, bmo#1583684, bmo#1586845, bmo#1581950,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   428
    bmo#1583463, bmo#1586599)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   429
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   430
- requires
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   431
    rust/cargo >= 1.36
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   432
    NSPR >= 4.22
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   433
    NSS >= 3.46.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   434
    rust-cbindgen >= 0.9.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   435
- removed obsolete patches
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   436
    mozilla-bmo1573381.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   437
    mozilla-nestegg-big-endian.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   438
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
   439
-------------------------------------------------------------------
1111
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   440
Sun Oct 13 08:58:12 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   441
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   442
- Mozilla Firefox 69.0.3
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   443
  * Fixed Yahoo mail users being prompted to download files when
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   444
    clicking on emails (bmo#1582848)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   445
- devel package build can easily be disabled now
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   446
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   447
-------------------------------------------------------------------
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   448
Thu Oct  3 08:40:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   449
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   450
- Mozilla Firefox 69.0.2
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   451
  * Fixed a crash when editing files on Office 365 websites (bmo#1579858)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   452
  * Fixed a Linux-only crash when changing the playback speed while
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   453
    watching YouTube videos (bmo#1582222)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   454
- updated supported locale list
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   455
- Allow to build without profile guided optimizations (boo#1040589)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   456
  (contributed by Bernhard Wiedemann)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   457
- Make build verbose (contributed by Martin Liška)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   458
- remove obsolete kde.js setting (boo#1151186) and related patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   459
  firefox-add-kde.js-in-order-to-survive-PGO-build.patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   460
- update create-tar.sh to latest revision and adjusted tar_stamps
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   461
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   462
- extension preferences moved from branding package to core package
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   463
  (packaging but not branding specific)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   464
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
   465
-------------------------------------------------------------------
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   466
Thu Sep 19 13:31:16 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   467
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   468
- Mozilla Firefox 69.0.1
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   469
  * Fixed external programs launching in the background when clicking
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   470
    a link from inside Firefox to launch them (bmo#1570845)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   471
  * Usability improvements to the Add-ons Manager for users with
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   472
    screen readers (bmo#1567600)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   473
  * Fixed the Captive Portal notification bar not being dismissable
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   474
    in some situations after login is complete (bmo#1578633)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   475
  * Fixed the maximum size of fonts in Reader Mode when zoomed (bmo#1578454)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   476
  * Fixed missing stacks in the Developer Tools Performance section
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   477
    (bmo#1578354)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   478
  MFSA 2019-31
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   479
  * CVE-2019-11754 (bmo#1580506)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   480
    Pointer Lock is enabled with no user notification
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   481
- disable DOH by default
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   482
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   483
-------------------------------------------------------------------
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   484
Thu Sep  5 13:02:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   485
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   486
- Mozilla Firefox 69.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   487
  * Enhanced Tracking Protection (ETP) for stronger privacy protections
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   488
  * Block Autoplay feature is enhanced to give users the option to block
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   489
    any video
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   490
  * Users in the US or using the en-US browser, can get a new “New Tab”
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   491
    page experience connecting to the best of Pocket's content.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   492
  * Support for the Web Authentication HmacSecret extension via
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   493
    Windows Hello introduced.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   494
  * Support for receiving multiple video codecs with this release makes
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   495
    it easier for WebRTC conferencing services to mix video from
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   496
    different clients.
1107
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   497
  MFSA 2019-25 (boo#1149324)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   498
  * CVE-2019-11741 (bmo#1539595)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   499
    Isolate addons.mozilla.org and accounts.firefox.com
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   500
  * CVE-2019-5849 (bmo#1555838)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   501
    Out-of-bounds read in Skia
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   502
  * CVE-2019-11737 (bmo#1388015)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   503
    Content security policy directives ignore port and path if host is a wildcard
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   504
  * CVE-2019-11734 (bmo#1352875,bmo#1536227,bmo#1557208,bmo#1560641)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   505
    Memory safety bugs fixed in Firefox 69
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   506
  * CVE-2019-11735 (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   507
    bmo#1565744,bmo#1568858,bmo#1570358)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   508
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   509
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
   510
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   511
- requires
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   512
  * rust/cargo >= 1.35
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   513
  * rust-cbindgen >= 0.9.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   514
  * mozilla-nss >= 3.45
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   515
- rebased patches
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   516
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
   517
-------------------------------------------------------------------
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   518
Wed Sep  4 15:38:40 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   519
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   520
- added a bunch of patches mainly for big endian platforms
1109
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
   521
  * mozilla-bmo1504834-part1.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
   522
  * mozilla-bmo1504834-part2.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
   523
  * mozilla-bmo1504834-part3.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   524
  * mozilla-bmo1511604.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   525
  * mozilla-bmo1554971.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   526
  * mozilla-bmo1573381.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   527
  * mozilla-nestegg-big-endian.patch
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
   528
  * mozilla-bmo1512162.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   529
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
   530
-------------------------------------------------------------------
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   531
Fri Aug 30 20:49:11 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   532
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   533
- Mozilla Firefox 68.1.0
1100
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   534
  MFSA 2019-26
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   535
  * CVE-2019-11751 (bmo#1572838; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   536
    Malicious code execution through command line parameters
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   537
  * CVE-2019-11746 (bmo#1564449)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   538
    Use-after-free while manipulating video
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   539
  * CVE-2019-11744 (bmo#1562033)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   540
    XSS by breaking out of title and textarea elements using innerHTML
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   541
  * CVE-2019-11742 (bmo#1559715)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   542
    Same-origin policy violation with SVG filters and canvas to steal
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   543
    cross-origin images
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   544
  * CVE-2019-11736 (bmo#1551913, bmo#1552206; Windows only))
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   545
    File manipulation and privilege escalation in Mozilla Maintenance Service
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   546
  * CVE-2019-11753 (bmo#1574980; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   547
    Privilege escalation with Mozilla Maintenance Service in custom
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   548
    Firefox installation location
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   549
  * CVE-2019-11752 (bmo#1501152)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   550
    Use-after-free while extracting a key value in IndexedDB
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   551
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   552
    Sandbox escape through Firefox Sync
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   553
  * CVE-2019-11743 (bmo#1560495)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   554
    Cross-origin access to unload event attributes
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   555
  * CVE-2019-11748 (bmo#1564588)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   556
    Persistence of WebRTC permissions in a third party context
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   557
  * CVE-2019-11749 (bmo#1565374)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   558
    Camera information available without prompting using getUserMedia
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   559
  * CVE-2019-11750 (bmo#1568397)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   560
    Type confusion in Spidermonkey
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   561
  * CVE-2019-11738 (bmo#1452037)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   562
    Content security policy bypass through hash-based sources in directives
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   563
  * CVE-2019-11747 (bmo#1564481)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   564
    'Forget about this site' removes sites from pre-loaded HSTS list
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   565
  * CVE-2019-11735i (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   566
    bmo#1565744,bmo#1568858,bmo#1570358)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   567
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   568
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   569
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
   570
- switched package to ESR branch
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   571
- added mozilla-bmo1568145.patch to make builds reproducible
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   572
- removed upstreamed patch mozilla-gcc-internal-compiler-error.patch
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   573
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
   574
-------------------------------------------------------------------
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   575
Sun Aug 18 17:29:25 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   576
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   577
- Mozilla Firefox 68.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   578
  * Fixed a bug causing some special characters to be cut off from
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   579
    the end of the search terms when searching from the URL bar
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   580
    (bmo#1560228)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   581
  * Allow fonts to be loaded via file:// URLs when opening a page
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   582
    locally (bmo#1565942)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   583
  * Printing emails from the Outlook web app no longer prints only
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   584
    the header and footer (bmo#1567105)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   585
  * Fixed a bug causing some images not to be displayed on reload,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   586
    including on Google Maps (bmo# 1565542)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   587
  * Fixed an error when starting external applications configured
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   588
    as URI handlers (bmo#1567614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   589
  MFSA 2019-24 (boo#1145665)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   590
  * CVE-2019-11733: Stored passwords in 'Saved Logins' can be
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   591
    copied without master password entry (bmo#1565780)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   592
- drop fix-build-after-y2038-changes-in-glibc.patch, upstream
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   593
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   594
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   595
Fri Aug 16 16:49:24 UTC 2019 - Jonathan Brielmaier <jbrielmaier@suse.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   596
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   597
- Fix crash when typing in the URL bar on ppc64le (bmo#1512162).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   598
  The upstream patch doesn't resolve the issue on TW, but compiling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   599
  with -O1 does. Do this until we have a proper fix.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   600
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   601
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   602
Thu Aug  1 14:25:02 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   603
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   604
- Update build constraints to fix arm builds
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   605
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   606
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   607
Fri Jul 19 08:11:27 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   608
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   609
- Mozilla Firefox 68.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   610
  * Fixed missing Full Screen button when watching videos in full
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   611
    screen mode on HBO GO (bmo#1562837)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   612
  * Fixed a bug causing incorrect messages to appear for some
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   613
    locales when sites try to request the use of the Storage
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   614
    Access API (bmo#1558503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   615
  * Users in Russian regions may have their default search engine
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   616
    changed (bmo#1565315)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   617
  * Built-in search engines in some locales do not function
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   618
    correctly (bmo#1565779)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   619
  * SupportMenu policy doesn't always work (bmo#1553290)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   620
  * Allow the privacy.file_unique_origin pref to be controlled by
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   621
    policy (bmo#1563759)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   622
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   623
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   624
Thu Jul 11 10:51:39 UTC 2019 - Jiri Slaby <jslaby@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   626
- add fix-build-after-y2038-changes-in-glibc.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   627
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   628
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   629
Wed Jul 10 13:47:41 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   630
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   631
- Generate langpacks sequentially to avoid file corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   632
  from racy file writes (boo#1137970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   633
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   634
-------------------------------------------------------------------
1097
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   635
Mon Jul  8 13:30:35 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   636
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   637
- Mozilla Firefox 68.0
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   638
  * Dark mode in reader view
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   639
  * Improved extension security and discovery
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   640
  * Cryptomining and fingerprinting protections are added to strict
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   641
    content blocking settings in Privacy & Security preferences
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   642
  * Camera and microphone access now require an HTTPS connection
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   643
  MFSA 2019-21 (bsc#1140868)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   644
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   645
    Sandbox escape via installation of malicious languagepack
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   646
  * CVE-2019-11711 (bmo#1552541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   647
    Script injection within domain through inner window reuse
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   648
  * CVE-2019-11712 (bmo#1543804)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   649
    Cross-origin POST requests can be made with NPAPI plugins by
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   650
    following 308 redirects
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   651
  * CVE-2019-11713 (bmo#1528481)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   652
    Use-after-free with HTTP/2 cached stream
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   653
  * CVE-2019-11714 (bmo#1542593)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   654
    NeckoChild can trigger crash when accessed off of main thread
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   655
  * CVE-2019-11729 (bmo#1515342)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   656
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   657
  * CVE-2019-11715 (bmo#1555523)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   658
    HTML parsing error can contribute to content XSS
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   659
  * CVE-2019-11716 (bmo#1552632)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   660
    globalThis not enumerable until accessed
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   661
  * CVE-2019-11717 (bmo#1548306)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   662
    Caret character improperly escaped in origins
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   663
  * CVE-2019-11718 (bmo#1408349)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   664
    Activity Stream writes unsanitized content to innerHTML
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   665
  * CVE-2019-11719 (bmo#1540541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   666
    Out-of-bounds read when importing curve25519 private key
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   667
  * CVE-2019-11720 (bmo#1556230)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   668
    Character encoding XSS vulnerability
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   669
  * CVE-2019-11721 (bmo#1256009)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   670
    Domain spoofing through unicode latin 'kra' character
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   671
  * CVE-2019-11730 (bmo#1558299)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   672
    Same-origin policy treats all files in a directory as having the
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   673
    same-origin
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   674
  * CVE-2019-11723 (bmo#1528335)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   675
    Cookie leakage during add-on fetching across private browsing boundaries
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   676
  * CVE-2019-11724 (bmo#1512511)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   677
    Retired site input.mozilla.org has remote troubleshooting permissions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   678
  * CVE-2019-11725 (bmo#1483510)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   679
    Websocket resources bypass safebrowsing protections
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   680
  * CVE-2019-11727 (bmo#1552208)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   681
    PKCS#1 v1.5 signatures can be used for TLS 1.3
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   682
  * CVE-2019-11728 (bmo#1552993)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   683
    Port scanning through Alt-Svc header
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   684
  * CVE-2019-11710 (bmo#1549768, bmo#1548611, bmo#1533842, bmo#1537692,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   685
    bmo#1540590, bmo#1551907, bmo#1510345, bmo#1535482, bmo#1535848,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   686
    bmo#1547472, bmo#1547760, bmo#1507696, bmo#1544180)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   687
    Memory safety bugs fixed in Firefox 68
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   688
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   689
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   690
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   691
- requires
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   692
  * NSS 3.44.1
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   693
  * rust/cargo 1.34
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   694
  * rust-cbindgen 0.8.7
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   695
- rebased patches
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   696
  * mozilla-aarch64-startup-crash.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   697
  * mozilla-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   698
  * mozilla-nongnome-proxies.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   699
  * firefox-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   700
- use new create-tar.sh and add tar_stamps for package definitions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   701
- added patches imported from SLE flavour
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   702
  * mozilla-gcc-internal-compiler-error.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   703
  * mozilla-bmo1005535.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   704
  * mozilla-ppc-altivec_static_inline.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   705
  * mozilla-reduce-rust-debuginfo.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   706
  * mozilla-s390-bigendian.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   707
  * mozilla-s390-context.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   708
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
   709
-------------------------------------------------------------------
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   710
Mon Jul  2 14:15:17 UTC 2019 - Martin Liška <mliska@suse.cz>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   711
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   712
- Enable PGO for x86_64.
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
   713
  * added firefox-add-kde.js-in-order-to-survive-PGO-build.patch
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   714
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   715
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   716
Thu Jun 20 06:20:59 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   717
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   718
- Mozilla Firefox 67.0.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   719
  MFSA 2019-19 (boo#1138872)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   720
  * CVE-2019-11708 (bmo#1559858)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   721
    sandbox escape using Prompt:Open
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   722
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   723
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   724
Tue Jun 18 18:36:15 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   725
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   726
- Mozilla Firefox 67.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   727
  MFSA 2019-18 (boo#1138614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   728
  * CVE-2019-11707 (bmo#1544386)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   729
    Type confusion in Array.pop
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   730
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   731
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   732
Thu Jun 12 14:56:32 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   733
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   734
- Mozilla Firefox 67.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   735
  * Fixed: Fix JavaScript error ("TypeError: data is null in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   736
    PrivacyFilter.jsm") in console which may significantly degrade
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   737
    sessionstore reliability and performance (bmo#1553413)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   738
  * Fixed: Proxy authentication dialog box repeatedly pops up
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   739
    asking to authenticate after upgrading to Firefox 67 (bmo#1548804)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   740
  * Fixed: Pearson MyCloud breaks if FIDO U2F is not Chrome's
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   741
    implementation (bmo#1551282)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   742
  * Fixed: Starting in safe mode on Linux or macOS causes Firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   743
    to think on the subsequent launch that the profile is too
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   744
    recent to be used with this version of Firefox (bmo#1556612)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   745
  * Fixed: Linux distribution users can't easily install/use
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   746
    additional/different languages using the built-in preferences
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   747
    UI (bmo#1554744)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   748
  * Fixed: Developer tools users can't copy the href/src content
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   749
    from various HTML tags via the context menu in the Inspector
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   750
    markup view (bmo#1552275)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   751
  * Fixed: Custom home page is broken with clearing data on shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   752
    settings applied (bmo#1554167)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   753
  * Fixed: Performance-regression for eclipse RAP based applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   754
    (bmo#1555962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   755
  * Fixed: macOS 10.15 crash fix (bmo#1556076)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   756
  * Fixed: Can't start two downloads in parallel via <a download>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   757
    anymore (bmo#1542912)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   758
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   759
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   760
Thu Jun  6 06:49:51 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   761
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   762
- Mozilla Firefox 67.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   763
  * enable enhanced tracking protection by default for new users
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   764
  * upgrade of Facebook container to version 2.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   765
  * new version of Firefox Lockwise (password management)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   766
  * new version of Firefox Monitor
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   767
  * Firefox Send improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   768
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   769
-------------------------------------------------------------------
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   770
Sun May 19 20:40:30 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
1093
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   771
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   772
- Mozilla Firefox 67.0
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   773
  * Firefox 67 will be able to run different Firefox installs side by side
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   774
    https://blog.nightly.mozilla.org/2019/01/14/moving-to-a-profile-per-install-architecture/
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   775
  * Tabs can now be pinned from the Page Actions menu in the address bar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   776
  * Users can block known cryptominers and fingerprinters in the
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   777
    Custom settings or their Content Blocking preferences
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   778
  * The Import Data from Another Browser feature is now also available
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   779
    from the File menu
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   780
  * Firefox will now protect you against running older versions which
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   781
    can lead to data corruption and stability issues
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   782
  * Easier access to your list of saved logins from the main menu and
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   783
    login autocomplete
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   784
  * We’ve added a toolbar menu for your Firefox Account to provide more
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   785
    transparency for when you are synced, sharing data across devices
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   786
    and with Firefox. Personalize the appearance of the menu with your
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   787
    own avatar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   788
  * Enable FIDO U2F API, and permit registrations for Google Accounts
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   789
  * Enabled AV1 support on Linux
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
   790
  MFSA 2019-13 (boo#1135824)
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   791
  * CVE-2019-9815 (bmo#1546544)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   792
    Disable hyperthreading on content JavaScript threads on macOS
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   793
  * CVE-2019-9816 (bmo#1536768)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   794
    Type confusion with object groups and UnboxedObjects
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   795
  * CVE-2019-9817 (bmo#1540221)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   796
    Stealing of cross-domain images using canvas
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   797
  * CVE-2019-9818 (bmo#1542581) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   798
    Use-after-free in crash generation server
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   799
  * CVE-2019-9819 (bmo#1532553)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   800
    Compartment mismatch with fetch API
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   801
  * CVE-2019-9820 (bmo#1536405)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   802
    Use-after-free of ChromeEventHandler by DocShell
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   803
  * CVE-2019-9821 (bmo#1539125)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   804
    Use-after-free in AssertWorkerThread
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   805
  * CVE-2019-11691 (bmo#1542465)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   806
    Use-after-free in XMLHttpRequest
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   807
  * CVE-2019-11692 (bmo#1544670)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   808
    Use-after-free removing listeners in the event listener manager
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   809
  * CVE-2019-11693 (bmo#1532525)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   810
    Buffer overflow in WebGL bufferdata on Linux
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   811
  * CVE-2019-7317 (bmo#1542829)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   812
    Use-after-free in png_image_free of libpng library
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   813
  * CVE-2019-11694 (bmo#1534196) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   814
    Uninitialized memory memory leakage in Windows sandbox
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   815
  * CVE-2019-11695 (bmo#1445844)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   816
    Custom cursor can render over user interface outside of web content
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   817
  * CVE-2019-11696 (bmo#1392955)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   818
    Java web start .JNLP files are not recognized as executable files
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   819
    for download prompts
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   820
  * CVE-2019-11697 (bmo#1440079)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   821
    Pressing key combinations can bypass installation prompt delays and
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   822
    install extensions
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   823
  * CVE-2019-11698 (bmo#1543191)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   824
    Theft of user history data through drag and drop of hyperlinks
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   825
    to and from bookmarks
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   826
  * CVE-2019-11700 (bmo#1549833) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   827
    res: protocol can be used to open known local files
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   828
  * CVE-2019-11699 (bmo#1528939)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   829
    Incorrect domain name highlighting during page navigation
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   830
  * CVE-2019-11701 (bmo#1518627)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   831
    webcal: protocol default handler loads vulnerable web page
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   832
  * CVE-2019-9814 (bmo#1527592, bmo#1534536, bmo#1520132, bmo#1543159,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   833
    bmo#1539393, bmo#1459932, bmo#1459182, bmo#1516425)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   834
    Memory safety bugs fixed in Firefox 67
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   835
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   836
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   837
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   838
    bmo#1532465, bmo#1533554, bmo#1541580)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   839
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
1093
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   840
- requires
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   841
  * rust/cargo >= 1.32
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   842
  * mozilla-nspr >= 4.21
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   843
  * mozilla-nss >= 3.43
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   844
  * rust-cbindgen >= 0.8.2
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   845
- rebased patches
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   846
- KDE integration for default browser detection is broken in this revision
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   847
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
   848
-------------------------------------------------------------------
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   849
Fri May 17 12:04:49 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   850
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   851
- Fix armv7 build with:
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   852
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   853
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
   854
-------------------------------------------------------------------
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   855
Fri May 10 10:30:05 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   856
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   857
- Mozilla Firefox 66.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   858
  * Fixed: Further improvements to re-enable web extensions which
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   859
    had been disabled for users with a master password set (bmo#1549249)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   860
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   861
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   862
Sun May  5 20:21:02 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   863
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   864
- Mozilla Firefox 66.0.4 (boo#1134126)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   865
  * fix extension certificate chain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   866
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   867
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   868
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   869
Thu Apr 11 09:16:17 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   870
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   871
- Mozilla Firefox 66.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   872
  * Fixed: Address bar on tablets running Windows 10 now behaves
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   873
    correctly (bmo#1498973)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   874
  * Fixed: Performance issues with some HTML5 games (bmo#1537609)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   875
  * Fixed a bug with keypress events in IBM cloud applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   876
    (bmo#1538970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   877
  * Fix for keypress events in some Microsoft cloud applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   878
    (bmo#1539618)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   879
  * Changed: Updated Baidu search plugin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   880
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   881
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   882
Thu Mar 28 19:01:41 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   883
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   884
- Mozilla Firefox 66.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   885
  * Fixed Web compatibility issues with Office 365, iCloud and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   886
    IBM WebMail caused by recent changes to the handling of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   887
    keyboard events (bmo#1538966)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   888
  * Crash fixes (bmo#1521370, bmo#1539118)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   889
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   890
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   891
Thu Mar 28 09:58:36 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   893
- Add patch to fix aarch64 build:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   894
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   895
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   896
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   897
Fri Mar 22 22:22:08 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   898
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   899
- Mozilla Firefox 66.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   900
  MFSA 2019-09 (bsc#1130262)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   901
  * CVE-2019-9810 (bmo#1537924)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   902
    IonMonkey MArraySlice has incorrect alias information
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   903
  * CVE-2019-9813 (bmo#1538006)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   904
    Ionmonkey type confusion with __proto__ mutations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   905
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   906
-------------------------------------------------------------------
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   907
Sun Mar 17 10:08:51 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   908
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   909
- Mozilla Firefox 66.0
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   910
  * Increased content processes to 8
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   911
  * Added capability to search through open tabs from the tab overflow menu
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   912
  * New backend for the storage.local WebExtensions API, providing
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   913
    I/O performance improvements when the extension updates a small
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   914
    subset of the stored data
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   915
  * WebExtension keyboard shortcuts can now be managed or overridden
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   916
    from about:addons
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   917
  * Improved scrolling behavior: Firefox will now attempt to keep content
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   918
    from jumping around while a page is loading by supporting scroll
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   919
    anchoring
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   920
  * New about:privatebrowsing with search
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   921
  * A certificate error page now notifies the user of the name of the
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   922
    certificate issuer that breaks HTTPs connections on intercepted
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   923
    connections to help troubleshooting possible anti-virus software
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   924
    issues.
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   925
  * Fixed an performance issue some Linux users experienced with the
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   926
    Downloads panel (bmo#1517101)
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   927
  * Firefox now blocks all autoplay media with sound by default. Users
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   928
    can add individual sites to an exceptions list or turn the blocking
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   929
    off.
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   930
  * System title bar is hidden by default to match Gnome guideline
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   931
  MFSA 2019-07 (bsc#1129821)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   932
  * CVE-2019-9790 (bmo#1525145)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   933
    Use-after-free when removing in-use DOM elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   934
  * CVE-2019-9791 (bmo#1530958)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   935
    Type inference is incorrect for constructors entered through on-stack
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   936
    replacement with IonMonkey
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   937
  * CVE-2019-9792 (bmo#1532599)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   938
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   939
  * CVE-2019-9793 (bmo#1528829)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   940
    Improper bounds checks when Spectre mitigations are disabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   941
  * CVE-2019-9794 (bmo#1530103) (Windows only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   942
    Command line arguments not discarded during execution
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   943
  * CVE-2019-9795 (bmo#1514682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   944
    Type-confusion in IonMonkey JIT compiler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   945
  * CVE-2019-9796 (bmo#1531277)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   946
    Use-after-free with SMIL animation controller
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   947
  * CVE-2019-9797 (bmo#1528909)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   948
    Cross-origin theft of images with createImageBitmap
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   949
  * CVE-2019-9798 (bmo#1527534) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   950
    Library is loaded from world writable APITRACE_LIB location
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   951
  * CVE-2019-9799 (bmo#1505678)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   952
    Information disclosure via IPC channel messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   953
  * CVE-2019-9801 (bmo#1527717) (Windows only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   954
    Windows programs that are not 'URL Handlers' are exposed to web content
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   955
  * CVE-2019-9802 (bmo#1415508)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   956
    Chrome process information leak
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   957
  * CVE-2019-9803 (bmo#1515863, bmo#1437009)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   958
    Upgrade-Insecure-Requests incorrectly enforced for same-origin navigation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   959
  * CVE-2019-9804 (bmo#1518026) (MacOS only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   960
    Code execution through 'Copy as cURL' in Firefox Developer Tools on macOS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   961
  * CVE-2019-9805 (bmo#1521360)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   962
    Potential use of uninitialized memory in Prio
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   963
  * CVE-2019-9806 (bmo#1525267)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   964
    Denial of service through successive FTP authorization prompts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   965
  * CVE-2019-9807 (bmo#1362050)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   966
    Text sent through FTP connection can be incorporated into alert messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   967
  * CVE-2019-9809 (bmo#1282430, bmo#1523249)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   968
    Denial of service through FTP modal alert error messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   969
  * CVE-2019-9808 (bmo#1434634)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   970
    WebRTC permissions can display incorrect origin with data: and blob: URLs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   971
  * CVE-2019-9789 bmo#1520483, bmo#1522987, bmo#1528199, bmo#1519337,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   972
    bmo#1525549, bmo#1516179, bmo#1518524, bmo#1518331, bmo#1526579,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   973
    bmo#1512567, bmo#1524335, bmo#1448505, bmo#1518821
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   974
    Memory safety bugs fixed in Firefox 66
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   975
  * CVE-2019-9788 bmo#1518001, bmo#1521304, bmo#1521214, bmo#1506665,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   976
    bmo#1516834, bmo#1518774, bmo#1524755, bmo#1523362, bmo#1524214, bmo#1529203
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   977
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   978
- updated build/runtime requirements
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   979
  * mozilla-nss >= 3.42.1
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   980
  * cargo/rust >= 1.31
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   981
  * rust-cbindgen >= 0.6.8
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
   982
  * nasm >= 2.13 (new)
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   983
- removed obsolete patch
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   984
  * mozilla-bmo256180.patch
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   985
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
   986
-------------------------------------------------------------------
1087
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   987
Tue Mar  5 10:17:01 UTC 2019 - Stephan Kulow <coolo@suse.com>
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   988
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   989
- Do not hardcode nodejs8 but leave the prefer to the distribution
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   990
  (Tumbleweed staging wants to switch to nodejs10)
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   991
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   992
-------------------------------------------------------------------
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   993
Fri Feb 15 13:45:57 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   994
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   995
- Update _constraints to avoid 'no space left' error seen on aarch64
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   996
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
   997
-------------------------------------------------------------------
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
   998
Wed Feb 13 07:17:28 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
   999
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1000
- Mozilla Firefox 65.0.1
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1001
  * Fixed accidental requests to addons.mozilla.org when an addon
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1002
    recommendation doorhanger is shown (bmo#1526387)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1003
  * Improved playback of interactive Netflix videos (bmo#1524500)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1004
  * Fixed incorrect sizing of the "Clear Recent History" window in
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1005
    some situations (bmo#1523696)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1006
  * Fixed audio & video delays while making WebRTC calls
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1007
    (bmo#1521577, bmo#1523817)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1008
  * Fixed video sizing problems during some WebRTC calls (bmo#1520200)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1009
  * Fixed looping CONNECT requests when using WebSockets over HTTP/2
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1010
    from behind a proxy server (bmo#1523427)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1011
  * Fixed the "Enter" key not working on password entry fields for
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1012
    certain Linux distributions (bmo#1523635)
1087
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  1013
  MFSA 2019-04 (bsc#1125330)
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1014
  * CVE-2018-18356 bmo#1525817
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1015
    Use-after-free in Skia
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1016
  * CVE-2019-5785 bmo#1525433
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1017
    Integer overflow in Skia
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1018
  * CVE-2018-18511 bmo#1526218
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1019
    Cross-origin theft of images with ImageBitmapRenderingContext
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1020
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1021
-------------------------------------------------------------------
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1022
Wed Feb 13 06:12:43 UTC 2019 - Martin Liška <mliska@suse.cz>
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1023
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1024
- Enable LTO only for latest new toolchain (boo#1125038) for x86_64
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1025
  (with increased memory constraints)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1026
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1027
-------------------------------------------------------------------
1085
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1028
Sat Jan 26 22:37:01 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1029
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1030
- Mozilla Firefox 65.0
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1031
  * Enhanced tracking protection
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1032
  * allow switching of UI locales within preferences
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1033
  * support for the WebP image format
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1034
  * "top"-like about:performance
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1035
  MFSA 2019-01 (bsc#1122983)
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1036
  * CVE-2018-18500 bmo#1510114
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1037
    Use-after-free parsing HTML5 stream
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1038
  * CVE-2018-18503 bmo#1509442
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1039
    Memory corruption with Audio Buffer
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1040
  * CVE-2018-18504 bmo#1496413
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1041
    Memory corruption and out-of-bounds read of texture client
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1042
  * CVE-2018-18505 bmo#1497749
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1043
    Privilege escalation through IPC channel messages
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1044
  * CVE-2018-18506 bmo#1503393
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1045
    Proxy Auto-Configuration file can define localhost access to be proxied
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1046
  * CVE-2018-18502 bmo#1499426 bmo#1480090 bmo#1472990 bmo#1514762
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1047
    bmo#1501482 bmo#1505887 bmo#1508102 bmo#1508618 bmo#1511580
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1048
    bmo#1493497 bmo#1510145 bmo#1516289 bmo#1506798 bmo#1512758
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1049
    Memory safety bugs fixed in Firefox 65
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1050
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1051
    bmo#1502871 bmo#1516738 bmo#1516514
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1052
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1053
- requires
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1054
  NSS 3.41
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1055
  rust/carge 1.30
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1056
  rust-cbindgen 0.6.7
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1057
- rebased patches
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1058
- remove workaround for build memory consumption on i586; other
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1059
  mitigations meanwhile introduced (mainly parallelity) will be
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1060
  sufficient
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  1061
  mozilla-reduce-files-per-UnifiedBindings.patch
1085
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1062
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  1063
-------------------------------------------------------------------
1084
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1064
Tue Jan 15 14:32:03 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1065
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1066
- Increase disk constraint.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1067
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1068
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1069
Mon Jan 14 12:12:12 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1070
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1071
- Remove -v from mach build in order to work-around bmo#1500436.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1072
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1073
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1074
Fri Jan 11 15:07:14 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1075
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1076
- Set %clang_build to false on all architectures
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1077
- Do not use -fno-delete-null-pointer-checks and -fno-strict-aliasing:
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1078
  it should not be needed anymore
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1079
- Do not overwrite enable-optimize and when possible
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1080
  enable --enable-debug-symbols.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1081
- Add -v to mach in order to make build verbose.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1082
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1083
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1084
Wed Jan  9 22:40:14 UTC 2019 - astieger@suse.com
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1085
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1086
- Mozilla Firefox 64.0.2:
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1087
  * Update the Japanese translation for missing strings (bmo#1513259)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1088
  * Properly restore column sizes in developer tools inspector (bmo#1503175)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1089
  * Fixed video stuttering on Youtube (bmo#1513511)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1090
  * Fix updates for some lightweight themes (bmo#1508777)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  1091
b0b3c507e253 latest Factory
Wol