MozillaFirefox/MozillaFirefox.changes
author Wolfgang Rosenauer <wr@rosenauer.org>
Thu, 22 Feb 2024 20:31:18 +0100
branchfirefox122
changeset 1200 2a0735b1eb92
parent 1199 4c520ebe1ad7
child 1201 3a2c95022db2
permissions -rw-r--r--
122.0.1
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
1108
33b03cfb3747 bugfixes, improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1107
diff changeset
     1
-------------------------------------------------------------------
1200
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     2
Tue Feb 13 21:21:15 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     3
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     4
- Mozilla Firefox 122.0.1
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     5
  https://www.mozilla.org/en-US/firefox/122.0.1/releasenotes/
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     6
  * Fixed the Library and Sidebar context menus only displaying
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     7
    Multi-Account Containers icons in the "Open in New Container
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     8
    Tab" menu. (bmo#1876518)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
     9
  * Fixed an issue when clicking the Dismiss button in
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    10
    notification pop-ups on Windows causing a webpage in a new tab.
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    11
    (bmo#1848801)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    12
  * Fixed the yaru-remix system theme not applying correctly on
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    13
    Linux. (bmo#1877002)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    14
  * Fixed adding an extra new line to a rule in the Developer
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    15
    Tools' Inspector when copying it to the clipboard.
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    16
    (bmo#1876220)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    17
  * Rolled back a keyboard behavior change made to the Developer
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    18
    Tools' Rules view when validating a property name or input with
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    19
    the Enter key.
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    20
    This moves the focus to the next input, as was the behavior
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    21
    in Firefox 121. (bmo#1877457)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    22
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    23
-------------------------------------------------------------------
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    24
Tue Jan 30 13:51:25 UTC 2024 - Martin Sirringhaus <martin.sirringhaus@suse.com>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    25
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    26
- Recommend libfido2-udev on codestreams that exist, in order to try
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    27
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    28
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    29
-------------------------------------------------------------------
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    30
Sat Jan 27 23:12:05 UTC 2024 - Andreas Schwab <schwab@suse.de>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    31
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    32
- Fix file list
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    33
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    34
-------------------------------------------------------------------
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    35
Sun Jan 21 09:16:30 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    36
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    37
- Mozilla Firefox 122.0
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    38
  https://www.mozilla.org/en-US/firefox/122.0/releasenotes/
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    39
  MFSA 2024-01 (bsc#1218955)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    40
  * CVE-2024-0741 (bmo#1864587)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    41
    Out of bounds write in ANGLE
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    42
  * CVE-2024-0742 (bmo#1867152)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    43
    Failure to update user input timestamp
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    44
  * CVE-2024-0743 (bmo#1867408)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    45
    Crash in NSS TLS method
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    46
  * CVE-2024-0744 (bmo#1871089)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    47
    Wild pointer dereference in JavaScript
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    48
  * CVE-2024-0745 (bmo#1871838)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    49
    Stack buffer overflow in WebAudio
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    50
  * CVE-2024-0746 (bmo#1660223)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    51
    Crash when listing printers on Linux
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    52
  * CVE-2024-0747 (bmo#1764343)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    53
    Bypass of Content Security Policy when directive unsafe-inline was set
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    54
  * CVE-2024-0748 (bmo#1783504)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    55
    Compromised content process could modify document URI
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    56
  * CVE-2024-0749 (bmo#1813463)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    57
    Phishing site popup could show local origin in address bar
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    58
  * CVE-2024-0750 (bmo#1863083)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    59
    Potential permissions request bypass via clickjacking
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    60
  * CVE-2024-0751 (bmo#1865689)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    61
    Privilege escalation through devtools
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    62
  * CVE-2024-0752 (bmo#1866840)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    63
    Use-after-free could occur when applying update on macOS
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    64
  * CVE-2024-0753 (bmo#1870262)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    65
    HSTS policy on subdomain could bypass policy of upper domain
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    66
  * CVE-2024-0754 (bmo#1871605)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    67
    Crash when using some WASM files in devtools
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    68
  * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701)
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    69
    Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7,
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    70
    and Thunderbird 115.7
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    71
- requires NSS 3.96.1
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    72
- rebased patches
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    73
2a0735b1eb92 122.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1199
diff changeset
    74
-------------------------------------------------------------------
1199
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    75
Tue Jan  9 20:36:26 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    76
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    77
- Mozilla Firefox 121.0.1
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    78
  * Fixed unexpected line wrapping in some CJK contexts caused by
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    79
    changes in ideographic space handling. bmo#1870973)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    80
  * Fixed a hang when loading sites containing column-based
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    81
    layouts under some circumstances. bmo#1867784)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    82
  * Fixed missing rounded corners for videos playing over another
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    83
    video. bmo#1869994)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    84
  * Fixed Firefox not closing properly and other applications being
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    85
    unable to use a USB security key after being previously used
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    86
    during a Firefox session. bmo#1863135)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    87
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    88
-------------------------------------------------------------------
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    89
Wed Dec 20 12:59:57 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    90
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    91
- Mozilla Firefox 121.0
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    92
  https://www.mozilla.org/en-US/firefox/121.0/releasenotes
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    93
  MFSA 2023-56 (bsc#1217974)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    94
  * CVE-2023-6856 (bmo#1843782)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    95
    Heap-buffer-overflow affecting WebGL DrawElementsInstanced
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    96
    method with Mesa VM driver
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    97
  * CVE-2023-6135 (bmo#1853908)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    98
    NSS susceptible to "Minerva" attack
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
    99
  * CVE-2023-6865 (bmo#1864123)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   100
    Potential exposure of uninitialized data in EncryptingOutputStream
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   101
  * CVE-2023-6857 (bmo#1796023)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   102
    Symlinks may resolve to smaller than expected buffers
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   103
  * CVE-2023-6858 (bmo#1826791)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   104
    Heap buffer overflow in nsTextFragment
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   105
  * CVE-2023-6859 (bmo#1840144)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   106
    Use-after-free in PR_GetIdentitiesLayer
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   107
  * CVE-2023-6866 (bmo#1849037)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   108
    TypedArrays lack sufficient exception handling
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   109
  * CVE-2023-6860 (bmo#1854669)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   110
    Potential sandbox escape due to VideoBridge lack of texture
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   111
    validation
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   112
  * CVE-2023-6867 (bmo#1863863)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   113
    Clickjacking permission prompts using the popup transition
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   114
  * CVE-2023-6861 (bmo#1864118)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   115
    Heap buffer overflow affected nsWindow::PickerOpen(void) in
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   116
    headless mode
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   117
  * CVE-2023-6868 (bmo#1865488)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   118
    WebPush requests on Firefox for Android did not require VAPID key
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   119
  * CVE-2023-6869 (bmo#1799036)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   120
    Content can paint outside of sandboxed iframe
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   121
  * CVE-2023-6870 (bmo#1823316)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   122
    Android Toast notifications may obscure fullscreen event
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   123
    notifications
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   124
  * CVE-2023-6871 (bmo#1828334)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   125
    Lack of protocol handler warning in some instances
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   126
  * CVE-2023-6872 (bmo#1849186)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   127
    Browsing history leaked to syslogs via GNOME
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   128
  * CVE-2023-6863 (bmo#1868901)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   129
    Undefined behavior in ShutdownObserver()
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   130
  * CVE-2023-6864 (bmo#1736385, bmo#1810805, bmo#1846328, bmo#1856090,
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   131
    bmo#1858033, bmo#1858509, bmo#1862777, bmo#1864015)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   132
    Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6,
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   133
    and Thunderbird 115.6
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   134
  * CVE-2023-6873 (bmo#1855327, bmo#1862089, bmo#1862723)
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   135
    Memory safety bugs fixed in Firefox 121
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   136
- requires NSS 3.95
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   137
4c520ebe1ad7 121.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1198
diff changeset
   138
-------------------------------------------------------------------
1198
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   139
Fri Dec  8 15:55:00 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   140
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   141
- Mozilla Firefox 120.0.1 (boo#1217910)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   142
  * Fixed a bug that was causing persistent startup slowdowns
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   143
    (bmo#1867095)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   144
  * Fixed an issue that was causing 100% CPU usage on sites such as
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   145
    Google Maps. (bmo#1866409)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   146
  * Fixed an issue that was causing YouTube videos to show a green
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   147
    screen when hardware acceleration was enabled. (bmo#1865928)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   148
  * Fixed an issue where the status bar was still visible when
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   149
    viewing fullscreen video. (bmo#1853896)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   150
  * Fixed a startup crash affecting Linux users on some aarch64
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   151
    systems with page sizes other than 4KB. (bmo#1866025)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   152
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   153
-------------------------------------------------------------------
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   154
Wed Nov 22 06:57:37 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   155
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   156
- Mozilla Firefox 120.0
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   157
  https://www.mozilla.org/en-US/firefox/120.0/releasenotes
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   158
  MFSA 2023-49 (bsc#1217230)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   159
  * CVE-2023-6204 (bmo#1841050)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   160
    Out-of-bound memory access in WebGL2 blitFramebuffer
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   161
  * CVE-2023-6205 (bmo#1854076)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   162
    Use-after-free in MessagePort::Entangled
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   163
  * CVE-2023-6206 (bmo#1857430)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   164
    Clickjacking permission prompts using the fullscreen
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   165
    transition
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   166
  * CVE-2023-6207 (bmo#1861344)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   167
    Use-after-free in ReadableByteStreamQueueEntry::Buffer
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   168
  * CVE-2023-6208 (bmo#1855345)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   169
    Using Selection API would copy contents into X11 primary
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   170
    selection.
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   171
  * CVE-2023-6209 (bmo#1858570)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   172
    Incorrect parsing of relative URLs starting with "///"
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   173
  * CVE-2023-6210 (bmo#1801501)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   174
    Mixed-content resources not blocked in a javascript: pop-up
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   175
  * CVE-2023-6211 (bmo#1850200)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   176
    Clickjacking to load insecure pages in HTTPS-only mode
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   177
  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   178
    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   179
    bmo#1862782)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   180
    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   181
    and Thunderbird 115.5
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   182
  * CVE-2023-6213 (bmo#1849265, bmo#1851118, bmo#1854911)
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   183
    Memory safety bugs fixed in Firefox 120
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   184
- rebased patches
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   185
de5582739a05 120.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1197
diff changeset
   186
-------------------------------------------------------------------
1197
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   187
Wed Nov  8 20:27:15 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   188
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   189
- Mozilla Firefox 119.0.1
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   190
  * Fixed a bug causing colors in the <select> HTML element to not
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   191
    be applied to dropdown menu arrows (bmo#1861253)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   192
  * Fixed a bug with the <input> HTML element state not changing
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   193
    when dynamically updating the `disabled` attribute on an
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   194
    ancestor <fieldset> (bmo#1861027)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   195
  * Fixed a bug causing elements with the indeterminate CSS
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   196
    selector in a radio group to not update (bmo#1861346)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   197
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   198
-------------------------------------------------------------------
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   199
Thu Oct 26 10:31:03 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   200
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   201
- Mozilla Firefox 119.0
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   202
  https://www.mozilla.org/en-US/firefox/119.0/releasenotes
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   203
  MFSA 2023-45 (bsc#1216338)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   204
  * CVE-2023-5721 (bmo#1830820)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   205
    Queued up rendering could have allowed websites to clickjack
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   206
  * CVE-2023-5722 (bmo#1738426)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   207
    Cross-Origin size and header leakage
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   208
  * CVE-2023-5723 (bmo#1802057)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   209
    Invalid cookie characters could have led to unexpected errors
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   210
  * CVE-2023-5724 (bmo#1836705)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   211
    Large WebGL draw could have led to a crash
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   212
  * CVE-2023-5725 (bmo#1845739)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   213
    WebExtensions could open arbitrary URLs
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   214
  * CVE-2023-5726 (bmo#1846205)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   215
    Full screen notification obscured by file open dialog on macOS
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   216
  * CVE-2023-5727 (bmo#1847180)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   217
    Download Protections were bypassed by .msix, .msixbundle,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   218
    .appx, and .appxbundle files on Windows
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   219
  * CVE-2023-5728 (bmo#1852729)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   220
    Improper object tracking during GC in the JavaScript engine
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   221
    could have led to a crash.
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   222
  * CVE-2023-5729 (bmo#1823720)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   223
    Fullscreen notification dialog could have been obscured by
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   224
    WebAuthn prompts
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   225
  * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694, bmo#1848833,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   226
    bmo#1850191, bmo#1850259, bmo#1852596, bmo#1853201, bmo#1854002,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   227
    bmo#1855306, bmo#1855640, bmo#1856695)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   228
    Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4,
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   229
    and Thunderbird 115.4.1
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   230
  * CVE-2023-5731 (bmo#1690111, bmo#1721904, bmo#1851803, bmo#1854068)
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   231
    Memory safety bugs fixed in Firefox 119
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   232
- requires NSS 3.94
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   233
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   234
-------------------------------------------------------------------
1195
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   235
Wed Oct 11 18:28:09 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   236
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   237
- Mozilla Firefox 118.0.2
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   238
  * Fix games not loading on betsoft.com (bmo#1856145)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   239
  * Fix printing issues for some SVG images (bmo#1853727)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   240
  * Fix CORS XHR with authentication no longer working (bmo#1855650)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   241
  * Fix h264 WebRTC video not working in some contexts (bmo#1855636)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   242
  * Fix Firefox Translations not working on some pages
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   243
    (bmo#1841656, bmo#1855307)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   244
  * Stability fixes (bmo#1851991, bmo#1799326, bmo#1856637)
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   245
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   246
-------------------------------------------------------------------
1196
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   247
Sat Sep 30 19:51:56 UTC 2023 - Björn Bidar <bjorn.bidar@thaodan.de>
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   248
1197
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   249
- Activate KDE integration again, included rebased and updated
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   250
  patches, firefox-kde.patch and mozilla-kde.patch, (upstream
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   251
  removed special files handling for preferences but that has no
19915e86b721 Firefox 119.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1196
diff changeset
   252
  effect since we haven't shipped obsolete kde.js for a while)
1196
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   253
  (boo#1216027)
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   254
954851a35787 118.0.2 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1195
diff changeset
   255
-------------------------------------------------------------------
1194
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   256
Fri Sep 29 06:50:26 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   257
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   258
- Mozilla Firefox 118.0.1
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   259
  MFSA 2023-44 (bsc#1215814)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   260
  * CVE-2023-5217 (bmo#1855550),
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   261
    Heap buffer overflow in libvpx
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   262
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   263
-------------------------------------------------------------------
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   264
Mon Sep 25 06:35:49 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   265
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   266
- Mozilla Firefox 118.0
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   267
  MFSA 2023-41 (bsc#1215575)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   268
  * CVE-2023-5168 (bmo#1846683)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   269
    Out-of-bounds write in FilterNodeD2D1
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   270
  * CVE-2023-5169 (bmo#1846685)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   271
    Out-of-bounds write in PathOps
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   272
  * CVE-2023-5170 (bmo#1846686)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   273
    Memory leak from a privileged process
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   274
  * CVE-2023-5171 (bmo#1851599)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   275
    Use-after-free in Ion Compiler
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   276
  * CVE-2023-5172 (bmo#1852218)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   277
    Memory Corruption in Ion Hints
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   278
  * CVE-2023-5173 (bmo#1823172)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   279
    Out-of-bounds write in HTTP Alternate Services
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   280
  * CVE-2023-5174 (bmo#1848454)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   281
    Double-free in process spawning on Windows
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   282
  * CVE-2023-5175 (bmo#1849704)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   283
    Use-after-free of ImageBitmap during process shutdown
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   284
  * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962,
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   285
    bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195)
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   286
    Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3,
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   287
    and Thunderbird 115.3
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   288
- requires NSS 3.93
1193
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   289
- add mozilla-bmo1822730.patch
1194
d1b75dcb25fc Firefox 118.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1193
diff changeset
   290
- deactivated KDE integration temporarily
1195
78bbadb03249 118.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1194
diff changeset
   291
  (removed mozilla-kde.patch and firefox-kde.patch for now)
1193
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   292
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   293
-------------------------------------------------------------------
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   294
Tue Sep 12 17:04:01 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   295
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   296
- Mozilla Firefox 117.0.1
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   297
  * Fix a bug causing extensions using an event page for long-
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   298
    running tasks to be terminated while running, causing
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   299
    unexpected behavior changes (bmo#1851373)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   300
  * Temporarily revert an intentional behavior change preventing
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   301
    Javascript from changing URL.protocol (bmo#1850954).
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   302
  * Fix audio worklets not working for sites using WebAssembly
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   303
    exception handling (bmo#1851468)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   304
  * Fix the Reopen all tabs option in the Recently closed tabs
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   305
    menu sometimes failing to open all tabs (bmo#1850856)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   306
  * Fix the bookmarks menu sometimes remaining partially visible
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   307
    when minimizing Firefox (bmo#1843700)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   308
  * Fix an issue causing incorrect time zones to be detected on
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   309
    some sites (bmo#1848615)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   310
  * MFSA 2023-40 CVE-2023-4863 (boo#1215231)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   311
    Heap buffer overflow in WebP
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   312
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   313
-------------------------------------------------------------------
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   314
Sun Aug 27 08:51:28 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   315
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   316
- Mozilla Firefox 117.0
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   317
  https://www.mozilla.org/en-US/firefox/117.0/releasenotes
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   318
  MFSA 2023-34 (bsc#1214606)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   319
  * CVE-2023-4573 (bmo#1846687)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   320
    Memory corruption in IPC CanvasTranslator
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   321
  * CVE-2023-4574 (bmo#1846688)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   322
    Memory corruption in IPC ColorPickerShownCallback
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   323
  * CVE-2023-4575 (bmo#1846689)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   324
    Memory corruption in IPC FilePickerShownCallback
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   325
  * CVE-2023-4576 (bmo#1846694)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   326
    Integer Overflow in RecordedSourceSurfaceCreation
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   327
  * CVE-2023-4577 (bmo#1847397)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   328
    Memory corruption in JIT UpdateRegExpStatics
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   329
  * CVE-2023-4578 (bmo#1839007)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   330
    Error reporting methods in SpiderMonkey could have triggered
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   331
    an Out of Memory Exception
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   332
  * CVE-2023-4579 (bmo#1842766)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   333
    Persisted search terms were formatted as URLs
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   334
  * CVE-2023-4580 (bmo#1843046)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   335
    Push notifications saved to disk unencrypted
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   336
  * CVE-2023-4581 (bmo#1843758)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   337
    XLL file extensions were downloadable without warnings
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   338
  * CVE-2023-4582 (bmo#1773874)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   339
    Buffer Overflow in WebGL glGetProgramiv
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   340
  * CVE-2023-4583 (bmo#1842030)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   341
    Browsing Context potentially not cleared when closing Private
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   342
    Window
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   343
  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   344
    bmo#1846526, bmo#1847529)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   345
    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   346
    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   347
  * CVE-2023-4585 (bmo#1751583, bmo#1841082, bmo#1847904, bmo#1848999)
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   348
    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   349
    and Thunderbird 115.2
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   350
- requires
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   351
  NSS = 3.92
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   352
  rustc = 1.71
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   353
16de98d33e97 FF 117.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1192
diff changeset
   354
-------------------------------------------------------------------
1192
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   355
Thu Aug 17 18:20:18 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   356
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   357
- Mozilla Firefox 116.0.3
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   358
  * Fixed an issue for OPFS users that broke access to files that
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   359
    were locally cached in a previous version
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   360
    (bmo#1847989, bmo#1847619)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   361
  * Fixed an issue that was breaking screensharing for some users
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   362
    on Wayland (bmo#1841851)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   363
  * Fixed an issue where a fullscreen notification was persistently
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   364
    being shown to a user, even after disabling it (bmo#1847901)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   365
  * Fixed an issue where Firefox would hang when doing a Google
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   366
    search (bmo#1847066)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   367
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   368
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   369
Tue Aug 15 09:51:15 UTC 2023 - Adam Majer <adam.majer@suse.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   370
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   371
- After further testing on memory consumption during linking, it's
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   372
  safe to remove most of the memory reducing options for ix86 linker.
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   373
  A combination of these actually resulted in the OOM condition.
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   374
  It's even possible to add basic debugging info while keeping
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   375
  linker memory consumption at about 2GB
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   376
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   377
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   378
Thu Aug 10 16:32:02 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   379
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   380
- Mozilla Firefox 116.0.2
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   381
  * fixes for other platforms
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   382
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   383
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   384
Wed Aug  9 09:52:36 UTC 2023 - Adam Majer <adam.majer@suse.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   385
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   386
- Workarold ld bug causing OOM when linking on 32-bit
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   387
- Remove -j1 limit on x86. The build runs on 64-bit kernel with a
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   388
  32-bit userland. This means there is plenty of memory available
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   389
  but userland is limited to just under 4GB per process.
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   390
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   391
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   392
Sat Aug  5 17:46:22 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   393
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   394
- Mozilla Firefox 116.0.1
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   395
  * fixes for other platforms
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   396
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   397
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   398
Sat Aug  5 10:04:18 UTC 2023 - Andreas Schwab <schwab@suse.de>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   399
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   400
- ship vaapitest binary for supported archs
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   401
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   402
-------------------------------------------------------------------
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   403
Fri Aug  4 09:55:05 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   404
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   405
- re-enable ppc64le
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   406
- ship v4l2test binary for supported archs
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   407
- drop obsolete mozilla-bmo1775202.patch
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   408
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   409
-------------------------------------------------------------------
1191
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   410
Sun Jul 30 19:55:49 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   411
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   412
- Mozilla Firefox 116.0
1192
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   413
  * https://www.mozilla.org/en-US/firefox/116.0/releasenotes/
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   414
  MFSA 2023-29 (bsc#1213746)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   415
  * CVE-2023-4045 (bmo#1833876)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   416
    Offscreen Canvas could have bypassed cross-origin restrictions
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   417
  * CVE-2023-4046 (bmo#1837686)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   418
    Incorrect value used during WASM compilation
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   419
  * CVE-2023-4047 (bmo#1839073)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   420
    Potential permissions request bypass via clickjacking
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   421
  * CVE-2023-4048 (bmo#1841368)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   422
    Crash in DOMParser due to out-of-memory conditions
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   423
  * CVE-2023-4049 (bmo#1842658)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   424
    Fix potential race conditions when releasing platform objects
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   425
  * CVE-2023-4050 (bmo#1843038)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   426
    Stack buffer overflow in StorageManager
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   427
  * CVE-2023-4051 (bmo#1821884)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   428
    Full screen notification obscured by file open dialog
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   429
  * CVE-2023-4052 (bmo#1824420)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   430
    File deletion and privilege escalation through Firefox uninstaller
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   431
  * CVE-2023-4053 (bmo#1839079)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   432
    Full screen notification obscured by external program
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   433
  * CVE-2023-4054 (bmo#1840777)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   434
    Lack of warning when opening appref-ms files
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   435
  * CVE-2023-4055 (bmo#1782561)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   436
    Cookie jar overflow caused unexpected cookie jar state
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   437
  * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235,
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   438
    bmo#1842325, bmo#1843847)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   439
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   440
    Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   441
  * CVE-2023-4057 (bmo#1841682)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   442
    Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   443
    and Thunderbird 115.1
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   444
  * CVE-2023-4058 (bmo#1819160, bmo#1828024)
7612b8d8c46f 116.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1191
diff changeset
   445
    Memory safety bugs fixed in Firefox 116
1191
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   446
- require NSS 3.91
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   447
- remove obsolete mozilla-fix-top-level-asm.patch
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   448
- re-enable LTO
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   449
37e065158be7 initial 116 changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1190
diff changeset
   450
-------------------------------------------------------------------
1190
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   451
Fri Jul 28 20:56:00 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   452
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   453
- Mozilla Firefox 115.0.3
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   454
  * fixes for other platforms
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   455
- remove bashisms from firefox startup script (boo#1213657)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   456
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   457
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   458
Thu Jul 13 13:30:20 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   459
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   460
- Mozilla Firefox 115.0.2
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   461
  * Fixed a bug with displaying a caret in the text editor on some websites
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   462
    (bmo#1840804)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   463
  * Fixed a bug with broken audio rendering on some websites (bmo#1841982)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   464
  * Fixed a bug with patternTransform translate using the wrong units
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   465
    (bmo#1840746)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   466
  MFSA 2023-26 (bsc#1213230)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   467
  * CVE-2023-3600 (bmo#1839703)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   468
    Use-after-free in workers
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   469
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   470
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   471
Fri Jul  7 19:39:30 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   472
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   473
- Mozilla Firefox 115.0.1
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   474
  * fixes for other platforms
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   475
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   476
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   477
Sun Jul  2 16:00:53 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   478
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   479
- Mozilla Firefox 115.0
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   480
  * Support for importing payment methods saved in Chrome-based browser
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   481
  * Hardware video decoding is now enabled for Intel GPUs on Linux
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   482
  * The Tab Manager dropdown now features close buttons, so tabs
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   483
    can be closed more quickly
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   484
  * Streamlined the user interface for importing data in from other browsers
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   485
  * Users without platform support for H264 video decoding can now
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   486
    fallback to Cisco's OpenH264 plugin for playback.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   487
  * Undo and redo are now available in Password fields
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   488
  * Changed: On Linux, middle clicks on the new tab button will
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   489
    now open the xclipboard contents in the new tab. If the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   490
    xclipboard content is a URL then that URL is opened, any
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   491
    other text is opened with your default search provider.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   492
  * Changed: For users with a Firefox Colorways built-in theme,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   493
    the theme will be automatically migrated to the same theme
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   494
    hosted on addons.mozilla.org for Firefox profiles that have
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   495
    disabled add-ons auto-updates. This will allow users to keep
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   496
    their Colorways theme when they are later removed from
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   497
    Firefox installer files.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   498
  * Changed: Certain Firefox users may come across a message in
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   499
    the extensions panel indicating that their add-ons are not
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   500
    allowed on the site currently open. We have introduced a new
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   501
    back-end feature to only allow some extensions monitored by
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   502
    Mozilla to run on specific websites for various reasons,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   503
    including security concerns.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   504
  * HTML5: The builtin editor now behaves similarly to other
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   505
    browsers with `contenteditable` and `designMode` when
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   506
    splitting a node, e.g. typing Enter to split a paragraph, and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   507
    also when joining two nodes, e.g. typing Backspace at the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   508
    start of a paragraph to join the paragraph and the previous
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   509
    one.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   510
    When a node is split, the builtin editor creates a new node
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   511
    after the original one instead of before, i.e. creates the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   512
    right node instead of the left node.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   513
    Similarly, when two nodes are joined, the builtin editor
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   514
    deletes the latter node and moves its children to the end of
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   515
    the preceding node instead of deleting the former node and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   516
    moving its child to the start of the following node.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   517
  * HTML5: WebRTC application developers can now specify a target
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   518
    in milliseconds of media for the jitter buffer to hold.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   519
    Altering the target value allows applications to control the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   520
    tradeoff between playout delay and the risk of running out of
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   521
    audio or video frames due to network jitter.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   522
  * HTML5: Change array by copy provides additional methods on
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   523
    `Array.prototype` and `TypedArray.prototype` to enable
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   524
    changes on the array by returning a new copy of it with the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   525
    change.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   526
  * HTML5: The animation-composition property is now supported,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   527
    allowing a declarative way to define the composite operation
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   528
    used when multiple animations affect the same property
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   529
    simultaneously.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   530
  * HTML5: Added the URL.canParse() function to allow easy and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   531
    fast checking if URLs are valid and parseable.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   532
  * HTML5: IndexedDB is now also supported in private browsing
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   533
    without memory limits thanks to encrypted storage on disk.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   534
    The temporary keys to decrypt the information are hold in RAM
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   535
    only and all stored information is purged at the normal end
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   536
    of a private browsing session from disk.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   537
  * HTML5: Supports conditions are now supported in CSS import
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   538
    rules @import supports(...)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   539
  * Developer: In web development, we rely on third-party
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   540
    libraries which you may not be interested in while debugging.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   541
    These can be ignored. Ignoring them means that breakpoints
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   542
    will not get hit and they are skipped during stepping.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   543
    You can now choose to **Hide ignore-listed sources** in the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   544
    Developer Tools source tree
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   545
  * Developer: We have introduced a new option,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   546
    `devtools.f12_enabled`, that can be utilized to prevent the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   547
    accidental use of the F12 key, which opens the DevTools
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   548
    toolbox (bug).
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   549
  * Enterprise: You can find information about policy updates and
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   550
    enterprise specific bug fixes in the Firefox for Enterprise
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   551
    115 Release Notes.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   552
  MFSA 2023-22 (bsc#1212438)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   553
  * CVE-2023-3482 (bmo#1839464)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   554
    Block all cookies bypass for localstorage
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   555
  * CVE-2023-37201 (bmo#1826002)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   556
    Use-after-free in WebRTC certificate generation
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   557
  * CVE-2023-37202 (bmo#1834711)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   558
    Potential use-after-free from compartment mismatch in SpiderMonkey
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   559
  * CVE-2023-37203 (bmo#291640)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   560
    Drag and Drop API may provide access to local system files
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   561
  * CVE-2023-37204 (bmo#1832195)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   562
    Fullscreen notification obscured via option element
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   563
  * CVE-2023-37205 (bmo#1704420)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   564
    URL spoofing in address bar using RTL characters
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   565
  * CVE-2023-37206 (bmo#1813299)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   566
    Insufficient validation of symlinks in the FileSystem API
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   567
  * CVE-2023-37207 (bmo#1816287)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   568
    Fullscreen notification obscured
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   569
  * CVE-2023-37208 (bmo#1837675)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   570
    Lack of warning when opening Diagcab files
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   571
  * CVE-2023-37209 (bmo#1837993)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   572
    Use-after-free in `NotifyOnHistoryReload`
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   573
  * CVE-2023-37210 (bmo#1821886)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   574
    Full-screen mode exit prevention
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   575
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   576
    bmo#1836550, bmo#1837450)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   577
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   578
    and Thunderbird 102.13
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   579
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206, bmo#1827076,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   580
    bmo#1828690, bmo#1833503, bmo#1835710, bmo#1838587)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   581
    Memory safety bugs fixed in Firefox 115
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   582
- Requires NSS 3.90
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   583
- Add patches:
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   584
  mozilla-rust-disable-future-incompat.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   585
  mozilla-bmo1775202.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   586
  mozilla-partial-revert-1768632.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   587
- removed obsolete mozilla-buildfixes.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   588
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   589
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   590
Tue Jun 20 19:49:51 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   591
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   592
- Mozilla Firefox 114.0.2:
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   593
  * Several crash fixes
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   594
  * Web Extensions: Fixes for 114 regressions in Native Messaging
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   595
    support
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   596
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   597
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   598
Tue Jun 20 06:30:02 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   599
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   600
- do not enable LTO as it caused crashes now (boo#1212101)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   601
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   602
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   603
Sat Jun 10 14:48:07 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   604
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   605
- Mozilla Firefox 114.0.1
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   606
  * Fix a startup crash (bmo#1837201, boo#1212101)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   607
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   608
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   609
Fri Jun  9 11:05:47 UTC 2023 - Martin Sirringhaus <martin.sirringhaus@suse.com>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   610
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   611
- Only install vaapitest for wayland-enabled builds, where it gets built
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   612
- Rebase mozilla-silence-no-return-type.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   613
- Rebase s390x-patches, and remove obsolete patches:
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   614
  mozilla-bmo1005535.patch mozilla-s390x-skia-gradient.patch
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   615
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   616
-------------------------------------------------------------------
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   617
Mon Jun  5 21:22:19 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   618
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   619
- Mozilla Firefox 114.0
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   620
  MFSA 2023-20 (bsc#1211922)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   621
  * CVE-2023-34414 (bmo#1695986)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   622
    Click-jacking certificate exceptions through rendering lag
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   623
  * CVE-2023-34415 (bmo#1811999)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   624
    Site-isolation bypass on sites that allow open redirects to
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   625
    data: urls
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   626
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   627
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   628
    bmo#1830206, bmo#1830795, bmo#1833339)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   629
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   630
    102.12
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   631
  * CVE-2023-34417 (bmo#1746447, bmo#1820903, bmo#1832832)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   632
    Memory safety bugs fixed in Firefox 114
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   633
  * New: Added UI to manage the DNS over HTTPS exception list.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   634
    (bmo#1596847)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   635
  * New: Bookmarks can now be searched from the Bookmarks menu.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   636
    The Bookmarks menu is accessible by adding the *Bookmarks
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   637
    menu* button to the toolbar. (bmo#1736937)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   638
  * New: Restrict searches to your local browsing history by
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   639
    selecting *Search history* from the History, Library or
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   640
    Application menu buttons. (bmo#1736939)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   641
  * New: Mac users can now capture video from their cameras in
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   642
    all supported native resolutions. This enables resolutions
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   643
    higher than 1280x720. (bmo#1806604)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   644
  * New: It is now possible to reorder the extensions listed in
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   645
    the extensions panel. (bmo#1805924)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   646
  * New: Users on macOS, Linux, and Windows 7 can now use FIDO2 /
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   647
    WebAuthn authenticators over USB. Some advanced features,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   648
    such as fully passwordless logins, require a PIN to be set on
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   649
    the authenticator. (bmo#1814487)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   650
  * New: Pocket Recommended content can now be seen in France,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   651
    Italy, and Spain. (bmo#None)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   652
  * Changed: DNS over HTTPS settings are now part of  the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   653
    *Privacy & Security* section of the *Settings* page and allow
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   654
    the user to choose from all the supported modes.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   655
    (bmo#1610741)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   656
  * HTML5: DOM: Added support for ES Modules on DedicatedWorker
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   657
    and SharedWorker
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   658
  * HTML5: WebTransport is now enabled by default and will be
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   659
    going to release with 114. As the original Explainer  notes,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   660
    it enables multiple use-cases that are hard or impossible to
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   661
    handle without it, especially for Gaming and live streaming.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   662
    It covers cases that are problematic for alternative
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   663
    mechanisms, such as WebSockets.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   664
    Built on top of HTTP3 (HTTP2 support will be coming later).
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   665
    The current implementation in Firefox is passing 505 out of
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   666
    565 Web-Platform Tests.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   667
  * HTML5: CSS: The `infinity` and `NaN` constants are now
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   668
    supported inside the `calc()` function. (bmo#1830759)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   669
  * Developer: The *Copy as cURL* feature, available in the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   670
    Network panel, has been enhanced. It now supports the
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   671
    -`-compressed` argument. (bmo#1776120)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   672
  * Developer: The Accessibility Inspector has been improved to
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   673
    accurately recognize all the ARIA roles like `banner`,
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   674
    `main`, `navigation`, and `contentinfo`, etc. This
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   675
    enhancement is particularly beneficial for web developers
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   676
    working with ARIA roles to improve web accessibility.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   677
    (bmo#1572512)
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   678
  * Developer: Firefox now provides support for the CSS Cascading
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   679
    Level 4 `supports()` syntax for `@import` rules. This allows
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   680
    for the importation of other stylesheets based on support-
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   681
    dependency. In addition, the Inspector panel now accurately
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   682
    displays the conditions at the top of the imported rule.
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   683
- requires NSS 3.89.1
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   684
2a24a948b5cf Firefox 115.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1189
diff changeset
   685
-------------------------------------------------------------------
1189
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   686
Wed May 24 19:26:35 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   687
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   688
- Mozilla Firefox 113.0.2 (boo#1211696)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   689
  * Fixed: Fixed a bug which could cause Firefox to freeze on
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   690
    some pages when loading them with the Developer Tools Web
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   691
    Console open (bmo#1828026)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   692
  * Fixed: Fixed a bug which would cause the bookmarks and
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   693
    history sidebars to not properly react to the browser window
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   694
    being vertically resized (bmo#1831535)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   695
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   696
-------------------------------------------------------------------
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   697
Sat May 13 20:56:05 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   698
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   699
- Mozilla Firefox 113.0.1
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   700
  * UI fixes for other platforms
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   701
- upstream signing key updated
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   702
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   703
-------------------------------------------------------------------
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   704
Tue May  9 21:12:38 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   705
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   706
- Mozilla Firefox 113.0
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   707
  * https://www.mozilla.org/en-US/firefox/113.0/releasenotes
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   708
  MFSA 2023-16 (bsc#1211175)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   709
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   710
    Browser prompts could have been obscured by popups
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   711
  * CVE-2023-32206 (bmo#1824892)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   712
    Crash in RLBox Expat driver
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   713
  * CVE-2023-32207 (bmo#1826116)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   714
    Potential permissions request bypass via clickjacking
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   715
  * CVE-2023-32208 (bmo#1646034)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   716
    Leak of script base URL in service workers via import()
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   717
  * CVE-2023-32209 (bmo#1767194)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   718
    Persistent DoS via favicon image
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   719
  * CVE-2023-32210 (bmo#1776755)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   720
    Incorrect principal object ordering
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   721
  * CVE-2023-32211 (bmo#1823379)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   722
    Content process crash due to invalid wasm code
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   723
  * CVE-2023-32212 (bmo#1826622)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   724
    Potential spoof due to obscured address bar
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   725
  * CVE-2023-32213 (bmo#1826666)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   726
    Potential memory corruption in FileReader::DoReadData()
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   727
  * MFSA-TMP-2023-0002 (bmo#1814560, bmo#1814790, bmo#1819796)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   728
    Race condition in dav1d decoding
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   729
  * CVE-2023-32214 (bmo#1828716)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   730
    Potential DoS via exposed protocol handlers
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   731
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856, bmo#1820210,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   732
    bmo#1821480, bmo#1827019, bmo#1827024, bmo#1827144, bmo#1827359,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   733
    bmo#1830186)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   734
    Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   735
  * CVE-2023-32216 (bmo#1746479, bmo#1806852, bmo#1815987,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   736
    bmo#1820359, bmo#1823568, bmo#1824803, bmo#1824834, bmo#1825170,
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   737
    bmo#1827020, bmo#1828130)
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   738
    Memory safety bugs fixed in Firefox 113
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   739
- removed obsolete mozilla-bmo1568145.patch
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   740
ba0c97b018a6 Firefox 113.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1188
diff changeset
   741
-------------------------------------------------------------------
1188
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   742
Sun May  7 19:47:00 UTC 2023 - Aaron Puchert <aaronpuchert@alice-dsl.net>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   743
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   744
- Fix i586 build by reducing debug info to -g1. (boo#1210168)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   745
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   746
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   747
Tue Apr 25 16:01:07 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   748
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   749
- Mozilla Firefox 112.0.2
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   750
  * Fix a high memory usage issue with animated images in minimized
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   751
    (or completely covered) windows, especially when using animated
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   752
    themes (bmo#1828587)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   753
  * Fix an issue where Linux users with bitmap fonts installed may
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   754
    have had entire sections of text invisible to them on some
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   755
    sites (bmo#1827950)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   756
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   757
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   758
Fri Apr 21 09:48:25 UTC 2023 - Manfred Hollstein <manfred.h@gmx.net>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   759
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   760
- Include Leap 15.5 in check for which python version is required.
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   761
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   762
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   763
Thu Apr 20 13:24:13 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   764
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   765
- Mozilla Firefox 112.0.1
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   766
  * Fix a bug where cookie dates appear to be set in the far
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   767
    future after updating Firefox. This may have caused cookies to
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   768
    be unintentionally purged (bmo#1827669)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   769
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   770
-------------------------------------------------------------------
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   771
Mon Apr 10 21:58:19 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   772
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   773
- Mozilla Firefox 112.0
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   774
  * https://www.mozilla.org/en-US/firefox/112.0/releasenotes/
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   775
  MFSA 2023-13 (bsc#1210212)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   776
  * CVE-2023-29531 (bmo#1794292)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   777
    Out-of-bound memory access in WebGL on macOS
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   778
  * CVE-2023-29532 (bmo#1806394)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   779
    Mozilla Maintenance Service Write-lock bypass
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   780
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   781
    Fullscreen notification obscured
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   782
  * CVE-2023-29534 (bmo#1816007, bmo#1816059, bmo#1821155, bmo#1821576,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   783
    bmo#1821906, bmo#1822298, bmo#1822305)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   784
    Fullscreen notification could have been obscured on Firefox
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   785
    for Android
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   786
  * MFSA-TMP-2023-0001 (bmo#1819244)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   787
    Double-free in libwebp
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   788
  * CVE-2023-29535 (bmo#1820543)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   789
    Potential Memory Corruption following Garbage Collector compaction
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   790
  * CVE-2023-29536 (bmo#1821959)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   791
    Invalid free from JavaScript code
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   792
  * CVE-2023-29537 (bmo#1823365, bmo#1824200, bmo#1825569)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   793
    Data Races in font initialization code
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   794
  * CVE-2023-29538 (bmo#1685403)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   795
    Directory information could have been leaked to WebExtensions
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   796
  * CVE-2023-29539 (bmo#1784348)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   797
    Content-Disposition filename truncation leads to Reflected
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   798
    File Download
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   799
  * CVE-2023-29540 (bmo#1790542)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   800
    Iframe sandbox bypass using redirects and sourceMappingUrls
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   801
  * CVE-2023-29541 (bmo#1810191)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   802
    Files with malicious extensions could have been downloaded
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   803
    unsafely on Linux
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   804
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   805
    Bypass of file download extension restrictions
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   806
  * CVE-2023-29543 (bmo#1816158)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   807
    Use-after-free in debugging APIs
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   808
  * CVE-2023-29544 (bmo#1818781)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   809
    Memory Corruption in garbage collector
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   810
  * CVE-2023-29545 (bmo#1823077)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   811
    Windows Save As dialog resolved environment variables
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   812
  * CVE-2023-29546 (bmo#1780842)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   813
    Screen recording in Private Browsing included address bar on
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   814
    Android
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   815
  * CVE-2023-29547 (bmo#1783536)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   816
    Secure document cookie could be spoofed with insecure cookie
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   817
  * CVE-2023-29548 (bmo#1822754)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   818
    Incorrect optimization result on ARM64
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   819
  * CVE-2023-29549 (bmo#1823042)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   820
    Javascript's bind function may have failed
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   821
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498, bmo#1814217,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   822
    bmo#1818357, bmo#1818762, bmo#1819493, bmo#1820389, bmo#1820602,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   823
    bmo#1821448, bmo#1822413, bmo#1824828)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   824
    Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   825
  * CVE-2023-29551 (bmo#1763625, bmo#1814314, bmo#1815798, bmo#1815890,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   826
    bmo#1819239, bmo#1819465, bmo#1819486, bmo#1819492, bmo#1819957,
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   827
    bmo#1820514, bmo#1820776, bmo#1821838, bmo#1822175, bmo#1823547)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   828
    Memory safety bugs fixed in Firefox 112
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   829
- requires
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   830
  * NSS 3.89
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   831
  * Python >= 3.7 (for build)
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   832
- removed obsolete mozilla-bmo1807652.patch
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   833
- Fix Icons displayed incorrectly on GNOME/wayland via WMCLASS
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   834
  in desktop file
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   835
a2caa2a2494f Firefox 112.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1187
diff changeset
   836
-------------------------------------------------------------------
1187
17bc5a064ab4 excludearch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1186
diff changeset
   837
Mon Mar 27 15:17:17 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
1185
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   838
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   839
- Mozilla Firefox 111.0.1 (boo#1209688)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   840
  * Fixed a crash on macOS while pinch-zooming under some circumstances
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   841
    (bmo#1658986)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   842
  * Fixed a bug causing Firefox to freeze on startup for some
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   843
    Windows users (bmo#1823159)
1186
5185fb499263 fix build in TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1185
diff changeset
   844
- fix build on Tumbleweed (mozilla-bmo1807652.patch)
1187
17bc5a064ab4 excludearch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1186
diff changeset
   845
- exclude i586/i686 once again because it fails to link libxul due
17bc5a064ab4 excludearch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1186
diff changeset
   846
  to its size
1185
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   847
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   848
-------------------------------------------------------------------
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   849
Tue Mar 14 14:29:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   850
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   851
- Mozilla Firefox 111.0
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   852
  * https://www.mozilla.org/en-US/firefox/111.0/releasenotes
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   853
  MFSA 2023-09 (bsc#1209173)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   854
  * CVE-2023-28159 (bmo#1783561)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   855
    Fullscreen Notification could have been hidden by download
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   856
    popups on Android
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   857
  * CVE-2023-25748 (bmo#1798798)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   858
    Fullscreen Notification could have been hidden by window
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   859
    prompts on Android
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   860
  * CVE-2023-25749 (bmo#1810705)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   861
    Firefox for Android may have opened third-party apps without
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   862
    a prompt
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   863
  * CVE-2023-25750 (bmo#1814733)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   864
    Potential ServiceWorker cache leak during private browsing mode
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   865
  * CVE-2023-25751 (bmo#1814899)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   866
    Incorrect code generation during JIT compilation
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   867
  * CVE-2023-28160 (bmo#1802385)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   868
    Redirect to Web Extension files may have leaked local path
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   869
  * CVE-2023-28164 (bmo#1809122)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   870
    URL being dragged from a removed cross-origin iframe into the
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   871
    same tab triggered navigation
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   872
  * CVE-2023-28161 (bmo#1811181)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   873
    One-time permissions granted to a local file were extended to
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   874
    other local files loaded in the same tab
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   875
  * CVE-2023-28162 (bmo#1811327)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   876
    Invalid downcast in Worklets
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   877
  * CVE-2023-25752 (bmo#1811627)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   878
    Potential out-of-bounds when accessing throttled streams
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   879
  * CVE-2023-28163 (bmo#1817768)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   880
    Windows Save As dialog resolved environment variables
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   881
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904, bmo#1817442,
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   882
    bmo#1818674)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   883
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   884
  * CVE-2023-28177 (bmo#1803109, bmo#1808832, bmo#1809542, bmo#1817336)
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   885
    Memory safety bugs fixed in Firefox 111
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   886
- ensure gcc11-c++ gets used on Leap 15.5
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   887
- requires NSS >= 3.88.1
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   888
- removed obsolete patches
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   889
  gcc13-fix.patch
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   890
  mozilla-bmo1810584.patch
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   891
- rebased patches
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   892
- update create-tar.sh
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   893
da29365b0b2c Firefox 111.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1184
diff changeset
   894
-------------------------------------------------------------------
1184
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   895
Tue Mar  7 09:40:11 UTC 2023 - Martin Liška <mliska@suse.cz>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   896
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   897
- Cherry-pick upstream changes for GCC 13 in gcc13-fix.patch.
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   898
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   899
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   900
Mon Mar  6 20:09:41 UTC 2023 - Andreas Schwab <schwab@suse.de>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   901
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   902
- Limit memory use on riscv64
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   903
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   904
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   905
Sat Mar  4 16:03:22 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   906
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   907
- Fix 32 bit build bmo#1810584 (add mozilla-bmo1810584.patch)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   908
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   909
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   910
Fri Mar  3 17:29:27 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   911
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   912
- Mozilla Firefox 110.0.1 (boo#1208886)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   913
  * Fixed clearing recent cookies clears all cookies
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   914
    (bmo#1816279)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   915
  * Fixed WebGL crashes on Linux when ran inside a VMWare virtual
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   916
    machine (bmo#1807942)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   917
  * Fixed a bug with CSP serialization causing bugs with the MitID
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   918
    Digital ID in Denmark (bmo#1819096)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   919
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   920
-------------------------------------------------------------------
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   921
Wed Feb 15 09:56:46 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   922
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   923
- Mozilla Firefox 110.0
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   924
  * https://www.mozilla.org/en-US/firefox/110.0/releasenotes
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   925
  MFSA 2023-05 (bsc#1208144)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   926
  * CVE-2023-25728 (bmo#1790345)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   927
    Content security policy leak in violation reports using iframes
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   928
  * CVE-2023-25730 (bmo#1794622)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   929
    Screen hijack via browser fullscreen mode
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   930
  * CVE-2023-25743 (bmo#1800203)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   931
    Fullscreen notification not shown in Firefox Focus
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   932
  * CVE-2023-0767 (bmo#1804640)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   933
    Arbitrary memory write via PKCS 12 in NSS
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   934
  * CVE-2023-25735 (bmo#1810711)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   935
    Potential use-after-free from compartment mismatch in SpiderMonkey
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   936
  * CVE-2023-25737 (bmo#1811464)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   937
    Invalid downcast in SVGUtils::SetupStrokeGeometry
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   938
  * CVE-2023-25738 (bmo#1811852)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   939
    Printing on Windows could potentially crash Firefox with some
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   940
    device drivers
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   941
  * CVE-2023-25739 (bmo#1811939)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   942
    Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   943
  * CVE-2023-25729 (bmo#1792138)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   944
    Extensions could have opened external schemes without user knowledge
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   945
  * CVE-2023-25732 (bmo#1804564)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   946
    Out of bounds memory write from EncodeInputStream
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   947
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143, bmo#1812338)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   948
    Opening local .url files could cause unexpected network loads
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   949
  * CVE-2023-25740 (bmo#1812354)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   950
    Opening local .scf files could cause unexpected network loads
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   951
  * CVE-2023-25731 (bmo#1801542)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   952
    Prototype pollution when rendering URLPreview
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   953
  * CVE-2023-25733 (bmo#1808632)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   954
    Possible null pointer dereference in TaskbarPreviewCallback
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   955
  * CVE-2023-25736 (bmo#1811331)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   956
    Invalid downcast in GetTableSelectionMode
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   957
  * CVE-2023-25741 (bmo#1437126, bmo#1812611, bmo#1813376)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   958
    Same-origin policy leak via image drag and drop
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   959
  * CVE-2023-25742 (bmo#1813424)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   960
    Web Crypto ImportKey crashes tab
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   961
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   962
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   963
  * CVE-2023-25745 (bmo#1688592, bmo#1797186, bmo#1804998,
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   964
    bmo#1806521, bmo#1813284)
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   965
    Memory safety bugs fixed in Firefox 110
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   966
- requires
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   967
  NSS = 3.87
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   968
  rust/cargo = 1.66
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   969
- update create-tar.sh
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   970
1c3d3217d679 110.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1183
diff changeset
   971
-------------------------------------------------------------------
1183
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   972
Wed Feb  1 19:48:47 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   973
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   974
- Mozilla Firefox 109.0.1
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   975
  * Fixed jank when loading pages containing a large number of
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   976
    emoji characters (bmo#1809081)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   977
  * Fixed an issue causing authentication prompts to not appear
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   978
    when loading pages in some enterprise environments
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   979
    (bmo#1809151)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   980
  * ixed inconsistent sizing of event listener checkboxes inside
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   981
    the Inspector developer tool (bmo#1811760)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   982
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   983
-------------------------------------------------------------------
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   984
Mon Jan 16 06:54:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   985
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   986
- Mozilla Firefox 109.0
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   987
  MFSA 2023-01 (bsc#1207119)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   988
  * CVE-2023-23597 (bmo#1538028)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   989
    Logic bug in process allocation allowed to read arbitrary
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   990
    files
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   991
  * CVE-2023-23598 (bmo#1800425)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   992
    Arbitrary file read from GTK drag and drop on Linux
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   993
  * CVE-2023-23599 (bmo#1777800)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   994
    Malicious command could be hidden in devtools output on
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   995
    Windows
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   996
  * CVE-2023-23600 (bmo#1787034)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   997
    Notification permissions persisted between Normal and Private
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   998
    Browsing on Android
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
   999
  * CVE-2023-23601 (bmo#1794268)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1000
    URL being dragged from cross-origin iframe into same tab
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1001
    triggers navigation
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1002
  * CVE-2023-23602 (bmo#1800890)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1003
    Content Security Policy wasn't being correctly applied to
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1004
    WebSockets in WebWorkers
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1005
  * CVE-2023-23603 (bmo#1800832)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1006
    Calls to <code>console.log</code> allowed bypasing Content
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1007
    Security Policy via format directive
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1008
  * CVE-2023-23604 (bmo#1802346)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1009
    Creation of duplicate <code>SystemPrincipal</code> from less
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1010
    secure contexts
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1011
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1012
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1013
  * CVE-2023-23606 (bmo#1764974, bmo#1798591, bmo#1799201,
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1014
    bmo#1800446, bmo#1801248, bmo#1802100, bmo#1803393,
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1015
    bmo#1804626, bmo#1804971, bmo#1807004)
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1016
    Memory safety bugs fixed in Firefox 109
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1017
- requires NSS 3.86
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1018
- rebased patches
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1019
e69790650e3c Firefox 109.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1182
diff changeset
  1020
-------------------------------------------------------------------
1182
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1021
Fri Jan  6 06:57:25 UTC 2023 - Luciano Santos <luc14n0@opensuse.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1022
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1023
- Mozilla Firefox 108.0.2
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1024
  * Fixes a crash that might occur when managing browser history
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1025
    (bmo#1806408).
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1026
- Drop merged-upstream mozilla-bmo1805809.patch.
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1027
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1028
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1029
Wed Dec 21 16:05:26 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1030
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1031
- add mozilla-bmo1805809.patch to fix build for x86-32 (boo#1206600)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1032
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1033
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1034
Tue Dec 20 07:58:58 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1035
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1036
- Mozilla Firefox 108.0.1 (boo#1206507)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1037
  * Fixes the default search engine being reset on upgrade for
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1038
    profiles which were previously copied from a different location
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1039
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1040
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1041
Tue Dec 13 13:54:35 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1042
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1043
- Mozilla Firefox 108.0
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1044
  https://www.mozilla.org/en-US/firefox/108.0/releasenotes/
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1045
  MFSA 2022-51 (bsc#1206242)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1046
  * CVE-2022-46871 (bmo#1795697)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1047
    libusrsctp library out of date
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1048
  * CVE-2022-46872 (bmo#1799156)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1049
    Arbitrary file read from a compromised content process
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1050
  * CVE-2022-46873 (bmo#1644790)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1051
    Firefox did not implement the CSP directive unsafe-hashes
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1052
  * CVE-2022-46874 (bmo#1746139)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1053
    Drag and Dropped Filenames could have been truncated to
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1054
    malicious extensions
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1055
  * CVE-2022-46875 (bmo#1786188)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1056
    Download Protections were bypassed by .atloc and .ftploc
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1057
    files on Mac OS
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1058
  * CVE-2022-46877 (bmo#1795139)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1059
    Fullscreen notification bypass
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1060
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1061
    bmo#1801102, bmo#1801315, bmo#1802395)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1062
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1063
  * CVE-2022-46879 (bmo#1736224, bmo#1793407, bmo#1794249, bmo#1795845,
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1064
    bmo#1797682, bmo#1797720, bmo#1798494, bmo#1799479)
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1065
    Memory safety bugs fixed in Firefox 108
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1066
- requires
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1067
  NSS >= 3.85
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1068
  rustc/cargo 1.65
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1069
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1070
-------------------------------------------------------------------
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1071
Thu Dec  8 08:42:14 UTC 2022 - Milachew <milachew@mail.lv>
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1072
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1073
- added translations to .desktop file.
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1074
cb6f01567cf8 108.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1181
diff changeset
  1075
-------------------------------------------------------------------
1181
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1076
Thu Dec  1 21:13:32 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1077
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1078
- Mozilla Firefox 107.0.1:
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1079
  * Fix an issue with accessing some sites reliably in Private
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1080
    Browsing mode or Strict ETP due to anti-adblockers
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1081
    (bmo#1717806)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1082
  * Fix an issue where Color Management was not available for
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1083
    some users (bmo#1799391)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1084
  * Fix an issue with text overlapping in the Settings Menu for
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1085
    some locales (bmo#1800379)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1086
  * Fix an issue where the DevTools UI is not accessible when an
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1087
    alert dialog is displayed (bmo#1801840)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1088
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1089
-------------------------------------------------------------------
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1090
Tue Nov 15 14:22:26 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1091
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1092
- Mozilla Firefox 107.0
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1093
  MFSA 2022-47 (bsc#1205270)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1094
 * CVE-2022-45403 (bmo#1762078)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1095
    Service Workers might have learned size of cross-origin media files
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1096
  * CVE-2022-45404 (bmo#1790815)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1097
    Fullscreen notification bypass
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1098
  * CVE-2022-45405 (bmo#1791314)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1099
    Use-after-free in InputStream implementation
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1100
  * CVE-2022-45406 (bmo#1791975)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1101
    Use-after-free of a JavaScript Realm
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1102
  * CVE-2022-45407 (bmo#1793314)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1103
    Loading fonts on workers was not thread-safe
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1104
  * CVE-2022-45408 (bmo#1793829)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1105
    Fullscreen notification bypass via windowName
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1106
  * CVE-2022-45409 (bmo#1796901)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1107
    Use-after-free in Garbage Collection
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1108
  * CVE-2022-45410 (bmo#1658869)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1109
    ServiceWorker-intercepted requests bypassed SameSite cookie policy
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1110
  * CVE-2022-45411 (bmo#1790311)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1111
    Cross-Site Tracing was possible via non-standard override headers
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1112
  * CVE-2022-45412 (bmo#1791029)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1113
    Symlinks may resolve to partially uninitialized buffers
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1114
  * CVE-2022-45413 (bmo#1791201)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1115
    SameSite=Strict cookies could have been sent cross-site via
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1116
    intent URLs
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1117
  * CVE-2022-40674 (bmo#1791598)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1118
    Use-after-free vulnerability in expat
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1119
  * CVE-2022-45415 (bmo#1793551)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1120
    Downloaded file may have been saved with malicious extension
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1121
  * CVE-2022-45416 (bmo#1793676)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1122
    Keystroke Side-Channel Leakage
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1123
  * CVE-2022-45417 (bmo#1794508)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1124
    Service Workers in Private Browsing Mode may have been
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1125
    written to disk
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1126
  * CVE-2022-45418 (bmo#1795815)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1127
    Custom mouse cursor could have been drawn over browser UI
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1128
  * CVE-2022-45419 (bmo#1716082)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1129
    Deleting a security exception did not take effect immediately
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1130
  * CVE-2022-45420 (bmo#1792643)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1131
    Iframe contents could be rendered outside the iframe
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1132
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1133
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1134
- requires
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1135
  * NSS >= 3.84
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1136
  * rust = 1.64
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1137
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1138
-------------------------------------------------------------------
1180
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1139
Sat Nov  5 13:16:42 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1140
1181
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1141
- Mozilla Firefox 106.0.5
1180
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1142
  * Addresses a crash experienced by users with Intel Gemini Lake
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1143
    CPUs (bmo#1702019)
1181
ba646dddffef 107.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1180
diff changeset
  1144
- Mozilla Firefox 106.0.4
1180
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1145
  * Fixed an issue with DRM Video playback (bmo#1797292)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1146
  * Fixed broken layout of datetime input when switching
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1147
    types (bmo#1797139)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1148
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1149
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1150
Tue Nov  1 19:26:39 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1151
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1152
- Mozilla Firefox 106.0.3
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1153
  * Fixes for other platforms
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1154
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1155
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1156
Thu Oct 27 18:07:29 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1157
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1158
- Mozilla Firefox 106.0.2
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1159
  * Fix missing content on some PDF forms (bmo#1794351)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1160
  * Fix column width for the Notification sub-panel in Settings
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1161
    (bmo#1793558)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1162
  * Fix a browser freeze with accessibility enabled on some sites
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1163
    such as the Proxmox Web UI (bmo#1793748)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1164
  * Fix page reloading not working with Firefox View and not
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1165
    refreshing synced data (bmo#1792680, bmo#1794474)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1166
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1167
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1168
Sun Oct 23 07:34:50 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1169
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1170
- Mozilla Firefox 106.0.1
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1171
  * Addresses a crash experienced by users with AMD Zen 1 CPUs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1172
    (bmo#1796126)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1173
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1174
-------------------------------------------------------------------
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1175
Sun Oct 16 20:08:21 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1176
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1177
- Mozilla Firefox 106.0
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1178
  * support editing of PDFs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1179
  * introduced Firefox View
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1180
  * major WebRTC update
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1181
    - Better screen sharing for Windows and Linux Wayland users
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1182
    - RTP performance and reliability improvements
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1183
    - Richer statistics
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1184
    - Cross-browser and service compatibility improvements
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1185
  * detailed releasenotes
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1186
    https://www.mozilla.org/en-US/firefox/106.0/releasenotes
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1187
  MFSA 2022-44 (bsc#1204421)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1188
  * CVE-2022-42927 (bmo#1789128)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1189
    Same-origin policy violation could have leaked cross-origin URLs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1190
  * CVE-2022-42928 (bmo#1791520)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1191
    Memory Corruption in JS Engine
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1192
  * CVE-2022-42929 (bmo#1789439)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1193
    Denial of Service via window.print
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1194
  * CVE-2022-42930 (bmo#1789503)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1195
    Race condition in DOM Workers
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1196
  * CVE-2022-42931 (bmo#1780571)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1197
    Username saved to a plaintext file on disk
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1198
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1199
    Memory safety bugs fixed in Firefox
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1200
- added -msse2 flag to fix i386 build and workaround bmo#1795993
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1201
- fixed used buildflags
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1202
- renamed mozilla-i686-build.patch to mozilla-buildfixes.patch
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1203
  as it was extended with changes for other archs
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1204
d76083122710 Firefox 106.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1179
diff changeset
  1205
-------------------------------------------------------------------
1179
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1206
Sat Oct  8 13:41:12 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1207
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1208
- Mozilla Firefox 105.0.3:
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1209
  * Fixes for other platforms
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1210
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1211
-------------------------------------------------------------------
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1212
Wed Oct  5 18:27:01 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1213
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1214
- Mozilla Firefox 105.0.2:
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1215
  * Fixed poor contrast on various menu items with certain
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1216
    themes on Linux systems (bmo#1792063)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1217
  * Fixed the scrollbar appearing on the wrong side of
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1218
    `select` elements in right-to-left locales (bmo#1791219)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1219
  * Fixed a possible deadlock when loading some sites in
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1220
    Troubleshoot Mode (bmo#1786259)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1221
  * Fixed a bug causing some dynamic appearance changes to
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1222
    not appear when expected (bmo#1786521)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1223
  * Fixed a bug causing theme styling to not be properly applied
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1224
    to sidebars for some add-ons in Private Browsing Mode
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1225
    (bmo#1787543)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1226
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1227
-------------------------------------------------------------------
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1228
Thu Sep 22 22:12:39 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1229
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1230
- Mozilla Firefox 105.0.1
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1231
  * Reverted focus behavior for new windows back to the content
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1232
    area instead of the address bar (bmo#1784692)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1233
- added mozilla-i686-build.patch to avoid using avx2
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1234
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1235
-------------------------------------------------------------------
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1236
Sat Sep 17 21:01:10 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1237
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1238
- Mozilla Firefox 105.0
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1239
  https://www.mozilla.org/en-US/firefox/105.0/releasenotes
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1240
  MFSA 2022-40 (bsc#1203477)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1241
  * CVE-2022-40959 (bmo#1782211)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1242
    Bypassing FeaturePolicy restrictions on transient pages
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1243
  * CVE-2022-40960 (bmo#1787633)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1244
    Data-race when parsing non-UTF-8 URLs in threads
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1245
  * CVE-2022-40958 (bmo#1779993)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1246
    Bypassing Secure Context restriction for cookies with __Host
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1247
    and __Secure prefix
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1248
  * CVE-2022-40961 (bmo#1784588)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1249
    Stack-buffer overflow when initializing Graphics
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1250
  * CVE-2022-40956 (bmo#1770094)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1251
    Content-Security-Policy base-uri bypass
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1252
  * CVE-2022-40957 (bmo#1777604)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1253
    Incoherent instruction cache when building WASM on ARM64
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1254
  * CVE-2022-40962 (bmo#1767360, bmo#1776655, bmo#1777574,
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1255
    bmo#1784835, bmo#1785109, bmo#1786502, bmo#1789440)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1256
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1257
- requires
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1258
  NSS 3.82
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1259
  Rust 1.63 (1.61)
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1260
- removed obsolete mozilla-glibc236.patch
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1261
c19c9e7820ef Firefox 105.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1178
diff changeset
  1262
-------------------------------------------------------------------
1178
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1263
Fri Sep  9 05:59:03 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1264
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1265
- Adjust memory requirements to fix build on aarch64
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1266
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1267
-------------------------------------------------------------------
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1268
Wed Sep  7 06:50:24 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1269
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1270
- Mozilla Firefox 104.0.2 (boo#1203177)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1271
  https://www.mozilla.org/en-US/firefox/104.0.2/releasenotes/
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1272
  * Fixed a bug making it impossible to use touch or a stylus to
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1273
    drag the scrollbar on pages (bmo#1787361)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1274
  * Fixed an issue causing some users to crash in out-of-memory
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1275
    conditions (bmo#1774155)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1276
  * Fixed an issue that would sometimes affect video & audio playback
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1277
    when loaded via a cross-origin iframe src attribute (bmo#1781759)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1278
  * Fixed an issue that would sometimes affect video & audio playback
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1279
    when served with Content-Security-Policy: sandbox (bmo#1781063)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1280
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1281
-------------------------------------------------------------------
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1282
Thu Sep  1 07:04:11 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1283
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1284
- Mozilla Firefox 104.0.1
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1285
  * Addresses an issue with Youtube video playback that was
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1286
    affecting some users (boo#1203003)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1287
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1288
-------------------------------------------------------------------
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1289
Sun Aug 21 11:12:14 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1290
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1291
- Mozilla Firefox 104.0
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1292
  * https://www.mozilla.org/en-US/firefox/104.0/releasenotes
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1293
  MFSA 2022-33 (bsc#1202645)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1294
  * CVE-2022-38472 (bmo#1769155)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1295
    Address bar spoofing via XSLT error handling
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1296
  * CVE-2022-38473 (bmo#1771685)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1297
    Cross-origin XSLT Documents would have inherited the parent's
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1298
    permissions
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1299
  * CVE-2022-38474 (bmo#1719511)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1300
    Recording notification not shown when microphone was
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1301
    recording on Android
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1302
  * CVE-2022-38475 (bmo#1773266)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1303
    Attacker could write a value to a zero-length array
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1304
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159, bmo#1773363)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1305
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1306
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1307
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1308
    and Firefox ESR 91.13
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1309
- requires
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1310
  NSPR 4.34.1
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1311
  NSS 3.81
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1312
  rust 1.62
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1313
e27c6e9c5c63 104.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1177
diff changeset
  1314
-------------------------------------------------------------------
1177
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1315
Sat Aug 13 06:25:20 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1316
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1317
- added mozilla-glibc236.patch (bmo#1782988, boo#1202323)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1318
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1319
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1320
Tue Aug  9 08:46:29 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1321
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1322
- Mozilla Firefox 103.0.2
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1323
  * Fixed menu shortcuts for users of the JAWS screen reader
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1324
  * Fixed an occasional non-overridable certificate error when
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1325
    accessing device configuration pages
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1326
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1327
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1328
Tue Aug  2 08:05:28 UTC 2022 - Andreas Schwab <schwab@suse.de>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1329
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1330
- The --disable-elf-hack option only exists on ARM and X86
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1331
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1332
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1333
Mon Aug  1 10:45:16 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1334
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1335
- Mozilla Firefox 103.0.1
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1336
  * Enabled hardware acceleration on newer AMD cards.
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1337
  * Fixed a crash on Firefox shutdown caused by a bug in the
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1338
    audio manager
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1339
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1340
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1341
Wed Jul 27 07:13:07 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1342
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1343
- Mozilla Firefox 103.0
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1344
  https://www.mozilla.org/en-US/firefox/103.0/releasenotes
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1345
  MFSA 2022-28 (bsc#1201758)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1346
  * CVE-2022-36319 (bmo#1737722)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1347
    Mouse Position spoofing with CSS transforms
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1348
  * CVE-2022-36317 (bmo#1759951)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1349
    Long URL would hang Firefox for Android
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1350
  * CVE-2022-36318 (bmo#1771774)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1351
    Directory indexes for bundled resources reflected URL
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1352
    parameters
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1353
  * CVE-2022-36314 (bmo#1773894)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1354
    Opening local <code>.lnk</code> files could cause unexpected
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1355
    network loads
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1356
  * CVE-2022-36315 (bmo#1762520)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1357
    Preload Cache Bypasses Subresource Integrity
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1358
  * CVE-2022-36316 (bmo#1768583)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1359
    Performance API leaked whether a cross-site resource is
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1360
    redirecting
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1361
  * CVE-2022-36320 (bmo#1759794, bmo#1760998)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1362
    Memory safety bugs fixed in Firefox 103
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1363
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1364
    Memory safety bugs fixed in Firefox 103 and 102.1
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1365
- requires
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1366
  NSS >= 3.80
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1367
  rust = 1.61
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1368
  rust-cbindgen >= 0.24.3
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1369
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1370
-------------------------------------------------------------------
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1371
Wed Jul 13 07:54:21 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1372
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1373
- Move %limit_build set before mozilla config to actually set the
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1374
  value of %jobs to MOZ_MAKE_FLAGS to fix build on aarch64
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1375
4bb6d80fcc64 Firefox 103.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1175
diff changeset
  1376
-------------------------------------------------------------------
1175
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1377
Wed Jul  6 18:35:47 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1378
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1379
- Firefox 102.0.1:
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1380
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1381
    dark mode (bmo#1776157)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1382
  * Fixed: Fixed multilingual spell checking not working with
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1383
    content in both English and a non-Latin alphabet
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1384
    (bmo#1773802)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1385
  * Fixed: Developer tools:  Fixed an issue where the console
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1386
    output keep getting scrolled to the bottom when the last
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1387
    visible message is an evaluation result (bmo#1776262)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1388
  * Fixed: Fixed *Delete cookies and site data when Firefox is
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1389
    closed* checkbox getting disabled on startup (bmo#1777419)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1390
  * Fixed: Various stability fixes
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1391
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1392
-------------------------------------------------------------------
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1393
Sat Jun 25 12:51:46 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1394
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1395
- Firefox 102.0
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1396
  * You can now disable automatic opening of the download panel
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1397
    every time a new download starts
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1398
  * Firefox now mitigates query parameter tracking when navigating
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1399
    sites in ETP strict mode
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1400
  * Improved security by moving audio decoding into a separate
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1401
    process with stricter sandboxing, thus improving process isolation
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1402
  * https://www.mozilla.org/en-US/firefox/102.0/releasenotes
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1403
  MFSA 2022-24 (bsc#1200793)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1404
  * CVE-2022-34479 (bmo#1745595)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1405
    A popup window could be resized in a way to overlay the
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1406
    address bar with web content
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1407
  * CVE-2022-34470 (bmo#1765951)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1408
    Use-after-free in nsSHistory
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1409
  * CVE-2022-34468 (bmo#1768537)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1410
    CSP sandbox header without `allow-scripts` can be bypassed
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1411
    via retargeted javascript: URI
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1412
  * CVE-2022-34482 (bmo#845880)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1413
    Drag and drop of malicious image could have led to malicious
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1414
    executable and potential code execution
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1415
  * CVE-2022-34483 (bmo#1335845)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1416
    Drag and drop of malicious image could have led to malicious
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1417
    executable and potential code execution
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1418
  * CVE-2022-34476 (bmo#1387919)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1419
    ASN.1 parser could have been tricked into accepting malformed ASN.1
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1420
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1421
    Potential integer overflow in ReplaceElementsAt
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1422
  * CVE-2022-34474 (bmo#1677138)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1423
    Sandboxed iframes could redirect to external schemes
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1424
  * CVE-2022-34469 (bmo#1721220)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1425
    TLS certificate errors on HSTS-protected domains could be
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1426
    bypassed by the user on Firefox for Android
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1427
  * CVE-2022-34471 (bmo#1766047)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1428
    Compromised server could trick a browser into an addon downgrade
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1429
  * CVE-2022-34472 (bmo#1770123)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1430
    Unavailable PAC file resulted in OCSP requests being blocked
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1431
  * CVE-2022-34478 (bmo#1773717)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1432
    Microsoft protocols can be attacked if a user accepts a prompt
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1433
  * CVE-2022-2200 (bmo#1771381)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1434
    Undesired attributes could be set as part of prototype pollution
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1435
  * CVE-2022-34480 (bmo#1454072)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1436
    Free of uninitialized pointer in lg_init
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1437
  * CVE-2022-34477 (bmo#1731614)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1438
    MediaError message property leaked information on cross-
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1439
    origin same-site pages
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1440
  * CVE-2022-34475 (bmo#1757210)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1441
    HTML Sanitizer could have been bypassed via same-origin
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1442
    script via use tags
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1443
  * CVE-2022-34473 (bmo#1770888)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1444
    HTML Sanitizer could have been bypassed via use tags
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1445
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1446
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1447
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1448
    Memory safety bugs fixed in Firefox 102
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1449
- requires
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1450
  NSPR >= 4.34
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1451
  NSS >= 3.79
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1452
  rust = 1.60
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1453
- switch out skia-patches with webrender-patches for big endian
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1454
  removed:
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1455
  * mozilla-bmo1504834-part2.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1456
  * mozilla-bmo1504834-part4.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1457
  * mozilla-bmo1626236.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1458
  added:
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1459
  * one_swizzle_to_rule_them_all.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1460
  * svg-rendering.patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1461
- add some more returns to the no-return-patch
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1462
4c6576f9cf04 Firefox 102.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1174
diff changeset
  1463
-------------------------------------------------------------------
1174
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1464
Fri Jun 10 20:45:37 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1465
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1466
- Mozilla Firefox 101.0.1:
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1467
  * Fixed context menus not appearing when right-clicking
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1468
    Picture-in-Picture windows on some Linux systems (bmo#1771914)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1469
  * Various stability fixes
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1470
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1471
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1472
Sun May 29 08:02:45 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1473
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1474
- Mozilla Firefox 101.0
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1475
  * Reading is now easier with the prefers-contrast media query,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1476
    which allows sites to detect if the user has requested that web
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1477
    content is presented with a higher (or lower) contrast
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1478
  * All non-configured MIME types can now be assigned a custom
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1479
    action upon download completion
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1480
  * allows users to use as many microphones as you want, at the
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1481
    same time, during video conferencing. The most exciting benefit
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1482
    is that you can easily switch your microphones at any time
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1483
    (if your conferencing service provider enables this flexibility)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1484
  MFSA 2022-20 (bsc#1200027)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1485
  * CVE-2022-31736 (bmo#1735923)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1486
    Cross-Origin resource's length leaked
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1487
  * CVE-2022-31737 (bmo#1743767)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1488
    Heap buffer overflow in WebGL
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1489
  * CVE-2022-31738 (bmo#1756388)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1490
    Browser window spoof using fullscreen mode
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1491
  * CVE-2022-31739 (bmo#1765049)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1492
    Attacker-influenced path traversal when saving downloaded files
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1493
  * CVE-2022-31740 (bmo#1766806)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1494
    Register allocation problem in WASM on arm64
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1495
  * CVE-2022-31741 (bmo#1767590)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1496
    Uninitialized variable leads to invalid memory read
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1497
  * CVE-2022-31742 (bmo#1730434)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1498
    Querying a WebAuthn token with a large number of allowCredential
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1499
    entries may have leaked cross-origin information
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1500
  * CVE-2022-31743 (bmo#1747388)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1501
    HTML Parsing incorrectly ended HTML comments prematurely
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1502
  * CVE-2022-31744 (bmo#1757604)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1503
    CSP bypass enabling stylesheet injection
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1504
  * CVE-2022-31745 (bmo#1760944)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1505
    Incorrect Assertion caused by unoptimized array shift operations
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1506
  * CVE-2022-1919 (bmo#1761275)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1507
    Memory Corruption when manipulating webp images
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1508
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1509
    bmo#1767365, bmo#1768559, bmo#1768734)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1510
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1511
  * CVE-2022-31748 (bmo#1713773, bmo#1762201, bmo#1762469,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1512
    bmo#1762770, bmo#1764878, bmo#1765226, bmo#1765782, bmo#1765973,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1513
    bmo#1767177, bmo#1767181, bmo#1768232, bmo#1768251, bmo#1769869)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1514
    Memory safety bugs fixed in Firefox 101
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1515
- requires
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1516
  * NSS 3.78.1
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1517
  * rust-cbindgen 0.23.0
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1518
  * rust 1.59
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1519
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1520
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1521
Fri May 20 15:03:50 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1522
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1523
- Mozilla Firefox 100.0.2
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1524
  MFSA 2022-19 (bsc#1199768)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1525
  * CVE-2022-1802 (bmo#1770137)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1526
    Prototype pollution in Top-Level Await implementation
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1527
  * CVE-2022-1529 (bmo#1770048)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1528
    Untrusted input used in JavaScript object indexing, leading
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1529
    to prototype pollution
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1530
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1531
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1532
Wed May 18 20:27:49 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1533
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1534
- Mozilla Firefox 100.0.1:
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1535
  * Fixed: Fixed an issue with subtitles in Picture-in-Picture
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1536
    mode while using Netflix (bmo#1768818)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1537
  * Fixed: Fixed an issue where some commands were unavailable in
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1538
    the Picture-in-Picture window (bmo#1768201)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1539
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1540
-------------------------------------------------------------------
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1541
Sun May  1 21:31:01 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1542
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1543
- Mozilla Firefox 100.0
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1544
  * subtitle support in PiP
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1545
  * spell checking supports multiple languages in parallel
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1546
  * more details here
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1547
    https://www.mozilla.org/en-US/firefox/100.0/releasenotes
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1548
  MFSA 2022-16 (boo#1198970)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1549
  * CVE-2022-29914 (bmo#1746448)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1550
    Fullscreen notification bypass using popups
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1551
  * CVE-2022-29909 (bmo#1755081)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1552
    Bypassing permission prompt in nested browsing contexts
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1553
  * CVE-2022-29916 (bmo#1760674)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1554
    Leaking browser history with CSS variables
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1555
  * CVE-2022-29911 (bmo#1761981)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1556
    iframe Sandbox bypass
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1557
  * CVE-2022-29912 (bmo#1692655)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1558
    Reader mode bypassed SameSite cookies
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1559
  * CVE-2022-29910 (bmo#1757138)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1560
    Firefox for Android forgot HTTP Strict Transport Security
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1561
    settings
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1562
  * CVE-2022-29915 (bmo#1751678)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1563
    Leaking cross-origin redirect through the Performance API
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1564
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1565
    bmo#1762614, bmo#1762620, bmo#1764778)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1566
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1567
  * CVE-2022-29918 (bmo#1744043, bmo#1747178, bmo#1753535,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1568
    bmo#1754017, bmo#1755847, bmo#1756172, bmo#1757477,
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1569
    bmo#1758223, bmo#1760160, bmo#1761481, bmo#1761771)
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1570
    Memory safety bugs fixed in Firefox 100
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1571
- requires NSS 3.77
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1572
90e3d0cf8567 Firefox 101.x release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1173
diff changeset
  1573
-------------------------------------------------------------------
1173
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1574
Tue Apr 12 19:30:30 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1575
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1576
- Mozilla Firefox 99.0.1
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1577
  * Fixed an issue with text rendering in Bengali (bmo#1763368)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1578
  * Fixed a selection issue in the Download panel with drag and
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1579
    drop (bmo#1762723)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1580
  * Fixed: Fixed an issue preventing Zoom gallery mode for users
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1581
    who go to zoom.us URLs instead of subdomain.zoom.us URLs
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1582
    (bmo#1763801)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1583
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1584
-------------------------------------------------------------------
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1585
Mon Apr  4 07:34:36 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1586
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1587
- Mozilla Firefox 99.0
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1588
  * You can now toggle Narrate in ReaderMode with the keyboard
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1589
    shortcut "n."
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1590
  * You can find added support for search—with or without
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1591
    diacritics—in the PDF viewer.
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1592
  * The Linux sandbox has been strengthened: processes exposed to web
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1593
    content no longer have access to the X Window system (X11).
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1594
  * Firefox now supports credit card autofill and capture in
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1595
    Germany and France.
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1596
  MFSA 2022-13 (bsc#1197903)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1597
  * CVE-2022-1097 (bmo#1745667)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1598
    Use-after-free in NSSToken objects
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1599
  * CVE-2022-28281 (bmo#1755621)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1600
    Out of bounds write due to unexpected WebAuthN Extensions
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1601
  * CVE-2022-28282 (bmo#1751609)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1602
    Use-after-free in DocumentL10n::TranslateDocument
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1603
  * CVE-2022-28283 (bmo#1754066)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1604
    Missing security checks for fetching sourceMapURL
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1605
  * CVE-2022-28284 (bmo#1754522)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1606
    Script could be executed via svg's use element
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1607
  * CVE-2022-28285 (bmo#1756957)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1608
    Incorrect AliasSet used in JIT Codegen
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1609
  * CVE-2022-28286 (bmo#1735265)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1610
    iframe contents could be rendered outside the border
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1611
  * CVE-2022-28287 (bmo#1741515)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1612
    Text Selection could crash Firefox
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1613
  * CVE-2022-24713 (bmo#1758509)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1614
    Denial of Service via complex regular expressions
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1615
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1616
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1617
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1618
  * CVE-2022-28288 (bmo#1746415, bmo#1746495, bmo#1746500,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1619
    bmo#1747282, bmo#1748759, bmo#1749056, bmo#1749786,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1620
    bmo#1751679, bmo#1752120, bmo#1756010, bmo#1756017,
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1621
    bmo#1757213, bmo#1757258, bmo#1757427)
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1622
    Memory safety bugs fixed in Firefox 99
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1623
- requires NSS >= 3.76.1
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1624
- remove obsolete patch
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1625
  * mozilla-bmo1756347.patch
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1626
  * mozilla-bmo1757571.patch
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1627
- update create-tar.sh
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1628
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1629
-------------------------------------------------------------------
1172
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1630
Thu Mar 24 21:49:57 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1631
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1632
- MozillaFirefox 98.0.2:
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1633
  * Fixed: Fixed an issue preventing users from typing in Address
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1634
    Bar after opening new tab and pressing cmd + enter
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1635
    (bmo#1757376)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1636
  * Fixed: Fixed an issue causing some users to crash in out-of-
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1637
    memory conditions (bmo#1757618)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1638
  * Fixed: Fixed an issue in session history which caused some
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1639
    sites to fail to load (bmo#1758664)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1640
  * Fixed: Fixed an add-on specific compatibility issue
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1641
    (bmo#1759162)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1642
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1643
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1644
Wed Mar 23 15:14:22 UTC 2022 - Simon Vogl <simon.vogl@gmx.net>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1645
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1646
- Change mozilla-kde.patch to follow the GNOME registry
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1647
  behavior for new MIME types to avoid opening downloaded files
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1648
  without any inquiries (bsc#1197319)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1649
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1650
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1651
Tue Mar 22 12:22:51 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1652
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1653
- Add patch to fix start-up on aarch64:
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1654
  * mozilla-bmo1757571.patch
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1655
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1656
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1657
Thu Mar 17 14:52:39 UTC 2022 - Dirk Müller <dmueller@suse.com>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1658
1173
56ecd2ae6e61 Firefox 99(.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1172
diff changeset
  1659
- exclude slow cpus for building
1172
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1660
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1661
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1662
Thu Mar 17 09:18:01 UTC 2022 - Martin Sirringhaus <martin.sirringhaus@suse.com>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1663
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1664
- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1665
  faster buildhosts, as the others struggle to build FF.
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1666
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1667
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1668
Mon Mar 14 22:48:42 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1669
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1670
- Mozilla Firefox 98.0.1:
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1671
  * Yandex and Mail.ru have been removed as optional search
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1672
    providers in the drop-down search menu in Firefox
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1673
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1674
-------------------------------------------------------------------
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1675
Tue Mar  8 10:27:16 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1676
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1677
- Mozilla Firefox 98.0
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1678
  * Firefox has a new optimized download flow
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1679
  * other changes as documented here
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1680
    https://www.mozilla.org/en-US/firefox/98.0/releasenotes
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1681
  MFSA 2022-10 (bsc#1196900)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1682
  * CVE-2022-26383 (bmo#1742421)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1683
    Browser window spoof using fullscreen mode
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1684
  * CVE-2022-26384 (bmo#1744352)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1685
    iframe allow-scripts sandbox bypass
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1686
  * CVE-2022-26387 (bmo#1752979)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1687
    Time-of-check time-of-use bug when verifying add-on signatures
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1688
  * CVE-2022-26381 (bmo#1736243)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1689
    Use-after-free in text reflows
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1690
  * CVE-2022-26382 (bmo#1741888)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1691
    Autofill Text could be exfiltrated via side-channel attacks
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1692
  * CVE-2022-26385 (bmo#1747526)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1693
    Use-after-free in thread shutdown
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1694
  * CVE-2022-0843 (bmo#1746523, bmo#1749062, bmo#1749164, bmo#1749214,
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1695
    bmo#1749610, bmo#1750032, bmo#1752100, bmo#1752405, bmo#1753612,
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1696
    bmo#1754508)
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1697
    Memory safety bugs fixed in Firefox 98
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1698
- requires NSS 3.75
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1699
- add mozilla-bmo1756347.patch to fix i586 build
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1700
7bdeb580be51 Firefox 98.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1171
diff changeset
  1701
-------------------------------------------------------------------
1171
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1702
Fri Feb 18 20:38:22 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1703
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1704
- Mozilla Firefox 97.0.1
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1705
  * Fixed: Fixed an issue where TikTok videos would fail to load
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1706
    when selected from a user's profile page (bmo#1750973)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1707
  * Fixed: Fixed an issue which led to Picture-in-Picture mode
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1708
    being unable to be toggled on Hulu (bmo#1753401)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1709
  * Fixed: Works around problems with WebRoot SecureAnywhere
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1710
    antivirus rendering Firefox unusable in some situations
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1711
    (bmo#1752466)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1712
  * Fixed: Fixed an issue causing users to see the Restore
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1713
    Session screen unexpectedly when starting Firefox
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1714
    (bmo#1749996)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1715
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1716
-------------------------------------------------------------------
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1717
Mon Feb 14 19:31:29 UTC 2022 - Luciano Santos <luc14n0@opensuse.org>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1718
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1719
- Remove bashisms ("source" and "function" keywords) from
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1720
  mozilla.sh.in to ally with the #!/bin/sh shebang. If the end user
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1721
  has either dash-sh package or busybox-sh to handle Bourn Shell
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1722
  scripts rather than having bash-sh package, the script would
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1723
  fail. Using "." instead of "source" and "create_langpack_link()"
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1724
  function definition is enough to keep both sides sane,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1725
  behavior-wise.
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1726
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1727
-------------------------------------------------------------------
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1728
Tue Feb  8 08:40:45 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1729
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1730
- Mozilla Firefox 97.0
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1731
  MFSA 2022-04 (bsc#1195682)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1732
  * CVE-2022-22753 (bmo#1732435)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1733
    Privilege Escalation to SYSTEM on Windows via Maintenance Service
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1734
  * CVE-2022-22754 (bmo#1750565)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1735
    Extensions could have bypassed permission confirmation during update
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1736
  * CVE-2022-22755 (bmo#1309630)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1737
    XSL could have allowed JavaScript execution after a tab was closed
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1738
  * CVE-2022-22756 (bmo#1317873)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1739
    Drag and dropping an image could have resulted in the dropped
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1740
    object being an executable
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1741
  * CVE-2022-22757 (bmo#1720098)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1742
    Remote Agent did not prevent local websites from connecting
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1743
  * CVE-2022-22758 (bmo#1728742)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1744
    tel: links could have sent USSD codes to the dialer on
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1745
    Firefox for Android
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1746
  * CVE-2022-22759 (bmo#1739957)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1747
    Sandboxed iframes could have executed script if the parent
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1748
    appended elements
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1749
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1750
    Cross-Origin responses could be distinguished between script
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1751
    and non-script content-types
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1752
  * CVE-2022-22761 (bmo#1745566)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1753
    frame-ancestors Content Security Policy directive was not
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1754
    enforced for framed extension pages
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1755
  * CVE-2022-22762 (bmo#1743931)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1756
    JavaScript Dialogs could have been displayed over other
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1757
    domains on Firefox for Android
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1758
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1759
    bmo#1748210, bmo#1748279)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1760
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1761
  * CVE-2022-0511 (bmo#1713579, bmo#1735448, bmo#1743821, bmo#1746313,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1762
    bmo#1746314, bmo#1746316, bmo#1746321, bmo#1746322, bmo#1746323,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1763
    bmo#1746412, bmo#1746430, bmo#1746451, bmo#1746488, bmo#1746875,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1764
    bmo#1746898, bmo#1746905, bmo#1746907, bmo#1746917, bmo#1747128,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1765
    bmo#1747137, bmo#1747331, bmo#1747346, bmo#1747439, bmo#1747457,
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1766
    bmo#1747870, bmo#1749051, bmo#1749274, bmo#1749831)
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1767
    Memory safety bugs fixed in Firefox 97
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1768
- requires NSS 3.74
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1769
- requires rust 1.57
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1770
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1771
-------------------------------------------------------------------
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1772
Mon Feb  7 22:21:29 UTC 2022 - Dirk Müller <dmueller@suse.com>
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1773
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1774
- remove memoryperjob and use %limit instead. this allows to
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1775
  adapt to more worker types, and lowers the time the package
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1776
  is stuck in "scheduling". raising memory above 8 to lower
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1777
  risk for LTO jobs to run OOM
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1778
- add hack to disable -Wl,--gc-section which avoids a binutils
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1779
  segfault on x86
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1780
- change mozilla-reduce-rust-debuginfo.patch: use -g1 everywhere
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1781
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1782
-------------------------------------------------------------------
1170
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1783
Sun Jan 30 23:58:34 UTC 2022 - Dirk Müller <dmueller@suse.com>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1784
1171
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1785
- disable ccache, this adds about 1 minute of build time and
1170
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1786
  over 2 GB of disk space usage without benefit on OBS builds
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1787
- build with rust-simd like upstream does
1171
130d464159be Firefox 97.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1170
diff changeset
  1788
- use -g1 for debuginfo generation as this is what upstream
1170
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1789
  does as well and it saves ~ 2GB of writes
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1790
- use %limit on x86_64 to scale down to less capable workers
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1791
- disable install stripping so that debuginfo is useful
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1792
- use autopatch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1793
- cleanup constraints to specify only jobs, physicalmemory
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1794
  and memoryperjob to be more flexible on which host to build
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1795
  on
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1796
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1797
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1798
Fri Jan 28 15:26:45 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1799
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1800
- Mozilla Firefox 96.0.3 (bsc#1195230)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1801
  * Fixed an issue that allowed unexpected data to be submitted in
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1802
    some of our search telemetry (bmo#1752317)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1803
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1804
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1805
Mon Jan 24 07:42:03 UTC 2022 - Martin Liška <mliska@suse.cz>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1806
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1807
- Enable -fimplicit-constexpr for GCC 12+.
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1808
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1809
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1810
Thu Jan 20 23:21:44 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1811
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1812
- Mozilla Firefox 96.0.2
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1813
  * Fix an issue that caused tab height to display inconsistently
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1814
    on Linux when audio was played (bmo#1714276)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1815
  * Fix an issue that caused Lastpass dropdowns to appear blank in
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1816
    Private Browsing mode (bmo#1748158)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1817
  * Fix a crash encountered when resizing a Facebook app
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1818
    (bmo#1746084)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1819
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1820
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1821
Fri Jan 14 16:56:42 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1822
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1823
- Mozilla Firefox 96.0.1
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1824
  * Fixed: Improvements to make the parsing of content-length
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1825
    headers more robust (bmo#1749957, boo#1194677)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1826
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1827
-------------------------------------------------------------------
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1828
Sat Jan  8 10:32:46 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1829
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1830
- Mozilla Firefox 96.0
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1831
  * https://www.mozilla.org/en-US/firefox/96.0/releasenotes
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1832
  MFSA 2022-01 (bsc#1194547)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1833
  * CVE-2022-22746 (bmo#1735071)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1834
    Calling into reportValidity could have lead to fullscreen
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1835
    window spoof
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1836
  * CVE-2022-22743 (bmo#1739220)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1837
    Browser window spoof using fullscreen mode
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1838
  * CVE-2022-22742 (bmo#1739923)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1839
    Out-of-bounds memory access when inserting text in edit mode
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1840
  * CVE-2022-22741 (bmo#1740389)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1841
    Browser window spoof using fullscreen mode
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1842
  * CVE-2022-22740 (bmo#1742334)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1843
    Use-after-free of ChannelEventQueue::mOwner
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1844
  * CVE-2022-22738 (bmo#1742382)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1845
    Heap-buffer-overflow in blendGaussianBlur
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1846
  * CVE-2022-22737 (bmo#1745874)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1847
    Race condition when playing audio files
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1848
  * CVE-2021-4140 (bmo#1746720)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1849
    Iframe sandbox bypass with XSLT
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1850
  * CVE-2022-22750 (bmo#1566608)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1851
    IPC passing of resource handles could have lead to sandbox
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1852
    bypass
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1853
  * CVE-2022-22749 (bmo#1705094)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1854
    Lack of URL restrictions when scanning QR codes
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1855
  * CVE-2022-22748 (bmo#1705211)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1856
    Spoofed origin on external protocol launch dialog
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1857
  * CVE-2022-22745 (bmo#1735856)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1858
    Leaking cross-origin URLs through securitypolicyviolation
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1859
    event
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1860
  * CVE-2022-22744 (bmo#1737252)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1861
    The 'Copy as curl' feature in DevTools did not fully escape
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1862
    website-controlled data, potentially leading to command
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1863
    injection
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1864
  * CVE-2022-22747 (bmo#1735028)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1865
    Crash when handling empty pkcs7 sequence
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1866
  * CVE-2022-22736 (bmo#1742692)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1867
    Potential local privilege escalation when loading modules
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1868
    from the install directory.
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1869
  * CVE-2022-22739 (bmo#1744158)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1870
    Missing throttling on external protocol launch dialog
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1871
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1872
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1873
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1874
    Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1875
  * CVE-2022-22752 (bmo#1740534, bmo#1741210, bmo#1742770)
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1876
    Memory safety bugs fixed in Firefox 96
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1877
- removed obsolete patches
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1878
  * mozilla-bmo1745560.patch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1879
  * mozilla-bmo1744896.patch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1880
  * mozilla-sandbox-fips.patch
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1881
- requires
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1882
  NSPR >= 4.33
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1883
  NSS  >= 3.73.1
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1884
f9b2d408b7ef Firefox 96.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1169
diff changeset
  1885
-------------------------------------------------------------------
1169
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1886
Tue Dec 28 17:45:28 UTC 2021 - Bjørn Lie <bjorn.lie@gmail.com>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1887
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1888
- Add upstream patches:
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1889
  * mozilla-bmo1745560.patch: Fix build against wayland 1.20.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1890
  * mozilla-bmo1744896.patch: Create WaylandVsyncSource on window
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1891
    creation
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1892
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1893
-------------------------------------------------------------------
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1894
Mon Dec 20 21:57:30 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1895
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1896
- Mozilla Firefox 95.0.2
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1897
  * Addresses frequent crashes experienced by users with C/E/Z-Series
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1898
    "Bobcat" CPUs running on Windows 7, 8, and 8.1.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1899
- updated constraints for ppc and x86-64
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1900
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1901
-------------------------------------------------------------------
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1902
Fri Dec 17 13:49:16 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1903
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1904
- Mozilla Firefox 95.0.1 (bsc#1193845)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1905
  * Fixed frequent
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1906
    MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING error
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1907
    messages when trying to connect to various microsoft.com
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1908
    domains (bmo#1745600)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1909
  * Fix for a WebRender crash on some Linux/X11 systems (bmo#1741956)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1910
  * Fix for a frequent Windows shutdown crash (bmo#1738984)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1911
  * Fix websites contrast issues for some Linux users with
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1912
    Dark mode set at OS level (bmo#1740518)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1913
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1914
-------------------------------------------------------------------
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1915
Sat Dec  4 12:07:21 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1916
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1917
- Mozilla Firefox 95.0
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1918
  * You can now move the Picture-in-Picture toggle button to the
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1919
    opposite side of the video. Simply look for the new context menu
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1920
    option Move Picture-in-Picture Toggle to Left (Right) Side.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1921
  * To better protect Firefox users against side-channel attacks such
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1922
    as Spectre, Site Isolation is now enabled for all Firefox 95 users.
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1923
  * https://www.mozilla.org/en-US/firefox/95.0/releasenotes
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1924
  MFSA 2021-52 (bsc#1193485)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1925
  * CVE-2021-43536 (bmo#1730120)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1926
    URL leakage when navigating while executing asynchronous
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1927
    function
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1928
  * CVE-2021-43537 (bmo#1738237)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1929
    Heap buffer overflow when using structured clone
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1930
  * CVE-2021-43538 (bmo#1739091)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1931
    Missing fullscreen and pointer lock notification when
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1932
    requesting both
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1933
  * CVE-2021-43539 (bmo#1739683)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1934
    GC rooting failure when calling wasm instance methods
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1935
  * MOZ-2021-0010 (bmo#1735852)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1936
    Use-after-free in fullscreen objects on MacOS
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1937
  * CVE-2021-43540 (bmo#1636629)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1938
    WebExtensions could have installed persistent ServiceWorkers
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1939
  * CVE-2021-43541 (bmo#1696685)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1940
    External protocol handler parameters were unescaped
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1941
  * CVE-2021-43542 (bmo#1723281)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1942
    XMLHttpRequest error codes could have leaked the existence of
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1943
    an external protocol handler
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1944
  * CVE-2021-43543 (bmo#1738418)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1945
    Bypass of CSP sandbox directive when embedding
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1946
  * CVE-2021-43544 (bmo#1739934)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1947
    Receiving a malicious URL as text through a SEND intent could
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1948
    have led to XSS
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1949
  * CVE-2021-43545 (bmo#1720926)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1950
    Denial of Service when using the Location API in a loop
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1951
  * CVE-2021-43546 (bmo#1737751)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1952
    Cursor spoofing could overlay user interface when native
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1953
    cursor is zoomed
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1954
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1955
    bmo#1737009, bmo#1739372, bmo#1739421)
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1956
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1957
- requires
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1958
  NSS >= 3.72
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1959
7481543bab31 Firefox 95.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1168
diff changeset
  1960
-------------------------------------------------------------------
1168
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1961
Thu Dec  2 20:32:42 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1962
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1963
- remove x-scheme-handler/ftp from firefox.desktop boo#1193321
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1964
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1965
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1966
Thu Nov 25 20:21:07 UTC 2021 - Bjørn Lie <bjorn.lie@gmail.com>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1967
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1968
- Drop unused libidl-devel BuildRequires.
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1969
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1970
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1971
Tue Nov 23 22:00:38 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1972
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1973
- Mozilla Firefox 94.0.2:
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1974
  * Update preference design for Firefox Suggest for improved clarity
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1975
  * Resolved general instability/crashes on Linux caused by a file
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1976
    descriptor leak when backgrounding tabs using WebGL
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1977
    (bmo#1741997)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1978
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1979
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1980
Fri Nov  5 18:02:48 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1981
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1982
- Mozilla Firefox 94.0.1:
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1983
  * fixes for other platforms
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1984
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1985
-------------------------------------------------------------------
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1986
Sat Oct 30 07:52:22 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1987
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1988
- Mozilla Firefox 94.0
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1989
  * https://www.mozilla.org/en-US/firefox/94.0/releasenotes
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1990
  MFSA 2021-48 (bsc#1192250)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1991
  * CVE-2021-38503 (bmo#1729517)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1992
    iframe sandbox rules did not apply to XSLT stylesheets
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1993
  * CVE-2021-38504 (bmo#1730156)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1994
    Use-after-free in file picker dialog
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1995
  * CVE-2021-38505 (bmo#1730194)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1996
    Windows 10 Cloud Clipboard may have recorded sensitive user data
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1997
  * CVE-2021-38506 (bmo#1730750)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1998
    Firefox could be coaxed into going into fullscreen mode
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  1999
    without notification or warning
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2000
  * CVE-2021-38507 (bmo#1730935)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2001
    Opportunistic Encryption in HTTP2 could be used to bypass the
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2002
    Same-Origin-Policy on services hosted on other ports
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2003
  * MOZ-2021-0003 (bmo#1736886)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2004
    Universal XSS in Firefox for Android via QR Code URLs
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2005
  * CVE-2021-38508 (bmo#1366818)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2006
    Permission Prompt could be overlaid, resulting in user
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2007
    confusion and potential spoofing
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2008
  * MOZ-2021-0004 (bmo#1659155)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2009
    Web Extensions could access pre-redirect URL when their
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2010
    context menu was triggered by a user
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2011
  * CVE-2021-38509 (bmo#1718571)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2012
    Javascript alert box could have been spoofed onto an
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2013
    arbitrary domain
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2014
  * CVE-2021-38510 (bmo#1731779)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2015
    Download Protections were bypassed by .inetloc files on Mac OS
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2016
  * MOZ-2021-0005 (bmo#1719203)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2017
    'Copy Image Link' context menu action could have been abused
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2018
    to see authentication tokens
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2019
  * MOZ-2021-0006 (bmo#1724233)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2020
    URL Parsing may incorrectly parse internationalized domains
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2021
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048, bmo#1735152)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2022
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2023
- removed obsolete patches
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2024
  * mozilla-bmo1602730.patch
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2025
  * mozilla-bmo1725828.patch
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2026
  * mozilla-bmo1729124.patch
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2027
- requires
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2028
  NSS >= 3.71
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2029
  rust >= 1.53
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2030
- fix Plasma detection (boo#1191825)
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2031
- fix Link error "undefined hidden symbol:"
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2032
  https://github.com/openSUSE/firefox-maintenance/issues/37
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2033
c384af864671 Firefox 94.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1166
diff changeset
  2034
-------------------------------------------------------------------
1166
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2035
Tue Oct 26 19:48:24 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2036
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2037
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2038
- (re-)enable LTO on Tumbleweed
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2039
59c4b0a75ff4 latest update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1165
diff changeset
  2040
-------------------------------------------------------------------
1165
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2041
Wed Oct 20 06:49:52 UTC 2021 - Martin Sirringhaus <martin.sirringhaus@suse.com>
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2042
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2043
- Rebase mozilla-sandbox-fips.patch to punch another hole in the
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2044
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2045
  from within the newly introduced socket process sandbox.
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2046
  This fixes bsc#1191815 and bsc#1190141
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2047
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2048
-------------------------------------------------------------------
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2049
Mon Oct 18 12:44:44 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2050
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2051
- Add patch to fix build on aarch64 (bmo#1729124)
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2052
  * mozilla-bmo1729124.patch
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2053
e009fde1282b enable LTO
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1164
diff changeset
  2054
-------------------------------------------------------------------
1164
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2055
Fri Oct  1 18:33:33 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2056
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2057
- Mozilla Firefox 93.0
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2058
  * supports the new AVIF image format
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2059
  * PDF viewer now supports filling more forms (XFA-based forms)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2060
  * now blocks downloads that rely on insecure connections,
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2061
    protecting against potentially malicious or unsafe downloads
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2062
  * Improved web compatibility for privacy protections with SmartBlock 3.0
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2063
  * Introducing a new referrer tracking protection in Strict Tracking
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2064
    Protection and Private Browsing
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2065
  * TLS ciphersuites that use 3DES have been disabled. Such
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2066
    ciphersuites can only be enabled when deprecated versions of
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2067
    TLS are also enabled
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2068
  * The download panel now follows the Firefox visual styles
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2069
  MFSA 2021-43 (bsc#1191332)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2070
  * CVE-2021-38496 (bmo#1725335)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2071
    Use-after-free in MessageTask
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2072
  * CVE-2021-38497 (bmo#1726621)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2073
    Validation message could have been overlaid on another origin
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2074
  * CVE-2021-38498 (bmo#1729642)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2075
    Use-after-free of nsLanguageAtomService object
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2076
  * CVE-2021-32810 (bmo#1729813)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2077
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2078
    Data race in crossbeam-deque
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2079
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2080
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2081
    and Firefox ESR 91.2
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2082
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2083
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2084
  * CVE-2021-38499 (bmo#1667102, bmo#1723170, bmo#1725356, bmo#1727364)
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2085
    Memory safety bugs fixed in Firefox 93
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2086
- removed obsolete mozilla-bmo1708709.patch
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2087
- require NSS >= 3.70
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2088
- allow to override wayland detection by defining MOZ_ENABLE_WAYLAND
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2089
  explicitely as 0 or 1
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2090
- fix aarch64 build by updating constraints
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2091
- add mozilla-bmo1725828.patch to fix widevine (bsc#1190842)
1164
bb219fd0d646 Firefox 93.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1163
diff changeset
  2092
- add mozilla-bmo531915.patch to fix build for i586
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2093
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2094
-------------------------------------------------------------------
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2095
Sat Sep 25 10:10:56 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2096
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2097
- Mozilla Firefox 92.0.1
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2098
  * Fixed: Fixes an issue where audio playback was not working on
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2099
    some Linux systems (bmo#1730499)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2100
  * Fixed: Fixes issues with the findbar close button on
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2101
    different operating systems (bmo#1728368)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2102
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2103
-------------------------------------------------------------------
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2104
Mon Sep  6 10:16:28 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2105
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2106
- Mozilla Firefox 92.0
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2107
  * More secure connections: Firefox can now automatically upgrade to
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2108
    HTTPS using HTTPS RR as Alt-Svc headers
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2109
  * Full-range color levels are now supported for video playback on
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2110
    many systems
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2111
  MFSA 2021-38 (bsc#1190269)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2112
  * CVE-2021-29993 (bmo#1708544, bmo#1708767, bmo#1712240,
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2113
    bmo#1712242, bmo#1729259)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2114
    Handling custom intents could lead to crashes and UI spoofs
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2115
  * CVE-2021-38491 (bmo#1551886)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2116
    Mixed-Content-Blocking was unable to check opaque origins
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2117
  * CVE-2021-38492 (bmo#1721107)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2118
    Navigating to `mk:` URL scheme could load Internet Explorer
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2119
  * CVE-2021-38493 (bmo#1723391, bmo#1724101, bmo#1724107)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2120
    Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2121
    Firefox ESR 91.1
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2122
  * CVE-2021-38494 (bmo#1723920, bmo#1725638)
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2123
    Memory safety bugs fixed in Firefox 92
1162
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2124
- updated appdata
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2125
- remove mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2126
  (does not apply anymore; unclear if obsolete)
1162
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2127
- bring back mozilla-silence-no-return-type.patch and
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2128
  run post-build-checks everywhere again
1163
849d6343405b latest 92.0.1 version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1162
diff changeset
  2129
- requires NSS 3.69.1
1162
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2130
af5e283c2e5d Firefox 91.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1161
diff changeset
  2131
-------------------------------------------------------------------
1161
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2132
Tue Aug 31 00:33:39 UTC 2021 - Atri Bhattacharya <badshah400@gmail.com>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2133
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2134
- Add mozilla-bmo1708709.patch: On [wayland] popup can be wrongly
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2135
  repositioned due to rounding errors when font scaling != 1
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2136
  (bmo#1708709); patch taken from upstream bug report and rebased
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2137
  to apply cleanly against current version.
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2138
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2139
-------------------------------------------------------------------
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2140
Sun Aug 29 14:45:29 UTC 2021 - Martin Liška <mliska@suse.cz>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2141
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2142
- Bump using with GCC (tested locally).
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2143
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2144
-------------------------------------------------------------------
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2145
Fri Aug 27 22:47:48 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2146
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2147
- Mozilla Firefox 91.0.2:
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2148
  * Fixed: Firefox no longer clears authentication data when
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2149
    purging trackers, to avoid repeatedly prompting for a
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2150
    password (bmo#1721084)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2151
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2152
-------------------------------------------------------------------
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2153
Wed Aug 18 06:34:01 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2154
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2155
- Mozilla Firefox 91.0.1
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2156
  * Fixed an issue causing buttons on the tab bar to be resized when
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2157
    loading certain websites (bmo#1704404)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2158
  * Fixed an issue which caused tabs from private windows to be
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2159
    visible in non-private windows when viewing switch-to-tab results
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2160
    in the address bar panel (bmo#1720369)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2161
  * Various stability fixes
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2162
  MFSA 2021-37 (bsc#1189547)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2163
  * CVE-2021-29991 (bmo#1724896)
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2164
    Header Splitting possible with HTTP/3 Responses
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2165
36ae1e4f15eb latest 91.0 patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1160
diff changeset
  2166
-------------------------------------------------------------------
1160
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2167
Mon Aug  9 14:55:22 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2168
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2169
- Mozilla Firefox 91.0
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2170
  MFSA 2021-33 (bsc#1188891)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2171
  * CVE-2021-29986 (bmo#1696138)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2172
    Race condition when resolving DNS names could have led to
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2173
    memory corruption
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2174
  * CVE-2021-29981 (bmo#1707774)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2175
    Live range splitting could have led to conflicting
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2176
    assignments in the JIT
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2177
  * CVE-2021-29988 (bmo#1717922)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2178
    Memory corruption as a result of incorrect style treatment
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2179
  * CVE-2021-29983 (bmo#1719088)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2180
    Firefox for Android could get stuck in fullscreen mode
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2181
  * CVE-2021-29984 (bmo#1720031)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2182
    Incorrect instruction reordering during JIT optimization
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2183
  * CVE-2021-29980 (bmo#1722204)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2184
    Uninitialized memory in a canvas object could have led to
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2185
    memory corruption
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2186
  * CVE-2021-29987 (bmo#1716129)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2187
    Users could have been tricked into accepting unwanted
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2188
    permissions on Linux
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2189
  * CVE-2021-29985 (bmo#1722083)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2190
    Use-after-free media channels
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2191
  * CVE-2021-29982 (bmo#1715318)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2192
    Single bit data leak due to incorrect JIT optimization and
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2193
    type confusion
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2194
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2195
    bmo#1719998, bmo#1720568)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2196
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2197
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2198
    bmo#1719319, bmo#1722073)
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2199
    Memory safety bugs fixed in Firefox 91
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2200
- requires
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2201
  * rustc/cargo >= 1.51
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2202
  * NSPR >= 4.32
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2203
  * NSS >= 3.68
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2204
- force-disable webrender on BE platforms
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2205
b28cf22ff7cf Firefox 91.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1159
diff changeset
  2206
-------------------------------------------------------------------
1159
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2207
Sat Jul 24 07:15:54 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2208
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2209
- Mozilla Firefox 90.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2210
  * Changed: Updates to support DoH Canada rollout (bmo#1713036)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2211
  * Fixed: Fixed truncated output when printing (bmo#1720621)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2212
  * Fixed: Fixed menu styling on some Gtk themes (bmo#1720441,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2213
    bmo#1720874)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2214
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2215
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2216
Mon Jul 19 20:08:56 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2217
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2218
- Mozilla Firefox 90.0.1 (boo#1188480):
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2219
  * Fixed: Fixed busy looping processing some HTTP3 responses
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2220
    (bmo#1720079)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2221
  * Fixed: Fixed transient errors authenticating with some smart
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2222
    cards (bmo#1715325)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2223
  * Fixed: Fixed a rare crash on shutdown (bmo#1707057)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2224
  * Fixed: Fixed a race on startup that caused about:support to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2225
    end up empty after upgrade (bmo#1717894, boo#1188330)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2226
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2227
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2228
Sun Jul 11 08:53:02 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2229
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2230
- Mozilla Firefox 90.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2231
  MFSA 2021-28 (bsc#1188275)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2232
  * CVE-2021-29970 (bmo#1709976)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2233
    Use-after-free in accessibility features of a document
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2234
  * CVE-2021-29971 (bmo#1713638)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2235
    Granted permissions only compared host; omitting scheme and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2236
    port on Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2237
  * CVE-2021-30547 (bmo#1715766)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2238
    Out of bounds write in ANGLE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2239
  * CVE-2021-29972 (bmo#1696816)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2240
    Use of out-of-date library included use-after-free
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2241
    vulnerability
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2242
  * CVE-2021-29973 (bmo#1701932)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2243
    Password autofill on HTTP websites was enabled without user
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2244
    interaction on Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2245
  * CVE-2021-29974 (bmo#1704843)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2246
    HSTS errors could be overridden when network partitioning was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2247
    enabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2248
  * CVE-2021-29975 (bmo#1713259)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2249
    Text message could be overlaid on top of another website
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2250
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2251
    bmo#1711576, bmo#1714391)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2252
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2253
  * CVE-2021-29977 (bmo#1665836, bmo#1686138, bmo#1704316,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2254
    bmo#1706314, bmo#1709931, bmo#1712084, bmo#1712357,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2255
    bmo#1714066)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2256
    Memory safety bugs fixed in Firefox 90
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2257
- requires
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2258
  NSPR 4.31
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2259
  NSS 3.66
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2260
- Gtk2 support removed (was only for Flash plugin before)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2261
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1158
diff changeset
  2262
-------------------------------------------------------------------
1158
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2263
Wed Jun 23 16:54:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2264
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2265
- Mozilla Firefox 89.0.2 (boo#1187648):
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2266
  * Fix occasional hangs with Software WebRender on Linux (bmo#1708224)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2267
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2268
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2269
Sat Jun 19 09:00:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2270
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2271
- Mozilla Firefox 89.0.1 (boo#1187475):
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2272
  * Updated translations, including full Spanish (Mexico)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2273
    localization and other improvements (bmo#1714946)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2274
  * Fix various font related regressions (bmo#1694174)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2275
  * Linux: Fix performance and stability regressions with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2276
    WebRender (bmo#1715895, bmo#1715902)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2277
  * Enterprise: Fix for the `DisableDeveloperTools` policy not
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2278
    having effect anymore (bmo#1715777)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2279
  * Linux: Fix broken scrollbars on some GTK themes (bmo#1714103)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2280
  * Various stability fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2281
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2282
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2283
Sat May 29 20:55:56 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2284
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2285
- Mozilla Firefox 89.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2286
  * UI redesign
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2287
  * The Event Timing API is now supported
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2288
  * The CSS forced-colors media query is now supported
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2289
  MFSA 2021-23 (bsc#1186696)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2290
  * CVE-2021-29965 (bmo#1709257)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2291
    Password Manager on Firefox for Android susceptible to domain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2292
    spoofing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2293
  * CVE-2021-29960 (bmo#1675965)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2294
    Filenames printed from private browsing mode incorrectly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2295
    retained in preferences
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2296
  * CVE-2021-29961 (bmo#1700235)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2297
    Firefox UI spoof using `<select>` elements and CSS scaling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2298
  * CVE-2021-29963 (bmo#1705068)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2299
    Shared cookies for search suggestions in private browsing mode
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2300
  * CVE-2021-29964 (bmo#1706501)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2301
    Out of bounds-read when parsing a `WM_COPYDATA` message
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2302
  * CVE-2021-29959 (bmo#1395819)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2303
    Devices could be re-enabled without additional permission prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2304
  * CVE-2021-29962 (bmo#1701673)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2305
    No rate-limiting for popups on Firefox for Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2306
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2307
    bmo#1704722, bmo#1706041)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2308
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2309
  * CVE-2021-29966 (bmo#1660307, bmo#1686154, bmo#1702948, bmo#1708124)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2310
    Memory safety bugs fixed in Firefox 89
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2311
- require
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2312
  NSS >= 3.64
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2313
  rust-cbindgen >= 0.19.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2314
- do not rely on nodejs10 packagename anymore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2315
- updated mozilla.keyring
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2316
- switched TW/x86_64 to clang as the last platform due to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2317
  https://bugs.gentoo.org/792705
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2318
- but LTO with clang is broken in TW so disable LTO for it
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1157
diff changeset
  2319
  https://bugs.llvm.org/show_bug.cgi?id=47872
1157
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2320
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2321
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2322
Thu May  6 13:40:10 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2323
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2324
- Relax RAM and disk constraints for aarch64
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2325
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2326
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2327
Wed May  5 15:13:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2328
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2329
- Mozilla Firefox 88.0.1
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2330
  * Fixed: Resolved an issue caused by a recent Widevine plugin
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2331
    update which prevented some purchased video content from
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2332
    playing correctly (bmo#1705138)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2333
  * Fixed: Fixed corruption of videos playing on Twitter or
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2334
    WebRTC calls on some Gen6 Intel graphics chipsets
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2335
    (bmo#1708937)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2336
  * Fixed: Fixed menulists in Preferences being unreadable for
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2337
    users with High Contrast Mode enabled (bmo#1706496)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2338
  MFSA 2021-20 (bsc#1185633)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2339
  * CVE-2021-29952 (bmo#1704227)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2340
    Race condition in Web Render Components
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2341
- devel package: move macros to /usr/lib/rpm/macros.d (boo#1185658)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2342
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2343
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2344
Sun May  2 12:03:26 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2345
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2346
- add compatibility for libavcodec58_134
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2347
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2348
-------------------------------------------------------------------
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2349
Sun Apr 18 09:01:32 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2350
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2351
- Mozilla Firefox 88.0
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2352
  * New: PDF forms now support JavaScript embedded in PDF files.
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2353
    Some PDF forms use JavaScript for validation and other
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2354
    interactive features
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2355
  * New: Print updates: Margin units are now localized
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2356
  * New: Smooth pinch-zooming using a touchpad is now supported
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2357
    on Linux
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2358
  * New: To protect against cross-site privacy leaks, Firefox now
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2359
    isolates window.name data to the website that created it.
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2360
    Learn more
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2361
  * Changed: Firefox will not prompt for access to your
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2362
    microphone or camera if you’ve already granted access to the
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2363
    same device on the same site in the same tab within the past
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2364
    50 seconds. This new grace period reduces the number of times
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2365
    you’re prompted to grant device access
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2366
  * Changed: The ‘Take a Screenshot’ feature was removed from the
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2367
    Page Actions menu in the url bar. To take a screenshot,
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2368
    right-click to open the context menu. You can also add a
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2369
    screenshots shortcut directly to your toolbar via the
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2370
    Customize menu. Open the Firefox menu and select Customize…
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2371
  * Changed: FTP support has been disabled, and its full removal
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2372
    is planned for an upcoming release. Addressing this security
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2373
    risk reduces the likelihood of an attack while also removing
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2374
    support for a non-encrypted protocol
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2375
  * Developer: Introduced a new toggle button in the Network
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2376
    panel for switching between JSON formatted HTTP response and
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2377
    raw data (as received over the wire).
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2378
    !enter image description here
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2379
  * Enterprise: Various bug fixes and new policies have been
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2380
    implemented in the latest version of Firefox. You can see
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2381
    more details in the Firefox for Enterprise 88 Release Notes.
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2382
  * Fixed: Screen readers no longer incorrectly read content that
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2383
    websites have visually hidden, as in the case of articles in
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2384
    the Google Help panel
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2385
  MFSA 2021-16 (bsc#1184960)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2386
  * CVE-2021-23994 (bmo#1699077)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2387
    Out of bound write due to lazy initialization
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2388
  * CVE-2021-23995 (bmo#1699835)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2389
    Use-after-free in Responsive Design Mode
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2390
  * CVE-2021-23996 (bmo#1701834)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2391
    Content rendered outside of webpage viewport
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2392
  * CVE-2021-23997 (bmo#1701942)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2393
    Use-after-free when freeing fonts from cache
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2394
  * CVE-2021-23998 (bmo#1667456)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2395
    Secure Lock icon could have been spoofed
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2396
  * CVE-2021-23999 (bmo#1691153)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2397
    Blob URLs may have been granted additional privileges
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2398
  * CVE-2021-24000 (bmo#1694698)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2399
    requestPointerLock() could be applied to a tab different from
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2400
    the visible tab
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2401
  * CVE-2021-24001 (bmo#1694727)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2402
    Testing code could have enabled session history manipulations
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2403
    by a compromised content process
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2404
  * CVE-2021-24002 (bmo#1702374)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2405
    Arbitrary FTP command execution on FTP servers using an
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2406
    encoded URL
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2407
  * CVE-2021-29945 (bmo#1700690)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2408
    Incorrect size computation in WebAssembly JIT could lead to
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2409
    null-reads
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2410
  * CVE-2021-29944 (bmo#1697604)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2411
    HTML injection vulnerability in Firefox for Android's Reader View
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2412
  * CVE-2021-29946 (bmo#1698503)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2413
    Port blocking could be bypassed
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2414
  * CVE-2021-29947 (bmo#1651449, bmo#1674142, bmo#1693476,
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2415
    bmo#1696886, bmo#1700091)
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2416
    Memory safety bugs fixed in Firefox 88
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2417
- requires
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2418
  * NSPR 4.30
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2419
  * NSS 3.63.1
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2420
- align wayland support logic
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2421
57fc0524b50c Firefox 88.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1156
diff changeset
  2422
-------------------------------------------------------------------
1156
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2423
Sat Mar 27 10:40:46 UTC 2021 - Manfred Hollstein <manfred.h@gmx.net>
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2424
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2425
- Switch to clang_build globally; just on TW/x86_64 it does not work
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2426
  due to unreolved externals `__rust_probestack' - disable clang_build
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2427
  then.
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2428
- useccache: Add conditionals to enable/disable ccache.
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2429
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2430
-------------------------------------------------------------------
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2431
Tue Mar 23 16:42:19 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
1155
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2432
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2433
- Mozilla Firefox 87.0
1156
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2434
  * requires NSS 3.62
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2435
  * removed obsolete BigEndian ICU build workaround
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2436
  * rebased patches
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2437
  MFSA 2021-10 (bsc#1183942)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2438
  * CVE-2021-23981 (bmo#1692832)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2439
    Texture upload into an unbound backing buffer resulted in an
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2440
    out-of-bound read
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2441
  * CVE-2021-23982 (bmo#1677046)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2442
    Internal network hosts could have been probed by a malicious
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2443
    webpage
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2444
  * CVE-2021-23983 (bmo#1692684)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2445
    Transitions for invalid ::marker properties resulted in memory
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2446
    corruption
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2447
  * CVE-2021-23984 (bmo#1693664)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2448
    Malicious extensions could have spoofed popup information
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2449
  * CVE-2021-23985 (bmo#1659129)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2450
    Devtools remote debugging feature could have been enabled
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2451
    without indication to the user
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2452
  * CVE-2021-23986 (bmo#1692623)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2453
    A malicious extension could have performed credential-less
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2454
    same origin policy violations
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2455
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2456
    bmo#1690718)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2457
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2458
  * CVE-2021-23988 (bmo#1684994, bmo#1686653)
c3d884659acf Firefox 87.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1155
diff changeset
  2459
    Memory safety bugs fixed in Firefox 87
1155
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2460
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2461
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2462
Tue Mar 16 14:26:35 UTC 2021 - Martin Liška <mliska@suse.cz>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2463
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2464
- Set memory limits for DWZ to 4x.
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2465
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2466
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2467
Sat Mar 13 08:23:06 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2468
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2469
- Mozilla Firefox 86.0.1
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2470
  * Fixed: Fixed an issue on Apple Silicon machines that caused
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2471
    Firefox to be unresponsive after system sleep (bmo#1682713)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2472
  * Fixed: Fixed an issue causing windows to gain or lose focus
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2473
    unexpectedly (bmo#1694927)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2474
  * Fixed: Fixed truncation of date and time widgets due to
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2475
    incorrect width calculation (bmo#1695578)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2476
  * Fixed: Fixed an issue causing unexpected behavior with
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2477
    extensions managing tab groups (bmo#1694699)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2478
  * Fixed: Fixed a frequent Linux crash on browser launch
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2479
    (bmo#1694670)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2480
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2481
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2482
Sun Feb 21 18:14:12 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2483
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2484
- Mozilla Firefox 86.0
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2485
  * requires NSS >= 3.61
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2486
  * requires rust-cbindgen >= 0.16.0
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2487
  * Firefox now supports simultaneously watching multiple videos in
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2488
    Picture-in-Picture.
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2489
  * Total Cookie Protection to Strict Mode
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2490
  * https://www.mozilla.org/en-US/firefox/86.0/releasenotes
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2491
  MSFA 2021-07 (bsc#1182614)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2492
  * CVE-2021-23969 (bmo#1542194)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2493
    Content Security Policy violation report could have contained
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2494
    the destination of a redirect
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2495
  * CVE-2021-23970 (bmo#1681724)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2496
    Multithreaded WASM triggered assertions validating separation
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2497
    of script domains
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2498
  * CVE-2021-23968 (bmo#1687342)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2499
    Content Security Policy violation report could have contained
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2500
    the destination of a redirect
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2501
  * CVE-2021-23974 (bmo#1528997, bmo#1683627)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2502
    noscript elements could have led to an HTML Sanitizer bypass
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2503
  * CVE-2021-23971 (bmo#1678545)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2504
    A website's Referrer-Policy could have been be overridden,
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2505
    potentially resulting in the full URL being sent as a Referrer
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2506
  * CVE-2021-23976 (bmo#1684627)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2507
    Local spoofing of web manifests for arbitrary pages in
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2508
    Firefox for Android
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2509
  * CVE-2021-23977 (bmo#1684761)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2510
    Malicious application could read sensitive data from Firefox
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2511
    for Android's application directories
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2512
  * CVE-2021-23972 (bmo#1683536)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2513
    HTTP Auth phishing warning was omitted when a redirect is
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2514
    cached
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2515
  * CVE-2021-23975 (bmo#1685145)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2516
    about:memory Measure function caused an incorrect pointer
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2517
    operation
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2518
  * CVE-2021-23973 (bmo#1690976)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2519
    MediaError message property could have leaked information
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2520
    about cross-origin resources
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2521
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597, bmo#786797)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2522
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2523
  * CVE-2021-23979 (bmo#1663222, bmo#1666607, bmo#1672120, bmo#1678463,
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2524
    bmo#1678927, bmo#1679560, bmo#1681297, bmo#1681684, bmo#1683490,
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2525
    bmo#1684377, bmo#1684902)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2526
    Memory safety bugs fixed in Firefox 86
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2527
- updated create-tar.sh (bsc#1182357)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2528
- removed obsolete mozilla-bmo1554971.patch
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2529
- remove buildsymbols subpackage
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2530
  * we haven't done anything with it for years
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2531
  * mozilla is collecting those from our debuginfo packages
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2532
  * would require a local dump_syms tool
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2533
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2534
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2535
Wed Feb 17 18:40:41 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2536
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2537
- Mozilla Firefox 85.0.2
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2538
  * Fixed: Fixed a deadlock during startup (bmo#1679933)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2539
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2540
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2541
Wed Feb 17 11:19:01 UTC 2021 - Michel Normand <normand@linux.vnet.ibm.com>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2542
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2543
- Use %limit_build macros for PowerPC to avoid oom build failure
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2544
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2545
-------------------------------------------------------------------
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2546
Tue Feb  9 09:05:26 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2547
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2548
- Mozilla Firefox 85.0.1
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2549
  MFSA 2021-06 (bsc#1181848)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2550
  * MOZ-2021-0001 (bmo#1676636)
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2551
    Buffer overflow in depth pitch calculations for compressed
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2552
    textures
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2553
  * Fixed: Avoid printing an extra blank page at the end of some
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2554
    documents (bmo#1689789).
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2555
  * Fixed: Fixed a browser crash in case of unexpected Cache API
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2556
    state (bmo#1684838).
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2557
b8c834aafde2 Prepare 87.0 branch based on 86.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1154
diff changeset
  2558
-------------------------------------------------------------------
1154
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2559
Sun Jan 24 11:53:58 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2560
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2561
- Mozilla Firefox 85.0
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2562
  * Adobe Flash is completely history
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2563
  * supercookie protection
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2564
  * new bookmark handling and features
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2565
  MFSA 2021-03 (bsc#1181414)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2566
  * CVE-2021-23953 (bmo#1683940)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2567
    Cross-origin information leakage via redirected PDF requests
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2568
  * CVE-2021-23954 (bmo#1684020)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2569
    Type confusion when using logical assignment operators in
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2570
    JavaScript switch statements
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2571
  * CVE-2021-23955 (bmo#1684837)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2572
    Clickjacking across tabs through misusing requestPointerLock
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2573
  * CVE-2021-23956 (bmo#1338637)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2574
    File picker dialog could have been used to disclose a
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2575
    complete directory
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2576
  * CVE-2021-23957 (bmo#1584582)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2577
    Iframe sandbox could have been bypassed on Android via the
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2578
    intent URL scheme
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2579
  * CVE-2021-23958 (bmo#1642747)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2580
    Screen sharing permission leaked across tabs
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2581
  * CVE-2021-23959 (bmo#1659035)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2582
    Cross-Site Scripting in error pages on Firefox for Android
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2583
  * CVE-2021-23960 (bmo#1675755)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2584
    Use-after-poison for incorrectly redeclared JavaScript
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2585
    variables during GC
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2586
  * CVE-2021-23961 (bmo#1677940)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2587
    More internal network hosts could have been probed by a
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2588
    malicious webpage
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2589
  * CVE-2021-23962 (bmo#1677194)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2590
    Use-after-poison in
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2591
    <code>nsTreeBodyFrame::RowCountChanged</code>
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2592
  * CVE-2021-23963 (bmo#1680793)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2593
    Permission prompt inaccessible after asking for additional
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2594
    permissions
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2595
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526, bmo#1674278,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2596
    bmo#1674835, bmo#1675097, bmo#1675844, bmo#1675868, bmo#1677590,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2597
    bmo#1677888, bmo#1680410, bmo#1681268, bmo#1682068, bmo#1682938,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2598
    bmo#1683736, bmo#1685260, bmo#1685925)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2599
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2600
  * CVE-2021-23965 (bmo#1670378, bmo#1673555, bmo#1676812, bmo#1678582,
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2601
    bmo#1684497)
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2602
    Memory safety bugs fixed in Firefox 85
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2603
- requires NSS 3.60.1
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2604
- requires rust 1.47
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2605
- remove obsolete mozilla-pipewire-0-3.patch
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2606
71a92b4d0527 Firefox 85.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1153
diff changeset
  2607
-------------------------------------------------------------------
1153
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2608
Mon Jan 11 18:02:01 UTC 2021 - Matthias Mailänder <mailaender@opensuse.org>
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2609
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2610
- Fix AppStream screenshot links
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2611
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2612
-------------------------------------------------------------------
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2613
Thu Jan  7 17:11:43 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2614
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2615
- Mozilla Firefox 84.0.2
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2616
  MFSA 2021-01 (bsc#1180623)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2617
  * CVE-2020-16044 (bmo#1683964)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2618
    Use-after-free write when handling a malicious COOKIE-ECHO
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2619
    SCTP chunk
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2620
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2621
-------------------------------------------------------------------
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2622
Sun Dec 27 09:52:50 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2623
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2624
- Mozilla Firefox 84.0.1
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2625
  * Fixed problems loading secure websites and crashes for users
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2626
    with certain third-party PKCS11 modules and smartcards installed
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2627
    (bmo#1682881) (fixed in NSS 3.59.1)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2628
  * Fixed a bug causing some Unity JS games to not load on Apple
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2629
    Silicon devices due to improper detection of the OS version
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2630
    (bmo#1680516)
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2631
- requires NSS 3.59.1
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2632
fdd746757dda minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1152
diff changeset
  2633
-------------------------------------------------------------------
1152
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2634
Sun Dec 13 18:18:58 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2635
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2636
- Mozilla Firefox 84.0
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2637
  * Firefox 84 is the final release to support Adobe Flash
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2638
  * WebRender is enabled by default when run on GNOME-based X11
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2639
    Linux desktops
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2640
  MFSA 2020-54 (bsc#1180039))
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2641
  * CVE-2020-16042 (bmo#1679003)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2642
    Operations on a BigInt could have caused uninitialized memory
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2643
    to be exposed
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2644
  * CVE-2020-26971 (bmo#1663466)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2645
    Heap buffer overflow in WebGL
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2646
  * CVE-2020-26972 (bmo#1671382)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2647
    Use-After-Free in WebGL
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2648
  * CVE-2020-26973 (bmo#1680084)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2649
    CSS Sanitizer performed incorrect sanitization
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2650
  * CVE-2020-26974 (bmo#1681022)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2651
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2652
    use-after-free
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2653
  * CVE-2020-26975 (bmo#1661071)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2654
    Malicious applications on Android could have induced Firefox
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2655
    for Android into sending arbitrary attacker-specified headers
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2656
  * CVE-2020-26976 (bmo#1674343)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2657
    HTTPS pages could have been intercepted by a registered
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2658
    service worker when they should not have been
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2659
  * CVE-2020-26977 (bmo#1676311)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2660
    URL spoofing via unresponsive port in Firefox for Android
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2661
  * CVE-2020-26978 (bmo#1677047)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2662
    Internal network hosts could have been probed by a malicious
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2663
    webpage
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2664
  * CVE-2020-26979 (bmo#1641287, bmo#1673299)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2665
    When entering an address in the address or search bars, a
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2666
    website could have redirected the user before they were
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2667
    navigated to the intended url
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2668
  * CVE-2020-35111 (bmo#1657916)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2669
    The proxy.onRequest API did not catch view-source URLs
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2670
  * CVE-2020-35112 (bmo#1661365)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2671
    Opening an extension-less download may have inadvertently
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2672
    launched an executable instead
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2673
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2674
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2675
  * CVE-2020-35114 (bmo#1607449, bmo#1640416, bmo#1656459,
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2676
    bmo#1669914, bmo#1673567)
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2677
    Memory safety bugs fixed in Firefox 84
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2678
- requires
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2679
  NSS >= 3.59
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2680
  rust >= 1.44
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2681
  rust-cbindgen >= 0.15.0
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2682
- remove revert-795c8762b16b.patch and replace with mozilla-pgo.patch
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2683
4cfe46c9a944 Firefox 84.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1151
diff changeset
  2684
-------------------------------------------------------------------
1151
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2685
Sat Nov 21 08:12:17 UTC 2020 - Kirill Kirillov <kkirill@opensuse.org>
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2686
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2687
- Add/Enable GNOME search provider
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2688
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2689
-------------------------------------------------------------------
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2690
Sun Nov 15 12:16:53 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2691
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2692
- Mozilla Firefox 83.0
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2693
  * major update for SpiderMonkey improving performance significantly
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2694
  * optional HTTPS-Only mode
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2695
  * more improvements
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2696
    https://www.mozilla.org/en-US/firefox/83.0/releasenotes/
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2697
  MFSA 2020-50 (bsc#1178824))
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2698
  * CVE-2020-26951 (bmo#1667113)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2699
    Parsing mismatches could confuse and bypass security
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2700
    sanitizer for chrome privileged code
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2701
  * CVE-2020-26952 (bmo#1667685)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2702
    Out of memory handling of JITed, inlined functions could lead
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2703
    to a memory corruption
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2704
  * CVE-2020-16012 (bmo#1642028)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2705
    Variable time processing of cross-origin images during
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2706
    drawImage calls
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2707
  * CVE-2020-26953 (bmo#1656741)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2708
    Fullscreen could be enabled without displaying the security UI
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2709
  * CVE-2020-26954 (bmo#1657026)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2710
    Local spoofing of web manifests for arbitrary pages in
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2711
    Firefox for Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2712
  * CVE-2020-26955 (bmo#1663261)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2713
    Cookies set during file downloads are shared between normal
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2714
    and Private Browsing Mode in Firefox for Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2715
  * CVE-2020-26956 (bmo#1666300)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2716
    XSS through paste (manual and clipboard API)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2717
  * CVE-2020-26957 (bmo#1667179)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2718
    OneCRL was not working in Firefox for Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2719
  * CVE-2020-26958 (bmo#1669355)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2720
    Requests intercepted through ServiceWorkers lacked MIME type
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2721
    restrictions
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2722
  * CVE-2020-26959 (bmo#1669466)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2723
    Use-after-free in WebRequestService
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2724
  * CVE-2020-26960 (bmo#1670358)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2725
    Potential use-after-free in uses of nsTArray
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2726
  * CVE-2020-15999 (bmo#1672223)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2727
    Heap buffer overflow in freetype
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2728
  * CVE-2020-26961 (bmo#1672528)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2729
    DoH did not filter IPv4 mapped IP Addresses
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2730
  * CVE-2020-26962 (bmo#610997)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2731
    Cross-origin iframes supported login autofill
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2732
  * CVE-2020-26963 (bmo#1314912)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2733
    History and Location interfaces could have been used to hang
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2734
    the browser
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2735
  * CVE-2020-26964 (bmo#1658865)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2736
    Firefox for Android's Remote Debugging via USB could have
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2737
    been abused by untrusted apps on older versions of Android
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2738
  * CVE-2020-26965 (bmo#1661617)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2739
    Software keyboards may have remembered typed passwords
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2740
  * CVE-2020-26966 (bmo#1663571)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2741
    Single-word search queries were also broadcast to local
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2742
    network
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2743
  * CVE-2020-26967 (bmo#1665820)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2744
    Mutation Observers could break or confuse Firefox Screenshots
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2745
    feature
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2746
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2747
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2748
    bmo#1671923)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2749
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2750
  * CVE-2020-26969 (bmo#1623920, bmo#1651705, bmo#1667872,
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2751
    bmo#1668876)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2752
    Memory safety bugs fixed in Firefox 83
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2753
- requires
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2754
  NSS >= 3.58
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2755
  nodejs >= 10.22.1
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2756
- removed obsolete mozilla-ppc-altivec_static_inline.patch
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2757
- disable LTO on TW because of ICEs in gcc
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2758
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2759
-------------------------------------------------------------------
1150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2760
Mon Nov  9 10:15:52 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2761
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2762
- Mozilla Firefox 82.0.3
1151
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2763
  MSFA 2020-49
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2764
  * CVE-2020-26950 (bmo#1675905)
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2765
    Write side effects in MCallGetProperty opcode not accounted for
1150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2766
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2767
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2768
Mon Nov  2 09:00:13 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2769
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2770
- Mozilla Firefox 82.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2771
  * few bugfixes for introduced regressions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2772
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2773
-------------------------------------------------------------------
1151
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2774
Sun Nov  1 20:15:17 UTC 2020 - Kirill Kirillov <kkirill@opensuse.org>
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2775
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2776
- Enable GNOME search provider
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2777
8df86bf11fc1 FF 83.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1150
diff changeset
  2778
-------------------------------------------------------------------
1150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2779
Thu Oct 15 20:44:47 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2780
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2781
- Mozilla Firefox 82.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2782
  * https://www.mozilla.org/en-US/firefox/82.0/releasenotes/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2783
  MFSA 2020-45 (bsc#1177872)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2784
  * CVE-2020-15969 (bmo#1666570)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2785
    Use-after-free in usersctp
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2786
  * CVE-2020-15254 (bmo#1668514)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2787
    Undefined behavior in bounded channel of crossbeam rust crate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2788
  * CVE-2020-15680 (bmo#1658881)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2789
    Presence of external protocol handlers could be determined
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2790
    through image tags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2791
  * CVE-2020-15681 (bmo#1666568)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2792
    Multiple WASM threads may have overwritten each others' stub
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2793
    table entries
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2794
  * CVE-2020-15682 (bmo#1636654)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2795
    The domain associated with the prompt to open an external
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2796
    protocol could be spoofed to display the incorrect origin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2797
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2798
    bmo#1662760, bmo#1663439, bmo#1666140)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2799
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2800
  * CVE-2020-15684 (bmo#1653764, bmo#1661402, bmo#1662259,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2801
    bmo#1664257)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1148
diff changeset
  2802
    Memory safety bugs fixed in Firefox 82
1148
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2803
- requires
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2804
  * NSPR 4.29
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2805
  * NSS 3.57
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2806
7ffbf55add92 beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1147
diff changeset
  2807
-------------------------------------------------------------------
1147
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2808
Thu Oct  1 20:00:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2809
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2810
- Mozilla Firefox 81.0.1
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2811
  * https://www.mozilla.org/en-US/firefox/81.0.1/releasenotes/
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2812
- remove obsolete python2 build requires
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2813
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2814
-------------------------------------------------------------------
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2815
Wed Sep 30 18:49:10 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2816
e81381ea5f3d work towards ff82
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1145
diff changeset
  2817
- Increase disk requirements in _constraints to match current needs
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2818
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2819
-------------------------------------------------------------------
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2820
Fri Sep 18 06:22:40 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2821
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2822
- Mozilla Firefox 81.0
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2823
  * https://www.mozilla.org/en-US/firefox/81.0/releasenotes
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2824
  MFSA 2020-42 (bsc#1176756)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2825
  * CVE-2020-15675 (bmo#1654211)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2826
    Use-After-Free in WebGL
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2827
  * CVE-2020-15677 (bmo#1641487)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2828
    Download origin spoofing via redirect
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2829
  * CVE-2020-15676 (bmo#1646140)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2830
    XSS when pasting attacker-controlled data into a
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2831
    contenteditable element
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2832
  * CVE-2020-15678 (bmo#1660211)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2833
    When recursing through layers while scrolling, an iterator
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2834
    may have become invalid, resulting in a potential use-after-
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2835
    free scenario
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2836
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2837
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2838
  * CVE-2020-15674 (bmo#1656063, bmo#1656064, bmo#1656067, bmo#1660293)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2839
    Memory safety bugs fixed in Firefox 81
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2840
- requires
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2841
  NSPR 4.28
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2842
  NSS 3.56
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2843
- removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2844
  * mozilla-system-nspr.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2845
  * mozilla-bmo1661715.patch
1145
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2846
  * mozilla-silence-no-return-type.patch
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2847
- skip post-build-checks for 15.0 and 15.1
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2848
- add revert-795c8762b16b.patch to fix LTO builds with gcc
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2849
  (related to bmo#1644409)
fbfd8f7cbd53 FF 81 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1144
diff changeset
  2850
- require python3-curses as workaround to fix i586 build
1144
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2851
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1143
diff changeset
  2852
-------------------------------------------------------------------
1143
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2853
Thu Sep 17 11:45:31 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2854
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2855
- Use %limit_build macro again for aarch64 and armv7, instead of
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2856
  the new memoryperjob _constraints to use more workers
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2857
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2858
-------------------------------------------------------------------
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2859
Sat Sep  5 17:43:26 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2860
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2861
- add mozilla-bmo1661715.patch to fix Flash plugin
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2862
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2863
-------------------------------------------------------------------
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2864
Wed Sep  2 17:11:19 UTC 2020 - Manfred Hollstein <manfred.h@gmx.net>
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2865
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2866
- Mozilla Firefox 80.0.1: Bug fixes:
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2867
  * Fixed a performance regression when encountering new intermediate
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2868
    CA certificates (bmo#1661543)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2869
  * Fixed crashes possibly related to GPU resets (bmo#1627616)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2870
  * Fixed rendering on some sites using WebGL (bmo#1659225)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2871
  * Fixed the zoom-in keyboard shortcut on Japanese language builds
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2872
    (bmo#1661895)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2873
  * Fixed download issues related to extensions and cookies
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2874
    (bmo#1655190)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2875
- added mozilla-silence-no-return-type.patch
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2876
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2877
-------------------------------------------------------------------
1142
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2878
Tue Aug 25 19:30:15 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2879
1143
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2880
- more whitelisting (/dev/random) for sandbox in relation to FIPS
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2881
  (bsc#1174284)
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2882
- improve langpack builds to use dedicated objdirs and make it
ff28137410eb FF8 80.0.1 including some required patches (see changes)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1142
diff changeset
  2883
  parallel again
1142
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2884
c5e32127317c further FIPS patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1141
diff changeset
  2885
-------------------------------------------------------------------
1141
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2886
Sat Aug 22 06:52:01 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2887
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2888
- Mozilla Firefox 80.0
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2889
  MFSA 2020-36 (bsc#1175686)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2890
  * CVE-2020-15663 (bmo#1643199)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2891
    Downgrade attack on the Mozilla Maintenance Service could
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2892
    have resulted in escalation of privilege
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2893
  * CVE-2020-15664 (bmo#1658214)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2894
    Attacker-induced prompt for extension installation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2895
  * CVE-2020-12401 (bmo#1631573)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2896
    Timing-attack on ECDSA signature generation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2897
  * CVE-2020-6829 (bmo#1631583)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2898
    P-384 and P-521 vulnerable to an electro-magnetic side
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2899
    channel attack on signature generation
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2900
  * CVE-2020-12400 (bmo#1623116)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2901
    P-384 and P-521 vulnerable to a side channel attack on
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2902
    modular inversion
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2903
  * CVE-2020-15665 (bmo#1651636)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2904
    Address bar not reset when choosing to stay on a page after
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2905
    the beforeunload dialog is shown
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2906
  * CVE-2020-15666 (bmo#1450853)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2907
    MediaError message property leaks cross-origin response
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2908
    status
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2909
  * CVE-2020-15667 (bmo#1653371)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2910
    Heap overflow when processing an update file
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2911
  * CVE-2020-15668 (bmo#1651520)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2912
    Data Race when reading certificate information
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2913
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2914
    bmo#1656957)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2915
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2916
- requires
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2917
  * NSPR 4.27
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2918
  * NSS 3.55
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2919
- added mozilla-system-nspr.patch (bmo#1661096)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2920
- exclude ga-IE locale as it's failing to build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2921
- rollback parallelize locale build because it breaks bookmarks
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2922
  (boo#1167976)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2923
- preserve original default bookmark file during langpack build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2924
  (boo#1167976)
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2925
- add some ccache output during build
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2926
edb0ebe8cccc Firefox 80.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1140
diff changeset
  2927
-------------------------------------------------------------------
1140
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2928
Thu Aug 20 13:07:33 UTC 2020 - Martin Liška <mliska@suse.cz>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2929
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2930
- Use new memoryperjob _constraints instead of %limit_build macro.
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2931
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2932
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2933
Mon Aug 10 09:19:38 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2934
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2935
- use ccache for build
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2936
- replace versioned RPM deps with requires_ge
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2937
- parallelize locale build
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2938
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2939
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2940
Thu Aug  6 14:37:16 UTC 2020 - Yunhe Guo <i@guoyunhe.me>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2941
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2942
- Change *.appdata.xml location to latest AppStream standard
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2943
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2944
-------------------------------------------------------------------
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2945
Thu Jul 23 21:00:34 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2946
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2947
- Mozilla Firefox 79.0
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2948
  MFSA 2020-30 (bsc#1174538)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2949
  * CVE-2020-15652 (bmo#1634872)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2950
    Potential leak of redirect targets when loading scripts in a worker
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2951
  * CVE-2020-6514 (bmo#1642792)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2952
    WebRTC data channel leaks internal address to peer
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2953
  * CVE-2020-15655 (bmo#1645204)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2954
    Extension APIs could be used to bypass Same-Origin Policy
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2955
  * CVE-2020-15653 (bmo#1521542)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2956
    Bypassing iframe sandbox when allowing popups
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2957
  * CVE-2020-6463 (bmo#1635293)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2958
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2959
  * CVE-2020-15656 (bmo#1647293)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2960
    Type confusion for special arguments in IonMonkey
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2961
  * CVE-2020-15658 (bmo#1637745)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2962
    Overriding file type when saving to disk
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2963
  * CVE-2020-15657 (bmo#1644954)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2964
    DLL hijacking due to incorrect loading path
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2965
  * CVE-2020-15654 (bmo#1648333)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2966
    Custom cursor can overlay user interface
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2967
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1638856,
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2968
    bmo#1643613, bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646220,
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2969
    bmo#1646787, bmo#1649347, bmo#1650811, bmo#1651678)
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2970
    Memory safety bugs fixed in Firefox 79
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2971
- updated dependency requirements:
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2972
  * mozilla-nspr >= 4.26
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2973
  * mozilla-nss >= 3.54
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2974
  * rust >= 1.43
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2975
  * rust-cbindgen >= 0.14.3
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2976
- removed obsolete patch
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2977
  mozilla-bmo1463035.patch
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2978
a9aa543a508a FF79 latest
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1138
diff changeset
  2979
-------------------------------------------------------------------
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2980
Tue Jul 21 21:31:20 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2981
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2982
- fixed syntax issue in desktop file (boo#1174360)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2983
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2984
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2985
Fri Jul 17 15:07:45 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2986
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2987
- Add mozilla-libavcodec58_91.patch to link against updated
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2988
  soversion of libavcodec (58.91) with ffmpeg >= 4.3.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2989
  (patch provided by Atri Bhattacharya <badshah400@gmail.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2990
- enable MOZ_USE_XINPUT2 for TW (again) (boo#1173320)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2991
  (Plasma 5.19.3 is now in TW)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2992
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2993
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2994
Sat Jul 11 11:08:06 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2995
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2996
- Mozilla Firefox 78.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2997
  * Fixed an accessibility regression in reader mode (bmo#1650922)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2998
  * Made the address bar more resilient to data corruption in the
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  2999
    user profile (bmo#1649981)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3000
  * Fixed a regression opening certain external applications (bmo#1650162)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3001
  MFSA 2020-28
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3002
  * CVE pending (bmo#1644076)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3003
    X-Frame-Options bypass using object or embed tags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3004
- added desktop file actions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3005
- do not use XINPUT2 for the moment until Plasma 5.19.3 has landed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3006
  (boo#1173993)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3007
- rework langpack integration (boo#1173991)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3008
  * ship XPIs instead of directories
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3009
  * allow addon sideloading
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3010
  * mark signatures for langpacks non-mandatory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3011
  * do not autodisable user profile scopes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3012
- Google API key is not usable for geolocation service
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3013
- fix pipewire support for TW (boo#1172903)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3014
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3015
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3016
Wed Jul  1 07:15:02 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3017
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3018
- Mozilla Firefox 78.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3019
  * Fixed an issue which could cause installed search engines to not
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3020
    be visible when upgrading from a previous release.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3021
- enable MOZ_USE_XINPUT2 for TW (boo#1173320)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3022
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3023
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3024
Sun Jun 28 07:17:13 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3025
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3026
- Mozilla Firefox 78.0
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3027
  * startup notifications now using Gtk instead of libnotify
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3028
  * PDF downloads now show an option to open the PDF directly in Firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3029
  * Protections Dashboard (about:protections)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3030
  * WebRTC not interrupted by screensaver anymore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3031
  * disabled TLS 1.0 and 1.1 by default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3032
  MFSA 2020-24 (bsc#1173576)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3033
  * CVE-2020-12415 (bmo#1586630)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3034
    AppCache manifest poisoning due to url encoded character processing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3035
  * CVE-2020-12416 (bmo#1639734)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3036
    Use-after-free in WebRTC VideoBroadcaster
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3037
  * CVE-2020-12417 (bmo#1640737)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3038
    Memory corruption due to missing sign-extension for ValueTags
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3039
    on ARM64
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3040
  * CVE-2020-12418 (bmo#1641303)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3041
    Information disclosure due to manipulated URL object
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3042
  * CVE-2020-12419 (bmo#1643874)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3043
    Use-after-free in nsGlobalWindowInner
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3044
  * CVE-2020-12420 (bmo#1643437)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3045
    Use-After-Free when trying to connect to a STUN server
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3046
  * CVE-2020-12402 (bmo#1631597)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3047
    RSA Key Generation vulnerable to side-channel attack
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3048
  * CVE-2020-12421 (bmo#1308251)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3049
    Add-On updates did not respect the same certificate trust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3050
    rules as software updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3051
  * CVE-2020-12422 (bmo#1450353)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3052
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3053
  * CVE-2020-12423 (bmo#1642400)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3054
    DLL Hijacking due to searching %PATH% for a library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3055
  * CVE-2020-12424 (bmo#1562600)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3056
    WebRTC permission prompt could have been bypassed by a
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3057
    compromised content process
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3058
  * CVE-2020-12425 (bmo#1634738)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3059
    Out of bound read in Date.parse()
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3060
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187, bmo#1637682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3061
    Memory safety bugs fixed in Firefox 78
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3062
- requires
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3063
  * NSS >= 3.53.1
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3064
  * nodejs >= 10.21
1133
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
  3065
  * Gtk+3 >= 3.14
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3066
- removed obsolete patches
1133
0a44f639e5ee removed obsolete patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1132
diff changeset
  3067
  * mozilla-s390-bigendian.patch
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3068
  * mozilla-bmo1634646.patch
1134
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3069
- Add mozilla-pipewire-0-3.patch for openSUSE >= 15.2 to build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3070
  WebRTC with pipewire support to enable screen sharing under
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3071
  Wayland; also add BuildRequires: pkgconfig(libpipewire-0.3)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1133
diff changeset
  3072
  appropriately (boo#1172903).
1138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3073
- adding SLE12 compatibility in spec file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3074
- add patches for s390x
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3075
  * mozilla-bmo1602730.patch (bmo#1602730)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3076
  * mozilla-bmo1626236.patch (bmo#1626236)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3077
  * mozilla-bmo998749.patch (bmo#998749)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3078
  * mozilla-s390x-skia-gradient.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3079
- update create-tar.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1137
diff changeset
  3080
- Use same _constraints for ppc64 (BE) as ppc64le to avoid oom build failure
1131
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3081
4a5aa8293178 78.0b5 building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1128
diff changeset
  3082
-------------------------------------------------------------------
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3083
Wed Jun 10 07:17:15 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3084
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3085
- Exclude armv6, since it is unbuildable since about 3 years
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3086
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3087
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3088
Wed Jun  3 21:39:11 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3089
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3090
- Mozilla Firefox 77.0.1
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3091
  * Disable automatic selection of DNS over HTTPS providers during
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3092
    a test to enable wider deployment in a more controlled way
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3093
    (bmo#1642723)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3094
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3095
-------------------------------------------------------------------
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3096
Fri May 29 11:49:36 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3097
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3098
- Mozilla Firefox 77.0
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3099
  * view and manage web certificates more easily on the new
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3100
    about:certificate page
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3101
  * improvements in accessibility
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3102
  * significant improvements to JavaScript debugging
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3103
  MFSA 2020-20 (bsc#1172402)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3104
  * CVE-2020-12399 (bmo#1631576)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3105
    Timing attack on DSA signatures in NSS library
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3106
    (fixed with external NSS >= 3.52.1)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3107
  * CVE-2020-12405 (bmo#1631618)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3108
    Use-after-free in SharedWorkerService
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3109
  * CVE-2020-12406 (bmo#1639590)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3110
    JavaScript type confusion with NativeTypes
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3111
  * CVE-2020-12407 (bmo#1637112)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3112
    WebRender leaking GPU memory when using border-image CSS
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3113
    directive
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3114
  * CVE-2020-12408 (bmo#1623888)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3115
    URL spoofing when using IP addresses
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3116
  * CVE-2020-12409 (bmo#1619305, bmo#1632717)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3117
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3118
  * CVE-2020-12411 (bmo#1620972, bmo#1625333)
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3119
    Memory safety bugs fixed in Firefox 77
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3120
- requires
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3121
  * NSS >= 3.52.1
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3122
  * rust-cbindgen >= 1.14.1
1128
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3123
  * clang >= 5
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3124
- added mozilla-bmo1634646.patch as part of fixing PGO build
0d95fa645411 Firefox 77.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1127
diff changeset
  3125
  (still not working)
1127
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3126
d5b284f833d5 Firefox 77.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1126
diff changeset
  3127
-------------------------------------------------------------------
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3128
Wed May 13 12:21:13 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3129
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3130
- change again _constraints for ppc64le use <physicalmemory>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3131
  and increase limit_build in spec file to reduce max_jobs.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3132
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3133
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3134
Sat May  9 11:45:39 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3135
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3136
- Mozilla Firefox 76.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3137
  * Fixed a bug causing some add-ons such as Amazon Assistant to see
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3138
    multiple onConnect events, impairing functionality (bmo#1635637)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3139
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3140
-------------------------------------------------------------------
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3141
Fri May  1 11:59:58 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3142
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3143
- Mozilla Firefox 76.0
1126
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3144
  * Lockwise improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3145
  * Improvements in Picture-in-Picture feature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3146
  * Support Audio Worklets
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3147
  MFSA-2020-16 (bsc#1171186)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3148
  * CVE-2020-12387 (bmo#1545345)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3149
    Use-after-free during worker shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3150
  * CVE-2020-12388 (bmo#1618911)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3151
    Sandbox escape with improperly guarded Access Tokens
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3152
  * CVE-2020-12389 (bmo#1554110)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3153
    Sandbox escape with improperly separated process types
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3154
  * CVE-2020-6831 (bmo#1632241)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3155
    Buffer overflow in SCTP chunk input validation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3156
  * CVE-2020-12390 (bmo#1141959)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3157
    Incorrect serialization of nsIPrincipal.origin for IPv6 addresses
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3158
  * CVE-2020-12391 (bmo#1457100)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3159
    Content-Security-Policy bypass using object elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3160
  * CVE-2020-12392 (bmo#1614468)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3161
    Arbitrary local file access with 'Copy as cURL'
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3162
  * CVE-2020-12393 (bmo#1615471)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3163
    Devtools' 'Copy as cURL' feature did not fully escape
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3164
    website-controlled data, potentially leading to command injection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3165
  * CVE-2020-12394 (bmo#1628288)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3166
    URL spoofing in location bar when unfocussed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3167
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704, bmo#1624098,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3168
    bmo#1625749, bmo#1626382, bmo#1628076, bmo#1631508)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3169
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3170
  * CVE-2020-12396 (bmo#1339601, bmo#1611938, bmo#1620488,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3171
    bmo#1622291, bmo#1627644)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1125
diff changeset
  3172
    Memory safety bugs fixed in Firefox 76
1125
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3173
- requires
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3174
  * NSS >= 3.51.1
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3175
  * nasm >= 2.14
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3176
- removed obsolete patch mozilla-bmo1622013.patch
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3177
- fix URI creation for KDE file selector integration (boo#1160331)
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3178
3fd9346c90a6 Firefox 76.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1124
diff changeset
  3179
-------------------------------------------------------------------
1124
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3180
Tue Apr  7 12:18:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3181
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3182
- Mozilla Firefox 75.0
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3183
  * https://www.mozilla.org/en-US/firefox/75.0/releasenotes
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3184
  MFSA 2020-12 (bsc#1168874)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3185
  * CVE-2020-6821 (bmo#1625404)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3186
    Uninitialized memory could be read when using the WebGL
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3187
    copyTexSubImage method
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3188
  * CVE-2020-6822 (bmo#1544181)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3189
    Out of bounds write in GMPDecodeData when processing large images
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3190
  * CVE-2020-6823 (bmo#1614919)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3191
    Malicious Extension could obtain auth codes from OAuth login flows
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3192
  * CVE-2020-6824 (bmo#1621853)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3193
    Generated passwords may be identical on the same site between
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3194
    separate private browsing sessions
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3195
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3196
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3197
  * CVE-2020-6826 (bmo#1613009,bmo#1613195,bmo#1616734,bmo#1617488,
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3198
    bmo#1619229,bmo#1620719,bmo#1624897)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3199
    Memory safety bugs fixed in Firefox 75
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3200
- removed obsolete patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3201
  mozilla-bmo1609538.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3202
- requires
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3203
  * rust >= 1.41
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3204
  * rust-cbindgen >= 0.13.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3205
  * mozilla-nss >= 3.51
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3206
  * nodejs10 >= 10.19
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3207
- fix build issue in libvpx for i586 via mozilla-bmo1622013.patch
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3208
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3209
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3210
Mon Apr  6 11:19:24 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3211
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3212
- increase _constraints memory for ppc64le
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3213
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3214
-------------------------------------------------------------------
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3215
Fri Apr  3 15:23:28 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3216
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3217
- Mozilla Firefox 74.0.1
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3218
  MFSA 2020-11 (boo#1168630)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3219
  * CVE-2020-6819 (bmo#1620818)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3220
    Use-after-free while running the nsDocShell destructor
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3221
  * CVE-2020-6820 (bmo#1626728)
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3222
    Use-after-free when handling a ReadableStream
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3223
f890ebd6b627 Firefox 75.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1123
diff changeset
  3224
-------------------------------------------------------------------
1123
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3225
Wed Mar 25 07:30:39 UTC 2020 - Marcus Meissner <meissner@suse.com>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3226
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3227
- mozilla-sandbox-fips.patch: allow /proc/sys/crypto/fips_enabled
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3228
  to be read, as openssl 1.1.1 FIPS aborts if it cannot access it
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3229
  (bsc#1167132)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3230
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3231
-------------------------------------------------------------------
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3232
Sat Mar  7 08:51:06 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3233
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3234
- Mozilla Firefox 74.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3235
  * https://www.mozilla.org/en-US/firefox/74.0/releasenotes/
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3236
  MFSA 2020-08 (bsc#1166238)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3237
  * CVE-2020-6805 (bmo#1610880)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3238
    Use-after-free when removing data about origins
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3239
  * CVE-2020-6806 (bmo#1612308)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3240
    BodyStream::OnInputStreamReady was missing protections against
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3241
    state confusion
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3242
  * CVE-2020-6807 (bmo#1614971)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3243
    Use-after-free in cubeb during stream destruction
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3244
  * CVE-2020-6808 (bmo#1247968)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3245
    URL Spoofing via javascript: URL
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3246
  * CVE-2020-6809 (bmo#1420296)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3247
    Web Extensions with the all-urls permission could access local
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3248
    files
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3249
  * CVE-2020-6810 (bmo#1432856)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3250
    Focusing a popup while in fullscreen could have obscured the
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3251
    fullscreen notification
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3252
  * CVE-2020-6811 (bmo#1607742)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3253
    Devtools' 'Copy as cURL' feature did not fully escape
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3254
    website-controlled data, potentially leading to command injection
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3255
  * CVE-2019-20503 (bmo#1613765)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3256
    Out of bounds reads in sctp_load_addresses_from_init
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3257
  * CVE-2020-6812 (bmo#1616661)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3258
    The names of AirPods with personally identifiable information
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3259
    were exposed to websites with camera or microphone permission
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3260
  * CVE-2020-6813 (bmo#1605814)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3261
    @import statements in CSS could bypass the Content Security
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3262
    Policy nonce feature
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3263
  * CVE-2020-6814 (bmo#1592078,bmo#1604847,bmo#1608256,bmo#1612636,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3264
    bmo#1614339)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3265
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3266
  * CVE-2020-6815 (bmo#1181957,bmo#1557732,bmo#1557739,bmo#1611457,
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3267
    bmo#1612431)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3268
    Memory and script safety bugs fixed in Firefox 74
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3269
- requires
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3270
  * NSPR 4.25
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3271
  * NSS 3.50
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3272
  * rust-cbindgen 0.13.0
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3273
- removed obsolete patches
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3274
  mozilla-bmo1610814.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3275
  mozilla-cubeb-noreturn.patch
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3276
- add mozilla-bmo1609538.patch to fix wayland issues with mutter 3.36
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3277
  (bmo#1609538, boo#1166471)
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3278
7fa561e5d7c7 Firefox 74.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1122
diff changeset
  3279
-------------------------------------------------------------------
1122
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3280
Wed Feb 26 08:12:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3281
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3282
- big endian fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3283
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3284
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3285
Tue Feb 25 14:17:00 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3286
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3287
- Fix build on aarch64/armv7 with:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3288
  * mozilla-bmo1610814.patch (boo#1164845, bmo#1610814)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3289
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3290
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3291
Thu Feb 20 13:40:59 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3292
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3293
- Mozilla Firefox 73.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3294
  * Resolved problems connecting to the RBC Royal Bank website
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3295
    (bmo#1613943)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3296
  * Fixed Firefox unexpectedly exiting when leaving Print Preview mode
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3297
    (bmo#1611133)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3298
  * Fixed crashes when playing encrypted content on some Linux systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3299
    (bmo#1614535, boo#1164646)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3300
- start in wayland mode when running under wayland session
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3301
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1121
diff changeset
  3302
-------------------------------------------------------------------
1121
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3303
Sun Feb  9 07:45:00 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3304
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3305
- Mozilla Firefox 73.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3306
  * Added support for setting a default zoom level applicable for all
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3307
    web content
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3308
  * High-contrast mode has been updated to allow background images
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3309
  * Improved audio quality when playing back audio at a faster or
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3310
    slower speed
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3311
  * Added NextDNS as alternative option for DNS over HTTPS
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3312
  MFSA 2020-05 (bsc#1163368)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3313
  * CVE-2020-6796 (bmo#1610426)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3314
    Missing bounds check on shared memory read in the parent process
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3315
  * CVE-2020-6797 (bmo#1596668) (MacOS X only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3316
    Extensions granted downloads.open permission could open arbitrary
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3317
    applications on Mac OSX
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3318
  * CVE-2020-6798 (bmo#1602944)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3319
    Incorrect parsing of template tag could result in JavaScript injection
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3320
  * CVE-2020-6799 (bmo#1606596) (Windows only)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3321
    Arbitrary code execution when opening pdf links from other
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3322
    applications, when Firefox is configured as default pdf reader
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3323
  * CVE-2020-6800 (bmo#1595786,bmo#1596706,bmo#1598543,bmo#1604851,
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3324
    bmo#1608580,bmo#1608785,bmo#1605777)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3325
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3326
  * CVE-2020-6801 (bmo#1601024,bmo#1601712,bmo#1604836,bmo#1606492)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3327
    Memory safety bugs fixed in Firefox 73
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3328
- updated requirements
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3329
  * rust >= 1.39
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3330
  * NSS >= 3.49.2
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3331
  * rust-cbindgen >= 0.12.0
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3332
- rebased patches
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3333
- removed obsolete patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3334
  * mozilla-bmo1601707.patch
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3335
- switched to cairo-gtk3-wayland build
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3336
  (to fully enable wayland MOZ_ENABLE_WAYLAND=1 needs to be set)
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3337
- disabled elfhack due to failing packager
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3338
  https://github.com/openSUSE/firefox-maintenance/issues/28
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3339
- disabled PGO due to build failure
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3340
  https://github.com/openSUSE/firefox-maintenance/issues/29
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3341
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3342
-------------------------------------------------------------------
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3343
Tue Jan 28 07:30:16 UTC 2020 - Stasiek Michalski <stasiek@michalski.cc>
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3344
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3345
- Use a symbolic icon from branding internals
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3346
- Pixmaps no longer required for the desktops
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3347
004e4b1efb26 Firefox 73.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1120
diff changeset
  3348
-------------------------------------------------------------------
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3349
Wed Jan 22 10:30:21 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3350
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3351
- Mozilla Firefox 72.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3352
  * Various stability fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3353
  * Fixed issues opening files with spaces in their path (bmo#1601905)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3354
  * Fixed a hang opening about:logins when a master password is set
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3355
    (bmo#1606992)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3356
  * Fixed a web compatibility issue with CSS Shadow Parts which
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3357
    shipped in Firefox 72 (bmo#1604989)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3358
  * Fixed inconsistent playback performance for fullscreen 1080p
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3359
    videos on some systems (bmo#1608485)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3360
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3361
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3362
Tue Jan 21 12:59:54 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3363
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3364
- Fix build for aarch64/ppc64le (do not update config.sub file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3365
  for libbacktrace)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3366
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3367
-------------------------------------------------------------------
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3368
Wed Jan  8 08:19:12 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3369
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3370
- Mozilla Firefox 72.0.1
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3371
  MFSA 2020-03 (bsc#1160498)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3372
  * CVE-2019-17026 (bmo#1607443)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3373
    IonMonkey type confusion with StoreElementHole and FallibleStoreElement
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3374
- Mozilla Firefox 72.0
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3375
  * block fingerprinting scripts by default
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3376
  * new notification pop-ups
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3377
  * Picture-in-picture video
1120
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1119
diff changeset
  3378
  MFSA 2020-01 (bsc#1160305)
1119
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3379
  * CVE-2019-17016 (bmo#1599181)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3380
    Bypass of @namespace CSS sanitization during pasting
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3381
  * CVE-2019-17017 (bmo#1603055)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3382
    Type Confusion in XPCVariant.cpp
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3383
  * CVE-2019-17020 (bmo#1597645)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3384
    Content Security Policy not applied to XSL stylesheets applied
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3385
    to XML documents
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3386
  * CVE-2019-17022 (bmo#1602843)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3387
    CSS sanitization does not escape HTML tags
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3388
  * CVE-2019-17023 (bmo#1590001) (fixed in NSS FIXME)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3389
    NSS may negotiate TLS 1.2 or below after a TLS 1.3
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3390
    HelloRetryRequest had been sent
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3391
  * CVE-2019-17024 (bmo#1507180,bmo#1595470,bmo#1598605,bmo#1601826)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3392
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3393
  * CVE-2019-17025 (bmo#1328295,bmo#1328300,bmo#1590447,bmo#1590965
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3394
    bmo#1595692,bmo#1597321,bmo#1597481)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3395
    Memory safety bugs fixed in Firefox 72
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3396
- update create-tar.sh to skip compare-locales
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3397
- requires NSPR 4.24 and NSS 3.48
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3398
- removed usage of browser-plugins convention for NPAPI plugins
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3399
  from start wrapper and changed the RPM macro to the
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3400
  /usr/$LIB/mozilla/plugins location (boo#1160302)
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3401
4c5d44d40a03 Firefox 72.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1118
diff changeset
  3402
-------------------------------------------------------------------
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3403
Mon Dec  2 08:24:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3404
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3405
- Mozilla Firefox 71.0
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3406
  * Improvements to Lockwise, our integrated password manager
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3407
  * More information about Enhanced Tracking Protection in action
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3408
  * Native MP3 decoding on Windows, Linux, and macOS
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3409
  * Configuration page (about:config) reimplemented in HTML
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3410
  * New kiosk mode functionality, which allows maximum screen space
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3411
    for customer-facing displays
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3412
  MFSA 2019-36
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3413
  * CVE-2019-11756 (bmo#1508776)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3414
    Use-after-free of SFTKSession object
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3415
  * CVE-2019-17008 (bmo#1546331)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3416
    Use-after-free in worker destruction
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3417
  * CVE-2019-13722 (bmo#1580156) (Windows only)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3418
    Stack corruption due to incorrect number of arguments in WebRTC code
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3419
  * CVE-2019-17014 (bmo#1322864)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3420
    Dragging and dropping a cross-origin resource, incorrectly loaded
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3421
    as an image, could result in information disclosure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3422
  * CVE-2019-17010 (bmo#1581084)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3423
    Use-after-free when performing device orientation checks
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3424
  * CVE-2019-17005 (bmo#1584170)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3425
    Buffer overflow in plain text serializer
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3426
  * CVE-2019-17011 (bmo#1591334)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3427
    Use-after-free when retrieving a document in antitracking
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3428
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667, bmo#1567209
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3429
    bmo#1580288, bmo#1585760, bmo#1592502)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3430
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3431
  * CVE-2019-17013 (bmo#1298509, bmo#1472328, bmo#1577439, bmo#1577937
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3432
    bmo#1580320, bmo#1584195, bmo#1585106, bmo#1586293, bmo#1593865
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3433
    bmo#1594181)
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3434
    Memory safety bugs fixed in Firefox 71
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3435
- requires
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3436
  NSPR >= 4.23
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3437
  NSS >= 3.47.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3438
  rust/cargo >= 1.37
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3439
- reactivate webrtc for platforms where it was disabled
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3440
- updated create-tar.sh to cover buildid and origin repo information
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3441
  -> removed obsolete source-stamp.txt
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3442
- removed obsolete patches
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3443
  mozilla-bmo1511604.patch
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3444
  mozilla-openaes-decl.patch
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3445
- changed locale building procedure
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3446
  * removed obsolete compare-locales.tar.xz
1118
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
  3447
- added mozilla-bmo1601707.patch to fix gcc/LTO builds
27c3f029180a latest 71.0 revision
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1117
diff changeset
  3448
  (bmo#1601707, boo#1158466)
1117
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3449
- added mozilla-bmo849632.patch to fix big endian issues in skia
d6a688186de0 beta -> release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1114
diff changeset
  3450
  used for WebGL
1114
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3451
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3452
-------------------------------------------------------------------
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3453
Fri Nov  1 14:16:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3454
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3455
- Mozilla Firefox 70.0.1
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3456
  * Fix for an issue that caused some websites or page elements using
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3457
    dynamic JavaScript to fail to load. (bmo#1592136)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3458
  * Title bar no longer shows in full screen view (bmo#1588747)
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3459
- added mozilla-bmo1504834-part4.patch to fix some visual issues on
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3460
  big endian platforms
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3461
572ec48f3fe8 Firefox 71.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1112
diff changeset
  3462
-------------------------------------------------------------------
1112
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3463
Sun Oct 20 20:19:31 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3464
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3465
- Mozilla Firefox 70.0
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3466
  * more privacy protections from Enhanced Tracking Protection
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3467
  * Firefox Lockwise passwordmanager
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3468
  * Improvements to core engine components, for better browsing on more sites
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3469
  * Improved privacy and security indicators
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3470
  MFSA 2019-34
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3471
  * CVE-2018-6156 (bmo#1480088)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3472
    Heap buffer overflow in FEC processing in WebRTC
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3473
  * CVE-2019-15903 (bmo#1584907)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3474
    Heap overflow in expat library in XML_GetCurrentLineNumber
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3475
  * CVE-2019-11757 (bmo#1577107)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3476
    Use-after-free when creating index updates in IndexedDB
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3477
  * CVE-2019-11759 (bmo#1577953)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3478
    Stack buffer overflow in HKDF output
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3479
  * CVE-2019-11760 (bmo#1577719)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3480
    Stack buffer overflow in WebRTC networking
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3481
  * CVE-2019-11761 (bmo#1561502)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3482
    Unintended access to a privileged JSONView object
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3483
  * CVE-2019-11762 (bmo#1582857)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3484
    document.domain-based origin isolation has same-origin-property violation
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3485
  * CVE-2019-11763 (bmo#1584216)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3486
    Incorrect HTML parsing results in XSS bypass technique
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3487
  * CVE-2019-11765 (bmo#1562582)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3488
    Incorrect permissions could be granted to a website
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3489
  * CVE-2019-17000 (bmo#1441468)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3490
    CSP bypass using object tag with data: URI
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3491
  * CVE-2019-17001 (bmo#1587976)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3492
    CSP bypass using object tag when script-src 'none' is specified
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3493
  * CVE-2019-17002 (bmo#1561056)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3494
    upgrade-insecure-requests was not being honored for links dragged and dropped
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3495
  * CVE-2019-11764 (bmo#1558522, bmo#1577061, bmo#1548044, bmo#1571223,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3496
    bmo#1573048, bmo#1578933, bmo#1575217, bmo#1583684, bmo#1586845, bmo#1581950,
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3497
    bmo#1583463, bmo#1586599)
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3498
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3499
- requires
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3500
    rust/cargo >= 1.36
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3501
    NSPR >= 4.22
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3502
    NSS >= 3.46.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3503
    rust-cbindgen >= 0.9.1
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3504
- removed obsolete patches
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3505
    mozilla-bmo1573381.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3506
    mozilla-nestegg-big-endian.patch
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3507
8a4f5aea2475 Firefox 70.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1111
diff changeset
  3508
-------------------------------------------------------------------
1111
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3509
Sun Oct 13 08:58:12 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3510
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3511
- Mozilla Firefox 69.0.3
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3512
  * Fixed Yahoo mail users being prompted to download files when
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3513
    clicking on emails (bmo#1582848)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3514
- devel package build can easily be disabled now
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3515
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3516
-------------------------------------------------------------------
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3517
Thu Oct  3 08:40:05 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3518
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3519
- Mozilla Firefox 69.0.2
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3520
  * Fixed a crash when editing files on Office 365 websites (bmo#1579858)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3521
  * Fixed a Linux-only crash when changing the playback speed while
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3522
    watching YouTube videos (bmo#1582222)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3523
- updated supported locale list
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3524
- Allow to build without profile guided optimizations (boo#1040589)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3525
  (contributed by Bernhard Wiedemann)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3526
- Make build verbose (contributed by Martin Liška)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3527
- remove obsolete kde.js setting (boo#1151186) and related patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3528
  firefox-add-kde.js-in-order-to-survive-PGO-build.patch
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3529
- update create-tar.sh to latest revision and adjusted tar_stamps
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3530
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3531
- extension preferences moved from branding package to core package
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3532
  (packaging but not branding specific)
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3533
97a6da6d7e29 Firefox 69.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1110
diff changeset
  3534
-------------------------------------------------------------------
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3535
Thu Sep 19 13:31:16 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3536
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3537
- Mozilla Firefox 69.0.1
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3538
  * Fixed external programs launching in the background when clicking
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3539
    a link from inside Firefox to launch them (bmo#1570845)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3540
  * Usability improvements to the Add-ons Manager for users with
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3541
    screen readers (bmo#1567600)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3542
  * Fixed the Captive Portal notification bar not being dismissable
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3543
    in some situations after login is complete (bmo#1578633)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3544
  * Fixed the maximum size of fonts in Reader Mode when zoomed (bmo#1578454)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3545
  * Fixed missing stacks in the Developer Tools Performance section
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3546
    (bmo#1578354)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3547
  MFSA 2019-31
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3548
  * CVE-2019-11754 (bmo#1580506)
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3549
    Pointer Lock is enabled with no user notification
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3550
- disable DOH by default
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3551
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3552
-------------------------------------------------------------------
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3553
Thu Sep  5 13:02:39 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3554
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3555
- Mozilla Firefox 69.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3556
  * Enhanced Tracking Protection (ETP) for stronger privacy protections
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3557
  * Block Autoplay feature is enhanced to give users the option to block
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3558
    any video
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3559
  * Users in the US or using the en-US browser, can get a new “New Tab”
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3560
    page experience connecting to the best of Pocket's content.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3561
  * Support for the Web Authentication HmacSecret extension via
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3562
    Windows Hello introduced.
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3563
  * Support for receiving multiple video codecs with this release makes
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3564
    it easier for WebRTC conferencing services to mix video from
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3565
    different clients.
1107
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3566
  MFSA 2019-25 (boo#1149324)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3567
  * CVE-2019-11741 (bmo#1539595)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3568
    Isolate addons.mozilla.org and accounts.firefox.com
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3569
  * CVE-2019-5849 (bmo#1555838)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3570
    Out-of-bounds read in Skia
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3571
  * CVE-2019-11737 (bmo#1388015)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3572
    Content security policy directives ignore port and path if host is a wildcard
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3573
  * CVE-2019-11734 (bmo#1352875,bmo#1536227,bmo#1557208,bmo#1560641)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3574
    Memory safety bugs fixed in Firefox 69
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3575
  * CVE-2019-11735 (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3576
    bmo#1565744,bmo#1568858,bmo#1570358)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3577
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3578
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
a2aa55e10564 Firefox 69 as submitted to TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1106
diff changeset
  3579
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
1106
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3580
- requires
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3581
  * rust/cargo >= 1.35
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3582
  * rust-cbindgen >= 0.9.0
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3583
  * mozilla-nss >= 3.45
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3584
- rebased patches
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3585
6c6375987b6c rebased
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1101
diff changeset
  3586
-------------------------------------------------------------------
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3587
Wed Sep  4 15:38:40 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3588
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3589
- added a bunch of patches mainly for big endian platforms
1109
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
  3590
  * mozilla-bmo1504834-part1.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
  3591
  * mozilla-bmo1504834-part2.patch
972f68ac6b1a Firefox 69.0 as released to Factory/Tumbleweed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1108
diff changeset
  3592
  * mozilla-bmo1504834-part3.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3593
  * mozilla-bmo1511604.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3594
  * mozilla-bmo1554971.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3595
  * mozilla-bmo1573381.patch
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3596
  * mozilla-nestegg-big-endian.patch
1110
9e4b30f05706 Firefox 69.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1109
diff changeset
  3597
  * mozilla-bmo1512162.patch
1101
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3598
a4709640638e added several arch specific (mainly BE) patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1100
diff changeset
  3599
-------------------------------------------------------------------
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3600
Fri Aug 30 20:49:11 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3601
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3602
- Mozilla Firefox 68.1.0
1100
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3603
  MFSA 2019-26
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3604
  * CVE-2019-11751 (bmo#1572838; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3605
    Malicious code execution through command line parameters
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3606
  * CVE-2019-11746 (bmo#1564449)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3607
    Use-after-free while manipulating video
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3608
  * CVE-2019-11744 (bmo#1562033)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3609
    XSS by breaking out of title and textarea elements using innerHTML
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3610
  * CVE-2019-11742 (bmo#1559715)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3611
    Same-origin policy violation with SVG filters and canvas to steal
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3612
    cross-origin images
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3613
  * CVE-2019-11736 (bmo#1551913, bmo#1552206; Windows only))
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3614
    File manipulation and privilege escalation in Mozilla Maintenance Service
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3615
  * CVE-2019-11753 (bmo#1574980; Windows only)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3616
    Privilege escalation with Mozilla Maintenance Service in custom
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3617
    Firefox installation location
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3618
  * CVE-2019-11752 (bmo#1501152)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3619
    Use-after-free while extracting a key value in IndexedDB
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3620
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3621
    Sandbox escape through Firefox Sync
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3622
  * CVE-2019-11743 (bmo#1560495)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3623
    Cross-origin access to unload event attributes
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3624
  * CVE-2019-11748 (bmo#1564588)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3625
    Persistence of WebRTC permissions in a third party context
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3626
  * CVE-2019-11749 (bmo#1565374)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3627
    Camera information available without prompting using getUserMedia
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3628
  * CVE-2019-11750 (bmo#1568397)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3629
    Type confusion in Spidermonkey
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3630
  * CVE-2019-11738 (bmo#1452037)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3631
    Content security policy bypass through hash-based sources in directives
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3632
  * CVE-2019-11747 (bmo#1564481)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3633
    'Forget about this site' removes sites from pre-loaded HSTS list
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3634
  * CVE-2019-11735i (bmo#1561404,bmo#1561484,bmo#1568047,bmo#1561912,
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3635
    bmo#1565744,bmo#1568858,bmo#1570358)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3636
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3637
  * CVE-2019-11740 (bmo#1563133,bmo#1573160)
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3638
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9
e1c5065a014f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1099
diff changeset
  3639
- switched package to ESR branch
1099
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3640
- added mozilla-bmo1568145.patch to make builds reproducible
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3641
- removed upstreamed patch mozilla-gcc-internal-compiler-error.patch
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3642
8a3c73e74e65 68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate68.1.0 candidate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1098
diff changeset
  3643
-------------------------------------------------------------------
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3644
Sun Aug 18 17:29:25 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3645
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3646
- Mozilla Firefox 68.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3647
  * Fixed a bug causing some special characters to be cut off from
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3648
    the end of the search terms when searching from the URL bar
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3649
    (bmo#1560228)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3650
  * Allow fonts to be loaded via file:// URLs when opening a page
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3651
    locally (bmo#1565942)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3652
  * Printing emails from the Outlook web app no longer prints only
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3653
    the header and footer (bmo#1567105)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3654
  * Fixed a bug causing some images not to be displayed on reload,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3655
    including on Google Maps (bmo# 1565542)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3656
  * Fixed an error when starting external applications configured
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3657
    as URI handlers (bmo#1567614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3658
  MFSA 2019-24 (boo#1145665)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3659
  * CVE-2019-11733: Stored passwords in 'Saved Logins' can be
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3660
    copied without master password entry (bmo#1565780)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3661
- drop fix-build-after-y2038-changes-in-glibc.patch, upstream
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3662
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3663
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3664
Fri Aug 16 16:49:24 UTC 2019 - Jonathan Brielmaier <jbrielmaier@suse.de>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3665
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3666
- Fix crash when typing in the URL bar on ppc64le (bmo#1512162).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3667
  The upstream patch doesn't resolve the issue on TW, but compiling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3668
  with -O1 does. Do this until we have a proper fix.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3669
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3670
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3671
Thu Aug  1 14:25:02 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3672
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3673
- Update build constraints to fix arm builds
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3674
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3675
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3676
Fri Jul 19 08:11:27 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3677
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3678
- Mozilla Firefox 68.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3679
  * Fixed missing Full Screen button when watching videos in full
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3680
    screen mode on HBO GO (bmo#1562837)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3681
  * Fixed a bug causing incorrect messages to appear for some
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3682
    locales when sites try to request the use of the Storage
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3683
    Access API (bmo#1558503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3684
  * Users in Russian regions may have their default search engine
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3685
    changed (bmo#1565315)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3686
  * Built-in search engines in some locales do not function
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3687
    correctly (bmo#1565779)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3688
  * SupportMenu policy doesn't always work (bmo#1553290)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3689
  * Allow the privacy.file_unique_origin pref to be controlled by
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3690
    policy (bmo#1563759)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3691
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3692
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3693
Thu Jul 11 10:51:39 UTC 2019 - Jiri Slaby <jslaby@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3694
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3695
- add fix-build-after-y2038-changes-in-glibc.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3696
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3697
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3698
Wed Jul 10 13:47:41 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3699
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3700
- Generate langpacks sequentially to avoid file corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3701
  from racy file writes (boo#1137970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3702
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3703
-------------------------------------------------------------------
1097
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3704
Mon Jul  8 13:30:35 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3705
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3706
- Mozilla Firefox 68.0
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3707
  * Dark mode in reader view
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3708
  * Improved extension security and discovery
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3709
  * Cryptomining and fingerprinting protections are added to strict
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3710
    content blocking settings in Privacy & Security preferences
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3711
  * Camera and microphone access now require an HTTPS connection
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3712
  MFSA 2019-21 (bsc#1140868)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3713
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3714
    Sandbox escape via installation of malicious languagepack
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3715
  * CVE-2019-11711 (bmo#1552541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3716
    Script injection within domain through inner window reuse
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3717
  * CVE-2019-11712 (bmo#1543804)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3718
    Cross-origin POST requests can be made with NPAPI plugins by
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3719
    following 308 redirects
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3720
  * CVE-2019-11713 (bmo#1528481)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3721
    Use-after-free with HTTP/2 cached stream
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3722
  * CVE-2019-11714 (bmo#1542593)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3723
    NeckoChild can trigger crash when accessed off of main thread
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3724
  * CVE-2019-11729 (bmo#1515342)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3725
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3726
  * CVE-2019-11715 (bmo#1555523)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3727
    HTML parsing error can contribute to content XSS
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3728
  * CVE-2019-11716 (bmo#1552632)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3729
    globalThis not enumerable until accessed
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3730
  * CVE-2019-11717 (bmo#1548306)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3731
    Caret character improperly escaped in origins
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3732
  * CVE-2019-11718 (bmo#1408349)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3733
    Activity Stream writes unsanitized content to innerHTML
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3734
  * CVE-2019-11719 (bmo#1540541)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3735
    Out-of-bounds read when importing curve25519 private key
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3736
  * CVE-2019-11720 (bmo#1556230)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3737
    Character encoding XSS vulnerability
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3738
  * CVE-2019-11721 (bmo#1256009)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3739
    Domain spoofing through unicode latin 'kra' character
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3740
  * CVE-2019-11730 (bmo#1558299)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3741
    Same-origin policy treats all files in a directory as having the
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3742
    same-origin
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3743
  * CVE-2019-11723 (bmo#1528335)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3744
    Cookie leakage during add-on fetching across private browsing boundaries
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3745
  * CVE-2019-11724 (bmo#1512511)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3746
    Retired site input.mozilla.org has remote troubleshooting permissions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3747
  * CVE-2019-11725 (bmo#1483510)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3748
    Websocket resources bypass safebrowsing protections
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3749
  * CVE-2019-11727 (bmo#1552208)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3750
    PKCS#1 v1.5 signatures can be used for TLS 1.3
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3751
  * CVE-2019-11728 (bmo#1552993)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3752
    Port scanning through Alt-Svc header
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3753
  * CVE-2019-11710 (bmo#1549768, bmo#1548611, bmo#1533842, bmo#1537692,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3754
    bmo#1540590, bmo#1551907, bmo#1510345, bmo#1535482, bmo#1535848,
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3755
    bmo#1547472, bmo#1547760, bmo#1507696, bmo#1544180)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3756
    Memory safety bugs fixed in Firefox 68
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3757
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3758
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3759
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3760
- requires
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3761
  * NSS 3.44.1
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3762
  * rust/cargo 1.34
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3763
  * rust-cbindgen 0.8.7
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3764
- rebased patches
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3765
  * mozilla-aarch64-startup-crash.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3766
  * mozilla-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3767
  * mozilla-nongnome-proxies.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3768
  * firefox-kde.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3769
- use new create-tar.sh and add tar_stamps for package definitions
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3770
- added patches imported from SLE flavour
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3771
  * mozilla-gcc-internal-compiler-error.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3772
  * mozilla-bmo1005535.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3773
  * mozilla-ppc-altivec_static_inline.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3774
  * mozilla-reduce-rust-debuginfo.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3775
  * mozilla-s390-bigendian.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3776
  * mozilla-s390-context.patch
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3777
840132a4a9b3 Firefox 68.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1096
diff changeset
  3778
-------------------------------------------------------------------
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3779
Mon Jul  2 14:15:17 UTC 2019 - Martin Liška <mliska@suse.cz>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3780
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3781
- Enable PGO for x86_64.
1098
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1097
diff changeset
  3782
  * added firefox-add-kde.js-in-order-to-survive-PGO-build.patch
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3783
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3784
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3785
Thu Jun 20 06:20:59 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3786
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3787
- Mozilla Firefox 67.0.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3788
  MFSA 2019-19 (boo#1138872)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3789
  * CVE-2019-11708 (bmo#1559858)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3790
    sandbox escape using Prompt:Open
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3791
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3792
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3793
Tue Jun 18 18:36:15 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3794
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3795
- Mozilla Firefox 67.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3796
  MFSA 2019-18 (boo#1138614)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3797
  * CVE-2019-11707 (bmo#1544386)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3798
    Type confusion in Array.pop
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3799
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3800
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3801
Thu Jun 12 14:56:32 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3802
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3803
- Mozilla Firefox 67.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3804
  * Fixed: Fix JavaScript error ("TypeError: data is null in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3805
    PrivacyFilter.jsm") in console which may significantly degrade
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3806
    sessionstore reliability and performance (bmo#1553413)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3807
  * Fixed: Proxy authentication dialog box repeatedly pops up
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3808
    asking to authenticate after upgrading to Firefox 67 (bmo#1548804)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3809
  * Fixed: Pearson MyCloud breaks if FIDO U2F is not Chrome's
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3810
    implementation (bmo#1551282)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3811
  * Fixed: Starting in safe mode on Linux or macOS causes Firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3812
    to think on the subsequent launch that the profile is too
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3813
    recent to be used with this version of Firefox (bmo#1556612)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3814
  * Fixed: Linux distribution users can't easily install/use
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3815
    additional/different languages using the built-in preferences
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3816
    UI (bmo#1554744)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3817
  * Fixed: Developer tools users can't copy the href/src content
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3818
    from various HTML tags via the context menu in the Inspector
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3819
    markup view (bmo#1552275)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3820
  * Fixed: Custom home page is broken with clearing data on shutdown
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3821
    settings applied (bmo#1554167)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3822
  * Fixed: Performance-regression for eclipse RAP based applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3823
    (bmo#1555962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3824
  * Fixed: macOS 10.15 crash fix (bmo#1556076)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3825
  * Fixed: Can't start two downloads in parallel via <a download>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3826
    anymore (bmo#1542912)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3827
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3828
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3829
Thu Jun  6 06:49:51 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3830
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3831
- Mozilla Firefox 67.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3832
  * enable enhanced tracking protection by default for new users
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3833
  * upgrade of Facebook container to version 2.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3834
  * new version of Firefox Lockwise (password management)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3835
  * new version of Firefox Monitor
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3836
  * Firefox Send improvements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3837
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3838
-------------------------------------------------------------------
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3839
Sun May 19 20:40:30 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
1093
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3840
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3841
- Mozilla Firefox 67.0
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3842
  * Firefox 67 will be able to run different Firefox installs side by side
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3843
    https://blog.nightly.mozilla.org/2019/01/14/moving-to-a-profile-per-install-architecture/
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3844
  * Tabs can now be pinned from the Page Actions menu in the address bar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3845
  * Users can block known cryptominers and fingerprinters in the
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3846
    Custom settings or their Content Blocking preferences
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3847
  * The Import Data from Another Browser feature is now also available
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3848
    from the File menu
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3849
  * Firefox will now protect you against running older versions which
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3850
    can lead to data corruption and stability issues
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3851
  * Easier access to your list of saved logins from the main menu and
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3852
    login autocomplete
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3853
  * We’ve added a toolbar menu for your Firefox Account to provide more
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3854
    transparency for when you are synced, sharing data across devices
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3855
    and with Firefox. Personalize the appearance of the menu with your
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3856
    own avatar
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3857
  * Enable FIDO U2F API, and permit registrations for Google Accounts
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3858
  * Enabled AV1 support on Linux
1096
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1094
diff changeset
  3859
  MFSA 2019-13 (boo#1135824)
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3860
  * CVE-2019-9815 (bmo#1546544)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3861
    Disable hyperthreading on content JavaScript threads on macOS
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3862
  * CVE-2019-9816 (bmo#1536768)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3863
    Type confusion with object groups and UnboxedObjects
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3864
  * CVE-2019-9817 (bmo#1540221)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3865
    Stealing of cross-domain images using canvas
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3866
  * CVE-2019-9818 (bmo#1542581) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3867
    Use-after-free in crash generation server
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3868
  * CVE-2019-9819 (bmo#1532553)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3869
    Compartment mismatch with fetch API
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3870
  * CVE-2019-9820 (bmo#1536405)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3871
    Use-after-free of ChromeEventHandler by DocShell
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3872
  * CVE-2019-9821 (bmo#1539125)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3873
    Use-after-free in AssertWorkerThread
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3874
  * CVE-2019-11691 (bmo#1542465)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3875
    Use-after-free in XMLHttpRequest
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3876
  * CVE-2019-11692 (bmo#1544670)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3877
    Use-after-free removing listeners in the event listener manager
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3878
  * CVE-2019-11693 (bmo#1532525)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3879
    Buffer overflow in WebGL bufferdata on Linux
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3880
  * CVE-2019-7317 (bmo#1542829)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3881
    Use-after-free in png_image_free of libpng library
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3882
  * CVE-2019-11694 (bmo#1534196) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3883
    Uninitialized memory memory leakage in Windows sandbox
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3884
  * CVE-2019-11695 (bmo#1445844)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3885
    Custom cursor can render over user interface outside of web content
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3886
  * CVE-2019-11696 (bmo#1392955)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3887
    Java web start .JNLP files are not recognized as executable files
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3888
    for download prompts
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3889
  * CVE-2019-11697 (bmo#1440079)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3890
    Pressing key combinations can bypass installation prompt delays and
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3891
    install extensions
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3892
  * CVE-2019-11698 (bmo#1543191)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3893
    Theft of user history data through drag and drop of hyperlinks
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3894
    to and from bookmarks
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3895
  * CVE-2019-11700 (bmo#1549833) (Windows only)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3896
    res: protocol can be used to open known local files
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3897
  * CVE-2019-11699 (bmo#1528939)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3898
    Incorrect domain name highlighting during page navigation
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3899
  * CVE-2019-11701 (bmo#1518627)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3900
    webcal: protocol default handler loads vulnerable web page
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3901
  * CVE-2019-9814 (bmo#1527592, bmo#1534536, bmo#1520132, bmo#1543159,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3902
    bmo#1539393, bmo#1459932, bmo#1459182, bmo#1516425)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3903
    Memory safety bugs fixed in Firefox 67
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3904
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3905
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3906
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3907
    bmo#1532465, bmo#1533554, bmo#1541580)
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3908
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
1093
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3909
- requires
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3910
  * rust/cargo >= 1.32
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3911
  * mozilla-nspr >= 4.21
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3912
  * mozilla-nss >= 3.43
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3913
  * rust-cbindgen >= 0.8.2
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3914
- rebased patches
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3915
- KDE integration for default browser detection is broken in this revision
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3916
3942c205588b 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1092
diff changeset
  3917
-------------------------------------------------------------------
1094
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3918
Fri May 17 12:04:49 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3919
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3920
- Fix armv7 build with:
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3921
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3922
a25638dad81d final 67.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1093
diff changeset
  3923
-------------------------------------------------------------------
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3924
Fri May 10 10:30:05 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3925
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3926
- Mozilla Firefox 66.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3927
  * Fixed: Further improvements to re-enable web extensions which
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3928
    had been disabled for users with a master password set (bmo#1549249)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3929
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3930
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3931
Sun May  5 20:21:02 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3932
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3933
- Mozilla Firefox 66.0.4 (boo#1134126)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3934
  * fix extension certificate chain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3935
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3936
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3937
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3938
Thu Apr 11 09:16:17 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3939
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3940
- Mozilla Firefox 66.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3941
  * Fixed: Address bar on tablets running Windows 10 now behaves
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3942
    correctly (bmo#1498973)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3943
  * Fixed: Performance issues with some HTML5 games (bmo#1537609)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3944
  * Fixed a bug with keypress events in IBM cloud applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3945
    (bmo#1538970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3946
  * Fix for keypress events in some Microsoft cloud applications
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3947
    (bmo#1539618)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3948
  * Changed: Updated Baidu search plugin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3949
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3950
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3951
Thu Mar 28 19:01:41 UTC 2019 - Manfred Hollstein <manfred.h@gmx.net>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3952
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3953
- Mozilla Firefox 66.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3954
  * Fixed Web compatibility issues with Office 365, iCloud and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3955
    IBM WebMail caused by recent changes to the handling of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3956
    keyboard events (bmo#1538966)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3957
  * Crash fixes (bmo#1521370, bmo#1539118)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3958
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3959
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3960
Thu Mar 28 09:58:36 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3961
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3962
- Add patch to fix aarch64 build:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3963
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3964
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3965
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3966
Fri Mar 22 22:22:08 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3967
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3968
- Mozilla Firefox 66.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3969
  MFSA 2019-09 (bsc#1130262)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3970
  * CVE-2019-9810 (bmo#1537924)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3971
    IonMonkey MArraySlice has incorrect alias information
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3972
  * CVE-2019-9813 (bmo#1538006)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3973
    Ionmonkey type confusion with __proto__ mutations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3974
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  3975
-------------------------------------------------------------------
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3976
Sun Mar 17 10:08:51 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3977
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3978
- Mozilla Firefox 66.0
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3979
  * Increased content processes to 8
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3980
  * Added capability to search through open tabs from the tab overflow menu
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3981
  * New backend for the storage.local WebExtensions API, providing
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3982
    I/O performance improvements when the extension updates a small
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3983
    subset of the stored data
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3984
  * WebExtension keyboard shortcuts can now be managed or overridden
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3985
    from about:addons
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3986
  * Improved scrolling behavior: Firefox will now attempt to keep content
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3987
    from jumping around while a page is loading by supporting scroll
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3988
    anchoring
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3989
  * New about:privatebrowsing with search
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3990
  * A certificate error page now notifies the user of the name of the
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3991
    certificate issuer that breaks HTTPs connections on intercepted
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3992
    connections to help troubleshooting possible anti-virus software
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3993
    issues.
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3994
  * Fixed an performance issue some Linux users experienced with the
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3995
    Downloads panel (bmo#1517101)
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3996
  * Firefox now blocks all autoplay media with sound by default. Users
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3997
    can add individual sites to an exceptions list or turn the blocking
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3998
    off.
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  3999
  * System title bar is hidden by default to match Gnome guideline
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4000
  MFSA 2019-07 (bsc#1129821)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4001
  * CVE-2019-9790 (bmo#1525145)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4002
    Use-after-free when removing in-use DOM elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4003
  * CVE-2019-9791 (bmo#1530958)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4004
    Type inference is incorrect for constructors entered through on-stack
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4005
    replacement with IonMonkey
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4006
  * CVE-2019-9792 (bmo#1532599)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4007
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4008
  * CVE-2019-9793 (bmo#1528829)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4009
    Improper bounds checks when Spectre mitigations are disabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4010
  * CVE-2019-9794 (bmo#1530103) (Windows only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4011
    Command line arguments not discarded during execution
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4012
  * CVE-2019-9795 (bmo#1514682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4013
    Type-confusion in IonMonkey JIT compiler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4014
  * CVE-2019-9796 (bmo#1531277)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4015
    Use-after-free with SMIL animation controller
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4016
  * CVE-2019-9797 (bmo#1528909)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4017
    Cross-origin theft of images with createImageBitmap
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4018
  * CVE-2019-9798 (bmo#1527534) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4019
    Library is loaded from world writable APITRACE_LIB location
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4020
  * CVE-2019-9799 (bmo#1505678)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4021
    Information disclosure via IPC channel messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4022
  * CVE-2019-9801 (bmo#1527717) (Windows only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4023
    Windows programs that are not 'URL Handlers' are exposed to web content
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4024
  * CVE-2019-9802 (bmo#1415508)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4025
    Chrome process information leak
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4026
  * CVE-2019-9803 (bmo#1515863, bmo#1437009)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4027
    Upgrade-Insecure-Requests incorrectly enforced for same-origin navigation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4028
  * CVE-2019-9804 (bmo#1518026) (MacOS only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4029
    Code execution through 'Copy as cURL' in Firefox Developer Tools on macOS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4030
  * CVE-2019-9805 (bmo#1521360)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4031
    Potential use of uninitialized memory in Prio
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4032
  * CVE-2019-9806 (bmo#1525267)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4033
    Denial of service through successive FTP authorization prompts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4034
  * CVE-2019-9807 (bmo#1362050)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4035
    Text sent through FTP connection can be incorporated into alert messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4036
  * CVE-2019-9809 (bmo#1282430, bmo#1523249)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4037
    Denial of service through FTP modal alert error messages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4038
  * CVE-2019-9808 (bmo#1434634)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4039
    WebRTC permissions can display incorrect origin with data: and blob: URLs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4040
  * CVE-2019-9789 bmo#1520483, bmo#1522987, bmo#1528199, bmo#1519337,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4041
    bmo#1525549, bmo#1516179, bmo#1518524, bmo#1518331, bmo#1526579,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4042
    bmo#1512567, bmo#1524335, bmo#1448505, bmo#1518821
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4043
    Memory safety bugs fixed in Firefox 66
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4044
  * CVE-2019-9788 bmo#1518001, bmo#1521304, bmo#1521214, bmo#1506665,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4045
    bmo#1516834, bmo#1518774, bmo#1524755, bmo#1523362, bmo#1524214, bmo#1529203
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4046
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4047
- updated build/runtime requirements
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4048
  * mozilla-nss >= 3.42.1
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4049
  * cargo/rust >= 1.31
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4050
  * rust-cbindgen >= 0.6.8
1092
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1089
diff changeset
  4051
  * nasm >= 2.13 (new)
1089
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4052
- removed obsolete patch
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4053
  * mozilla-bmo256180.patch
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4054
eca1c1f2fe50 Firefox 66.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1087
diff changeset
  4055
-------------------------------------------------------------------
1087
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4056
Tue Mar  5 10:17:01 UTC 2019 - Stephan Kulow <coolo@suse.com>
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4057
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4058
- Do not hardcode nodejs8 but leave the prefer to the distribution
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4059
  (Tumbleweed staging wants to switch to nodejs10)
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4060
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4061
-------------------------------------------------------------------
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4062
Fri Feb 15 13:45:57 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4063
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4064
- Update _constraints to avoid 'no space left' error seen on aarch64
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4065
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4066
-------------------------------------------------------------------
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4067
Wed Feb 13 07:17:28 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4068
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4069
- Mozilla Firefox 65.0.1
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4070
  * Fixed accidental requests to addons.mozilla.org when an addon
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4071
    recommendation doorhanger is shown (bmo#1526387)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4072
  * Improved playback of interactive Netflix videos (bmo#1524500)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4073
  * Fixed incorrect sizing of the "Clear Recent History" window in
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4074
    some situations (bmo#1523696)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4075
  * Fixed audio & video delays while making WebRTC calls
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4076
    (bmo#1521577, bmo#1523817)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4077
  * Fixed video sizing problems during some WebRTC calls (bmo#1520200)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4078
  * Fixed looping CONNECT requests when using WebSockets over HTTP/2
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4079
    from behind a proxy server (bmo#1523427)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4080
  * Fixed the "Enter" key not working on password entry fields for
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4081
    certain Linux distributions (bmo#1523635)
1087
5fab52cd743d latest version
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1086
diff changeset
  4082
  MFSA 2019-04 (bsc#1125330)
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4083
  * CVE-2018-18356 bmo#1525817
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4084
    Use-after-free in Skia
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4085
  * CVE-2019-5785 bmo#1525433
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4086
    Integer overflow in Skia
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4087
  * CVE-2018-18511 bmo#1526218
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4088
    Cross-origin theft of images with ImageBitmapRenderingContext
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4089
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4090
-------------------------------------------------------------------
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4091
Wed Feb 13 06:12:43 UTC 2019 - Martin Liška <mliska@suse.cz>
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4092
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4093
- Enable LTO only for latest new toolchain (boo#1125038) for x86_64
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4094
  (with increased memory constraints)
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4095
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4096
-------------------------------------------------------------------
1085
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4097
Sat Jan 26 22:37:01 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4098
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4099
- Mozilla Firefox 65.0
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4100
  * Enhanced tracking protection
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4101
  * allow switching of UI locales within preferences
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4102
  * support for the WebP image format
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4103
  * "top"-like about:performance
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4104
  MFSA 2019-01 (bsc#1122983)
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4105
  * CVE-2018-18500 bmo#1510114
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4106
    Use-after-free parsing HTML5 stream
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4107
  * CVE-2018-18503 bmo#1509442
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4108
    Memory corruption with Audio Buffer
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4109
  * CVE-2018-18504 bmo#1496413
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4110
    Memory corruption and out-of-bounds read of texture client
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4111
  * CVE-2018-18505 bmo#1497749
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4112
    Privilege escalation through IPC channel messages
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4113
  * CVE-2018-18506 bmo#1503393
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4114
    Proxy Auto-Configuration file can define localhost access to be proxied
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4115
  * CVE-2018-18502 bmo#1499426 bmo#1480090 bmo#1472990 bmo#1514762
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4116
    bmo#1501482 bmo#1505887 bmo#1508102 bmo#1508618 bmo#1511580
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4117
    bmo#1493497 bmo#1510145 bmo#1516289 bmo#1506798 bmo#1512758
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4118
    Memory safety bugs fixed in Firefox 65
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4119
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4120
    bmo#1502871 bmo#1516738 bmo#1516514
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4121
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4122
- requires
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4123
  NSS 3.41
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4124
  rust/carge 1.30
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4125
  rust-cbindgen 0.6.7
1086
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4126
- rebased patches
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4127
- remove workaround for build memory consumption on i586; other
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4128
  mitigations meanwhile introduced (mainly parallelity) will be
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4129
  sufficient
ed1c30c5f456 Firefox 65.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1085
diff changeset
  4130
  mozilla-reduce-files-per-UnifiedBindings.patch
1085
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4131
87f893cf45b9 Firefox 65.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1084
diff changeset
  4132
-------------------------------------------------------------------
1084
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4133
Tue Jan 15 14:32:03 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4134
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4135
- Increase disk constraint.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4136
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4137
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4138
Mon Jan 14 12:12:12 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4139
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4140
- Remove -v from mach build in order to work-around bmo#1500436.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4141
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4142
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4143
Fri Jan 11 15:07:14 UTC 2019 - Martin Liška <mliska@suse.cz>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4144
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4145
- Set %clang_build to false on all architectures
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4146
- Do not use -fno-delete-null-pointer-checks and -fno-strict-aliasing:
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4147
  it should not be needed anymore
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4148
- Do not overwrite enable-optimize and when possible
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4149
  enable --enable-debug-symbols.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4150
- Add -v to mach in order to make build verbose.
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4151
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4152
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4153
Wed Jan  9 22:40:14 UTC 2019 - astieger@suse.com
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4154
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4155
- Mozilla Firefox 64.0.2:
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4156
  * Update the Japanese translation for missing strings (bmo#1513259)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4157
  * Properly restore column sizes in developer tools inspector (bmo#1503175)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4158
  * Fixed video stuttering on Youtube (bmo#1513511)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4159
  * Fix updates for some lightweight themes (bmo#1508777)
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4160
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4161
-------------------------------------------------------------------
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4162
Tue Dec 18 14:46:41 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4163
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4164
- Enable build_hardened for all architectures
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4165
- Switch back aarch64 to clang as '-fPIC' fixes bmo#1513605
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4166
- Remove obolete '--enable-pie' as -pie is always enabled for
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4167
  gcc and clang
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4168
b0b3c507e253 latest Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1083
diff changeset
  4169
-------------------------------------------------------------------
1083
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4170
Wed Dec 12 17:33:29 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4171
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4172
- Switch aarch64 builds back to gcc, not clang (bmo#1513605)
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4173
- Switch %arm builds back to gcc, not clang to avoid OOM
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4174
- Fix build flags when clang is not used
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4175
- Fix flags for clang ppc64 builds
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4176
2f7023025374 reduced memory requirements and rely on memory limitations in parallelization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1082
diff changeset
  4177
-------------------------------------------------------------------
1082
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4178
Tue Dec 11 08:45:56 UTC 2018 - Wolfgang Rosenauer <wr@rosenauer.org>
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4179
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4180
- update to Firefox 64.0
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4181
  * Better recommendations: You may see suggestions in regular browsing
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4182
    mode for new and relevant Firefox features, services, and extensions
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4183
    based on how you use the web (for US users only)
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4184
  * Enhanced tab management: You can now select multiple tabs from the
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4185
    tab bar and close, move, bookmark, or pin them quickly and easily
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4186
  * Easier performance management: The new Task Manager page found at
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4187
    about:performance lets you see how much energy each open tab consumes
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4188
    and provides access to close tabs to conserve power
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4189
  * Improved performance for Mac and Linux users, by enabling link time
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4190
    optimization (Clang LTO).
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4191
  * Added option to remove add-ons using the context menu on their
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4192
    toolbar buttons
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4193
  * RSS feed preview and live bookmarks are available only via add-ons
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4194
  * TLS certificates issued by Symantec are no longer trusted by Firefox.
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4195
    Website operators are strongly encouraged to replace any remaining
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4196
    Symantec TLS certificates as soon as possible
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4197
  MFSA 2018-29 (bsc#1119105)
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4198
  * CVE-2018-12407 bmo#1505973
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4199
    Buffer overflow with ANGLE library when using VertexBuffer11 module
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4200
  * CVE-2018-17466 bmo#1488295
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4201
    Buffer overflow and out-of-bounds read in ANGLE library with
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4202
    TextureStorage11
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4203
  * CVE-2018-18492 bmo#1499861
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4204
    Use-after-free with select element
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4205
  * CVE-2018-18493 bmo#1504452
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4206
    Buffer overflow in accelerated 2D canvas with Skia
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4207
  * CVE-2018-18494 bmo#1487964
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4208
    Same-origin policy violation using location attribute and
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4209
    performance.getEntries to steal cross-origin URLs
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4210
  * CVE-2018-18495 bmo#1427585
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4211
    WebExtension content scripts can be loaded in about: pages
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4212
  * CVE-2018-18496 bmo#1422231 (Windows only)
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4213
    Embedded feed preview page can be abused for clickjacking
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4214
  * CVE-2018-18497 bmo#1488180
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4215
    WebExtensions can load arbitrary URLs through pipe separators
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4216
  * CVE-2018-18498 bmo#1500011
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4217
    Integer overflow when calculating buffer sizes for images
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4218
  * CVE-2018-12406 bmo#1456947 bmo#1475669 bmo#1504816 bmo#1502886
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4219
    bmo#1500064 bmo#1500310 bmo#1500696 bmo#1498765 bmo#1499198 bmo#1434490
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4220
    bmo#1481745 bmo#1458129
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4221
    Memory safety bugs fixed in Firefox 64
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4222
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4223
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4224
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4225
- requires
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4226
  * rust/cargo >= 1.29
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4227
  * mozilla-nss >= 3.40.1
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4228
  * rust-cbindgen >= 0.6.4
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4229
- rebased patches
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4230
- removed obsolete patch
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4231
  * mozilla-bmo1491289.patch
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4232
- now uses clang primarily for compilation
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4233
821cfbe8efcc Firefox 64.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1081
diff changeset
  4234
-------------------------------------------------------------------
1081
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4235
Wed Nov 28 11:07:18 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4236
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4237
- Remove --disable-elf-hack when not available: on aarch64 and ppc64*
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4238
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4239
-------------------------------------------------------------------
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4240
Mon Nov 26 09:46:02 UTC 2018 - Guillaume GARDET <guillaume.gardet@opensuse.org>
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4241
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4242
- Clean-up %arm build
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4243
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4244
-------------------------------------------------------------------
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4245
Sun Nov 18 11:01:21 UTC 2018 - manfred.h@gmx.net
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4246
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4247
- update to Firefox 63.0.3
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4248
  * Games using WebGL (created in Unity) get stuck after very short
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4249
    time of gameplay (bmo#1502748)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4250
  * Slow page loading for some users with specific proxy configurations
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4251
    (bmo#1495024)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4252
  * Disable HTTP response throttling by default for causing bugs with
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4253
    videos in background tabs (bmo#1503354)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4254
  * Opening magnet links no longer works (bmo#1498934)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4255
  * Crash fixes (bmo#1498510, bmo#1503424)
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4256
- removed mozilla-newer-cbindgen.patch; no longer needed
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4257
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4258
-------------------------------------------------------------------
1077
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4259
Thu Nov  8 14:59:13 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4260
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4261
- update to Firefox 63.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4262
  * Snippets are not loaded due to missing element (bmo#1503047)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4263
  * Print preview always shows 30& scale when it is actually
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4264
    Shrink To Fit (bmo#1501952)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4265
  * Dialog displayed when closing multiple windows shows unreplaced
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4266
    %1$S placeholder in Japanese and potentially other locales
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4267
    (bmo#1500823)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4268
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4269
-------------------------------------------------------------------
1075
0831123bc28a final 63.0 release preparations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1074
diff changeset
  4270
Mon Oct 29 14:07:51 UTC 2018 - wr@rosenauer.org
0831123bc28a final 63.0 release preparations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1074
diff changeset
  4271
0831123bc28a final 63.0 release preparations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1074
diff changeset
  4272
- update to Firefox 63.0
1074
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4273
  * WebExtensions now run in their own process on Linux
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4274
  * The Ctrl+Tab shortcut now displays thumbnail previews of your
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4275
    tabs and cycles through tabs in recently used order. This new
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4276
    default behavior is activated only in new profiles and can be
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4277
    changed in preferences.
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4278
  * Added support for Web Components custom elements and shadow DOM
1077
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4279
  MFSA 2018-26 (bsc#1112852)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4280
  * CVE-2018-12391 (bmo#1478843) (Android-only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4281
    HTTP Live Stream audio data is accessible cross-origin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4282
  * CVE-2018-12392 (bmo#1492823)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4283
    Crash with nested event loops
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4284
  * CVE-2018-12393 (bmo#1495011) (only affects non-64-bit archs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4285
    Integer overflow during Unicode conversion while loading JavaScript
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4286
  * CVE-2018-12395 (bmo#1467523)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4287
    WebExtension bypass of domain restrictions through header rewriting
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4288
  * CVE-2018-12396 (bmo#1483602)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4289
    WebExtension content scripts can execute in disallowed contexts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4290
  * CVE-2018-12397 (bmo#1487478)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4291
    Missing warning prompt when WebExtension requests local file access
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4292
  * CVE-2018-12398 (bmo#1460538, bmo#1488061)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4293
    CSP bypass through stylesheet injection in resource URIs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4294
  * CVE-2018-12399 (bmo#1490276)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4295
    Spoofing of protocol registration notification bar
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4296
  * CVE-2018-12400 (bmo#1448305) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4297
    Favicons are cached in private browsing mode on Firefox for Android
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4298
  * CVE-2018-12401 (bmo#1422456)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4299
    DOS attack through special resource URI parsing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4300
  * CVE-2018-12402 (bmo#1469916)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4301
    SameSite cookies leak when pages are explicitly saved
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4302
  * CVE-2018-12403 (bmo#1484753)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4303
    Mixed content warning is not displayed when HTTPS page loads a favicon over HTTP
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4304
  * CVE-2018-12388 (bmo#1472639, bmo#1485698, bmo#1301547, bmo#1471427,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4305
    bmo#1379411, bmo#1482122, bmo#1486314, bmo#1487167)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4306
    Memory safety bugs fixed in Firefox 63
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4307
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4308
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4309
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4310
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4311
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
1074
4b99400f6d17 rebased patches and updated spec for 63.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1073
diff changeset
  4312
- requires NSPR 4.20, NSS 3.39 and Rust 1.28
1077
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1076
diff changeset
  4313
- latest rust does not provide rust-std so stop requiring it
1079
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4314
- requires rust-cbindgen >= 0.6.2 to build
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4315
- requires nodejs >= 8.11 to build
1078
9f49c406dc11 63.0.1 release candidate with several build updates and required fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1077
diff changeset
  4316
- added mozilla-bmo1491289.patch to fix system NSS build (bmo#1491289)
9f49c406dc11 63.0.1 release candidate with several build updates and required fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1077
diff changeset
  4317
- added mozilla-cubeb-noreturn.patch to fix non-return function
1079
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4318
- added mozilla-newer-cbindgen.patch to fix build with cbindgen 0.6.7
1663e876731f latest toolchain updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1078
diff changeset
  4319
- disable elfhack for TW and newer due to build errors
1081
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4320
- removed obsolete patches
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4321
  * mozilla-no-return.patch
9fec29d2ead2 latest updates from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1079
diff changeset
  4322
  * mozilla-no-stdcxx-check.patch
1073
63a32fb3b602 merge from firefox62 and prepare for 63beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1072
diff changeset
  4323
63a32fb3b602 merge from firefox62 and prepare for 63beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1072
diff changeset
  4324
-------------------------------------------------------------------
1076
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4325
Thu Oct 25 14:39:04 UTC 2018 - guillaume.gardet@opensuse.org
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4326
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4327
- Update _constraints for armv6/7
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4328
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4329
-------------------------------------------------------------------
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4330
Thu Oct 25 08:50:24 UTC 2018 - guillaume.gardet@opensuse.org
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4331
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4332
- Add patch to fix build on armv7:
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4333
  * mozilla-bmo1463035.patch
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4334
2823eb50c9a9 ARM updates
Guillaume GARDET <guillaume.gardet@opensuse.org>
parents: 1075
diff changeset
  4335
-------------------------------------------------------------------
1072
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4336
Tue Oct  2 21:28:31 UTC 2018 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4337
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4338
- Mozilla Firefox 62.0.3:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4339
  MFSA 2018-24
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4340
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4341
    Type confusion in JavaScript allowed remote code execution
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4342
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4343
    Array.prototype.push stack pointer vulnerability may enable
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4344
    exploits in the sandboxed content process
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4345
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1071
diff changeset
  4346
-------------------------------------------------------------------
1071
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4347
Sat Sep 22 09:03:53 UTC 2018 - astieger@suse.com
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4348
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4349
- Mozilla Firefox 62.0.2:
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4350
  MFSA 2018-22
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4351
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4352
    Crash in TransportSecurityInfo due to cached data
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4353
  * Unvisited bookmarks can once again be autofilled in the address
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4354
    bar
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4355
  * Fix WebGL rendering issues
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4356
  * Fix fallback on startup when a language pack is missing
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4357
  * Avoid crash when sharing a profile with newer (as yet
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4358
    unreleased) versions of Firefox
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4359
  * Do not undo removal of search engines when using a language
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4360
    pack
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4361
  * Fixed rendering of some web sites
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4362
  * Restored compatibility with some sites using deprecated TLS
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4363
    settings
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4364
- disable rust debug symbols to fix build on %ix86
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4365
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4366
-------------------------------------------------------------------
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4367
Mon Sep  3 10:47:43 UTC 2018 - wr@rosenauer.org
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4368
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4369
- update to Firefox 62.0
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4370
  * Firefox Home (the default New Tab) now allows users to display
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4371
    up to 4 rows of top sites, Pocket stories, and highlights
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4372
  * "Reopen in Container" tab menu option appears for users with
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4373
    Containers that lets them choose to reopen a tab in a different
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4374
    container
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4375
  * In advance of removing all trust for Symantec-issued certificates
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4376
    in Firefox 63, a preference was added that allows users to distrust
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4377
    certificates issued by Symantec. To use this preference, go to
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4378
    about:config in the address bar and set the preference
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4379
    "security.pki.distrust_ca_policy" to 2.
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4380
  * Support for CSS Shapes, allowing for richer web page layouts.
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4381
    This goes hand in hand with a brand new Shape Path Editor in the
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4382
    CSS inspector.
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4383
  * CSS Variable Fonts (OpenType Font Variations) support, which makes
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4384
    it possible to create beautiful typography with a single font file
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4385
  * Added Canadian English (en-CA) locale
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4386
  MFSA 2018-20 (bsc#1107343)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4387
  * CVE-2018-12377 (bmo#1470260)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4388
    Use-after-free in refresh driver timers
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4389
  * CVE-2018-12378 (bmo#1459383)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4390
    Use-after-free in IndexedDB
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4391
  * CVE-2018-12379 (bmo#1473113) (updater is disabled for us)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4392
    Out-of-bounds write with malicious MAR file
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4393
  * CVE-2017-16541 (bmo#1412081)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4394
    Proxy bypass using automount and autofs
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4395
  * CVE-2018-12381 (bmo#1435319)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4396
    Dragging and dropping Outlook email message results in page navigation
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4397
  * CVE-2018-12382 (bmo#1479311) (Android only)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4398
    Addressbar spoofing with javascript URI on Firefox for Android
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4399
  * CVE-2018-12383 (bmo#1475775)
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4400
    Setting a master password post-Firefox 58 does not delete
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4401
    unencrypted previously stored passwords
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4402
  * CVE-2018-12375
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4403
    Memory safety bugs fixed in Firefox 62
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4404
  * CVE-2018-12376
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4405
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
1066
3f18b0f2a868 merge from firefox61 and specify next beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1065
diff changeset
  4406
- requires NSS >= 3.38
1071
8dc7d19e8298 firefox 62.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1070
diff changeset
  4407
- removed obsolete patch
1067
735b140fb042 rebased patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1066
diff changeset
  4408
  mozilla-bmo1464766.patch
1066
3f18b0f2a868 merge from firefox61 and specify next beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1065
diff changeset
  4409
3f18b0f2a868 merge from firefox61 and specify next beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1065
diff changeset
  4410
-------------------------------------------------------------------
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4411
Thu Aug  9 14:22:00 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4412
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4413
- update to Firefox 61.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4414
  * Improved website rendering with the Retained Display List feature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4415
    enabled (bmo#1474402)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4416
  * Fixed broken DevTools panels with certain extensions installed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4417
    (bmo#1474379)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4418
  * Fixed a crash for users with some accessibility tools enabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4419
    (bmo#1474007)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4420
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4421
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4422
Mon Jul  9 07:22:09 UTC 2018 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4423
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4424
- Mozilla Firefox 61.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4425
  * Fix missing content on the New Tab Page and the Home section of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4426
    the Preferences page (bmo#1471375)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4427
  * Fixed loss of bookmarks under rare circumstances when upgrading
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4428
    from Firefox 60 (bmo#1472127)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4429
  * Improved playback of Twitch 1080p video streams (bmo#1469257)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4430
  * Web pages no longer lose focus when a browser popup window is
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4431
    opened (bmo#1471415)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4432
  * Re-allowed downloading files from FTP sites via the "Save Link
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4433
    As" option when linked from HTTP pages (bmo#1470295)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4434
  * Fixed extensions being unable to override the default homepage
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4435
    in certain situations (bmo#1466846)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4436
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4437
-------------------------------------------------------------------
1061
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4438
Sat Jun 23 07:25:51 UTC 2018 - wr@rosenauer.org
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4439
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4440
- update to Firefox 61.0
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4441
  * Performance enhancements
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4442
  * Various improvements for dark theme support will provide a more
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4443
    consistent experience across the entire Firefox UI
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4444
  * OpenSearch plugins offered by web pages can now be added from the
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4445
    page action menu for easier installation
42510f8eee28 61.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1060
diff changeset
  4446
  * Improved support for allowing WebExtensions to manage and hide tabs
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4447
  MFSA 2018-15 (bsc#1098998)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4448
  * CVE-2018-12359 (bmo#1459162)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4449
    Buffer overflow using computed size of canvas element
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4450
  * CVE-2018-12360 (bmo#1459693)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4451
    Use-after-free when using focus()
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4452
  * CVE-2018-12361 (bmo#1463244)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4453
    Integer overflow in SwizzleData
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4454
  * CVE-2018-12358 (bmo#1467852)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4455
    Same-origin bypass using service worker and redirection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4456
  * CVE-2018-12362 (bmo#1452375)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4457
    Integer overflow in SSSE3 scaler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4458
  * CVE-2018-5156 (bmo#1453127)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4459
    Media recorder segmentation fault when track type is changed during capture
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4460
  * CVE-2018-12363 (bmo#1464784)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4461
    Use-after-free when appending DOM nodes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4462
  * CVE-2018-12364 (bmo#1436241)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4463
    CSRF attacks through 307 redirects and NPAPI plugins
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4464
  * CVE-2018-12365 (bmo#1459206)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4465
    Compromised IPC child process can list local filenames
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4466
  * CVE-2018-12371 (bmo#1465686) 
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4467
    Integer overflow in Skia library during edge builder allocation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4468
  * CVE-2018-12366 (bmo#1464039)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4469
    Invalid data handling during QCMS transformations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4470
  * CVE-2018-12367 (bmo#1462891)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4471
    Timing attack mitigation of PerformanceNavigationTiming
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4472
  * CVE-2018-12369 (bmo#1454909)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4473
    WebExtension security permission checks bypassed by embedded experiments
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4474
  * CVE-2018-12370 (bmo#1456652)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4475
    SameSite cookie protections bypassed when exiting Reader View
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4476
  * CVE-2018-5186 (bmo#1464872,bmo#1463329,bmo#1419373,bmo#1412882,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4477
    bmo#1413033,bmo#1444673,bmo#1454448,bmo#1453505,bmo#1438671)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4478
    Memory safety bugs fixed in Firefox 61
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4479
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4480
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4481
    bmo#1463884)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4482
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4483
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4484
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4485
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4486
    bmo#1464079,bmo#1463494,bmo#1458048)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4487
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
1054
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4488
- requires NSS 3.37.3
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4489
- requires python >= 3.5 to build
1055
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4490
- removed obsolete patches
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4491
  mozilla-i586-DecoderDoctorLogger.patch
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4492
  mozilla-i586-domPrefs.patch
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4493
  mozilla-fix-skia-aarch64.patch
526f445635f3 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1054
diff changeset
  4494
  mozilla-bmo1375074.patch
1065
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1061
diff changeset
  4495
  mozilla-enable-csd.patch
1057
b70ce330958c successfull RPM build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1056
diff changeset
  4496
- patch for new no-return warnings (mozilla-no-return.patch)
1059
936bf8851c57 try to make langpacks work again
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1057
diff changeset
  4497
- do not disable system installed locales (mozilla-bmo1464766.patch)
1054
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4498
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4499
-------------------------------------------------------------------
1056
90e1f32cf034 several changes to make upstream tarballs a good neighbour for locale fetching and HG checkouts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1055
diff changeset
  4500
Fri Jun  8 10:52:13 UTC 2018 - bjorn.lie@gmail.com
1054
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4501
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4502
- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4503
  conditional --disable-gconf to configure: no longer pull in
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4504
  obsolete gconf2 for Tumbleweed.
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4505
fbfe323c62cd Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
<bjorn.lie@gmail.com>
parents: 1052
diff changeset
  4506
-------------------------------------------------------------------
1052
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4507
Thu Jun  7 12:11:06 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4508
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4509
- update to Firefox 60.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4510
  * requires NSS 3.36.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4511
  MFSA 2018-14 (bsc#1096449)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4512
  * CVE-2018-6126 (bmo#1462682)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4513
    Heap buffer overflow rasterizing paths in SVG with Skia
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4514
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4515
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4516
Wed Jun  6 18:57:52 UTC 2018 - guillaume.gardet@opensuse.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4517
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4518
- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4519
  workaround:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4520
  * mozilla-bmo1375074.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4521
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4522
-------------------------------------------------------------------
1051
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4523
Sat May 26 15:53:25 UTC 2018 - wr@rosenauer.org
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4524
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4525
- fixed "open with" option under KDE (boo#1094747)
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4526
- workaround crash on startup on aarch64 (boo#1093059)
1052
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1051
diff changeset
  4527
  (contributed by guillaume.gardet@arm.com)
1051
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4528
87c1625d07e2 fix aarch64 startup crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1049
diff changeset
  4529
-------------------------------------------------------------------
1049
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4530
Wed May 23 08:49:09 UTC 2018 - guillaume.gardet@opensuse.org
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4531
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4532
- Disable webrtc for aarch64 due to bmo#1434589
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4533
- Add patch to fix skia build on AArch64:
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4534
  * mozilla-fix-skia-aarch64.patch
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4535
08307c08d990 architecture fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1048
diff changeset
  4536
-------------------------------------------------------------------
1048
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4537
Thu May 17 14:01:18 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4538
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4539
- update to Firefox 60.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4540
  * Avoid overly long cycle collector pauses with some add-ons installed
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4541
    (bmo#1449033)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4542
  * After unckecking the "Sponsored Stories" option, the New Tab page
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4543
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4544
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4545
    (bmo#1457743)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4546
  * Use the right default background when opening tabs or windows in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4547
    high contrast mode (bmo#1458956)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4548
  * Restored translations of the Preferences panels when using a
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4549
    language pack (bmo#1461590)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4550
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4551
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4552
Mon May 14 13:37:38 UTC 2018 - pcerny@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4553
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4554
- parellelise locales building
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4555
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1047
diff changeset
  4556
-------------------------------------------------------------------
1047
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4557
Mon May  7 08:32:28 UTC 2018 - wr@rosenauer.org
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4558
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4559
- update to Firefox 60.0
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4560
  * Added a policy engine that allows customized Firefox deployments
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4561
    in enterprise environments, using Windows Group Policy or a
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4562
    cross-platform JSON file
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4563
  * Applied Quantum CSS to render browser UI
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4564
  * Added support for Web Authentication, allowing the use of USB
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4565
    tokens for authentication to web sites
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4566
  * Locale added: Occitan (oc)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4567
  MFSA 2018-11 (bsc#1092548)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4568
  * CVE-2018-5154 (bmo#1443092)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4569
    Use-after-free with SVG animations and clip paths
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4570
  * CVE-2018-5155 (bmo#1448774)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4571
    Use-after-free with SVG animations and text paths
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4572
  * CVE-2018-5157 (bmo#1449898)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4573
    Same-origin bypass of PDF Viewer to view protected PDF files
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4574
  * CVE-2018-5158 (bmo#1452075)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4575
    Malicious PDF can inject JavaScript into PDF Viewer
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4576
  * CVE-2018-5159 (bmo#1441941)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4577
    Integer overflow and out-of-bounds write in Skia
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4578
  * CVE-2018-5160 (bmo#1436117)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4579
    Uninitialized memory use by WebRTC encoder
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4580
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4581
    WebExtensions information leak through webRequest API
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4582
  * CVE-2018-5153 (bmo#1436809)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4583
    Out-of-bounds read in mixed content websocket messages
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4584
  * CVE-2018-5163 (bmo#1426353)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4585
    Replacing cached data in JavaScript Start-up Bytecode Cache
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4586
  * CVE-2018-5164 (bmo#1416045)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4587
    CSP not applied to all multipart content sent with
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4588
    multipart/x-mixed-replace
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4589
  * CVE-2018-5166 (bmo#1437325)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4590
    WebExtension host permission bypass through filterReponseData
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4591
  * CVE-2018-5167 (bmo#1447969)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4592
    Improper linkification of chrome: and javascript: content in
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4593
    web console and JavaScript debugger
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4594
  * CVE-2018-5168 (bmo#1449548)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4595
    Lightweight themes can be installed without user interaction
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4596
  * CVE-2018-5169 (bmo#1319157)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4597
    Dragging and dropping link text onto home button can set home page
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4598
    to include chrome pages
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4599
  * CVE-2018-5172 (bmo#1436482)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4600
    Pasted script from clipboard can run in the Live Bookmarks page
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4601
    or PDF viewer
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4602
  * CVE-2018-5173 (bmo#1438025)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4603
    File name spoofing of Downloads panel with Unicode characters
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4604
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4605
    Windows Defender SmartScreen UI runs with less secure behavior
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4606
    for downloaded files in Windows 10 April 2018 Update
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4607
  * CVE-2018-5175 (bmo#1432358)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4608
    Universal CSP bypass on sites using strict-dynamic in their policies
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4609
  * CVE-2018-5176 (bmo#1442840)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4610
    JSON Viewer script injection
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4611
  * CVE-2018-5177 (bmo#1451908)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4612
    Buffer overflow in XSLT during number formatting
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4613
  * CVE-2018-5165 (bmo#1451452)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4614
    Checkbox for enabling Flash protected mode is inverted in 32-bit
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4615
    Firefox
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4616
  * CVE-2018-5180 (bmo#1444086)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4617
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4618
  * CVE-2018-5181 (bmo#1424107)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4619
    Local file can be displayed in noopener tab through drag and
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4620
    drop of hyperlink
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4621
  * CVE-2018-5182 (bmo#1435908)
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4622
    Local file can be displayed from hyperlink dragged and dropped
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4623
    on addressbar
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4624
  * CVE-2018-5151
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4625
    Memory safety bugs fixed in Firefox 60
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4626
  * CVE-2018-5150
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4627
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
1046
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4628
- removed obsolete patches
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4629
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
1047
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4630
  mozilla-bmo1005535.patch
1046
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4631
- requires NSPR 4.19 and NSS 3.36.1
1047
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4632
- requires rust 1.24 or higher
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4633
- use upstream source archive and detached signature for
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4634
  source verification
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4635
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4636
-------------------------------------------------------------------
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4637
Thu May  3 14:33:37 UTC 2018 - guillaume.gardet@opensuse.org
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4638
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4639
- Fix armv7 build by:
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4640
  * adding RUSTFLAGS="-Cdebuginfo=0"
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4641
  * updating _constraints for %arm
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4642
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4643
-------------------------------------------------------------------
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4644
Wed May  2 20:46:37 UTC 2018 - wr@rosenauer.org
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4645
847ae61baab6 Firefox 60.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1046
diff changeset
  4646
- do not try CSD on kwin (boo#1091592)
1046
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4647
- fix build in openSUSE:Leap:42.3:Update, use gcc7
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4648
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4649
-------------------------------------------------------------------
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4650
Tue May  1 14:26:24 UTC 2018 - astieger@suse.com
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4651
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4652
- Mozilla Firefox 59.0.3:
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4653
  * fixes for platforms other than GNU/Linux
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4654
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4655
-------------------------------------------------------------------
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4656
Fri Apr 20 12:31:52 UTC 2018 - mliska@suse.cz
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4657
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4658
- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4659
  in order to fix boo#1090362.
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4660
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4661
-------------------------------------------------------------------
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4662
Mon Apr  2 00:55:45 UTC 2018 - badshah400@gmail.com
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4663
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4664
- Add back mozilla-enable-csd.patch: New rebased version from
75893a3d8fbe 60.0b16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1044
diff changeset
  4665
  Fedora for version 59.0.x.
1044
142a0c92607c merge latest from 59.x
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1043
diff changeset
  4666
142a0c92607c merge latest from 59.x
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1043
diff changeset
  4667
-------------------------------------------------------------------
1043
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4668
Tue Mar 27 14:07:11 UTC 2018 - schwab@suse.de
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4669
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4670
- Reduce constraints on aarch64
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4671
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4672
-------------------------------------------------------------------
1041
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4673
Tue Mar 27 06:40:25 UTC 2018 - wr@rosenauer.org
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4674
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4675
- update to Firefox 59.0.2
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4676
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4677
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4678
    that use those keys with resistFingerprinting enabled (bmo#1433592)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4679
  * High CPU / memory churn caused by third-party software on some
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4680
    computers (bmo#1446280)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4681
  * Users who have configured an "automatic proxy configuration URL"
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4682
    and want to reload their proxy settings from the URL will find
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4683
    the Reload button disabled in the Connection Settings dialog when
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4684
    they select Preferences/Options>Network Proxy>Settings... (bmo#1445991)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4685
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4686
  * User's trying to cancel a print around the time it completes will
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4687
    continue to get intermittent crashes (bmo#1441598)
1043
5ba4fbb8bed7 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1041
diff changeset
  4688
  MFSA 2018-10 (bsc#1087059)
1041
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4689
  * CVE-2018-5148 (bmo#1440717)
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4690
    Use-after-free in compositor
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4691
- removed obsolete patch mozilla-bmo1446062.patch
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4692
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4693
-------------------------------------------------------------------
1040
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4694
Wed Mar 21 17:14:24 UTC 2018 - cgrobertson@suse.com
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4695
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4696
- Added patches:
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4697
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4698
    fixes non-unified build error
1041
516dd1ea89e8 Firefox 59.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1040
diff changeset
  4699
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
1040
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4700
    fixes 32bit build error
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4701
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4702
-------------------------------------------------------------------
1039
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4703
Fri Mar 16 06:40:11 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4704
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4705
- update to Firefox 59.0.1 (bsc#1085671)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4706
  MFSA 2018-08
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4707
  * CVE-2018-5146 (bmo#1446062)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4708
    Vorbis audio processing out of bounds write
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4709
  * CVE-2018-5147 (bmo#1446365)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4710
    Out of bounds memory write in libtremor
1040
246b98b59979 added i586 patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1039
diff changeset
  4711
    (mozilla-bmo1446062.patch)
1039
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4712
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4713
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4714
Wed Mar 14 19:27:07 UTC 2018 - cgrobertson@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4715
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4716
- Added patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4717
  * mozilla-bmo1005535.patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4718
    Enable skia_gpu on big endian platforms.
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4719
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4720
-------------------------------------------------------------------
1037
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4721
Sun Mar 11 22:12:12 UTC 2018 - wr@rosenauer.org
1036
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1035
diff changeset
  4722
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1035
diff changeset
  4723
- update to Firefox 59.0
1037
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4724
  * Performance enhancements
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4725
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4726
  * added features for Firefox Screenshots
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4727
  * Enhanced WebExtensions API
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4728
  * Improved RTC capabilities
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4729
  MFSA 2018-06 (bsc#1085130)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4730
  * CVE-2018-5127 (bmo#1430557)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4731
    Buffer overflow manipulating SVG animatedPathSegList
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4732
  * CVE-2018-5128 (bmo#1431336)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4733
    Use-after-free manipulating editor selection ranges
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4734
  * CVE-2018-5129 (bmo#1428947)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4735
    Out-of-bounds write with malformed IPC messages
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4736
  * CVE-2018-5130 (bmo#1433005)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4737
    Mismatched RTP payload type can trigger memory corruption
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4738
  * CVE-2018-5131 (bmo#1440775)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4739
    Fetch API improperly returns cached copies of no-store/no-cache resources
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4740
  * CVE-2018-5132 (bmo#1408194)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4741
    WebExtension Find API can search privileged pages
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4742
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4743
    Value of the app.support.baseURL preference is not properly sanitized
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4744
  * CVE-2018-5134 (bmo#1429379)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4745
    WebExtensions may use view-source: URLs to bypass content restrictions
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4746
  * CVE-2018-5135 (bmo#1431371)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4747
    WebExtension browserAction can inject scripts into unintended contexts
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4748
  * CVE-2018-5136 (bmo#1419166)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4749
    Same-origin policy violation with data: URL shared workers
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4750
  * CVE-2018-5137 (bmo#1432870)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4751
    Script content can access legacy extension non-contentaccessible resources
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4752
  * CVE-2018-5138 (bmo#1432624) (Android only)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4753
    Android Custom Tab address spoofing through long domain names
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4754
  * CVE-2018-5140 (bmo#1424261)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4755
    Moz-icon images accessible to web content through moz-icon: protocol
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4756
  * CVE-2018-5141 (bmo#1429093)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4757
    DOS attack through notifications Push API
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4758
  * CVE-2018-5142 (bmo#1366357)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4759
    Media Capture and Streams API permissions display incorrect origin
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4760
    with data: and blob: URLs
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4761
  * CVE-2018-5143 (bmo#1422643)
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4762
    Self-XSS pasting javascript: URL with embedded tab into addressbar
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4763
  * CVE-2018-5126
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4764
    Memory safety bugs fixed in Firefox 59
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4765
  * CVE-2018-5125
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4766
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
1031
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4767
- requires NSPR 4.18 and NSS 3.35
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4768
- requires rust >= 1.22.1
1032
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4769
- removed obsolete patches:
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4770
  mozilla-alsa-sandbox.patch
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4771
  mozilla-enable-csd.patch
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4772
  firefox-no-default-ualocale.patch
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4773
- removed l10n_changesets.txt since same information is now in
8220ea23b47d remove obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1031
diff changeset
  4774
  Firefox source tree (updated create-tar.sh now requires jq)
1031
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4775
4b419fce88dc merge from firefox58 and prepare for 59.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1030
diff changeset
  4776
-------------------------------------------------------------------
1039
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4777
Fri Feb  9 13:37:46 UTC 2018 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4778
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4779
- Mozilla Firefox 58.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4780
  * Blocklisted graphics drivers related to off main thread painting
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4781
    crashes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4782
  * Fix tab crash during printing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4783
  * Fix clicking links and scrolling emails on Microsoft Hotmail
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4784
    and Outlook (OWA) webmail
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4785
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1037
diff changeset
  4786
-------------------------------------------------------------------
1030
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4787
Fri Feb  9 12:06:31 UTC 2018 - wr@rosenauer.org
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4788
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4789
- correct requires and provides handling (boo#1076907)
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4790
cd02d400c081 correct requires and provides handling (boo#1076907)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1029
diff changeset
  4791
-------------------------------------------------------------------
1029
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4792
Tue Feb  6 07:03:42 UTC 2018 - fstrba@suse.com
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4793
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4794
- Added patch:
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4795
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4796
    or again?) not working in Firefox 58 due to sandboxing.
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4797
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4798
-------------------------------------------------------------------
1028
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4799
Mon Jan 29 22:32:21 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4800
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4801
- update to Firefox 58.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1027
diff changeset
  4802
  MFSA 2018-05
1037
d61b64679bb4 59.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1036
diff changeset
  4803
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
1029
725d6acf23b5 fix alsa
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1028
diff changeset
  4804
- use correct language packs
1027
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4805
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4806
- allow larger number of nested elements (mozilla-bmo256180.patch)
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4807
7071f6ebfda6 CSD functionality
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1026
diff changeset
  4808
-------------------------------------------------------------------
1026
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4809
Tue Jan 23 20:40:57 UTC 2018 - wr@rosenauer.org
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4810
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4811
- update to Firefox 58.0 (bsc#1077291)
1023
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  4812
  * Added Nepali (ne-NP) locale
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  4813
  * Added support for form autofill for credit card
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  4814
  * Optimize page load by caching JavaScript internal representation
1026
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4815
  MFSA 2018-02
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4816
  * CVE-2018-5091 (bmo#1423086)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4817
    Use-after-free with DTMF timers
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4818
  * CVE-2018-5092 (bmo#1418074)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4819
    Use-after-free in Web Workers
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4820
  * CVE-2018-5093 (bmo#1415291)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4821
    Buffer overflow in WebAssembly during Memory/Table resizing
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4822
  * CVE-2018-5094 (bmo#1415883)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4823
    Buffer overflow in WebAssembly with garbage collection on
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4824
    uninitialized memory
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4825
  * CVE-2018-5095 (bmo#1418447)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4826
    Integer overflow in Skia library during edge builder allocation
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4827
  * CVE-2018-5097 (bmo#1387427)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4828
    Use-after-free when source document is manipulated during XSLT
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4829
  * CVE-2018-5098 (bmo#1399400)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4830
    Use-after-free while manipulating form input elements
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4831
  * CVE-2018-5099 (bmo#1416878)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4832
    Use-after-free with widget listener
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4833
  * CVE-2018-5100 (bmo#1417405)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4834
    Use-after-free when IsPotentiallyScrollable arguments are freed
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4835
    from memory
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4836
  * CVE-2018-5101 (bmo#1417661)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4837
    Use-after-free with floating first-letter style elements
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4838
  * CVE-2018-5102 (bmo#1419363)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4839
    Use-after-free in HTML media elements
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4840
  * CVE-2018-5103 (bmo#1423159)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4841
    Use-after-free during mouse event handling
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4842
  * CVE-2018-5104 (bmo#1425000)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4843
    Use-after-free during font face manipulation
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4844
  * CVE-2018-5105 (bmo#1390882)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4845
    WebExtensions can save and execute files on local file system
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4846
    without user prompts
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4847
  * CVE-2018-5106 (bmo#1408708)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4848
    Developer Tools can expose style editor information cross-origin
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4849
    through service worker
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4850
  * CVE-2018-5107 (bmo#1379276)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4851
    Printing process will follow symlinks for local file access
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4852
  * CVE-2018-5108 (bmo#1421099)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4853
    Manually entered blob URL can be accessed by subsequent private browsing tabs
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4854
  * CVE-2018-5109 (bmo#1405599)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4855
    Audio capture prompts and starts with incorrect origin attribution
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4856
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4857
    Cursor can be made invisible on OS X
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4858
  * CVE-2018-5111 (bmo#1321619)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4859
    URL spoofing in addressbar through drag and drop
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4860
  * CVE-2018-5112 (bmo#1425224)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4861
    Extension development tools panel can open a non-relative URL in the panel
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4862
  * CVE-2018-5113 (bmo#1425267)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4863
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4864
  * CVE-2018-5114 (bmo#1421324)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4865
    The old value of a cookie changed to HttpOnly remains accessible to scripts
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4866
  * CVE-2018-5115 (bmo#1409449)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4867
    Background network requests can open HTTP authentication in unrelated foreground tabs
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4868
  * CVE-2018-5116 (bmo#1396399)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4869
    WebExtension ActiveTab permission allows cross-origin frame content access
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4870
  * CVE-2018-5117 (bmo#1395508)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4871
    URL spoofing with right-to-left text aligned left-to-right
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4872
  * CVE-2018-5118 (bmo#1420049)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4873
    Activity Stream images can attempt to load local content through file:
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4874
  * CVE-2018-5119 (bmo#1420507)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4875
    Reader view will load cross-origin content in violation of CORS headers
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4876
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4877
    OS X Tibetan characters render incompletely in the addressbar
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4878
  * CVE-2018-5122 (bmo#1413841)
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4879
    Potential integer overflow in DoCrypt
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4880
  * CVE-2018-5090
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4881
    Memory safety bugs fixed in Firefox 58
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4882
  * CVE-2018-5089
963c89cda54b update to 58.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1023
diff changeset
  4883
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
1019
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4884
- requires NSS 3.34.1
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4885
- requires rust 1.21
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4886
- removed obsolete patches:
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4887
  mozilla-bindgen-systemlibs.patch
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4888
  mozilla-bmo1360278.patch
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4889
  mozilla-bmo1399611-csd.patch
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4890
  mozilla-rust-1.23.patch
1020
d2c159cb9bf2 rebased patches; updated spec file
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1019
diff changeset
  4891
- rebased patches
1023
fce335a42db7 new features (incl. new locale)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1020
diff changeset
  4892
- updated man-page
1019
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4893
b0c883afdffa initial preparation for 58 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1017
diff changeset
  4894
-------------------------------------------------------------------
1017
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  4895
Tue Jan  9 18:48:02 UTC 2018 - wr@rosenauer.org
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  4896
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  4897
- fixed build with latest rust (mozilla-rust-1.23.patch)
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  4898
8ccb9c3cbe47 build with latest rust
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1016
diff changeset
  4899
-------------------------------------------------------------------
1016
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  4900
Thu Jan  4 12:23:41 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  4901
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  4902
- update to Firefox 57.0.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  4903
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  4904
  (boo#1074723)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  4905
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1015
diff changeset
  4906
-------------------------------------------------------------------
1015
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4907
Wed Jan  3 08:29:38 UTC 2018 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4908
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4909
- fixed regression introduced Oct 10th which made Firefox crash
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4910
  when cancelling the KDE file dialog (boo#1069962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4911
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4912
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4913
Fri Dec 29 19:52:34 UTC 2017 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4914
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4915
- Mozilla Firefox 57.0.3:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4916
  * Fix a crash reporting issue that inadvertently sends background
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4917
    tab crash reports to Mozilla without user opt-in (bmo#1427111,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4918
    bsc#1074235)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4919
- Includes changes from 57.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4920
  * fixes for platforms other than GNU/Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4921
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1012
diff changeset
  4922
-------------------------------------------------------------------
1012
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4923
Fri Dec  8 15:52:17 UTC 2017 - dimstar@opensuse.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4924
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4925
- Explicitly buildrequires python2-xml: The build system relies on
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4926
  it. We wrongly relied on other packages pulling it in for us.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4927
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4928
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4929
Thu Dec  7 11:12:31 UTC 2017 - dimstar@opensuse.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4930
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4931
- Escape the usage of %{VERSION} when calling out to rpm.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4932
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4933
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4934
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4935
Wed Nov 29 23:45:03 UTC 2017 - wr@rosenauer.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4936
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4937
- update to Firefox 57.0.1
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4938
  * CVE-2017-7843: Web worker in Private Browsing mode can write
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4939
    IndexedDB data (bsc#1072034, bmo#1410106)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4940
  * CVE-2017-7844: Visited history information leak through SVG
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4941
    image (bsc#1072036, bmo#1420001)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4942
  * Fix a video color distortion issue on YouTube and other video
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4943
    sites with some AMD devices (bmo#1417442)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4944
  * Fix an issue with prefs.js when the profile path has non-ascii
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4945
    characters (bmo#1420427)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4946
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4947
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4948
Tue Nov 21 09:00:48 UTC 2017 - christophe@krop.fr
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4949
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4950
- Add mozilla-bmo1360278.patch
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4951
  Starting with Firefox 57, the context menu appears on key press.
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4952
  This patch creates a config entry to restore the
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4953
  old behaviour. Without the patch, the mouse gesture extensions
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4954
  require 2 clicks to work (bmo#1360278).
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4955
  The new config entry is named ui.context_menus.after_mouseup
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4956
  (default : false).
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4957
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4958
-------------------------------------------------------------------
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4959
Sat Nov 18 08:35:21 UTC 2017 - wr@rosenauer.org
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4960
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4961
- Allow experimental CSD for Gtk3 (bmo#1399611) if available and enabled
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4962
  widget.allow-client-side-decoration=true
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4963
  (mozilla-bmo1399611-csd.patch)
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4964
0c59a30173da several changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1011
diff changeset
  4965
-------------------------------------------------------------------
1011
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4966
Wed Nov 15 06:46:06 UTC 2017 - wr@rosenauer.org
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4967
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4968
- update to Firefox 57.0 (boo#1068101)
1008
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4969
  * Firefox Quantum
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4970
  * Photon UI
1011
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4971
  * Unified address and search bar
1008
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4972
  * AMD VP9 hardware video decoder support
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4973
  * Added support for Date/Time input
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4974
  * stricter security sandbox blocking filesystem reading and
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4975
    writing on Linux systems
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4976
  * middle mouse paste in the content area no longer navigates to
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  4977
    URLs by default on Unix systems
1011
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4978
  MFSA 2017-24
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4979
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4980
    Use-after-free of PressShell while restyling layout
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4981
  * CVE-2017-7830 (bmo#1408990)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4982
    Cross-origin URL information leak through Resource Timing API
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4983
  * CVE-2017-7831 (bmo#1392026)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4984
    Information disclosure of exposed properties on JavaScript proxy
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4985
    objects
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4986
  * CVE-2017-7832 (bmo#1408782)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4987
    Domain spoofing through use of dotless 'i' character followed
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4988
    by accent markers
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4989
  * CVE-2017-7833 (bmo#1370497)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4990
    Domain spoofing with Arabic and Indic vowel marker characters
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4991
  * CVE-2017-7834 (bmo#1358009)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4992
    data: URLs opened in new tabs bypass CSP protections
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4993
  * CVE-2017-7835 (bmo#1402363)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4994
    Mixed content blocking incorrectly applies with redirects
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4995
  * CVE-2017-7836 (bmo#1401339)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4996
    Pingsender dynamically loads libcurl on Linux and OS X
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4997
  * CVE-2017-7837 (bmo#1325923)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4998
    SVG loaded as <img> can use meta tags to set cookies
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  4999
  * CVE-2017-7838 (bmo#1399540)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5000
    Failure of individual decoding of labels in international domain
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5001
    names triggers punycode display of entire IDN
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5002
  * CVE-2017-7839 (bmo#1402896)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5003
    Control characters before javascript: URLs defeats self-XSS
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5004
    prevention mechanism
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5005
  * CVE-2017-7840 (bmo#1366420)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5006
    Exported bookmarks do not strip script elements from user-supplied
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5007
    tags
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5008
  * CVE-2017-7842 (bmo#1397064)
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5009
    Referrer Policy is not always respected for <link> elements
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5010
  * CVE-2017-7827
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5011
    Memory safety bugs fixed in Firefox 57
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5012
  * CVE-2017-7826
85bd01789b6f Firefo 57.0 final release (incl. changelogs)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1008
diff changeset
  5013
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5
1004
f98f2fd265af update version requirements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1001
diff changeset
  5014
- requires NSPR 4.17, NSS 3.33 and rustc 1.19
1005
6d716caa6abe 57.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1004
diff changeset
  5015
- rebased patches
1008
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5016
- added mozilla-bindgen-systemlibs.patch to allow stylo build
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5017
  with system libs (bmo#1341234)
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5018
- removed mozilla-language.patch since the whole locale code
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5019
  changed in Firefox and is relying on ICU now
77c890186192 removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1005
diff changeset
  5020
- removed obsolete mozilla-ucontext.patch
1004
f98f2fd265af update version requirements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1001
diff changeset
  5021
f98f2fd265af update version requirements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1001
diff changeset
  5022
-------------------------------------------------------------------
1001
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5023
Sat Oct 28 06:30:37 UTC 2017 - wr@rosenauer.org
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5024
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5025
- update to Firefox 56.0.2
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5026
  * Disable Form Autofill completely on user request (bmo#1404531)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5027
  * Fix for video-related crashes on Windows 7 (bmo#1409141)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5028
  * Correct detection for 64-bit GSSAPI authentication (bmo#1409275)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5029
  * Fix for shutdown crash (bmo#1404105)
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5030
7339b115a221 Firefox 56.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 1000
diff changeset
  5031
-------------------------------------------------------------------
1000
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5032
Tue Oct 10 11:47:49 UTC 2017 - wr@rosenauer.org
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5033
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5034
- update to Firefox 56.0.1
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5035
  * Block D3D11 when using Intel drivers on Windows 7 systems with
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5036
    partial AVX support (bmo#1403353)
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5037
  -> just to sync the version number
998
6c6109948e35 enable stylo (Quantum CSS) for TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 997
diff changeset
  5038
- enable stylo for TW (requires LLVM >= 3.9)
1000
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5039
- queue KDE filepicker requests to avoid non-opening file dialogs
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5040
  happening in certain situations (contributed by Ignaz Forster)
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5041
- the placeholder dot in KDE file dialog in case of empty filenames
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5042
  was removed, apparently not required (anymore)
bfa8722a06ad update to 56.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 998
diff changeset
  5043
  (contributed by Ignaz Forster)
998
6c6109948e35 enable stylo (Quantum CSS) for TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 997
diff changeset
  5044
6c6109948e35 enable stylo (Quantum CSS) for TW
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 997
diff changeset
  5045
-------------------------------------------------------------------
997
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5046
Sun Oct  1 18:25:16 UTC 2017 - stefan.bruens@rwth-aachen.de
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5047
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5048
- Correct plugin directory for aarch64 (boo#1061207). The wrapper
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5049
  script was not detecting aarch64 as a 64 bit architecture, thus
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5050
  used /usr/lib/browser-plugins/.
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5051
ca8a6ac7fbf6 - Correct plugin directory for aarch64 (boo#1061207). The wrapper
Stefan Brüns <stefan.bruens@rwth-aachen.de>
parents: 996
diff changeset
  5052
-------------------------------------------------------------------
996
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5053
Sat Sep 30 20:10:50 UTC 2017 - zaitor@opensuse.org
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5054
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5055
- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5056
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5057
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5058
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5059
  looks for.
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5060
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5061
-------------------------------------------------------------------
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5062
Thu Sep 28 08:28:29 UTC 2017 - wr@rosenauer.org
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5063
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5064
- update to Firefox 56.0 (boo#1060445)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5065
  * Firefox Screenshots
994
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5066
  * Find Options/Preferences more quickly with new search function
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5067
  * Media is no longer auto-played when opened in a background tab
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5068
  * Enable CSS Grid Layout View
996
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5069
  MFSA 2017-21
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5070
  * CVE-2017-7793 (bmo#1371889)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5071
    Use-after-free with Fetch API
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5072
  * CVE-2017-7817 (bmo#1356596) (Android-only)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5073
    Firefox for Android address bar spoofing through fullscreen mode
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5074
  * CVE-2017-7818 (bmo#1363723)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5075
    Use-after-free during ARIA array manipulation
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5076
  * CVE-2017-7819 (bmo#1380292)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5077
    Use-after-free while resizing images in design mode
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5078
  * CVE-2017-7824 (bmo#1398381)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5079
    Buffer overflow when drawing and validating elements with ANGLE
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5080
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5081
    Use-after-free in TLS 1.2 generating handshake hashes
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5082
  * CVE-2017-7812 (bmo#1379842)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5083
    Drag and drop of malicious page content to the tab bar can open locally stored files
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5084
  * CVE-2017-7814 (bmo#1376036)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5085
    Blob and data URLs bypass phishing and malware protection warnings
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5086
  * CVE-2017-7813 (bmo#1383951)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5087
    Integer truncation in the JavaScript parser
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5088
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5089
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5090
  * CVE-2017-7815 (bmo#1368981)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5091
    Spoofing attack with modal dialogs on non-e10s installations
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5092
  * CVE-2017-7816 (bmo#1380597)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5093
    WebExtensions can load about: URLs in extension UI
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5094
  * CVE-2017-7821 (bmo#1346515)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5095
    WebExtensions can download and open non-executable files without user interaction
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5096
  * CVE-2017-7823 (bmo#1396320)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5097
    CSP sandbox directive did not create a unique origin
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5098
  * CVE-2017-7822 (bmo#1368859)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5099
    WebCrypto allows AES-GCM with 0-length IV
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5100
  * CVE-2017-7820 (bmo#1378207)
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5101
    Xray wrapper bypass with new tab and web console
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5102
  * CVE-2017-7811
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5103
    Memory safety bugs fixed in Firefox 56
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5104
  * CVE-2017-7810
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5105
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
994
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5106
- requires NSPR 4.16 and NSS 3.32.1
996
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5107
- rebased patches
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5108
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5109
-------------------------------------------------------------------
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5110
Thu Sep 28 07:53:13 UTC 2017 - dimstar@opensuse.org
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5111
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5112
- Add alsa-devel BuildRequires: we care for ALSA support to be
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5113
  built and thus need to ensure we get the dependencies in place.
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5114
  In the past, alsa-devel was pulled in by accident: we
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5115
  buildrequire libgnome-devel. This required esound-devel and that
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5116
  in turn pulled in alsa-devel for us. libgnome is being fixed to
84d25951c2db - Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
zaitor@opensuse.org
parents: 994
diff changeset
  5117
  no longer require esound-devel.
994
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5118
9fc447b00040 Firefox 56.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 992
diff changeset
  5119
-------------------------------------------------------------------
992
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5120
Mon Sep  4 18:27:44 UTC 2017 - wr@rosenauer.org
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5121
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5122
- update to Firefox 55.0.3
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5123
  * Fix an issue with addons when using a path containing non-ascii
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5124
    characters (bmo#1389160)
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5125
  * Fix file uploads to some websites, including YouTube (bmo#1383518)
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5126
- fix Google API key build integration
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5127
- add mozilla-ucontext.patch to fix Tumbleweed build
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5128
- do not enable XINPUT2 for now (boo#1053959)
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5129
b2ba34e0dc10 Firefox 55.0.3 and some other fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 991
diff changeset
  5130
-------------------------------------------------------------------
991
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5131
Fri Aug 11 08:32:30 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5132
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5133
- update to Firefox 55.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5134
  * Fix a regression the tab restoration process (bmo#1388160)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5135
  * Fix a problem causing What's new pages not to be displayed (bmo#1386224)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5136
  * Fix a rendering issue with some PKCS#11 libraries (bmo#1388370)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5137
  * Disable the predictor prefetch (bmo#1388160)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5138
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5139
-------------------------------------------------------------------
985
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5140
Sat Aug  5 13:22:16 UTC 2017 - wr@rosenauer.org
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5141
991
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5142
- update to Firefox 55.0 (boo#1052829)
985
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5143
  * Browsing sessions with a high number of tabs are now restored
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5144
    in an instant
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5145
  * Sidebar (bookmarks, history, synced tabs) can now be moved to
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5146
    the right edge of the window
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5147
  * Fine-tune your browser performance from the Preferences/Options page.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5148
  * Make screenshots of webpages, and save them locally or upload
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5149
    them to the cloud. This feature will undergo A/B testing and
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5150
    will not be visible for some users.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5151
  * Added Belarusian (be) locale
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5152
  * Simplify print jobs from within print preview
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5153
  * Use virtual reality devices with the web with the introduction
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5154
    of WebVR
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5155
  * Search suggestions are now enabled by default for users who
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5156
    haven't explicitly opted-out
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5157
  * Search with any installed search engine directly from the
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5158
    location bar
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5159
  * IMPORTANT: Breaking profile changes - do not downgrade Firefox
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5160
    and use a profile that has been opened with Firefox 55+.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5161
  * The Adobe Flash plugin is now click-to-activate by default and
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5162
    only allowed on http:// and https:// URL schemes. This change
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5163
    will be rolled out progressively and so will not be visible to
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5164
    all users immediately. For more information see the Firefox
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5165
    plugin roadmap
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5166
  * Modernized application update UI to be less intrusive and more
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5167
    aligned with the rest of the browser. Only users who have not
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5168
    restarted their browser 8 days after downloading an update or
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5169
    users who opted out of automatic updates will see this change.
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5170
  * Insecure sites can no longer access the Geolocation APIs to get
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5171
    access to your physical location
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5172
  * requires NSPR 4.15 and NSS 3.31
991
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5173
  MFSA 2017-18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5174
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5175
    XUL injection in the style editor in devtools
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5176
  * CVE-2017-7800 (bmo#1374047)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5177
    Use-after-free in WebSockets during disconnection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5178
  * CVE-2017-7801 (bmo#1371259)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5179
    Use-after-free with marquee during window resizing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5180
  * CVE-2017-7809 (bmo#1380284)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5181
    Use-after-free while deleting attached editor DOM node
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5182
  * CVE-2017-7784 (bmo#1376087)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5183
    Use-after-free with image observers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5184
  * CVE-2017-7802 (bmo#1378147)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5185
    Use-after-free resizing image elements
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5186
  * CVE-2017-7785 (bmo#1356985)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5187
    Buffer overflow manipulating ARIA attributes in DOM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5188
  * CVE-2017-7786 (bmo#1365189)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5189
    Buffer overflow while painting non-displayable SVG
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5190
  * CVE-2017-7806 (bmo#1378113)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5191
    Use-after-free in layer manager with SVG
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5192
  * CVE-2017-7753 (bmo#1353312)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5193
    Out-of-bounds read with cached style data and pseudo-elements#
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5194
  * CVE-2017-7787 (bmo#1322896)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5195
    Same-origin policy bypass with iframes through page reloads
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5196
  * CVE-2017-7807 (bmo#1376459)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5197
    Domain hijacking through AppCache fallback
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5198
  * CVE-2017-7792 (bmo#1368652)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5199
    Buffer overflow viewing certificates with an extremely long OID
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5200
  * CVE-2017-7804 (bmo#1372849)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5201
    Memory protection bypass through WindowsDllDetourPatcher
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5202
  * CVE-2017-7791 (bmo#1365875)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5203
    Spoofing following page navigation with data: protocol and modal alerts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5204
  * CVE-2017-7808 (bmo#1367531)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5205
    CSP information leak with frame-ancestors containing paths
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5206
  * CVE-2017-7782 (bmo#1344034)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5207
    WindowsDllDetourPatcher allocates memory without DEP protections
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5208
  * CVE-2017-7781 (bmo#1352039)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5209
    Elliptic curve point addition error when using mixed Jacobian-affine coordinates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5210
  * CVE-2017-7794 (bmo#1374281)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5211
    Linux file truncation via sandbox broker
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5212
  * CVE-2017-7803 (bmo#1377426)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5213
    CSP containing 'sandbox' improperly applied
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5214
  * CVE-2017-7799 (bmo#1372509)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5215
    Self-XSS XUL injection in about:webrtc
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5216
  * CVE-2017-7783 (bmo#1360842)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5217
    DOS attack through long username in URL
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5218
  * CVE-2017-7788 (bmo#1073952)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5219
    Sandboxed about:srcdoc iframes do not inherit CSP directives
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5220
  * CVE-2017-7789 (bmo#1074642)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5221
    Failure to enable HSTS when two STS headers are sent for a connection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5222
  * CVE-2017-7790 (bmo#1350460) (Windows-only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5223
    Windows crash reporter reads extra memory for some non-null-terminated registry values
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5224
  * CVE-2017-7796 (bmo#1234401) (Windows-only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5225
    Windows updater can delete any file named update.log
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5226
  * CVE-2017-7797 (bmo#1334776)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5227
    Response header name interning leaks across origins
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5228
  * CVE-2017-7780
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5229
    Memory safety bugs fixed in Firefox 55
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5230
  * CVE-2017-7779
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 986
diff changeset
  5231
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3
985
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5232
- updated mozilla-kde.patch:
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5233
  * removed "downloadfinished" alert as Firefox reimplemented the
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5234
    whole thing (TODO: check if there is another function we should
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5235
    hook in)
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5236
038d048a3940 Firefox 55.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 983
diff changeset
  5237
-------------------------------------------------------------------
983
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5238
Tue Jul  4 20:08:47 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5239
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5240
- update to Firefox 54.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5241
  * Fix a display issue of tab title (bmo#1357656)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5242
  * Fix a display issue of opening new tab (bmo#1371995)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5243
  * Fix a display issue when opening multiple tabs (bmo#1371962)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5244
  * Fix a tab display issue when downloading files (bmo#1373109)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5245
  * Fix a PDF printing issue (bmo#1366744)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5246
  * Fix a Netflix issue on Linux (bmo#1375708)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5247
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 982
diff changeset
  5248
-------------------------------------------------------------------
982
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5249
Thu Jun 15 13:56:05 UTC 2017 - wr@rosenauer.org
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5250
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5251
- update to Firefox 54.0
981
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5252
  * Clearer and more detailed information for download items in the
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5253
    download panel
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5254
  * Added Burmese (my) locale
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5255
  * Bookmarks created on mobile devices are now shown in
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5256
    "Mobile Bookmarks” folder in the drop down list from the toolbar
593707d5c013 added changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 979
diff changeset
  5257
    and Bookmarks option in the menu bar in Desktop Firefox
982
53443ffb496a Firefox 54.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 981
diff changeset
  5258
  * added support for multiple content processes (e10s-multi)
979
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5259
- requires NSPR 4.14 and NSS 3.30.2
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5260
- requires rust 1.15.1
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5261
- removed mozilla-shared-nss-db.patch as it seems to be a rather
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5262
  unused feature
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5263
f82a374a310d Firefox 54.0b13
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 977
diff changeset
  5264
-------------------------------------------------------------------
977
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5265
Thu Jun  1 04:25:05 UTC 2017 - kah0922@gmail.com
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5266
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5267
- remove -fno-inline-small-functions and explicitely optimize with
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5268
  -O2 for openSUSE > 13.2/Leap 42 to work with gcc7 (boo#1040105)
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5269
224d8137f02c remove -fno-inline-small-functions and explicitely optimize with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 967
diff changeset
  5270
-------------------------------------------------------------------
967
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
  5271
Wed Apr 26 12:37:38 UTC 2017 - wr@rosenauer.org
964
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5272
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5273
- switch to Mozilla's geolocation service (boo#1026989)
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5274
- removed mozilla-preferences.patch obsoleted by overriding via
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5275
  firefox.js
967
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
  5276
- fixed KDE integration to avoid crash caused by filepicker
188c3f40f0da recent changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 964
diff changeset
  5277
  (boo#1015998)
964
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5278
218a4e337cfe use mozilla geolocation api instead of broken google one
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 962
diff changeset
  5279
-------------------------------------------------------------------
960
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
  5280
Mon Apr 17 12:52:10 UTC 2017 - wr@rosenauer.org
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
  5281
42e50afb9638 Firefox 53.0 (build6)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 959
diff changeset
  5282
- update to Firefox 53.0
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5283
  * requires NSS 3.29.5
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5284
  * Lightweight themes are now applied in private browsing windows
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5285
  * Reader Mode now displays estimated reading time for the page
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5286
  * Two new 'compact' themes available in Firefox, dark and light,
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5287
    based on the Firefox Developer Edition theme
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5288
  * Ended Firefox Linux support for processors older than Pentium 4
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5289
    and AMD Opteron
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5290
  * Refresh of the media controls user interface
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5291
  * Shortened titles on tabs are faded out instead of using ellipsis
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5292
    for improved readability
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5293
  * Media playback on new tabs is blocked until the tab is visible
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5294
  * Permission notifications have a cleaner design and cannot be
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5295
    easily missed
962
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5296
  MFSA 2017-10
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5297
  * CVE-2017-5456 (bmo#1344415)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5298
    Sandbox escape allowing local file system access
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5299
  * CVE-2017-5442 (bmo#1347979)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5300
    Use-after-free during style changes
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5301
  * CVE-2017-5443 (bmo#1342661)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5302
    Out-of-bounds write during BinHex decoding
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5303
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5304
     bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5305
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5306
    Firefox ESR 52.1
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5307
  * CVE-2017-5464 (bmo#1347075)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5308
    Memory corruption with accessibility and DOM manipulation
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5309
  * CVE-2017-5465 (bmo#1347617)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5310
    Out-of-bounds read in ConvolvePixel
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5311
  * CVE-2017-5466 (bmo#1353975)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5312
    Origin confusion when reloading isolated data:text/html URL
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5313
  * CVE-2017-5467 (bmo#1347262)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5314
    Memory corruption when drawing Skia content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5315
  * CVE-2017-5460 (bmo#1343642)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5316
    Use-after-free in frame selection
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5317
  * CVE-2017-5461 (bmo#1344380)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5318
    Out-of-bounds write in Base64 encoding in NSS
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5319
  * CVE-2017-5448 (bmo#1346648)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5320
    Out-of-bounds write in ClearKeyDecryptor
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5321
  * CVE-2017-5449 (bmo#1340127)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5322
    Crash during bidirectional unicode manipulation with animation
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5323
  * CVE-2017-5446 (bmo#1343505)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5324
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5325
  * CVE-2017-5447 (bmo#1343552)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5326
    Out-of-bounds read during glyph processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5327
  * CVE-2017-5444 (bmo#1344461)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5328
    Buffer overflow while parsing application/http-index-format content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5329
  * CVE-2017-5445 (bmo#1344467)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5330
    Uninitialized values used while parsing application/http-index-format
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5331
    content
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5332
  * CVE-2017-5468 (bmo#1329521)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5333
    Incorrect ownership model for Private Browsing information
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5334
  * CVE-2017-5469 (bmo#1292534)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5335
    Potential Buffer overflow in flex-generated code
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5336
  * CVE-2017-5440 (bmo#1336832)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5337
    Use-after-free in txExecutionState destructor during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5338
  * CVE-2017-5441 (bmo#1343795)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5339
    Use-after-free with selection during scroll events
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5340
  * CVE-2017-5439 (bmo#1336830)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5341
    Use-after-free in nsTArray Length() during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5342
  * CVE-2017-5438 (bmo#1336828)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5343
    Use-after-free in nsAutoPtr during XSLT processing
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5344
  * CVE-2017-5437 (bmo#1343453)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5345
    Vulnerabilities in Libevent library
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5346
  * CVE-2017-5436 (bmo#1345461)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5347
    Out-of-bounds write with malicious font in Graphite 2
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5348
  * CVE-2017-5435 (bmo#1350683)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5349
    Use-after-free during transaction processing in the editor
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5350
  * CVE-2017-5434 (bmo#1349946)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5351
    Use-after-free during focus handling
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5352
  * CVE-2017-5433 (bmo#1347168)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5353
    Use-after-free in SMIL animation functions
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5354
  * CVE-2017-5432 (bmo#1346654)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5355
    Use-after-free in text input selection
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5356
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5357
     bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5358
     bmo#1346140, bmo#1346419, bmo#1348143, bmo#1349621,
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5359
     bmo#1349719, bmo#1353476)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5360
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5361
  * CVE-2017-5459 (bmo#1333858)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5362
    Buffer overflow in WebGL
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5363
  * CVE-2017-5458 (bmo#1229426)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5364
    Drag and drop of javascript: URLs can allow for self-XSS
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5365
  * CVE-2017-5455 (bmo#1341191)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5366
    Sandbox escape through internal feed reader APIs
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5367
  * CVE-2017-5454 (bmo#1349276)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5368
    Sandbox escape allowing file system read access through file picker
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5369
  * CVE-2017-5451 (bmo#1273537)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5370
    Addressbar spoofing with onblur event
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5371
  * CVE-2017-5453 (bmo#1321247)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5372
    HTML injection into RSS Reader feed preview page through
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5373
    TITLE element
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5374
  * CVE-2017-5462 (bmo#1345089)
fbb2f292caaa add security information to changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 960
diff changeset
  5375
    DRBG flaw in NSS
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5376
- removed browser(npapi) provides as these plugins are deprecated
953
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5377
- switch used compiler to gcc5 (FF requires gcc >= 4.9 now) for
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5378
  Leap 42
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5379
- Gtk2 is not longer an option; switched to Gtk3
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5380
- apply MOZ_USE_XINPUT2=1 for better touchpad and touchscreen support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5381
  (boo#1032003)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5382
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5383
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5384
Mon Apr  3 06:16:26 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5385
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5386
- update to Firefox 52.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5387
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5388
  * Fix loading tab icons on session restore (bmo#1338009)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5389
  * Fix a crash on startup on Linux (bmo#1345413)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5390
  * Fix new installs erroneously not prompting to change the default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5391
    browser setting (bmo#1343938)
953
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5392
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5393
-------------------------------------------------------------------
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5394
Mon Mar 20 15:35:57 UTC 2017 - wr@rosenauer.org
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5395
6b282f295753 53.0b4 (complete)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 951
diff changeset
  5396
- disable rust usage for everything but x86(-64)
956
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 954
diff changeset
  5397
- explicitely add libffi build requirement
951
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5398
f7a8fa97a57e merge latest changes from firefox52
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 946
diff changeset
  5399
-------------------------------------------------------------------
946
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5400
Fri Mar 17 15:43:29 UTC 2017 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5401
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5402
- update to Firefox 52.0.1 (boo#1029822)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5403
  MFSA 2017-08
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5404
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5405
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 945
diff changeset
  5406
-------------------------------------------------------------------
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5407
Thu Mar  9 12:30:14 UTC 2017 - wr@rosenauer.org
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5408
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5409
- reenable ALSA support which was removed by default upstream
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5410
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5411
-------------------------------------------------------------------
944
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
  5412
Sat Mar  4 16:57:45 UTC 2017 - wr@rosenauer.org
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
  5413
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5414
- update to Firefox 52.0 (boo#1028391)
944
ce8a98f8d8d7 Firefox 52.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 943
diff changeset
  5415
  * requires NSS >= 3.28.3
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5416
  * Pages containing insecure password fields now display a warning
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5417
    directly within username and password fields.
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5418
  * Send and open a tab from one device to another with Sync
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5419
  * Removed NPAPI support for plugins other than Flash. Silverlight,
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5420
    Java, Acrobat and the like are no longer supported.
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5421
  * Removed Battery Status API to reduce fingerprinting of users by
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5422
    trackers
945
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5423
  * MFSA 2017-05
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5424
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5425
                   (bmo#1334933)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5426
    CVE-2017-5401: Memory Corruption when handling ErrorResult
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5427
                   (bmo#1328861)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5428
    CVE-2017-5402: Use-after-free working with events in FontFace
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5429
                   objects (bmo#1334876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5430
    CVE-2017-5403: Use-after-free using addRange to add range to an
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5431
                   incorrect root object (bmo#1340186)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5432
    CVE-2017-5404: Use-after-free working with ranges in selections
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5433
                   (bmo#1340138)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5434
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5435
                   (bmo#1306890)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5436
    CVE-2017-5407: Pixel and history stealing via floating-point
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5437
                   timing side channel with SVG filters (bmo#1336622)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5438
    CVE-2017-5410: Memory corruption during JavaScript garbage
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5439
                   collection incremental sweeping (bmo#1330687)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5440
    CVE-2017-5408: Cross-origin reading of video captions in violation
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5441
                   of CORS (bmo#1313711)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5442
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5443
    CVE-2017-5413: Segmentation fault during bidirectional operations
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5444
                   (bmo#1337504)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5445
    CVE-2017-5414: File picker can choose incorrect default directory
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5446
                   (bmo#1319370)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5447
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5448
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5449
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5450
                   (bmo#791597)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5451
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5452
                   seccomp-bpf filter is running (bmo#1257361)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5453
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5454
                   startup (bmo#1295542)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5455
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5456
                   authorization responses (bmo#1338876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5457
    CVE-2017-5419: Repeated authentication prompts lead to DOS
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5458
                   attack (bmo#1312243)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5459
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5460
                   location (bmo#1284395)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5461
    CVE-2017-5405: FTP response codes can cause use of
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5462
                   uninitialized values for ports (bmo#1336699)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5463
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5464
    CVE-2017-5422: DOS attack by using view-source: protocol
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5465
                   repeatedly in one hyperlink (bmo#1295002)
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5466
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5467
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
7b1e775ff77a FF52 as released
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 944
diff changeset
  5468
                   Firefox ESR 45.8
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5469
- removed obsolete patches
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5470
  * mozilla-binutils-visibility.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5471
  * mozilla-check_return.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5472
  * mozilla-disable-skia-be.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5473
  * mozilla-skia-overflow.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5474
  * mozilla-skia-ppc-endianess.patch
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5475
- rebased patches
943
ace605efe50f latest beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 942
diff changeset
  5476
- enable rust usage for Tumbleweed
942
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5477
66115255ad6f prepare FF51 (currently 51.0b5)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 940
diff changeset
  5478
-------------------------------------------------------------------
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5479
Fri Jan 27 20:25:59 UTC 2017 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5480
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5481
- Mozilla Firefox 51.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5482
  - Multiprocess incompatibility did not correctly register with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5483
    some add-ons (bmo#1333423)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5484
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5485
-------------------------------------------------------------------
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5486
Fri Jan 20 13:57:56 UTC 2017 - wr@rosenauer.org
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5487
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5488
- update to Firefox 51.0
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5489
  * requires NSPR >= 4.13.1, NSS >= 3.28.1
936
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5490
  * Added support for FLAC (Free Lossless Audio Codec) playback
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5491
  * Added support for WebGL 2
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5492
  * Added Georgian (ka) and Kabyle (kab) locales
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5493
  * Support saving passwords for forms without 'submit' events
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5494
  * Improved video performance for users without GPU acceleration
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5495
  * Zoom indicator is shown in the URL bar if the zoom level is not
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5496
    at default level
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5497
  * View passwords from the prompt before saving them
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5498
  * Remove Belarusian (be) locale
096e59808e91 more changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 935
diff changeset
  5499
  * Use Skia for content rendering (Linux)
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5500
  * MFSA 2017-01
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5501
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5502
                   ASLR and DEP (bmo#1325200, boo#1021814)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5503
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5504
    CVE-2017-5377: Memory corruption with transforms to create
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5505
                   gradients in Skia (bmo#1306883, boo#1021826)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5506
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5507
                   (bmo#1312001, bmo#1330769, boo#1021818)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5508
    CVE-2017-5379: Use-after-free in Web Animations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5509
                   (bmo#1309198,boo#1021827)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5510
    CVE-2017-5380: Potential use-after-free during DOM manipulations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5511
                   (bmo#1322107, boo#1021819)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5512
    CVE-2017-5390: Insecure communication methods in Developer Tools
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5513
                   JSON viewer (bmo#1297361, boo#1021820)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5514
    CVE-2017-5389: WebExtensions can install additional add-ons via
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5515
                   modified host requests (bmo#1308688, boo#1021828)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5516
    CVE-2017-5396: Use-after-free with Media Decoder
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5517
                   (bmo#1329403, boo#1021821)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5518
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5519
                   and save to arbitrary filesystem locations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5520
		   (bmo#1017616, boo#1021830)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5521
    CVE-2017-5382: Feed preview can expose privileged content errors
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5522
                   and exceptions (bmo#1295322, boo#1021831)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5523
    CVE-2017-5383: Location bar spoofing with unicode characters
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5524
                   (bmo#1323338, bmo#1324716, boo#1021822)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5525
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5526
                   (bmo#1255474, boo#1021832)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5527
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5528
                   response headers (bmo#1295945, boo#1021833)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5529
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5530
                   extensions (bmo#1319070, boo#1021823)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5531
    CVE-2017-5394: Android location bar spoofing using fullscreen and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5532
                   JavaScript events (bmo#1222798)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5533
    CVE-2017-5391: Content about: pages can load privileged about: pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5534
                   (bmo#1309310, boo#1021835)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5535
    CVE-2017-5392: Weak references using multiple threads on weak proxy
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5536
                   objects lead to unsafe memory usage (bmo#1293709)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5537
		   (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5538
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5539
                   mozAddonManager (bmo#1309282, boo#1021837)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5540
    CVE-2017-5395: Android location bar spoofing during scrolling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5541
                   (bmo#1293463) (Android only)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5542
    CVE-2017-5387: Disclosure of local file existence through TRACK
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5543
                   tag error messages (bmo#1295023, boo#1021839)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5544
    CVE-2017-5388: WebRTC can be used to generate a large amount of
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5545
                   UDP traffic for DDOS attacks
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5546
		   (bmo#1281482, boo#1021840)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5547
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5548
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5549
                   Firefox ESR 45.7 (boo#1021824)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5550
- switch Firefox to Gtk3 for Tumbleweed
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5551
- removed obsolete patches
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5552
  * mozilla-flex_buffer_overrun.patch
939
3604ed712e16 51.0 as submitted to official openSUSE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 938
diff changeset
  5553
- updated RPM locale support tag
3604ed712e16 51.0 as submitted to official openSUSE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 938
diff changeset
  5554
- improve recognition of LANGUAGE env variable (boo#1017174)
940
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5555
- add upstream patch to fix PPC64LE (bmo#1319389)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5556
  (mozilla-skia-ppc-endianess.patch)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5557
- fix build without skia (big endian archs) (bmo#1319374)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 939
diff changeset
  5558
  (mozilla-disable-skia-be.patch)
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5559
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5560
-------------------------------------------------------------------
933
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5561
Mon Dec 12 21:18:41 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5562
935
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5563
- update to Firefox 50.1.0 (boo#1015422)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5564
  * MFSA 2016-94
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5565
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5566
    CVE-2016-9899: Use-after-free while manipulating DOM events and
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5567
                   audio elements (bmo#1317409)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5568
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5569
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5570
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5571
    CVE-2016-9898: Use-after-free in Editor while manipulating
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5572
                   DOM subtrees (bmo#1314442)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5573
    CVE-2016-9900: Restricted external resources can be loaded by
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5574
                   SVG images through data URLs (bmo#1319122)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5575
    CVE-2016-9904: Cross-origin information leak in shared atoms
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5576
                   (bmo#1317936)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5577
    CVE-2016-9901: Data from Pocket server improperly sanitized
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5578
                   before execution (bmo#1320057)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5579
    CVE-2016-9902: Pocket extension does not validate the origin
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5580
                   of events (bmo#1320039)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5581
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5582
                   (bmo#1315435)
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5583
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5584
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
9ae2b79d3bb1 prepare FF 51 -> 51.0b14
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 933
diff changeset
  5585
                   Firefox ESR 45.6
933
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5586
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5587
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5588
Fri Dec  9 17:57:22 UTC 2016 - cgrobertson@novell.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5589
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5590
- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5591
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5592
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5593
Thu Dec  1 02:49:45 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5594
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5595
- update to Firefox 50.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5596
  * Firefox crashes with 3rd party Chinese IME when using IME text
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5597
    (50.0.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5598
  security fixes (in 50.0.1): (boo#1012807)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5599
  * MFSA 2016-91
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5600
    CVE-2016-9078: data: URL can inherit wrong origin after an
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5601
                   HTTP redirect (bmo#1317641)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5602
  security fixes (in 50.0.2) (boo#1012964)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5603
  * MFSA 2016-92
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5604
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5605
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 932
diff changeset
  5606
-------------------------------------------------------------------
932
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5607
Mon Nov 14 21:07:03 UTC 2016 - wr@rosenauer.org
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5608
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5609
- update to Firefox 50.0 (boo#1009026)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5610
  * requires NSS 3.26.2
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5611
  new features
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5612
  * Updates to keyboard shortcuts
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5613
    Set a preference to have Ctrl+Tab cycle through tabs in recently
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5614
    used order
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5615
    View a page in Reader Mode by using Ctrl+Alt+R
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5616
  * Added option to Find in page that allows users to limit search to
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5617
    whole words only
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5618
  * Added download protection for a large number of executable file
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5619
    types on Windows, Mac and Linux
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5620
  * Fixed rendering of dashed and dotted borders with rounded corners
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5621
    (border-radius)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5622
  * Added a built-in Emoji set for operating systems without native
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5623
    Emoji fonts (Windows 8.0 and lower and Linux)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5624
  * Blocked versions of libavcodec older than 54.35.1
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5625
  * additional locale
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5626
  security fixes:
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5627
  * MFSA 2016-89
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5628
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5629
                   (bmo#1292443)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5630
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5631
    CVE-2016-5293: Write to arbitrary file with updater and moz
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5632
                   maintenance service using updater.log hardlink
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5633
		   (Windows only) (bmo#1246945)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5634
    CVE-2016-5294: Arbitrary target directory for result files of
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5635
                   update process (Windows only) (bmo#1246972)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5636
    CVE-2016-5297: Incorrect argument length checking in Javascript
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5637
                   (bmo#1303678)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5638
    CVE-2016-9064: Addons update must verify IDs match between
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5639
                   current and new versions (bmo#1303418)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5640
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5641
                   (Android only) (bmo#1306696)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5642
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5643
                   nsScriptLoadHandler (bmo#1299686)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5644
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5645
                   (bmo#1301777, bmo#1308922 (CVE-2016-9069))
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5646
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5647
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5648
                   (bmo#1300083) (Windows only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5649
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5650
                   and use it to gain elevated privileges (bmo#1295324)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5651
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5652
                   to cross-origin images, allowing timing attacks on them
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5653
		   (bmo#1298552)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5654
    CVE-2016-5291: Same-origin policy violation using local HTML file
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5655
                    and saved shortcut file (bmo#1292159)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5656
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5657
                   arbitrary files as SYSTEM (Windows only) (bmo#1247239)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5658
    CVE-2016-5298: SSL indicator can mislead the user about the real
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5659
                   URL visited (bmo#1227538) (Android only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5660
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5661
                   signature-level permission can be accessed by an
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5662
		   application installed beforehand that defines the
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5663
		   same permissions (bmo#1245791) (Android only)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5664
    CVE-2016-9061: API Key (glocation) in broadcast protected with
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5665
                   signature-level permission can be accessed by an
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5666
		   application installed beforehand that defines the
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5667
		   same permissions (Android only) (bmo#1245795)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5668
    CVE-2016-9062: Private browsing browser traces (android) in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5669
                   browser.db and wal file (Android only) (bmo#1294438)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5670
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5671
                   (bmo#1281071)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5672
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5673
                   (bmo#1289273)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5674
    CVE-2016-9074: Insufficient timing side-channel resistance in
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5675
                   divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5676
    CVE-2016-9076: select dropdown menu can be used for URL bar
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5677
                   spoofing on e10s (bmo#1276976)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5678
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5679
                   in expat (bmo#1274777)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5680
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5681
                   (bmo#1285003)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5682
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5683
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5684
- make aarch64 build more similar to x86_64 build (remove conditionals
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5685
  that don't seem to be necessary anymore)
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5686
a58cc7936ce7 Firefox 50.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 931
diff changeset
  5687
-------------------------------------------------------------------
931
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5688
Mon Oct 24 09:41:17 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5689
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5690
- Mozilla Firefox 49.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5691
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5692
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5693
  * Asynchronous rendering of the Flash plugins is now enabled by
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5694
    default
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5695
  * Change D3D9 default fallback preference to prevent graphical
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5696
    artifacts
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5697
  * Network issue prevents some users from seeing the Firefox UI on
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5698
    startup
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5699
  * Web compatibility issue with file uploads
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5700
  * Web compatibility issue with Array.prototype.values
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5701
  * Diagnostic information on timing for tab switching
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5702
  * Fix a Canvas filters graphics issue affecting HTML5 apps
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5703
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 930
diff changeset
  5704
-------------------------------------------------------------------
930
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5705
Wed Oct 12 20:42:28 UTC 2016 - badshah400@gmail.com
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5706
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5707
- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5708
  and fixes have been incorporated by upstream.
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5709
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5710
-------------------------------------------------------------------
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5711
Fri Sep 23 20:36:39 UTC 2016 - astieger@suse.com
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5712
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5713
- Mozilla Firefox 49.0.1:
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5714
  * Mitigate a startup crash issue caused by Websense - bmo#1304783
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5715
fdfd88b0c2d7 latest updates including 49.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 929
diff changeset
  5716
-------------------------------------------------------------------
929
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5717
Tue Sep 20 07:09:52 UTC 2016 - wr@rosenauer.org
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5718
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5719
- update to Firefox 49.0 (boo#999701)
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5720
  new features
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5721
  * Updated Firefox Login Manager to allow HTTPS pages to use saved
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5722
    HTTP logins.
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5723
  * Added features to Reader Mode that make it easier on the eyes and
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5724
    the ears
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5725
  * Improved video performance for users on systems that support
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5726
    SSE3 without hardware acceleration
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5727
  * Added context menu controls to HTML5 audio and video that let users
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5728
    loops files or play files at 1.25x speed
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5729
  * Improvements in about:memory reports for tracking font memory usage
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5730
  security related
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5731
  * MFSA 2016-85
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5732
    CVE-2016-2827 (bmo#1289085) - Out-of-bounds read in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5733
    mozilla::net::IsValidReferrerPolicy
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5734
    CVE-2016-5270 (bmo#1291016) - Heap-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5735
    nsCaseTransformTextRunFactory::TransformString
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5736
    CVE-2016-5271 (bmo#1288946) - Out-of-bounds read in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5737
    PropertyProvider::GetSpacingInternal
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5738
    CVE-2016-5272 (bmo#1297934) - Bad cast in nsImageGeometryMixin
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5739
    CVE-2016-5273 (bmo#1280387) - crash in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5740
    mozilla::a11y::HyperTextAccessible::GetChildOffset
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5741
    CVE-2016-5276 (bmo#1287721) - Heap-use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5742
    mozilla::a11y::DocAccessible::ProcessInvalidationList
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5743
    CVE-2016-5274 (bmo#1282076) - use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5744
    nsFrameManager::CaptureFrameState
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5745
    CVE-2016-5277 (bmo#1291665) - Heap-use-after-free in nsRefreshDriver::Tick
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5746
    CVE-2016-5275 (bmo#1287316) - global-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5747
    mozilla::gfx::FilterSupport::ComputeSourceNeededRegions
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5748
    CVE-2016-5278 (bmo#1294677) - Heap-buffer-overflow in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5749
    nsBMPEncoder::AddImageFrame
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5750
    CVE-2016-5279 (bmo#1249522) - Full local path of files is available
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5751
    to web pages after drag and drop
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5752
    CVE-2016-5280 (bmo#1289970) - Use-after-free in
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5753
    mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5754
    CVE-2016-5281 (bmo#1284690) - use-after-free in DOMSVGLength
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5755
    CVE-2016-5282 (bmo#932335) - Don't allow content to request favicons
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5756
    from non-whitelisted schemes
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5757
    CVE-2016-5283 (bmo#928187) - <iframe src> fragment timing attack can
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5758
    reveal cross-origin data
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5759
    CVE-2016-5284 (bmo#1303127) - Add-on update site certificate pin expiration
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5760
    CVE-2016-5256 - Memory safety bugs fixed in Firefox 49
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5761
    CVE-2016-5257 - Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5762
- removed obsolete patches:
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5763
  * mozilla-aarch64-48bit-va.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5764
  * mozilla-exclude-nametablecpp.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5765
  * mozilla-old_configure-bmo1282843.patch
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5766
- added patch mozilla-skia-overflow.patch (bmo#1304114)
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5767
- requires NSS 3.25
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5768
9fc2ebe6d7f1 Firefox 49.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 928
diff changeset
  5769
-------------------------------------------------------------------
928
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5770
Tue Aug 30 20:25:38 UTC 2016 - astieger@suse.com
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5771
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5772
- Mozilla Firefox 48.0.2:
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5773
  * Mitigate a startup crash issue caused on Windows (bmo#1291738)
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5774
4663386a04de update to 48.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 927
diff changeset
  5775
-------------------------------------------------------------------
927
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5776
Sat Aug 20 10:58:26 UTC 2016 - astieger@suse.com
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5777
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5778
- Mozilla Firefox 48.0.1:
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5779
  * Fix an audio regression impacting some major websites
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5780
    (bmo#1295296)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5781
  * Fix a top crash in the JavaScript engine (bmo#1290469)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5782
  * Fix a startup crash issue caused by Websense (bmo#1291738)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5783
  * Fix a different behavior with e10s / non-e10s on <select> and
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5784
    mouse events (bmo#1291078)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5785
  * Fix a top crash caused by plugin issues (bmo#1264530)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5786
  * Fix a shutdown issue (bmo#1276920)
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5787
  * Fix a crash in WebRTC
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5788
300ed867f7fd 48.0.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 926
diff changeset
  5789
-------------------------------------------------------------------
925
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5790
Mon Aug 15 11:24:00 UTC 2016 - wr@rosenauer.org
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5791
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5792
- added upstream patch so system plugins/extensions are correctly
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5793
  loaded again on x86-64 (bmo#1282843)
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5794
  (mozilla-old_configure-bmo1282843.patch)
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5795
05d175c5957e added upstream patch so system plugins/extensions are correctly
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 924
diff changeset
  5796
-------------------------------------------------------------------
926
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5797
Fri Aug  5 13:47:12 UTC 2016 - pcerny@suse.com
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5798
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5799
- Fix for possible buffer overrun (bsc#990856)
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5800
  CVE-2016-6354 (bmo#1292534)
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5801
  [mozilla-flex_buffer_overrun.patch]
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5802
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5803
-------------------------------------------------------------------
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5804
Wed Aug  3 03:38:47 UTC 2016 - badshah400@gmail.com
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5805
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5806
- Update mozilla-gtk3_20.patch to latest version from Fedora.
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5807
6ab8b16f232c merge latest changes from Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 925
diff changeset
  5808
-------------------------------------------------------------------
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5809
Mon Aug  1 12:37:05 UTC 2016 - wr@rosenauer.org
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5810
924
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5811
- update to Firefox 48.0 (boo#991809)
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5812
  * requires NSS 3.24
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5813
  * Process separation (e10s) is enabled for some of you
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5814
  * Add-ons that have not been verified and signed by Mozilla will not load
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5815
  * WebRTC embetterments
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5816
  * The media parser has been redeveloped using the Rust programming
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5817
    language
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5818
  * better Canvas performance with speedy Skia support
924
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5819
  security fixes:
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5820
  * MFSA 2016-62/CVE-2016-2835/CVE-2016-2836
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5821
    Miscellaneous memory safety hazards
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5822
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5823
    Favicon network connection can persist when page is closed
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5824
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5825
    Buffer overflow rendering SVG with bidirectional content
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5826
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5827
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5828
  * MFSA 2016-66/CVE-2016-5251 (bmo#1255570)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5829
    Location bar spoofing via data URLs with malformed/invalid mediatypes
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5830
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5831
    Stack underflow during 2D graphics rendering
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5832
  * MFSA 2016-68/CVE-2016-0718 (bmo#1236923)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5833
    Out-of-bounds read during XML parsing in Expat library
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5834
  * MFSA 2016-69/CVE-2016-5253 (bmo#1246944)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5835
    Arbitrary file manipulation by local user through Mozilla updater
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5836
    and callback application path parameter (Windows-only)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5837
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5838
    Use-after-free when using alt key and toplevel menus
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5839
  * MFSA 2016-71/CVE-2016-5255 (bmo#1212356)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5840
    Crash in incremental garbage collection in JavaScript
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5841
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5842
    Use-after-free in DTLS during WebRTC session shutdown
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5843
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5844
    Use-after-free in service workers with nested sync events
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5845
  * MFSA 2016-74/CVE-2016-5260 (bmo#1280294)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5846
    Form input type change from password to text can store plain
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5847
    text password in session restore file
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5848
  * MFSA 2016-75/CVE-2016-5261 (bmo#1287266)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5849
    Integer overflow in WebSockets during data buffering
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5850
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5851
    Scripts on marquee tag can execute in sandboxed iframes
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5852
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5853
    Buffer overflow in ClearKey Content Decryption Module (CDM)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5854
    during video playback
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5855
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5856
    Type confusion in display transformation
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5857
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5858
    Use-after-free when applying SVG effects
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5859
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5860
    Same-origin policy violation using local HTML file and saved shortcut file
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5861
  * MFSA 2016-81/CVE-2016-5266 (bmo#1226977)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5862
    Information disclosure and local file manipulation through drag and drop
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5863
  * MFSA 2016-82/CVE-2016-5267 (bmo#1284372)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5864
    Addressbar spoofing with right-to-left characters on Firefox for Android
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5865
    (Android only)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5866
  * MFSA 2016-83/CVE-2016-5268 (bmo#1253673)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5867
    Spoofing attack through text injection into internal error pages
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5868
  * MFSA 2016-84/CVE-2016-5250 (bmo#1254688)
199d5cf40e86 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 923
diff changeset
  5869
    Information disclosure through Resource Timing API during page navigation
923
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5870
- removed obsolete mozilla-gcc6.patch
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5871
3cc9f17ca9bb prepare FF48
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 921
diff changeset
  5872
-------------------------------------------------------------------
921
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5873
Fri Jul 29 01:26:13 UTC 2016 - badshah400@gmail.com
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5874
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5875
- Update description and screenshots in appdata.xml file.
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5876
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5877
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5878
Sat Jul 23 20:13:08 UTC 2016 - antoine.belvire@laposte.net
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5879
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5880
- Fix Firefox crash on startup on i586 (boo#986541):
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5881
  * Add -fno-delete-null-pointer-checks and
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5882
    -fno-inline-small-functions to CFLAGS
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5883
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5884
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5885
Tue Jul 19 20:12:11 UTC 2016 - mailaender@opensuse.org
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5886
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5887
- Update the appdata.xml file (replace Windows XP screenshot)
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5888
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5889
-------------------------------------------------------------------
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5890
Wed Jun 29 09:25:41 UTC 2016 - astieger@suse.com
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5891
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5892
- Mozilla Firefox 47.0.1:
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5893
  * Selenium WebDriver may cause Firefox to crash at startup
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5894
    (bmo#1280854)
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5895
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5896
-------------------------------------------------------------------
920
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  5897
Wed Jun 15 07:52:18 UTC 2016 - wr@rosenauer.org
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  5898
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  5899
- mozilla-binutils-visibility.patch to fix build issues with
921
4f801233e935 merge contributions from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 920
diff changeset
  5900
  gcc/binutils combination used in Leap 42.2 (boo#984637)
920
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  5901
4e5807284ef0 https://bugzilla.opensuse.org/show_bug.cgi?id=984637
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 919
diff changeset
  5902
-------------------------------------------------------------------
919
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5903
Tue Jun 14 08:35:03 UTC 2016 - badshah400@gmail.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5904
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5905
- Update mozilla-gtk3_20.patch to latest version from Fedora.
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5906
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5907
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5908
Mon Jun 13 20:28:01 UTC 2016 - agraf@suse.com
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5909
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5910
- Fix running on 48bit va aarch64 (bsc#984126)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5911
  * add patch mozilla-aarch64-48bit-va.patch
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5912
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5913
-------------------------------------------------------------------
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5914
Mon Jun 13 15:27:13 UTC 2016 - wr@rosenauer.org
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5915
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5916
- fix XUL dialog button order under KDE session (boo#984403)
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5917
6838f0c032f8 -------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 916
diff changeset
  5918
-------------------------------------------------------------------
916
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5919
Tue Jun  7 19:47:25 UTC 2016 - wr@rosenauer.org
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5920
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5921
- update to Firefox 47.0 (boo#983549)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5922
  * Enable VP9 video codec for users with fast machines
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5923
  * Embedded YouTube videos now play with HTML5 video if Flash is
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5924
    not installed
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5925
  * View and search open tabs from your smartphone or another
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5926
    computer in a sidebar
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5927
  * Allow no-cache on back/forward navigations for https resources
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5928
  security fixes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5929
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5930
    (boo#983638)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5931
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5932
     bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5933
     bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5934
     bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5935
     bmo#1269729, bmo#1273202, bmo#1273701)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5936
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5937
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5938
    Buffer overflow parsing HTML5 fragments
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5939
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5940
    Use-after-free deleting tables from a contenteditable document
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5941
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5942
    Addressbar spoofing though the SELECT element
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5943
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5944
    Out-of-bounds write with WebGL shader
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5945
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5946
    Partial same-origin-policy through setting location.host
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5947
    through data URI
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5948
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5949
    Use-after-free when textures are used in WebGL operations
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5950
    after recycle pool destruction
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5951
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5952
    Incorrect icon displayed on permissions notifications
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5953
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5954
    Entering fullscreen and persistent pointerlock without user
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5955
    permission
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5956
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5957
    Information disclosure of disabled plugins through CSS
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5958
    pseudo-classes
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5959
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5960
    Java applets bypass CSP protections
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5961
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5962
    bmo#1221620, bmo#1241034, bmo#1241037)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5963
    Network Security Services (NSS) vulnerabilities
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5964
    fixed by requiring NSS 3.23
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5965
  packaging changes:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5966
  * cleanup configure options (boo#981695):
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5967
    - notably remove GStreamer support which is gone from FF
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5968
  * remove obsolete patches
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5969
    - mozilla-libproxy.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5970
    - mozilla-repo.patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5971
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5972
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5973
Wed May 25 16:36:23 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5974
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5975
- The conditional testing for gcc was failing for different
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5976
  openSUSE versions, drop it and apply patches unconditionally.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5977
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5978
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5979
Mon May 23 15:30:27 UTC 2016 - badshah400@gmail.com
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5980
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5981
- Add patches to fix building with gcc6:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5982
  + mozilla-gcc6.patch: fix building with gcc >= 6.1; patch
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5983
    taken from upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5984
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5985
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5986
    from unified compilation because #include <cmath> in other
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5987
    source files causes gcc6 compilation failure; patch taken from
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5988
    upstream:
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5989
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5990
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5991
-------------------------------------------------------------------
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5992
Fri May 13 00:00:00 CEST 2016 - dsterba@suse.cz
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5993
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5994
- enable build with PIE and full relro on x86_64 (boo#980384)
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5995
2f9f2e040647 Firefox 47.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 914
diff changeset
  5996
-------------------------------------------------------------------
914
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  5997
Wed May  4 10:27:43 UTC 2016 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  5998
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  5999
- update to Firefox 46.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6000
  Fixed:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6001
  * Search plugin issue for various locales
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6002
  * Add-on signing certificate expiration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6003
  * Service worker update issue
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6004
  * Build issue when jit is disabled
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6005
  * Limit Sync registration updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6006
- removed now obsolete mozilla-jit_branch64.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6007
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 913
diff changeset
  6008
-------------------------------------------------------------------
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6009
Tue May  3 15:47:18 UTC 2016 - normand@linux.vnet.ibm.com
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6010
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6011
- add mozilla-jit_branch64.patch to avoid PowerPC build failure
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6012
  (from bmo#1266366)
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6013
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6014
-------------------------------------------------------------------
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6015
Wed Apr 27 08:39:28 UTC 2016 - badshah400@gmail.com
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6016
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6017
- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6018
  version from Fedora).
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6019
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6020
-------------------------------------------------------------------
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6021
Wed Apr 27 06:09:30 UTC 2016 - wr@rosenauer.org
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6022
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6023
- update to Firefox 46.0 (boo#977333)
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6024
  * Improved security of the JavaScript Just In Time (JIT) Compiler
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6025
  * WebRTC fixes to improve performance and stability
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6026
  * Added support for document.elementsFromPoint
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6027
  * Added HKDF support for Web Crypto API
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6028
  * requires NSPR 4.12 and NSS 3.22.3
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6029
  * added patch to fix unchecked return value
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6030
    mozilla-check_return.patch
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6031
  * Gtk3 builds not supported at the moment
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6032
  security fixes:
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6033
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6034
    (boo#977373, boo#977375, boo#977376)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6035
    Miscellaneous memory safety hazards
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6036
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6037
    Privilege escalation through file deletion by Maintenance Service updater
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6038
    (Windows only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6039
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6040
    Content provider permission bypass allows malicious application
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6041
    to access data (Android only)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6042
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6043
    (bmo#1252330, bmo#1261776, boo#977379)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6044
    Use-after-free and buffer overflow in Service Workers
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6045
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6046
    Disclosure of user actions through JavaScript with motion and
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6047
    orientation sensors (only affects mobile variants)
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6048
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6049
    Buffer overflow in libstagefright with CENC offsets
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6050
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6051
    CSP not applied to pages sent with multipart/x-mixed-replace
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6052
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6053
    Elevation of privilege with chrome.tabs.update API in web extensions
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6054
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6055
    Write to invalid HashMap entry through JavaScript.watch()
913
9f3ecc7dc9e3 fix PPC64LE
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 909
diff changeset
  6056
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
909
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6057
    Firefox Health Reports could accept events from untrusted domains
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6058
c6717354928b Firefox 46.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 908
diff changeset
  6059
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6060
Thu Apr 21 12:00:28 UTC 2016 - badshah400@gmail.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6061
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6062
- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6063
  gtk >= 3.20 (patch synced to Fedora's version).
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6064
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6065
-------------------------------------------------------------------
907
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6066
Tue Apr 12 19:11:30 UTC 2016 - badshah400@gmail.com
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6067
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6068
- Compile against gtk3 depending on whether the macro
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6069
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6070
  level); macro is undefined by default and so gtk2 is used as the
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6071
  default toolkit.
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6072
- Add BuildRequires for additional packages needed when building
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6073
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6074
  pkgconfig(gtk+-3.0) >= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6075
- Add firefox-gtk3_20.patch to fix appearance with gtk3 >= 3.20;
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6076
  patch taken from Fedora (bmo#1230955).
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6077
3ccb278a9ceb prepare gtk3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 906
diff changeset
  6078
-------------------------------------------------------------------
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6079
Mon Apr 11 22:49:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6080
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6081
- Mozilla Firefox 45.0.2:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6082
  * Fix an issue impacting the cookie header when third-party
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6083
    cookies are blocked (bmo#1257861)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6084
  * Fix a web compatibility regression impacting the srcset
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6085
    attribute of the image tag (bmo#1259482)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6086
  * Fix a crash impacting the video playback with Media Source
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6087
    Extension (bmo#1258562)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6088
  * Fix a regression impacting some specific uploads (bmo#1255735)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6089
  * Fix a regression with the copy and paste with some old versions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6090
    of some Gecko applications like Thunderbird (bmo#1254980)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6091
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6092
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6093
Fri Mar 18 08:52:58 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6094
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6095
- Mozilla Firefox 45.0.1:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6096
  * Fix a regression causing search engine settings to be lost in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6097
    some context (bmo#1254694)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6098
  * Bring back non-standard jar: URIs to fix a regression in IBM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6099
    iNotes (bmo#1255139)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6100
  * XSLTProcessor.importStylesheet was failing when <import> was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6101
    used (bmo#1249572)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6102
  * Fix an issue which could cause the list of search provider to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6103
    be empty (bmo#1255605)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6104
  * Fix a regression when using the location bar (bmo#1254503)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6105
  * Fix some loading issues when Accept third-party cookies: was
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6106
    set to Never (bmo#1254856)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6107
  * Disabled Graphite font shaping library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6108
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6109
-------------------------------------------------------------------
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6110
Sun Mar  6 19:52:13 UTC 2016 - wr@rosenauer.org
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6111
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6112
- update to Firefox 45.0 (boo#969894)
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6113
  * requires NSPR 4.12 / NSS 3.21.1
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6114
  * Instant browser tab sharing through Hello
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6115
  * Synced Tabs button in button bar
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6116
  * Tabs synced via Firefox Accounts from other devices are now shown
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6117
    in dropdown area of Awesome Bar when searching
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6118
  * Introduce a new preference (network.dns.blockDotOnion) to allow
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6119
    blocking .onion at the DNS level
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6120
  * Tab Groups (Panorama) feature removed
906
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6121
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6122
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6123
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6124
    Local file overwriting and potential privilege escalation through
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6125
    CSP reports
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6126
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6127
    CSP reports fail to strip location information for embedded iframe pages
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6128
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6129
    Linux video memory DOS with Intel drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6130
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6131
    Memory leak in libstagefright when deleting an array during MP4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6132
    processing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6133
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6134
    Displayed page address can be overridden
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6135
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6136
    Service Worker Manager out-of-bounds read in Service Worker Manager
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6137
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6138
    Use-after-free in HTML5 string parser
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6139
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6140
    Use-after-free in SetBody
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6141
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6142
    Use-after-free when using multiple WebRTC data channels
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6143
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6144
    Memory corruption when modifying a file being read by FileReader
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6145
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6146
    Use-after-free during XML transformations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6147
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6148
    Addressbar spoofing though history navigation and Location protocol
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6149
    property
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6150
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6151
    Same-origin policy violation using perfomance.getEntries and
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6152
    history navigation with session restore
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6153
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6154
    Buffer overflow in Brotli decompression
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6155
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6156
    Memory corruption with malicious NPAPI plugin
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6157
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6158
    CVE-2016-1976/CVE-2016-1972
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6159
    WebRTC and LibVPX vulnerabilities found through code inspection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6160
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6161
    Use-after-free in GetStaticInstance in WebRTC
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6162
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6163
    Out-of-bounds read in HTML parser following a failed allocation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6164
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6165
    Buffer overflow during ASN.1 decoding in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6166
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6167
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6168
    Use-after-free during processing of DER encoded keys in NSS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6169
    (fixed by requiring 3.21.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6170
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6171
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6172
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6173
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 904
diff changeset
  6174
    Font vulnerabilities in the Graphite 2 library
904
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6175
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6176
-------------------------------------------------------------------
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6177
Sat Mar  5 15:27:00 UTC 2016 - olaf@aepfle.de
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6178
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6179
- Remove B_CNT from symbols.zip filename to reduce build-compare noise
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6180
6a889427cd4f 45.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 903
diff changeset
  6181
-------------------------------------------------------------------
903
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6182
Fri Feb 26 16:22:52 UTC 2016 - astieger@suse.com
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6183
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6184
- fix build problems on i586, caused by too large unified compile
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6185
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6186
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6187
-------------------------------------------------------------------
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6188
Thu Feb 11 07:51:34 UTC 2016 - wr@rosenauer.org
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6189
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6190
- update to Firefox 44.0.2
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6191
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6192
    Same-origin-policy violation using Service Workers with plugins
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6193
  * Fix issue which could lead to the removal of stored passwords
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6194
    under certain circumstances (bmo#1242176)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6195
  * Allows spaces in cookie names (bmo#1244505)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6196
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6197
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6198
  * Fix a crash in cache networking (bmo#1244076)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6199
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6200
83801946c93f 44.0.2 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 902
diff changeset
  6201
-------------------------------------------------------------------
908
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6202
Sat Jan 30 08:28:17 UTC 2016 - dmueller@suse.com
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6203
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6204
- build fixes for arm/aarch64:
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6205
  * disable webrtc for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6206
  * switch away from openGL-ES backend to default for arm/aarch64
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6207
   since it almost never builds
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6208
  * reenable neon
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6209
- reenable webrtc for powerpc as it seems to build
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6210
b29b47737173 sync from mozilla:Factory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 907
diff changeset
  6211
-------------------------------------------------------------------
900
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
  6212
Sun Jan 24 09:33:15 UTC 2016 - wr@rosenauer.org
91466ca5c8d9 latest merge from firefox43
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 899 897
diff changeset
  6213
902
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6214
- update to Firefox 44.0
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6215
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6216
    Miscellaneous memory safety hazards
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6217
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6218
    Out of Memory crash when parsing GIF format images
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6219
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6220
    Buffer overflow in WebGL after out of memory allocation
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6221
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6222
    Firefox allows for control characters to be set in cookie names
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6223
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6224
    Missing delay following user click events in protocol handler dialog
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6225
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6226
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6227
    (fixed by requiring NSS 3.21)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6228
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6229
    Addressbar spoofing attacks boo#963643
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6230
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6231
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6232
    Unsafe memory manipulation found through code inspection
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6233
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
11475705ab0f 44.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 900
diff changeset
  6234
    Application Reputation service disabled in Firefox 43
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6235
  * requires NSPR 4.11
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6236
  * requires NSS 3.21
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
  6237
- prepare mozilla-kde.patch for Gtk3 builds
899
44a28160de40 prepare 44.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6238
- rebased patches
896
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
  6239
2b664b26b6b2 change was after submission
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 895
diff changeset
  6240
-------------------------------------------------------------------
897
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6241
Mon Jan 11 08:04:24 UTC 2016 - astieger@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6242
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6243
- Mozilla Firefox 43.0.4:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6244
  * Re-enable SHA-1 certificates to prevent outdated
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6245
    man-in-the-middle security devices from interfering with
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6246
    properly secured SSL/TLS connections (bmo#1236975)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6247
  * Fix for startup crash for users of a third party antivirus tool
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6248
    (bmo#1235537)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6249
- The following change was previously in the package as a patch:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6250
  * Multi-user GNU/Linux download folders can be created
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6251
   (bmo#1233434), removed mozilla-bmo1233434.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6252
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 896
diff changeset
  6253
-------------------------------------------------------------------
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
  6254
Tue Dec 29 20:29:35 UTC 2015 - wr@rosenauer.org
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6255
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6256
- update to Firefox 43.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6257
  * requires NSS 3.20.2 to fix
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6258
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6259
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6260
    server signature
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6261
  * various changes to support Windows update (SHA-1 vs. SHA-2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6262
  * workaround Youtube user agent detection issue (bmo#1233970)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6263
- fix file download regression for multi user systems
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6264
  (bmo#1233434) (mozilla-bmo1233434.patch)
895
b0e57b478b1b merge change from mozilla:Factory (libXcomposite-devel requirement)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 894
diff changeset
  6265
- explicitely requires libXcomposite-devel
892
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6266
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 890
diff changeset
  6267
-------------------------------------------------------------------
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6268
Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6269
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6270
- update to Firefox 43.0 (bnc#959277)
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6271
  * Improved API support for m4v video playback
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6272
  * Users can opt-in to receive search suggestions from the Awesome Bar
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6273
  * WebRTC streaming on multiple monitors
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6274
  * User selectable second block list for Private Browsing's Tracking
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6275
    Protection
890
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6276
  security fixes:
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6277
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6278
    Miscellaneous memory safety hazards
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6279
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6280
    Crash with JavaScript variable assignment with unboxed objects
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6281
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6282
    Same-origin policy violation using perfomance.getEntries and
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6283
    history navigation
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6284
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6285
    Firefox allows for control characters to be set in cookies
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6286
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6287
    Use-after-free in WebRTC when datachannel is used after being
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6288
    destroyed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6289
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6290
    Integer overflow allocating extremely large textures
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6291
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6292
    Cross-origin information leak through web workers error events
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6293
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6294
    Hash in data URI is incorrectly parsed
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6295
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6296
    DOS due to malformed frames in HTTP/2
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6297
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6298
    Linux file chooser crashes on malformed images due to flaws in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6299
    Jasper library
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6300
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6301
    (bmo#1201183, bmo#1178033, bmo#1199400)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6302
    Buffer overflows found through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6303
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6304
    Underflow through code inspection
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6305
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6306
    Integer overflow in MP4 playback in 64-bit versions
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6307
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6308
    Integer underflow and buffer overflow processing MP4 metadata in
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6309
    libstagefright
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6310
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6311
    Privilege escalation vulnerabilities in WebExtension APIs
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6312
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
4ba0eb6a14ca 43.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 889
diff changeset
  6313
    Cross-site reading attack through data and view-source URIs
889
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6314
- rebased patches
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6315
de3a92aed259 43.0b9 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 886
diff changeset
  6316
-------------------------------------------------------------------
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6317
Sun Nov 15 19:52:20 UTC 2015 - wr@rosenauer.org
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6318
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6319
- Add desktop menu action for private browsing window to desktop
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6320
  file (boo#954747)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6321
- remove obsolete patch mozilla-bmo1005535.patch completely from
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6322
  source package to avoid automatic check failures
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6323
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6324
-------------------------------------------------------------------
885
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6325
Sat Oct 31 19:50:03 UTC 2015 - wr@rosenauer.org
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6326
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6327
- update to Firefox 42.0 (bnc#952810)
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6328
  * Private Browsing with Tracking Protection blocks certain Web
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6329
    elements that could be used to record your behavior across sites
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6330
  * Control Center that contains site security and privacy controls
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6331
  * Login Manager improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6332
  * WebRTC improvements
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6333
  * Indicator added to tabs that play audio with one-click muting
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6334
  * Media Source Extension for HTML5 video available for all sites
886
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6335
  security fixes:
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6336
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6337
    Miscellaneous memory safety hazards
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6338
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6339
    Information disclosure through NTLM authentication
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6340
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6341
    CSP bypass due to permissive Reader mode whitelist
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6342
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6343
    Firefox for Android addressbar can be removed after fullscreen mode
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6344
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6345
    Reading sensitive profile files through local HTML file on Android
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6346
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6347
    disabling scripts in Add-on SDK panels has no effect
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6348
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6349
    Trailing whitespace in IP address hostnames can bypass same-origin policy
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6350
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6351
    Buffer overflow during image interactions in canvas
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6352
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6353
    Android intents can be used on Firefox for Android to open privileged files
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6354
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6355
    XSS attack through intents on Firefox for Android
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6356
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6357
    Crash when accessing HTML tables with accessibility tools on OS X
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6358
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6359
    CORS preflight is bypassed when non-standard Content-Type headers
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6360
    are received
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6361
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6362
    Memory corruption in libjar through zip files
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6363
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6364
    Certain escaped characters in host of Location-header are being
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6365
    treated as non-escaped
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6366
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6367
    JavaScript garbage collection crash with Java applet
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6368
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6369
    (bmo#1188010, bmo#1204061, bmo#1204155)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6370
    Vulnerabilities found through code inspection
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6371
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6372
    Mixed content WebSocket policy bypass through workers
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6373
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6374
    (bmo#1202868, bmo#1205157)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6375
    NSS and NSPR memory corruption issues
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6376
    (fixed in mozilla-nspr and mozilla-nss packages)
2e9f984bca7f changelogs and desktop file changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 885
diff changeset
  6377
- requires NSPR >= 4.10.10 and NSS >= 3.19.4
885
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6378
- removed obsolete patches
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6379
  * mozilla-arm-disable-edsp.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6380
  * mozilla-icu-strncat.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6381
  * mozilla-skia-be-le.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6382
  * toolkit-download-folder.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6383
- fixed build with enable-libproxy (bmo#1220399)
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6384
  * mozilla-libproxy.patch
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6385
ee3c462047d5 42 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 884
diff changeset
  6386
-------------------------------------------------------------------
884
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6387
Thu Oct 15 08:25:54 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6388
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6389
- update to Firefox 41.0.2 (bnc#950686)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6390
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6391
    Cross-origin restriction bypass using Fetch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6392
- added explicit appdata provides (bnc#949983)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6393
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6394
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6395
Sun Oct  4 09:20:56 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6396
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6397
- do not build with --enable-stdcxx-compat
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6398
  (this starts to fail build on various toolchain combinations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6399
  and is not required for openSUSE builds in general
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6400
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6401
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6402
Thu Oct  1 09:49:57 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6403
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6404
- update to Firefox 41.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6405
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6406
    (bmo#1209124)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6407
  * Fix potential hangs with Flash plugins (bmo#1185639)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6408
  * Fix a regression in the bookmark creation (bmo#1206376)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6409
  * Fix a startup crash with some Intel Media Accelerator 3150
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6410
    graphic cards (bmo#1207665)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6411
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6412
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 883
diff changeset
  6413
-------------------------------------------------------------------
883
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6414
Sat Sep 19 20:23:29 UTC 2015 - wr@rosenauer.org
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6415
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6416
- update to Firefox 41.0 (bnc#947003)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6417
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6418
    Miscellaneous memory safety hazards
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6419
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6420
    Memory leak in mozTCPSocket to servers
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6421
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6422
    Out of bounds read in QCMS library with ICC V4 profile attributes
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6423
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6424
    Site attribute spoofing on Android by pasting URL with unknown scheme
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6425
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6426
    Arbitrary file manipulation by local user through Mozilla updater
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6427
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6428
    Buffer overflow in libvpx while parsing vp9 format video
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6429
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6430
    Crash when using debugger with SavedStacks in JavaScript
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6431
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6432
    URL spoofing in reader mode
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6433
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6434
    Use-after-free with shared workers and IndexedDB
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6435
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6436
    Buffer overflow while decoding WebM video
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6437
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6438
    Use-after-free while manipulating HTML media content
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6439
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6440
    Out-of-bounds read during 2D canvas display on Linux 16-bit
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6441
    color depth systems
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6442
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6443
    Scripted proxies can access inner window
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6444
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6445
    JavaScript immutable property enforcement can be bypassed
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6446
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6447
    Dragging and dropping images exposes final URL after redirects
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6448
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6449
    Errors in the handling of CORS preflight request headers
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6450
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6451
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6452
    CVE-2015-7180
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6453
    Vulnerabilities found through code inspection
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6454
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6455
    bmo#1190526) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6456
    Memory safety errors in libGLES in the ANGLE graphics library
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6457
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6458
    Information disclosure via the High Resolution Time API
882
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6459
- rebased patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6460
- removed obsolete patches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6461
  * mozilla-arm64-libjpeg-turbo.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6462
883
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6463
------------------------------------------------------------------
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6464
Thu Aug 27 06:03:51 UTC 2015 - wr@rosenauer.org
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6465
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6466
- update to Firefox 40.0.3 (bnc#943550)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6467
  * Disable the asynchronous plugin initialization (bmo#1198590)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6468
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6469
  * Fix a regression with some Japanese fonts used in the <input>
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6470
    field (bmo#1194055)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6471
  * On some sites, the selection in a select combox box using the
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6472
    mouse could be broken (bmo#1194733)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6473
  security fixes
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6474
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6475
    Use-after-free when resizing canvas element during restyling
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6476
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6477
    Add-on notification bypass through data URLs
7aa7715fdc8f 41.0 release and changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 882
diff changeset
  6478
882
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 875
diff changeset
  6479
-------------------------------------------------------------------
875
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6480
Fri Aug  7 07:49:49 UTC 2015 - wr@rosenauer.org
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6481
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6482
- update to Firefox 40.0 (bnc#940806)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6483
  * Added protection against unwanted software downloads
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6484
  * Suggested Tiles show sites of interest, based on categories
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6485
    from your recent browsing history
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6486
  * Hello allows adding a link to conversations to provide context
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6487
    on what the conversation will be about
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6488
  * New style for add-on manager based on the in-content
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6489
    preferences style
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6490
  * Improved scrolling, graphics, and video playback performance
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6491
    with off main thread compositing (GNU/Linux only)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6492
  * Graphic blocklist mechanism improved: Firefox version ranges
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6493
    can be specified, limiting the number of devices blocked
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6494
  security fixes:
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6495
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6496
    Miscellaneous memory safety hazards
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6497
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6498
    Out-of-bounds read with malformed MP3 file
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6499
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6500
    Use-after-free in MediaStream playback
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6501
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6502
    Redefinition of non-configurable JavaScript object properties
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6503
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6504
    Overflow issues in libstagefright
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6505
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6506
    Arbitrary file overwriting through Mozilla Maintenance Service
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6507
    with hard links (only affected Windows)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6508
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6509
    Out-of-bounds write with Updater and malicious MAR file
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6510
    (does not affect openSUSE RPM packages which do not ship the
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6511
     updater)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6512
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6513
    Feed protocol with POST bypasses mixed content protections
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6514
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6515
    Crash when using shared memory in JavaScript
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6516
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6517
    Heap overflow in gdk-pixbuf when scaling bitmap images
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6518
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6519
    Buffer overflows on Libvpx when decoding WebM video
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6520
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6521
    Vulnerabilities found through code inspection
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6522
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6523
    Mozilla Content Security Policy allows for asterisk wildcards
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6524
    in violation of CSP specification
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6525
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
2d6ccc01ea9e 40.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 872
diff changeset
  6526
    Use-after-free in XMLHttpRequest with shared workers
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6527
- added mozilla-no-stdcxx-check.patch
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6528
- removed obsolete patches
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
  6529
  * mozilla-add-glibcxx_use_cxx11_abi.patch
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6530
  * firefox-multilocale-chrome.patch
868
284da266ec46 40beta rebase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 867
diff changeset
  6531
- rebased patches
869
0dd25a92df97 working FF 40 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 868
diff changeset
  6532
- requires version 40 of the branding package
871
4c6e8495720b beta update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 869
diff changeset
  6533
- removed browser/searchplugins/ location as it's not valid anymore
867
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6534
3af93b7e5e3d merge from firefox39 and switch to 40beta branch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6535
-------------------------------------------------------------------
870
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6536
Fri Aug  7 07:09:39 UTC 2015 - wr@rosenauer.org
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6537
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6538
- security update to Firefox 39.0.3 (bnc#940918)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6539
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6540
    Same origin violation and local file stealing via PDF reader
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6541
09ffe9247f8a FF 39.0.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 866
diff changeset
  6542
-------------------------------------------------------------------
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6543
Wed Jul  1 06:43:02 UTC 2015 - wr@rosenauer.org
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6544
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6545
- update to Firefox 39.0 (bnc#935979)
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6546
  * Share Hello URLs with social networks
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6547
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6548
  * SafeBrowsing malware detection lookups enabled for downloads
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6549
    (Mac OS X and Linux)
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6550
  * Support for new Unicode 8.0 skin tone emoji
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6551
  * Removed support for insecure SSLv3 for network communications
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6552
  * Disable use of RC4 except for temporarily whitelisted hosts
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6553
  * NPAPI Plug-in performance improved via asynchronous initialization
866
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6554
  security fixes:
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6555
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6556
    Miscellaneous memory safety hazards
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6557
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6558
    Local files or privileged URLs in pages can be opened into new tabs
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6559
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6560
    Type confusion in Indexed Database Manager
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6561
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6562
    Out-of-bound read while computing an oscillator rendering range in Web Audio
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6563
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6564
    Use-after-free in Content Policy due to microtask execution error
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6565
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6566
    ECDSA signature validation fails to handle some signatures correctly
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6567
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6568
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6569
    Use-after-free in workers while using XMLHttpRequest
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6570
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6571
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6572
    Vulnerabilities found through code inspection
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6573
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6574
    Key pinning is ignored when overridable errors are encountered
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6575
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6576
    OS X crash reports may contain entered key press information
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6577
    (not relevant under Linux)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6578
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6579
    Privilege escalation in PDF.js
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6580
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6581
    NSS accepts export-length DHE keys with regular DHE cipher suites
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6582
    (this fix is shipped by NSS 3.19.1 externally)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6583
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6584
    NSS incorrectly permits skipping of ServerKeyExchange
28eb9d3ab7e8 39.0 final with changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 863
diff changeset
  6585
    (this fix is shipped by NSS 3.19.1 externally)
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6586
- dropped mozilla-prefer_plugin_pref.patch as this feature is
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6587
  likely not worth maintaining further
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6588
- rebased patches
863
d5a1c8dec7ed Firefox 39.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 862
diff changeset
  6589
- require NSS 3.19.2
857
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6590
ab297940ae8a rebased to 39.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 855
diff changeset
  6591
-------------------------------------------------------------------
862
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6592
Thu Jun 18 10:30:18 UTC 2015 - schwab@suse.de
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6593
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6594
- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6595
390088186660 mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration
Andreas Schwab <schwab@suse.de>
parents: 861
diff changeset
  6596
-------------------------------------------------------------------
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6597
Sun Jun  7 07:09:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6598
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6599
- update to Firefox 38.0.6
855
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
  6600
  * fixes bmo#1171730 which is not really relevant to oS builds
1f860c829900 correct changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 854
diff changeset
  6601
- fix KDE regression from 38.0.5 builds (bsc#933439)
854
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6602
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 853
diff changeset
  6603
-------------------------------------------------------------------
853
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6604
Sat May 23 21:13:49 UTC 2015 - wr@rosenauer.org
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6605
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6606
- update to Firefox 38.0.5
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6607
  * Keep track of articles and videos with Pocket
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6608
  * Clean formatting for articles and blog posts with Reader View
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6609
  * Share the active tab or window in a Hello conversation
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6610
- add changes file as source for SRPM (bsc#932142)
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6611
cf7e96afbe3a Firefox 38.0.5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 852
diff changeset
  6612
-------------------------------------------------------------------
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6613
Fri May 15 10:40:19 UTC 2015 - normand@linux.vnet.ibm.com
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6614
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6615
- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6616
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6617
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6618
-------------------------------------------------------------------
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6619
Fri May 15 07:37:46 UTC 2015 - wr@rosenauer.org
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6620
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6621
- update to Firefox 38.0.1
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6622
  stability and regression fixes
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6623
  * Systems with first generation NVidia Optimus graphics cards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6624
    may crash on start-up
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6625
  * Users who import cookies from Google Chrome can end up with
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6626
    broken websites
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6627
  * Large animated images may fail to play and may stop other
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6628
    images from loading
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6629
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6630
-------------------------------------------------------------------
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6631
Sun May 10 07:07:49 UTC 2015 - wr@rosenauer.org
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6632
852
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6633
- update to Firefox 38.0 (bnc#930622)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6634
  * New tab-based preferences
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6635
  * Ruby annotation support
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6636
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6637
  security fixes:
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6638
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6639
    Miscellaneous memory safety hazards
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6640
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6641
    Buffer overflow parsing H.264 video with Linux Gstreamer
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6642
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6643
    Buffer overflow with SVG content and CSS
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6644
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6645
    Referrer policy ignored when links opened by middle-click and
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6646
    context menu
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6647
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6648
    Out-of-bounds read and write in asm.js validation
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6649
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6650
    Use-after-free during text processing with vertical text enabled
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6651
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6652
    Use-after-free due to Media Decoder Thread creation during shutdown
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6653
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6654
    Buffer overflow when parsing compressed XML
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6655
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6656
    Buffer overflow and out-of-bounds read while parsing MP4 video
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6657
    metadata
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6658
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6659
    Untrusted site hosting trusted page can intercept webchannel
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6660
    responses
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6661
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
e11af0d6cb48 38.0.1 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 851
diff changeset
  6662
    Privilege escalation through IPC channel messages
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6663
- requires NSS 3.18.1
851
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6664
- removed obsolete patches:
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6665
  * mozilla-skia-bmo1136958.patch
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6666
- remove gnomevfs build options as it is removed from sources
0855c4ac4793 Firefox 38.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 850
diff changeset
  6667
- rebased patches
850
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6668
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6669
-------------------------------------------------------------------
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6670
Fri Apr 17 16:39:20 UTC 2015 - wr@rosenauer.org
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6671
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6672
- update to Firefox 37.0.2 (bnc#928116)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6673
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
a2bdff616a0e prepare 38beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 845
diff changeset
  6674
    Memory corruption during failed plugin initialization
845
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
  6675
a704b2a17e39 38.0 beta series
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 844
diff changeset
  6676
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6677
Fri Apr  3 08:27:24 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6678
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6679
- update to Firefox 37.0.1 (bnc#926166)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6680
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6681
    Loading privileged content through Reader mode
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6682
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6683
    Certificate verification bypass through the HTTP/2 Alt-Svc header
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6684
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6685
-------------------------------------------------------------------
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6686
Sat Mar 28 09:46:48 UTC 2015 - wr@rosenauer.org
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6687
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6688
- update to Firefox 37.0 (bnc#925368)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6689
  * Heartbeat user rating system
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6690
  * Yandex set as default search provider for the Turkish locale
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6691
  * Bing search now uses HTTPS for secure searching
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6692
  * Improved protection against site impersonation via OneCRL
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6693
    centralized certificate revocation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6694
  * Opportunistically encrypt HTTP traffic where the server supports
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6695
    HTTP/2 AltSvc
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6696
  * some more behaviour changes for TLS
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6697
  security fixes:
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6698
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6699
    Miscellaneous memory safety hazards
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6700
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6701
    Use-after-free when using the Fluendo MP3 GStreamer plugin
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6702
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6703
    Add-on lightweight theme installation approval bypassed through
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6704
    MITM attack
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6705
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6706
    resource:// documents can load privileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6707
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6708
    Out of bounds read in QCMS library
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6709
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6710
    Cursor clickjacking with flash and images (OS X only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6711
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6712
    Incorrect memory management for simple-type arrays in WebRTC
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6713
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6714
    CORS requests should not follow 30x redirections after preflight
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6715
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6716
    Memory corruption crashes in Off Main Thread Compositing
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6717
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6718
    Use-after-free due to type confusion flaws
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6719
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6720
    Same-origin bypass through anchor navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6721
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6722
    PRNG weakness allows for DNS poisoning on Android (only)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6723
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6724
    Windows can retain access to privileged content on navigation
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6725
    to unprivileged pages
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6726
- removed obsolete patches
837
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 836
diff changeset
  6727
  * mozilla-bmo1088588.patch
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6728
  * mozilla-bmo1108834.patch
836
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6729
- requires NSPR 4.10.8
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6730
12530a091878 prepare 37 beta cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6731
-------------------------------------------------------------------
844
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6732
Tue Mar 24 15:35:24 UTC 2015 - dvaleev@suse.com
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6733
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6734
- Fix builds with skia on Power
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6735
  mozilla-skia-be-le.patch (patch from #bmo1136958)
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6736
  mozilla-bmo1108834.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6737
  mozilla-bmo1005535.patch
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6738
86fa73db98e5 Firefox 37.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 843
diff changeset
  6739
-------------------------------------------------------------------
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6740
Sat Mar 21 09:03:12 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6741
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
  6742
- update to Firefox 36.0.4 (bnc#923534)
839
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6743
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6744
    Privilege escalation through SVG navigation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6745
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6746
    Code execution through incorrect JavaScript bounds checking
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6747
    elimination
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6748
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6749
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6750
Fri Mar 20 15:02:33 UTC 2015 - dimstar@opensuse.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6751
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6752
- Copy the icons to /usr/share/icons instead of symlinking them:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6753
  in preparation for containerized apps (e.g. xdg-app) as well as
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6754
  AppStream metadata extraction, there are a couple locations that
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6755
  need to be real files for system integration (.desktop files,
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6756
  icons, mime-type info).
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6757
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 838
diff changeset
  6758
-------------------------------------------------------------------
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6759
Sat Mar  7 07:40:56 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6760
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6761
- update to Firefox 36.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6762
  Bugfixes:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6763
  * Disable the usage of the ANY DNS query type (bmo#1093983)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6764
  * Hello may become inactive until restart (bmo#1137469)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6765
  * Print preferences may not be preserved (bmo#1136855)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6766
  * Hello contact tabs may not be visible (bmo#1137141)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6767
  * Accept hostnames that include an underscore character ("_")
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6768
    (bmo#1136616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6769
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6770
  * Option -remote has been restored (bmo#1080319)
840
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
  6771
- added mozilla-skia-bmo1136958.patch to fix build issues for
e160750ffe91 new bug id
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 839
diff changeset
  6772
  ARM and PPC
838
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6773
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 835
diff changeset
  6774
-------------------------------------------------------------------
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6775
Fri Feb 20 22:53:39 UTC 2015 - wr@rosenauer.org
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6776
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6777
- update to Firefox 36.0 (bnc#917597)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6778
  * mozilla-xremote-client was removed
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6779
  * added libclearkey.so media plugin
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6780
  * Pinned tiles on the new tab page can be synced
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6781
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6782
    more scalable, and more responsive web.
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6783
  * Locale added: Uzbek (uz)
835
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6784
  security fixes:
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6785
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6786
    Miscellaneous memory safety hazards
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6787
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6788
    Invoking Mozilla updater will load locally stored DLL files
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6789
    (Windows only)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6790
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6791
    Appended period to hostnames can bypass HPKP and HSTS protections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6792
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6793
    Malicious WebGL content crash when writing strings
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6794
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6795
    TLS TURN and STUN connections silently fail to simple TCP connections
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6796
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6797
    Use-after-free in IndexedDB
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6798
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6799
    Buffer overflow in libstagefright during MP4 video playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6800
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6801
    Double-free when using non-default memory allocators with a
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6802
    zero-length XHR
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6803
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6804
    Out-of-bounds read and write while rendering SVG content
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6805
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6806
    Buffer overflow during CSS restyling
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6807
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6808
    Buffer underflow during MP3 playback
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6809
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6810
    Crash using DrawTarget in Cairo graphics library
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6811
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6812
    Use-after-free in Developer Console date with OpenType Sanitiser
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6813
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6814
    Reading of local files through manipulation of form autocomplete
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6815
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6816
    Local files or privileged URLs in pages can be opened into new tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6817
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6818
    UI Tour whitelisted sites in background tab can spoof foreground
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6819
    tabs
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6820
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
e7e5b3d0f1b3 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 832
diff changeset
  6821
    Caja Compiler JavaScript sandbox bypass
832
4d52d2b45cf0 prepare 36.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 831
diff changeset
  6822
- rebased patches
830
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6823
- requires NSS 3.17.4
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6824
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6825
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6826
Sat Jan 31 18:37:38 UTC 2015 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6827
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6828
- update to Firefox 35.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6829
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6830
  * Kerberos authentication did not work with alias (bmo#1108971)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6831
  * SVG / CSS animation had a regression causing rendering issues on
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6832
    websites like openstreemap.org (bmo#1083079)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6833
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6834
  * document.baseURI did not get updated to document.location after
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6835
    base tag was removed from DOM for site with a CSP (bmo#1121857)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6836
  * With a Right-to-left (RTL) version of Firefox, the text selection
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6837
    could be broken (bmo#1104036)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6838
  * CSP had a change in behavior with regard to case sensitivity
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 828
diff changeset
  6839
    resources loading (bmo#1122445)
828
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6840
59013b3a51f5 update to 36.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 827
diff changeset
  6841
-------------------------------------------------------------------
826
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
  6842
Sat Jan 10 18:36:37 UTC 2015 - wr@rosenauer.org
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
  6843
677ef48cf29b Firefox 35.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 824
diff changeset
  6844
- update to Firefox 35.0 (bnc#910669)
827
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6845
  notable features:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6846
  * Firefox Hello with new rooms-based conversations model
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6847
  * Implemented HTTP Public Key Pinning Extension (for enhanced
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6848
    authentication of encrypted connections)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6849
  security fixes:
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6850
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6851
    Miscellaneous memory safety hazards
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6852
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6853
    Uninitialized memory use during bitmap rendering
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6854
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6855
    sendBeacon requests lack an Origin header
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6856
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6857
    Cookie injection through Proxy Authenticate responses
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6858
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6859
    Read of uninitialized memory in Web Audio
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6860
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6861
    Read-after-free in WebRTC
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6862
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6863
    Gecko Media Plugin sandbox escape
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6864
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6865
    Delegated OCSP responder certificates failure with
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6866
    id-pkix-ocsp-nocheck extension
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6867
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
3caf8b25f146 merge from ff35
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 826
diff changeset
  6868
    XrayWrapper bypass through DOM objects
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  6869
- rebased patches
809
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6870
- dropped explicit support for everything older than 12.3
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6871
  (including SLES11)
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6872
  * merge firefox-kde.patch and firefox-kde-114.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6873
  * dropped mozilla-sle11.patch
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6874
- reworked specfile to build conditionally based on release channel
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6875
  either Firefox or Firefox Developer Edition
af47260a332c morphed Aurora packaging into Firefox Developer Edition
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 807
diff changeset
  6876
- added mozilla-openaes-decl.patch to fix implicit declarations
819
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
  6877
- obsolete tracker-miner-firefox < 0.15 because it leads to startup
5a18bd66e46c [Bug 908892] Updated Firefox (33.0-1.90.1 -> 34.0.5-1.94.3) crashes in tracker-miner-firefox
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 818
diff changeset
  6878
  crashes (bnc#908892)
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  6879
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  6880
-------------------------------------------------------------------
820
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6881
Sat Dec 13 22:13:00 UTC 2014 - Led <ledest@gmail.com>
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6882
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6883
- fix bashism in mozilla.sh script
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6884
419e95018725 fix bashism in mozilla.sh script
Led <ledest@gmail.com>
parents: 813
diff changeset
  6885
-------------------------------------------------------------------
813
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6886
Sat Nov 29 21:23:03 UTC 2014 - wr@rosenauer.org
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6887
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6888
- update to Firefox 34.0.5 (bnc#908009)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6889
  * Default search engine changed to Yahoo! for North America
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6890
  * Default search engine changed to Yandex for Belarusian, Kazakh,
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6891
    and Russian locales
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6892
  * Improved search bar (en-US only)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6893
  * Firefox Hello real-time communication client
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6894
  * Easily switch themes/personas directly in the Customizing mode
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6895
  * Implementation of HTTP/2 (draft14) and ALPN
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6896
  * Disabled SSLv3
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6897
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6898
    Miscellaneous memory safety hazards
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6899
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6900
    XBL bindings accessible via improper CSS declarations
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6901
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6902
    XMLHttpRequest crashes with some input streams
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6903
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6904
    CSP leaks redirect data via violation reports
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6905
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6906
    Use-after-free during HTML5 parsing
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6907
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6908
    Buffer overflow while parsing media content
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6909
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6910
    Bad casting from the BasicThebesLayer to BasicContainerLayer
9e3063dcc69e Firefox 34.0.5 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 811
diff changeset
  6911
- rebased patches
806
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 805
diff changeset
  6912
- limit linker memory usage for %ix86
807
f54c68340963 Aurora 35.0 (20141115) uplift
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 806
diff changeset
  6913
- rebased patches
805
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
  6914
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 802
diff changeset
  6915
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6916
Fri Nov  7 20:14:32 UTC 2014 - wr@rosenauer.org
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6917
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6918
- update to Firefox 33.1
802
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  6919
  * Adding DuckDuckGo as a search option (upstream)
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  6920
  * Forget Button added
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  6921
  * Enhanced Tiles
6c8dd9468bcc 33.1 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 801
diff changeset
  6922
  * Privacy tour introduced
797
3b2d52457c91 fix typo on Recommends
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 789
diff changeset
  6923
- fix typo in GStreamer Recommends
787
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6924
f4578fb6fcc3 33.1 preparation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6925
-------------------------------------------------------------------
801
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6926
Tue Nov  4 18:00:35 UTC 2014 - guillaume@opensuse.org
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6927
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6928
- Disable elf-hack for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6929
- Enable EGL for aarch64
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6930
- Limit RAM usage during link for %arm
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6931
- Fix _constraints for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6932
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6933
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6934
Mon Nov  3 11:36:04 UTC 2014 - dmueller@suse.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6935
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6936
- use proper macros for ARM
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6937
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6938
-------------------------------------------------------------------
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6939
Mon Nov  3 11:26:23 UTC 2014 - josua.mayer97@gmail.com
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6940
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6941
- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6942
  to fix compiling.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6943
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6944
  linking on arm.
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6945
f5f6f5547c2b merge changes from OBS Factory submissions
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 797
diff changeset
  6946
-------------------------------------------------------------------
788
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6947
Thu Oct 30 11:31:05 UTC 2014 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6948
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6949
- update to Firefox 33.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6950
  * Fix a startup crash with some combination of hardware and drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6951
  33.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6952
  * Firefox displays a black screen at start-up with certain
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6953
    graphics drivers
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6954
- adjusted _constraints for ARM
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6955
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 786
diff changeset
  6956
-------------------------------------------------------------------
786
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  6957
Tue Oct 28 15:23:09 UTC 2014 - josua.mayer97@gmail.com
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  6958
f721a3dea219 added fix for bmo1088588
<josua.mayer97@gmail.com>
parents: 785
diff changeset
  6959
- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)
785
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
  6960
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 781
diff changeset
  6961
-------------------------------------------------------------------
781
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  6962
Sat Oct 25 08:45:43 UTC 2014 - wr@rosenauer.org
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  6963
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  6964
- define /usr/share/myspell as additional dictionary location
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  6965
  and remove add-plugins.sh finally (bnc#900639)
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  6966
4ee017942f28 use /usr/share/myspell directly and remove add-plugins.sh
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 780
diff changeset
  6967
-------------------------------------------------------------------
780
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  6968
Sun Oct 19 12:59:28 UTC 2014 - vindex17@outlook.it
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  6969
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  6970
- use Firefox default optimization flags instead of -Os
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  6971
- specfile cleanup
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  6972
c20a07035a80 use Firefox default optimization flags instead of -Os
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 777
diff changeset
  6973
-------------------------------------------------------------------
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6974
Wed Oct 15 08:05:33 UTC 2014 - wr@rosenauer.org
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6975
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6976
- fix build for all ppc by not enabling elf-hack
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6977
  (bnc#901213)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6978
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6979
-------------------------------------------------------------------
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  6980
Sat Oct 11 08:48:24 UTC 2014 - wr@rosenauer.org
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  6981
777
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6982
- update to Firefox 33.0 (bnc#900941)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6983
  New features:
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6984
  * OpenH264 support (sandboxed)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6985
  * Enhanced Tiles
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6986
  * Improved search experience through the location bar
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6987
  * Slimmer and faster JavaScript strings
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6988
  * New CSP (Content Security Policy) backend
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6989
  * Support for connecting to HTTP proxy over HTTPS
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6990
  * Improved reliability of the session restoration
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6991
  * Proprietary window.crypto properties/functions removed
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6992
  Security:
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6993
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6994
    Miscellaneous memory safety hazards
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6995
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6996
    Buffer overflow during CSS manipulation
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6997
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6998
    Web Audio memory corruption issues with custom waveforms
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  6999
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7000
    Out-of-bounds write with WebM video
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7001
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7002
    Further uninitialized memory use during GIF rendering
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7003
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7004
    Use-after-free interacting with text directionality
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7005
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7006
    Key pinning bypasses
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7007
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7008
    Inconsistent video sharing within iframe
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7009
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7010
    Accessing cross-origin objects via the Alarms API
f1c5ccf4d1a7 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 776
diff changeset
  7011
    (only relevant for installed web apps)
765
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
  7012
- requires NSPR 4.10.7
773
22545f50497c update to 33.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 769
diff changeset
  7013
- requires NSS 3.17.1
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  7014
- removed obsolete patches:
773
22545f50497c update to 33.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 769
diff changeset
  7015
  * mozilla-ppc.patch
776
fd46c2b70724 prepare 33.0 final release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 774
diff changeset
  7016
  * mozilla-libproxy-compat.patch
774
f61bd1cd52c2 added basic appstream appdata information
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 773
diff changeset
  7017
- added basic appdata information
769
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7018
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7019
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7020
Sat Sep 20 13:33:51 UTC 2014 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7021
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7022
- update to Firefox 32.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7023
  * just a version bump for our builds
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7024
  * fixed the in application update process for certain environments
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7025
    (in application update is not enabled in openSUSE and Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7026
    is unaffected in any case)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7027
- build with --disable-optimize for 13.1 and above for i586 to
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 767
diff changeset
  7028
  workaround miscompilations (bnc#896624)
767
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 765
diff changeset
  7029
- use some more build flags to align with upstream
765
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
  7030
0955f22b3f4f changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 761
diff changeset
  7031
-------------------------------------------------------------------
761
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7032
Sat Sep 13 16:58:16 UTC 2014 - wr@rosenauer.org
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7033
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7034
- update to Firefox 32.0.1
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7035
  * fixed stability issues for computers with multiple graphics cards
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7036
  * mixed content icon may be incorrectly displayed instead of lock
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7037
    icon for SSL sites in 32.0 (
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7038
  * WebRTC: setRemoteDescription() silently fails if no success
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7039
    callback is specified (bmo#1063971)
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7040
c748af0c7534 update to 32.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 759
diff changeset
  7041
-------------------------------------------------------------------
759
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7042
Sun Aug 31 07:44:54 UTC 2014 - wr@rosenauer.org
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7043
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7044
- update to Firefox 32.0 (bnc#894370)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7045
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7046
    Miscellaneous memory safety hazards
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7047
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7048
    Use-after-free during DOM interactions with SVG
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7049
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7050
    Uninitialized memory use during GIF rendering
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7051
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7052
    Out-of-bounds read in Web Audio audio timeline
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7053
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7054
    Use-after-free setting text directionality
748
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7055
- rebased patches
756
e4fa9844604e update to beta8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 753
diff changeset
  7056
- requires NSS 3.16.4
748
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7057
- removed upstreamed patch
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7058
  * mozilla-aarch64-bmo-810631.patch
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7059
72ba5129e5fd full rebase to Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 746
diff changeset
  7060
-------------------------------------------------------------------
759
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7061
Wed Aug 20 13:50:58 CEST 2014 - behlert@suse.de
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7062
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7063
- adapted _constraints, used more than 3900MB on s390x during
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7064
  last build
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7065
b2ae89c6dea9 Firefox 32.0 goes production
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 756
diff changeset
  7066
-------------------------------------------------------------------
753
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7067
Sun Jul 20 18:11:44 UTC 2014 - wr@rosenauer.org
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7068
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7069
- update to Firefox 31.0 (bnc#887746)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7070
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7071
    Miscellaneous memory safety hazards
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7072
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7073
    Buffer overflow during Web Audio buffering for playback
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7074
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7075
    Use-after-free in Web Audio due to incorrect control message ordering
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7076
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7077
    Toolbar dialog customization event spoofing
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7078
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7079
    Use-after-free with FireOnStateChange event
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7080
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7081
    Exploitable WebGL crash with Cesium JavaScript library
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7082
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7083
    Use-after-free while when manipulating certificates in the trusted cache
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7084
    (solved with NSS 3.16.2 requirement)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7085
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7086
    Crash in Skia library when scaling high quality images
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7087
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7088
    (bmo#1015973, bmo#1026022, bmo#997795)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7089
    Certificate parsing broken by non-standard character encoding
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7090
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7091
    IFRAME sandbox same-origin access through redirect
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7092
- use EGL on ARM
746
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7093
- rebased patches
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7094
- requires NSS 3.16.2
753
f3bf114c6639 Firefox 32.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 748
diff changeset
  7095
- requires python-devel (not only python)
746
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7096
b441942b2a3f update meta data for Aurora 32
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 744
diff changeset
  7097
-------------------------------------------------------------------
744
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7098
Mon Jun  9 08:28:17 UTC 2014 - wr@rosenauer.org
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7099
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7100
- update to Firefox 30.0 (bnc#881874)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7101
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7102
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7103
     bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7104
     bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7105
     bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7106
     bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7107
     bmo#1009952, bmo#1011007)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7108
    Miscellaneous memory safety hazards (rv:30.0)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7109
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7110
    (bmo#989994, bmo#999274, bmo#1005584)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7111
    Use-after-free and out of bounds issues found using Address
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7112
    Sanitizer
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7113
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7114
    Clickjacking through cursor invisability after Flash interaction
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7115
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7116
    Use-after-free in Event Listener Manager
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7117
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7118
    Use-after-free with SMIL Animation Controller
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7119
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7120
    Buffer overflow in Web Audio Speex resampler
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7121
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7122
    Buffer overflow in Gamepad API
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7123
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7124
    Out of bounds write in NSPR
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7125
- rebased patches
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7126
- removed obsolete patches
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7127
  * firefox-browser-css.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7128
  * mozilla-aarch64-bmo-962488.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7129
  * mozilla-aarch64-bmo-963023.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7130
  * mozilla-aarch64-bmo-963024.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7131
  * mozilla-aarch64-bmo-963027.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7132
  * mozilla-ppc64-xpcom.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7133
  * mozilla-ppc64le-javascript.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7134
  * mozilla-ppc64le-libffi.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7135
  * mozilla-ppc64le-mfbt.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7136
  * mozilla-ppc64le-webrtc.patch
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7137
  * mozilla-ppc64le-xpcom.patch
744
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7138
  * mozilla-ppc64le-build.patch
e2d94ddb82f0 manual merge from 30.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 738
diff changeset
  7139
- requires NSPR 4.10.6
725
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
  7140
- enabled GStreamer 1.0 usage for 13.2 and above
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
  7141
b688c34894ee minor updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 718
diff changeset
  7142
-------------------------------------------------------------------
738
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7143
Sat May 10 06:09:37 UTC 2014 - wr@rosenauer.org
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7144
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7145
- update to Firefox 29.0.1
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7146
  * Seer disabled by default (bmo#1005958)
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7147
  * Session Restore failed with a corrupted sessionstore.js file
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7148
    (bmo#1001167)
f118b88b7d7f Aurora 31 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 733
diff changeset
  7149
  * pdf.js printing white page (bmo#1003707, bnc#876833)
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7150
- general.useragent.locale gets overwritten with en-US while it
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7151
  should be using the active langpack's setting
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7152
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7153
-------------------------------------------------------------------
727
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7154
Sat Apr 26 12:18:07 UTC 2014 - wr@rosenauer.org
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7155
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7156
- update to Firefox 29.0 (bnc#875378)
733
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7157
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7158
    Miscellaneous memory safety hazards
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7159
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7160
    Web Audio memory corruption issues
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7161
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7162
    Out of bounds read while decoding JPG images
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7163
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7164
    Buffer overflow when using non-XBL object as XBL
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7165
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7166
    Use-after-free in the Text Track Manager for HTML video
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7167
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7168
    Out-of-bounds write in Cairo
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7169
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7170
    Privilege escalation through Web Notification API
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7171
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7172
    Cross-site scripting (XSS) using history navigations
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7173
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7174
    Use-after-free in imgLoader while resizing images
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7175
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7176
    Incorrect IDNA domain name matching for wildcard certificates
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7177
    (fixed by NSS 3.16)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7178
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7179
    Use-after-free in nsHostResolver
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7180
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
b2202fea7983 manual forward merge from 29 and 30 branches
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 727
diff changeset
  7181
    Debugger can bypass XrayWrappers with JavaScript
727
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7182
- rebased patches
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7183
- removed obsolete patches
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7184
  * firefox-browser-css.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7185
  * mozilla-aarch64-599882cfb998.diff
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7186
  * mozilla-aarch64-bmo-963028.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7187
  * mozilla-aarch64-bmo-963029.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7188
  * mozilla-aarch64-bmo-963030.patch
727fef76f8d7 manual merge from firefox29
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 725
diff changeset
  7189
  * mozilla-aarch64-bmo-963031.patch
716
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7190
- requires NSS 3.16
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7191
- added mozilla-icu-strncat.patch to fix post build checks
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7192
cef565f1c325 update to Firefox 29.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 715
diff changeset
  7193
-------------------------------------------------------------------
715
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7194
Mon Apr  7 15:34:31 UTC 2014 - dmueller@suse.com
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7195
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7196
- add mozilla-aarch64-599882cfb998.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7197
      mozilla-aarch64-bmo-810631.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7198
      mozilla-aarch64-bmo-962488.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7199
      mozilla-aarch64-bmo-963030.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7200
      mozilla-aarch64-bmo-963027.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7201
      mozilla-aarch64-bmo-963028.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7202
      mozilla-aarch64-bmo-963029.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7203
      mozilla-aarch64-bmo-963023.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7204
      mozilla-aarch64-bmo-963024.patch,
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7205
      mozilla-aarch64-bmo-963031.patch: AArch64 porting
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7206
e1c226a4de34 AArch64 porting
Dirk Müller <dmueller@suse.com>
parents: 714
diff changeset
  7207
-------------------------------------------------------------------
714
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7208
Mon Mar 24 16:18:44 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7209
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7210
- Add patch for bmo#973977
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7211
  * mozilla-ppc64-xpcom.patch
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7212
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7213
-------------------------------------------------------------------
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7214
Mon Mar 24 14:29:12 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7215
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7216
- Refresh mozilla-ppc64le-xpcom.patch patch
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7217
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7218
-------------------------------------------------------------------
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7219
Fri Mar 21 19:01:42 UTC 2014 - dvaleev@suse.com
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7220
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7221
- Adapt mozilla-ppc64le-xpcom.patch to Mozilla > 24.0 build system
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7222
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7223
-------------------------------------------------------------------
711
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
  7224
Sun Mar 16 13:39:15 UTC 2014 - wr@rosenauer.org
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
  7225
712
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7226
- update to Firefox 28.0 (bnc#868603)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7227
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7228
    Miscellaneous memory safety hazards
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7229
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7230
    Out of bounds read during WAV file decoding
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7231
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7232
    crypto.generateCRMFRequest does not validate type of key
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7233
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7234
    Spoofing attack on WebRTC permission prompt
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7235
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7236
    onbeforeunload and Javascript navigation DOS
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7237
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7238
    WebGL content injection from one domain to rendering in another
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7239
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7240
    Content Security Policy for data: documents not preserved by
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7241
    session restore
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7242
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7243
    Information disclosure through polygon rendering in MathML
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7244
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7245
    Memory corruption in Cairo during PDF font rendering
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7246
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7247
    SVG filters information disclosure through feDisplacementMap
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7248
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7249
    Privilege escalation using WebIDL-implemented APIs
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7250
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7251
    Use-after-free in TypeObject
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7252
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7253
    Out-of-bounds read/write through neutering ArrayBuffer objects
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7254
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7255
    Out-of-bounds write through TypedArrayObject after neutering
707
bfa2e0576454 update to 28.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 705
diff changeset
  7256
- requires NSPR 4.10.3 and NSS 3.15.5
712
427ae22e730e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 711
diff changeset
  7257
- new build dependency (and recommends):
703
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7258
  * libpulse
710
5341dc98d26c update of PPC64LE patches taken from
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 707
diff changeset
  7259
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
711
012a5adf5c74 moved to mozilla-release (28.0build2)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 710
diff changeset
  7260
- rebased patches
703
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7261
c4aab80e472f Firefox 28.0beta1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7262
-------------------------------------------------------------------
704
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7263
Mon Feb 17 11:59:28 UTC 2014 - wr@rosenauer.org
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7264
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7265
- update to Firefox 27.0.1
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7266
  * Fixed stability issues with Greasemonkey and other JS that used
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7267
    ClearTimeoutOrInterval
714
b686e856c800 import PPC64(LE) changes from OBS
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 712
diff changeset
  7268
  * JS math correctness issue (bmo#941381)
704
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7269
- incorporate Google API key for geolocation (bnc#864170)
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7270
- updated list of "other" locales in RPM requirements
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7271
72225e57f863 update to 27.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 700
diff changeset
  7272
-------------------------------------------------------------------
699
f810fbe5fece update to 27.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 697
diff changeset
  7273
Tue Jan 28 15:45:41 UTC 2014 - wr@rosenauer.org
f810fbe5fece update to 27.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 697
diff changeset
  7274
700
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7275
- update to Firefox 27.0 (bnc#861847)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7276
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7277
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7278
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7279
    Clone protected content with XBL scopes
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7280
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7281
    UI selection timeout missing on download prompts
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7282
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7283
    Incorrect use of discarded images by RasterImage
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7284
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7285
    Information disclosure with *FromPoint on iframes
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7286
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7287
    Profile path leaks to Android system log
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7288
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7289
    XSLT stylesheets treated as styles in Content Security Policy
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7290
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7291
    Use-after-free with imgRequestProxy and image proccessing
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7292
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7293
    Cross-origin information leak through web workers
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7294
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7295
    Firefox default start page UI content invokable by script
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7296
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7297
    Crash when using web workers with asm.js
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7298
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7299
    (bmo#934545, bmo#930874, bmo#930857)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7300
    NSS ticket handling issues
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7301
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
52284fd63667 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 699
diff changeset
  7302
    Inconsistent JavaScript handling of access to Window objects
691
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7303
- requires NSS 3.15.4 or higher
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7304
- rebased/reworked patches
697
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
  7305
- removed obsolete mozilla-bug929439.patch
691
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7306
18c2dc922e51 update to Firefox 27.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 689
diff changeset
  7307
-------------------------------------------------------------------
692
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7308
Thu Dec 12 21:19:54 UTC 2013 - uweigand@de.ibm.com
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7309
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7310
- Add support for powerpc64le-linux.
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7311
  * mozilla-ppc64le.patch: general support
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7312
  * mozilla-libffi-ppc64le.patch: libffi backport
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7313
  * mozilla-xpcom-ppc64le.patch: port xpcom
697
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
  7314
- Add build fix from mainline.
0118161f4c11 changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 696
diff changeset
  7315
  * mozilla-bug929439.patch
692
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7316
8add0ba12be5 PPC64LE support
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 691
diff changeset
  7317
-------------------------------------------------------------------
688
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
  7318
Sun Dec  8 20:26:23 UTC 2013 - wr@rosenauer.org
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
  7319
689
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7320
- update to Firefox 26.0 (bnc#854367, bnc#854370)
686
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7321
  * rebased patches
688
d09dea6b31b1 26.0 final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 686
diff changeset
  7322
  * requires NSPR 4.10.2 and NSS 3.15.3.1
689
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7323
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7324
    Miscellaneous memory safety hazards
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7325
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7326
    Application Installation doorhanger persists on navigation
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7327
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7328
    Character encoding cross-origin XSS attack
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7329
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7330
    Sandbox restrictions not applied to nested object elements
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7331
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7332
    Use-after-free in event listeners
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7333
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7334
    Use-after-free during Table Editing
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7335
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7336
    Potential overflow in JavaScript binary search algorithms
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7337
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7338
    Segmentation violation when replacing ordered list elements
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7339
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7340
    Linux clipboard information disclosure though selection paste
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7341
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7342
    Trust settings for built-in roots ignored during EV certificate
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7343
    validation
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7344
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7345
    Use-after-free in synthetic mouse movement
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7346
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7347
    GetElementIC typed array stubs can be generated outside observed
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7348
    typesets
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7349
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7350
    JPEG information leak
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7351
  * MFSA 2013-117 (bmo#946351)
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7352
    Mis-issued ANSSI/DCSSI certificate
afcaf2131b0e changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 688
diff changeset
  7353
    (fixed via NSS 3.15.3.1)
686
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7354
- removed gecko.js preference file as GStreamer is enabled by
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7355
  default now
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7356
ab25aac2aa83 Firefox 26.0b5 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 682
diff changeset
  7357
-------------------------------------------------------------------
681
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
  7358
Thu Oct 24 18:16:19 UTC 2013 - wr@rosenauer.org
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
  7359
682
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7360
- update to Firefox 25.0 (bnc#847708)
680
be770d3cbc02 Firefox 25 beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 676
diff changeset
  7361
  * rebased patches
681
856a85f3dc36 prepare 25.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 680
diff changeset
  7362
  * requires NSS 3.15.2 or above
682
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7363
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7364
    Miscellaneous memory safety hazards
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7365
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7366
    Spoofing addressbar through SELECT element
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7367
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7368
    Access violation with XSLT and uninitialized data
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7369
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7370
    Improperly initialized memory and overflows in some JavaScript
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7371
    functions
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7372
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7373
    Writing to cycle collected object during image decoding
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7374
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7375
    Use-after-free when updating offline cache
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7376
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7377
    Security bypass of PDF.js checks using iframes
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7378
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7379
    (bmo#915210, bmo#915576, bmo#916685)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7380
    Miscellaneous use-after-free issues found through ASAN fuzzing
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7381
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7382
    Memory corruption in workers
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7383
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
a15c18cb0ee6 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 681
diff changeset
  7384
    Use-after-free in HTML document templates
676
ed32bb3eb2f0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 672
diff changeset
  7385
ed32bb3eb2f0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 672
diff changeset
  7386
-------------------------------------------------------------------
672
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7387
Tue Sep 24 07:31:30 UTC 2013 - wr@rosenauer.org
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7388
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7389
- as GStreamer is not automatically required anymore but loaded
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7390
  dynamically if available, require it explicitely
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7391
- recommend optional GStreamer plugins for comprehensive media
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7392
  support
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7393
2268d308dc15 minor polishing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 667
diff changeset
  7394
-------------------------------------------------------------------
666
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7395
Mon Sep 16 11:59:18 UTC 2013 - lnussel@suse.de
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7396
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7397
- move greek to the translations-common package (bnc#840551)
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7398
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7399
-------------------------------------------------------------------
664
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7400
Sat Sep 14 14:39:58 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7401
666
0d913ca30238 move greek to the translations-common package (bnc#840551)
Ludwig Nussel <lnussel@suse.de>
parents: 664
diff changeset
  7402
- update to Firefox 24.0 (bnc#840485)
667
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7403
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7404
    Miscellaneous memory safety hazards
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7405
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7406
    Improper state in HTML5 Tree Builder with templates
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7407
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7408
    Integer overflow in ANGLE library
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7409
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7410
    Use-after-free in Animation Manager during stylesheet cloning
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7411
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7412
    NativeKey continues handling key messages after widget is destroyed
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7413
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7414
    Use-after-free with select element
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7415
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7416
    Calling scope for new Javascript objects can lead to memory corruption
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7417
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7418
    Uninitialized data in IonMonkey
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7419
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7420
    Compartment mismatch re-attaching XBL-backed nodes
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7421
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7422
    Buffer overflow with multi-column, lists, and floats
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7423
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7424
    Memory corruption involving scrolling
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7425
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7426
    User-defined properties on DOM proxies get the wrong "this" object
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7427
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7428
    GC hazard with default compartments and frame chain restoration
6c1407488870 24.0 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 666
diff changeset
  7429
- enable gstreamer explicitely via pref (gecko.js)
663
faf4f017af5c require NSS 3.15.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 661
diff changeset
  7430
- require NSS 3.15.1
661
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7431
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7432
-------------------------------------------------------------------
664
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7433
Mon Aug 26 07:35:36 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7434
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7435
- update to Firefox 23.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7436
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7437
    (bmo#901527)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7438
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 663
diff changeset
  7439
-------------------------------------------------------------------
661
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7440
Sun Aug  4 18:30:11 UTC 2013 - wr@rosenauer.org
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7441
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7442
- update to Firefox 23.0 (bnc#833389)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7443
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7444
    Miscellaneous memory safety hazards
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7445
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7446
    Use after free mutating DOM during SetBody
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7447
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7448
    Buffer underflow when generating CRMF requests
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7449
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7450
    Crash during WAV audio file decoding
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7451
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7452
    Document URI misrepresentation and masquerading
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7453
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7454
    CRMF requests allow for code execution and XSS attacks
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7455
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7456
    Bypass of XrayWrappers using XBL Scopes
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7457
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7458
    Wrong principal used for validating URI for some Javascript
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7459
    components
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7460
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7461
    Same-origin bypass with web workers and XMLHttpRequest
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7462
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
aac91d5705b1 prepare 24.0beta
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 659
diff changeset
  7463
    Local Java applets may read contents of local file system
653
38c67b6b2f37 Aurora 23 (20130616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 650
diff changeset
  7464
- requires NSPR 4.10 and NSS 3.15
659
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7465
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7466
-------------------------------------------------------------------
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7467
Wed Jul  3 17:14:35 UTC 2013 - dmueller@suse.com
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7468
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7469
- fix build on ARM (/-g/ matches /-grecord-switches/)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7470
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7471
-------------------------------------------------------------------
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7472
Sat Jun 22 17:48:06 UTC 2013 - wr@rosenauer.org
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7473
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7474
- update to Firefox 22.0 (bnc#825935)
650
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7475
  * removed obsolete patches
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7476
    + mozilla-qcms-ppc.patch
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7477
    + mozilla-gstreamer-760140.patch
659
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7478
  * GStreamer support does not build on 12.1 anymore (build only
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7479
    on 12.2 and later)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7480
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7481
    Miscellaneous memory safety hazards
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7482
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7483
    Memory corruption found using Address Sanitizer
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7484
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7485
    Privileged content access and execution via XBL
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7486
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7487
    Arbitrary code execution within Profiler
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7488
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7489
    Execution of unmapped memory through onreadystatechange event
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7490
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7491
    Data in the body of XHR HEAD requests leads to CSRF attacks
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7492
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7493
    SVG filters can lead to information disclosure
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7494
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7495
    PreserveWrapper has inconsistent behavior
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7496
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7497
    Sandbox restrictions not applied to nested frame elements
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7498
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7499
    X-Frame-Options ignored when using server push with multi-part
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7500
    responses
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7501
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7502
    XrayWrappers can be bypassed to run user defined methods in a
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7503
    privileged context
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7504
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7505
    getUserMedia permission dialog incorrectly displays location
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7506
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
fa96cf6ffd14 Aurora 24 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 653
diff changeset
  7507
    Homograph domain spoofing in .com, .net and .name
650
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7508
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7509
-------------------------------------------------------------------
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7510
Tue Jun 11 21:06:58 UTC 2013 - dvaleev@suse.com
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7511
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7512
- Fix qcms altivec include (mozilla-qcms-ppc.patch)
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7513
e8c83b144fd1 22.0b4 update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 647
diff changeset
  7514
-------------------------------------------------------------------
647
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7515
Fri May 10 05:25:39 UTC 2013 - wr@rosenauer.org
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7516
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7517
- update to Firefox 21.0 (bnc#819204)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7518
  * removed upstreamed patch firefox-712763.patch
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7519
  * removed disabled mozilla-disable-neon-option.patch
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7520
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7521
    Miscellaneous memory safety hazards
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7522
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7523
    Privileged access for content level constructor
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7524
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7525
    File input control has access to full path
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7526
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7527
    Use-after-free with video and onresize event
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7528
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7529
    Uninitialized functions in DOMSVGZoomEvent
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7530
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7531
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
9d8bdcdd4d2a 21.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 645
diff changeset
  7532
    Memory corruption found using Address Sanitizer
645
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7533
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7534
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7535
Tue Apr  9 06:41:31 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7536
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7537
- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7538
  (remove mozilla-gstreamer-1.patch)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7539
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 640
diff changeset
  7540
-------------------------------------------------------------------
640
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7541
Fri Apr  5 17:04:11 UTC 2013 - schwab@linux-m68k.org
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7542
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7543
- Explicitly disable WebRTC support on non-x86, the configure script
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7544
  disables it only half-heartedly
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7545
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7546
-------------------------------------------------------------------
639
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7547
Fri Mar 29 22:15:21 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7548
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7549
- update to Firefox 20.0 (bnc#813026)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7550
  * requires NSPR 4.9.5 and NSS 3.14.3
640
68ead6c93b7d Explicitly disable WebRTC support on non-x86, the configure script
schwab@linux-m68k.org
parents: 639
diff changeset
  7551
  * mozilla-webrtc-ppc.patch included upstream
639
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7552
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7553
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7554
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7555
    Out-of-bounds write in Cairo library
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7556
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7557
    WebGL crash with Mesa graphics driver on Linux
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7558
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7559
    Bypass of SOW protections allows cloning of protected nodes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7560
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7561
    Bypass of tab-modal dialog origin disclosure
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7562
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7563
    Cross-site scripting (XSS) using timed history navigations
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7564
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 633
diff changeset
  7565
    Memory corruption while rendering grayscale PNG images
625
9f6e14430916 Bug 806917 - support GStreamer 1.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 624
diff changeset
  7566
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)
633
7c6f56a37ed6 armv7hl build fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 629 631
diff changeset
  7567
7c6f56a37ed6 armv7hl build fixes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 629 631
diff changeset
  7568
-------------------------------------------------------------------
631
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7569
Tue Mar 12 23:08:15 UTC 2013 - dmueller@suse.com
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7570
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7571
- build fixes for armv7hl:
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7572
  * disable debug build as armv7hl does not have enough memory
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7573
  * disable webrtc on armv7hl as it is non-compiling
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7574
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7575
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7576
Thu Mar  7 19:03:32 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7577
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7578
- update to Firefox 19.0.2 (bnc#808243)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7579
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7580
    Use-after-free in HTML Editor
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7581
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 623
diff changeset
  7582
-------------------------------------------------------------------
623
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7583
Thu Feb 28 22:06:36 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7584
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7585
- update to Firefox 19.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7586
  * blocklist updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7587
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 619
diff changeset
  7588
-------------------------------------------------------------------
615
fb49ee6e3828 Firefox 19.0 goes release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 613
diff changeset
  7589
Sat Feb 16 07:08:55 UTC 2013 - wr@rosenauer.org
fb49ee6e3828 Firefox 19.0 goes release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 613
diff changeset
  7590
619
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7591
- update to Firefox 19.0 (bnc#804248)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7592
  * MFSA 2013-21/CVE-2013-0783/2013-0784
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7593
    Miscellaneous memory safety hazards
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7594
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7595
    Out-of-bounds read in image rendering
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7596
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7597
    Wrapped WebIDL objects can be wrapped again
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7598
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7599
    Web content bypass of COW and SOW security wrappers
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7600
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7601
    Privacy leak in JavaScript Workers
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7602
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7603
    Use-after-free in nsImageLoadingContent
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7604
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7605
    Phishing on HTTPS connection through malicious proxy
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7606
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7607
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7608
    Use-after-free, out of bounds read, and buffer overflow issues
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7609
    found using Address Sanitizer
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7610
- removed obsolete patches
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7611
  * mozilla-webrtc.patch
666cf9899b82 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 616
diff changeset
  7612
  * mozilla-gstreamer-803287.patch
616
f46af22f1079 Bug 712763 - Backout changes from bug 669272 to keep original window order when restoring a session
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 615
diff changeset
  7613
- added patch to fix session restore window order (bmo#712763)
613
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 611
diff changeset
  7614
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 611
diff changeset
  7615
-------------------------------------------------------------------
611
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7616
Sat Feb  2 08:40:52 UTC 2013 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7617
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7618
- update to Firefox 18.0.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7619
  * blocklist and CTP updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7620
  * fixes in JS engine
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7621
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 609
diff changeset
  7622
-------------------------------------------------------------------
604
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7623
Wed Jan 16 20:51:55 UTC 2013 - wr@rosenauer.org
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7624
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7625
- update to Firefox 18.0.1
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7626
  * blocklist updates
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7627
  * backed out bmo#677092 (removed patch)
609
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 604
diff changeset
  7628
  * fixed problems involving HTTP proxy transactions
604
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7629
127a01719356 update to 18.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 603
diff changeset
  7630
-------------------------------------------------------------------
603
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7631
Sat Jan 12 17:25:11 UTC 2013 - schwab@linux-m68k.org
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7632
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7633
- Fix WebRTC to build on powerpc
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7634
cfcae96df099 imported patch to fix PPC build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 601
diff changeset
  7635
-------------------------------------------------------------------
600
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7636
Sun Jan  6 21:54:18 UTC 2013 - wr@rosenauer.org
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7637
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7638
- update to Firefox 18.0 (bnc#796895)
601
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7639
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7640
    Miscellaneous memory safety hazards
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7641
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7642
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7643
    Use-after-free and buffer overflow issues found using Address Sanitizer
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7644
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7645
    Buffer Overflow in Canvas
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7646
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7647
    URL spoofing in addressbar during page loads
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7648
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7649
    Use-after-free when displaying table with many columns and column groups
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7650
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7651
    Touch events are shared across iframes
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7652
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7653
    Crash due to handling of SSL on threads
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7654
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7655
    AutoWrapperChanger fails to keep objects alive during garbage collection
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7656
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7657
    Compartment mismatch with quickstubs returned values
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7658
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7659
    Event manipulation in plugin handler to bypass same-origin policy
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7660
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7661
    Address space layout leaked in XBL objects
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7662
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7663
    Buffer overflow in Javascript string concatenation
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7664
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7665
    Memory corruption in XBL with XML bindings containing SVG
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7666
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7667
    Chrome Object Wrapper (COW) bypass through changing prototype
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7668
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7669
    Privilege escalation through plugin objects
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7670
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7671
    Use-after-free in serializeToStream
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7672
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7673
    Use-after-free in ListenerManager
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7674
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7675
    Use-after-free in Vibrate
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7676
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7677
    Use-after-free in Javascript Proxy objects
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7678
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7679
- removed obsolete SLE11 patches (mozilla-gcc43*)
585
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7680
- reenable WebRTC
600
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7681
- added mozilla-libproxy-compat.patch for libproxy API compat
5eb2128332e5 18.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 595
diff changeset
  7682
  on openSUSE 11.2 and earlier
601
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7683
- backed out restartless language packs as it broke multi-locale
006c98ae8607 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 600
diff changeset
  7684
  setup (bmo#677092, bmo#818468)
585
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7685
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7686
-------------------------------------------------------------------
595
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7687
Thu Nov 29 19:56:51 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7688
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7689
- update to Firefox 17.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7690
  * revert some useragent changes introduced in 17.0
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7691
  * leaving private browsing with social enabled doesn't reset all
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7692
    social components (bmo#815042)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7693
- fix KDE integration for file dialogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7694
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 585
diff changeset
  7695
-------------------------------------------------------------------
585
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7696
Tue Nov 20 19:52:02 UTC 2012 - wr@rosenauer.org
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7697
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7698
- update to Firefox 17.0 (bnc#790140)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7699
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7700
    Miscellaneous memory safety hazards
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7701
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7702
    Buffer overflow while rendering GIF images
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7703
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7704
    evalInSanbox location context incorrectly applied
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7705
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7706
    Crash when combining SVG text on path with CSS
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7707
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7708
    Javascript: URLs run in privileged context on New Tab page
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7709
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7710
    Memory corruption in str_unescape
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7711
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7712
    XMLHttpRequest inherits incorrect principal within sandbox
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7713
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7714
    XrayWrappers exposes chrome-only properties when not in chrome
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7715
    compartment
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7716
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7717
    Improper security filtering for cross-origin wrappers
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7718
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7719
    Improper character decoding in HZ-GB-2312 charset
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7720
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7721
    Script entered into Developer Toolbar runs with chrome privileges
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7722
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7723
    Frames can shadow top.location
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7724
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7725
    CSS and HTML injection through Style Inspector
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7726
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7727
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7728
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7729
    Use-after-free and buffer overflow issues found using Address
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7730
    Sanitizer
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7731
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7732
    Use-after-free, buffer overflow, and memory corruption issues
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7733
    found using Address Sanitizer
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7734
- rebased patches
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7735
- disabled WebRTC since build is broken (bmo#776877)
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7736
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7737
-------------------------------------------------------------------
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7738
Tue Nov 20 15:42:55 UTC 2012 - pcerny@suse.com
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7739
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7740
- build on SLE11
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7741
  * mozilla-gcc43-enums.patch
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7742
  * mozilla-gcc43-template_hacks.patch
5a44d417c9b5 prepare for Beta 18 phase
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 572
diff changeset
  7743
  * mozilla-gcc43-templates_instantiation.patch
568
2c74c5927ea2 first working Aurora 18 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 563
diff changeset
  7744
2c74c5927ea2 first working Aurora 18 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 563
diff changeset
  7745
-------------------------------------------------------------------
572
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7746
Wed Oct 24 08:27:29 UTC 2012 - wr@rosenauer.org
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7747
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7748
- update to Firefox 16.0.2 (bnc#786522)
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7749
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7750
    (bmo#800666, bmo#793121, bmo#802557)
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7751
    Fixes for Location object issues
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7752
- bring back Obsoletes for libproxy's mozjs plugin for distributions
edcb48108200 changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 568
diff changeset
  7753
  before 12.2 to avoid crashes
539
b1134fe91f9a merge latest changes from firefox16
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 536
diff changeset
  7754
414
88a71e903038 update to 12.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 410
diff changeset
  7755
-------------------------------------------------------------------
563
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7756
Thu Oct 11 01:51:16 UTC 2012 - wr@rosenauer.org
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7757
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7758
- update to Firefox 16.0.1 (bnc#783533)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7759
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7760
    Miscellaneous memory safety hazards
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7761
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7762
    defaultValue security checks not applied
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7763
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7764
-------------------------------------------------------------------
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7765
Sun Oct  7 21:40:14 UTC 2012 - wr@rosenauer.org
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7766
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7767
- update to Firefox 16.0 (bnc#783533)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7768
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7769
    Miscellaneous memory safety hazards
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7770
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7771
    select element persistance allows for attacks
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7772
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7773
    Continued access to initial origin after setting document.domain
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7774
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7775
    Some DOMWindowUtils methods bypass security checks
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7776
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7777
    DOS and crash with full screen and history navigation
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7778
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7779
    Crash with invalid cast when using instanceof operator
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7780
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7781
    GetProperty function can bypass security checks
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7782
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7783
    top object and location property accessible by plugins
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7784
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7785
    Chrome Object Wrapper (COW) does not disallow acces to privileged
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7786
    functions or properties
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7787
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7788
    Spoofing and script injection through location.hash
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7789
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7790
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7791
    Use-after-free, buffer overflow, and out of bounds read issues
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7792
    found using Address Sanitizer
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7793
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7794
    CVE-2012-4188
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7795
    Heap memory corruption issues found using Address Sanitizer
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7796
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7797
    Use-after-free in the IME State Manager
533
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7798
- requires NSPR 4.9.2
529
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7799
- improve GStreamer integration (bmo#760140)
533
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7800
- removed upstreamed mozilla-crashreporter-restart-args.patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7801
- webapprt now included
536
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 533
diff changeset
  7802
- use kmozillahelper's new REVEAL command (bnc#777415)
538
be682f8c9361 revert API version change for kmozillahelper
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 536
diff changeset
  7803
  (requires mozilla-kde4-integration >= 0.6.4)
563
8349c239bff9 preparing Aurora 18
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 547
diff changeset
  7804
- updated translations-other with new languages
529
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7805
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7806
-------------------------------------------------------------------
541
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7807
Mon Sep 10 19:37:56 UTC 2012 - wr@rosenauer.org
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7808
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7809
- update to Firefox 15.0.1 (bnc#779936)
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7810
  * Sites visited while in Private Browsing mode could be found
547
65364282c9bc Aurora 20121003
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 543
diff changeset
  7811
    through manual browser cache inspection (bmo#787743)
541
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7812
830e50bbfc79 working Aurora 17.0 build
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 540
diff changeset
  7813
-------------------------------------------------------------------
533
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7814
Sun Aug 26 13:47:43 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7815
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7816
- update to Firefox 15.0 (bnc#777588)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7817
  * MFSA 2012-57/CVE-2012-1970
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7818
    Miscellaneous memory safety hazards
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7819
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7820
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7821
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7822
    Use-after-free issues found using Address Sanitizer
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7823
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7824
    Location object can be shadowed using Object.defineProperty
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7825
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7826
    Escalation of privilege through about:newtab
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7827
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7828
    Memory corruption with bitmap format images with negative height
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7829
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7830
    WebGL use-after-free and memory corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7831
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7832
    SVG buffer overflow and use-after-free issues
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7833
  * MFSA 2012-64/CVE-2012-3971
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7834
    Graphite 2 memory corruption
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7835
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7836
    Out-of-bounds read in format-number in XSLT
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7837
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7838
    HTTPMonitor extension allows for remote debugging without explicit
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7839
    activation
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7840
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7841
    DOMParser loads linked resources in extensions when parsing
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7842
    text/html
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7843
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7844
    Incorrect site SSL certificate data display
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7845
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7846
    Location object security checks bypassed by chrome code
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7847
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 529
diff changeset
  7848
    Web console eval capable of executing chrome-privileged code
471
73b631ab214b adding fixes to spec file and changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 463
diff changeset
  7849
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
513
7a651f368dd8 changelog update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 500
diff changeset
  7850
- GStreamer is only used for MP4 (no WebM, OGG)
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7851
- updated filelist
529
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7852
- moved browser specific preferences to correct location
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7853
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7854
-------------------------------------------------------------------
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7855
Sun Jul 29 08:34:39 UTC 2012 - aj@suse.de
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7856
4812378b5646 import GStreamer improvement from bmo#760140 (support mpeg audio)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 513
diff changeset
  7857
- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7858
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7859
-------------------------------------------------------------------
500
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7860
Sat Jul 14 19:31:51 UTC 2012 - wr@rosenauer.org
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7861
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7862
- update to 14.0.1 (bnc#771583)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7863
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7864
    Miscellaneous memory safety hazards
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7865
  * MFSA 2012-43/CVE-2012-1950
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7866
    Incorrect URL displayed in addressbar through drag and drop
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7867
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7868
    Gecko memory corruption
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7869
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7870
    Spoofing issue with location
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7871
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7872
    XSS through data: URLs
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7873
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7874
    Improper filtering of javascript in HTML feed-view
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7875
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7876
    use-after-free in nsGlobalWindow::PageHidden
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7877
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7878
    Same-compartment Security Wrappers can be bypassed
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7879
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7880
    Out of bounds read in QCMS
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7881
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7882
    X-Frame-Options header ignored when duplicated
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7883
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7884
    JSDependentString::undepend string conversion results in memory
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7885
    corruption
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7886
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7887
    Content Security Policy 1.0 implementation errors cause data
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7888
    leakage
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7889
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7890
    feed: URLs with an innerURI inherit security context of page
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7891
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7892
    Code execution through javascript: URLs
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7893
- license change from tri license to MPL-2.0
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7894
- fix crashreporter restart option (bmo#762780)
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7895
- require NSS 3.13.5
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7896
- remove mozjs pacrunner obsoletes again for now
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7897
- adopted mozilla-prefer_plugin_pref.patch
500
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7898
- PPC fixes:
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7899
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7900
  * add patches for bmo#750620 and bmo#746112
c2c5bb5248b0 changelogs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 491
diff changeset
  7901
  * fix xpcshell segfault on ppc
491
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7902
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7903
-------------------------------------------------------------------
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7904
Fri Jun 15 12:37:09 UTC 2012 - wr@rosenauer.org
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7905
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7906
- update to Firefox 13.0.1
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7907
  * bugfix release
43deb5e6462d snapshot 20120625
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 471
diff changeset
  7908
- obsolete libproxy's mozjs pacrunner (bnc#759123)
457
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  7909
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  7910
-------------------------------------------------------------------
462
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7911
Sat Jun  2 08:22:51 UTC 2012 - wr@rosenauer.org
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7912
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7913
- update to Firefox 13.0 (bnc#765204)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7914
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7915
    Miscellaneous memory safety hazards
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7916
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7917
    Content Security Policy inline-script bypass
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7918
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7919
    Information disclosure though Windows file shares and shortcut
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7920
    files
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7921
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7922
    Use-after-free while replacing/inserting a node in a document
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7923
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7924
    Buffer overflow and use-after-free issues found using Address
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7925
    Sanitizer
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7926
- require NSS 3.13.4
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7927
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7928
- fix sound notifications when filename/path contains a whitespace
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7929
  (bmo#749739)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7930
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7931
-------------------------------------------------------------------
457
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  7932
Wed May 23 14:40:16 UTC 2012 - adrian@suse.de
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  7933
0c2249d015b6 fixed ARM build
Adrian Schröter <adrian@suse.de>
parents: 447
diff changeset
  7934
- fix build on arm
435
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7935
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7936
-------------------------------------------------------------------
462
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7937
Wed May 16 05:34:01 UTC 2012 - wr@rosenauer.org
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7938
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7939
- reenabled crashreporter for Factory/12.2
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7940
  (fix in mozilla-gcc47.patch)
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7941
2d86bdb4277f 14.0b6 (Aurora->Beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 457
diff changeset
  7942
-------------------------------------------------------------------
435
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7943
Sat Apr 21 10:02:37 UTC 2012 - wr@rosenauer.org
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7944
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7945
- update to Firefox 12.0 (bnc#758408)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7946
  * rebased patches
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7947
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7948
    Miscellaneous memory safety hazards
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7949
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7950
    use-after-free in IDBKeyRange
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7951
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7952
    Invalid frees causes heap corruption in gfxImageSurface
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7953
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7954
    Potential XSS via multibyte content processing errors
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7955
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7956
    Potential memory corruption during font rendering using cairo-dwrite
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7957
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7958
    WebGL.drawElements may read illegal video memory due to
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7959
    FindMaxUshortElement error
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7960
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7961
    Page load short-circuit can lead to XSS
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7962
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7963
    Ambiguous IPv6 in Origin headers may bypass webserver access
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7964
    restrictions
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7965
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7966
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7967
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7968
    Crash with WebGL content using textImage2D
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7969
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7970
    Off-by-one error in OpenType Sanitizer
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7971
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7972
    HTTP Redirections and remote content can be read by javascript errors
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7973
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7974
    Potential site identity spoofing when loading RSS and Atom feeds
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7975
- added mozilla-libnotify.patch to allow fallback from libnotify
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7976
  to xul based events if no notification-daemon is running
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7977
- gcc 4.7 fixes
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7978
  * mozilla-gcc47.patch
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7979
  * disabled crashreporter temporarily for Factory
df9c4a6e84f8 update version/tree information for Aurora 14 cycle
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 423
diff changeset
  7980
- recommend libcanberra0 for proper sound notifications
414
88a71e903038 update to 12.0b2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 410
diff changeset
  7981
407
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  7982
-------------------------------------------------------------------
408
475395d00191 Firefox 11 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 407
diff changeset
  7983
Fri Mar  9 21:47:07 UTC 2012 - wr@rosenauer.org
475395d00191 Firefox 11 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 407
diff changeset
  7984
475395d00191 Firefox 11 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 407
diff changeset
  7985
- update to Firefox 11.0 (bnc#750044)
410
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7986
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7987
    XSS with Drag and Drop and Javascript: URL
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7988
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7989
    SVG issues found with Address Sanitizer
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7990
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7991
    XSS with multiple Content Security Policy headers
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7992
  * MFSA 2012-16/CVE-2012-0458
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7993
    Escalation of privilege with Javascript: URL as home page
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7994
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7995
    Crash when accessing keyframe cssText after dynamic modification
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7996
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7997
    window.fullScreen writeable by untrusted content
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7998
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  7999
    CVE-2012-0463
0af1b0003b9f working 12.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 408
diff changeset
  8000
    Miscellaneous memory safety hazards
407
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  8001
- ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  8002
- explicitely build-require X libs
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 404
diff changeset
  8003
404
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8004
-------------------------------------------------------------------
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8005
Mon Mar  5 13:31:48 UTC 2012 - vdziewiecki@suse.com
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8006
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8007
- add Provides: browser(npapi) FATE#313084
5f3bccaf6d52 provide browser(npapi)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 401
diff changeset
  8008
398
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8009
-------------------------------------------------------------------
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8010
Fri Feb 17 17:41:11 UTC 2012 - pcerny@suse.com
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8011
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8012
- better plugin directory resolution (bnc#747320)
937669e1c537 ported and reenabled KDE integration (bnc#746591)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 387
diff changeset
  8013
386
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8014
-------------------------------------------------------------------
387
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8015
Thu Feb 16 08:47:31 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8016
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8017
- update to Firefox 10.0.2 (bnc#747328)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8018
  * CVE-2011-3026 (bmo#727401)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 386
diff changeset
  8019
    libpng: integer overflow leading to heap-buffer overflow
386
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8020
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8021
-------------------------------------------------------------------
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8022
Thu Feb  9 09:26:11 UTC 2012 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8023
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8024
- update to Firefox 10.0.1 (bnc#746616)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8025
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8026
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 378
diff changeset
  8027
378
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8028
-------------------------------------------------------------------
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8029
Tue Feb  7 10:40:58 UTC 2012 - dvaleev@suse.com
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8030
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8031
- Use YARR interpreter instead of PCRE on platforms where YARR JIT
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8032
  is not supported, since PCRE doesnt build (bmo#691898)
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8033
- fix ppc64 build (bmo#703534)
dfb824794771 import upstream patches to fix PPC64
Dinar Valeev
parents: 375
diff changeset
  8034
373
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8035
-------------------------------------------------------------------
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8036
Mon Jan 30 09:41:59 UTC 2012 - wr@rosenauer.org
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8037
375
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8038
- update to Firefox 10.0 (bnc#744275)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8039
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8040
    Miscellaneous memory safety hazards
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8041
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8042
    <iframe> element exposed across domains via name attribute
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8043
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8044
    Child nodes from nsDOMAttribute still accessible after removal
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8045
    of nodes
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8046
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8047
    Frame scripts calling into untrusted objects bypass security
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8048
    checks
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8049
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8050
    Uninitialized memory appended when encoding icon images may
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8051
    cause information disclosure
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8052
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8053
    Potential Memory Corruption When Decoding Ogg Vorbis files
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8054
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8055
    Crash with malformed embedded XSLT stylesheets
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8056
- KDE integration has been disabled since it needs refactoring
d75cd0dac058 final 10.0 updates (changelog)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 373
diff changeset
  8057
- removed obsolete ppc64 patch
373
db704efaedab Firefox 10.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 371
diff changeset
  8058
371
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8059
-------------------------------------------------------------------
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8060
Sun Jan 22 12:08:07 UTC 2012 - joop.boonen@opensuse.org
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8061
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8062
- Disable neon for arm as it doesn't build correctly
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8063
ead21d122ed0 introduce --disable-neon option and use on ARM
Joop Boonen <joop.boonen@opensuse.org>
parents: 366
diff changeset
  8064
-------------------------------------------------------------------
366
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8065
Fri Dec 23 17:02:01 UTC 2011 - wr@rosenauer.org
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8066
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8067
- update to Firefox 9.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8068
  * (strongparent) parentNode of element gets lost (bmo#335998)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 364
diff changeset
  8069
364
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8070
-------------------------------------------------------------------
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8071
Sun Dec 18 09:58:52 UTC 2011 - adrian@suse.de
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8072
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8073
- fix arm build, don't package crashreporter there
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8074
363
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8075
-------------------------------------------------------------------
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8076
Sun Dec 18 09:52:08 UTC 2011 - wr@rosenauer.org
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8077
364
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8078
- update to Firefox 9 (bnc#737533)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8079
  * MFSA 2011-53/CVE-2011-3660
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8080
    Miscellaneous memory safety hazards (rv:9.0)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8081
  * MFSA 2011-54/CVE-2011-3661 (bmo#691299)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8082
    Potentially exploitable crash in the YARR regular expression
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8083
    library
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8084
  * MFSA 2011-55/CVE-2011-3658 (bmo#708186)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8085
    nsSVGValue out-of-bounds access
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8086
  * MFSA 2011-56/CVE-2011-3663 (bmo#704482)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8087
    Key detection without JavaScript via SVG animation
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8088
  * MFSA 2011-58/VE-2011-3665 (bmo#701259)
0f5c150b9dcd merge changes from mozilla:Factory including full changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 363
diff changeset
  8089
    Crash scaling <video> to extreme sizes
363
48596576f932 update to 9.0 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 358
diff changeset
  8090
358
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8091
-------------------------------------------------------------------
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8092
Sun Nov 27 03:51:54 UTC 2011 - mgorse@suse.com
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8093
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8094
- Fix accessibility under GNOME 3 (bnc#732898)
b28670af14d5 Read a11y status from Gnome3
Michael Gorse <mgorse@suse.com>
parents: 355
diff changeset
  8095
355
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8096
-------------------------------------------------------------------
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8097
Sat Nov 12 15:16:38 UTC 2011 - dvaleev@suse.com
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8098
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8099
- fix ppc64 build
91b462c0fd72 fix ppc64 build
Dinar Valeev <dvaleev@suse.com>
parents: 354
diff changeset
  8100
350
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8101
-------------------------------------------------------------------
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8102
Sun Nov  6 08:20:59 UTC 2011 - wr@rosenauer.org
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8103
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8104
- update to Firefox 8 (bnc#728520)
354
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8105
  * MFSA 2011-47/CVE-2011-3648 (bmo#690225)
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8106
    Potential XSS against sites using Shift-JIS
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8107
  * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8108
    Miscellaneous memory safety hazards
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8109
  * MFSA 2011-49/CVE-2011-3650 (bmo#674776)
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8110
    Memory corruption while profiling using Firebug
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8111
  * MFSA 2011-52/CVE-2011-3655 (bmo#672182)
7044f3366d64 changelog updates
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 353
diff changeset
  8112
    Code execution via NoWaiverWrapper
350
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8113
- rebased patches
9d46eaac2549 update to Firefox 8 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 344
diff changeset
  8114
344
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8115
-------------------------------------------------------------------
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8116
Thu Oct 20 12:34:47 UTC 2011 - wr@rosenauer.org
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8117
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8118
- enable telemetry prompt
880a90eb0f92 enable telemetry opt-in prompt
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 339
diff changeset
  8119
337
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8120
-------------------------------------------------------------------
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8121
Fri Sep 30 10:52:36 UTC 2011 - wr@rosenauer.org
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8122
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8123
- update to minor release 7.0.1
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8124
  * fixed staged addon updates
339
db8b891eeb1e locale should always match the system one in a package environment
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 337
diff changeset
  8125
- set intl.locale.matchOS=true in the base package as it causes
db8b891eeb1e locale should always match the system one in a package environment
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 337
diff changeset
  8126
  too much confusion when it's only available with branding-openSUSE
337
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8127
334
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8128
-------------------------------------------------------------------
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8129
Fri Sep 23 11:22:22 UTC 2011 - wr@rosenauer.org
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8130
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8131
- update to Firefox 7 (bnc#720264)
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8132
  including
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8133
  * Improve Responsiveness with Memory Reductions
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8134
  * Instant Sync
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8135
  * WebSocket protocol 8
337
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8136
  * MFSA 2011-36/CVE-2011-2995/CVE-2011-2996/CVE-2011-2997
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8137
    Miscellaneous memory safety hazards
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8138
  * MFSA 2011-39/CVE-2011-3000 (bmo#655389)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8139
    Defense against multiple Location headers due to CRLF Injection
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8140
  * MFSA 2011-40/CVE-2011-2372/CVE-2011-3001
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8141
    Code installation through holding down Enter
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8142
  * MFSA 2011-41/CVE-2011-3002/CVE-2011-3003 (bmo#680840, bmo#682335)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8143
    Potentially exploitable WebGL crashes
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8144
  * MFSA 2011-42/CVE-2011-3232 (bmo#653672)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8145
    Potentially exploitable crash in the YARR regular expression
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8146
    library
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8147
  * MFSA 2011-43/CVE-2011-3004 (bmo#653926)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8148
    loadSubScript unwraps XPCNativeWrapper scope parameter
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8149
  * MFSA 2011-44/CVE-2011-3005 (bmo#675747)
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8150
    Use after free reading OGG headers
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8151
  * MFSA 2011-45
cf16b6560dd1 update to 7.0.1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 334
diff changeset
  8152
    Inferring keystrokes from motion data
334
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8153
- removed obsolete mozilla-cairo-lcd.patch
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8154
- rebased patches
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8155
- removed XLIB_SKIP_ARGB_VISUALS=1 from environment in
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8156
  mozilla.sh.in (bnc#680758)
1256d8842872 update to version 7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 327
diff changeset
  8157
327
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8158
-------------------------------------------------------------------
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8159
Fri Sep 16 06:57:38 UTC 2011 - wr@rosenauer.org
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8160
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8161
- fixed loading of kde.js under KDE (bnc#718311)
34013ee9fafd fixed loading of kde.js under KDE (bnc#718311)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 316
diff changeset
  8162
312
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8163
-------------------------------------------------------------------
316
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8164
Wed Sep 14 07:02:04 UTC 2011 - wr@rosenauer.org
312
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8165
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8166
- add dbus-1-glib-devel to BuildRequires (not pulled in
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8167
  automatically anymore on 12.1)
316
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8168
- increase minversions for NSPR and NSS
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8169
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8170
-------------------------------------------------------------------
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8171
Fri Sep  9 20:44:15 UTC 2011 - wr@rosenauer.org
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8172
a5e121de2e2f changelog sync
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 312
diff changeset
  8173
- recreated source archive to get correct source-stamp.txt
312
fab4bf560637 add dbus-1-glib-devel to BuildRequires (not pulled in automatically anymore on 12.1)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 311
diff changeset
  8174
311
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8175
-------------------------------------------------------------------
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8176
Wed Sep  7 14:30:34 UTC 2011 - pcerny@suse.com
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8177
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8178
- security update to 6.0.2 (bnc#714931)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8179
  * Complete blocking of certificates issued by DigiNotar
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8180
    (bmo#683449)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8181
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8182
-------------------------------------------------------------------
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8183
Fri Sep  2 14:40:07 UTC 2011 - pcerny@suse.com
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8184
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8185
- security update to 6.0.1 (bnc#714931)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8186
  * MFSA 2011-34
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8187
    Protection against fraudulent DigiNotar certificates
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8188
    (bmo#682927)
861ec6217558 version 7.0b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 306
diff changeset
  8189
306
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8190
-------------------------------------------------------------------
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8191
Fri Aug 12 21:16:19 UTC 2011 - wr@rosenauer.org
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8192
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8193
- update to 6.0 (bnc#712224)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8194
  included security fixes MFSA 2011-29
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8195
  * CVE-2011-2989/CVE-2011-2991/CVE-2011-2992/CVE-2011-2985
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8196
    Miscellaneous memory safety hazards
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8197
  * CVE-2011-2993 (bmo#657267)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8198
    Unsigned scripts can call script inside signed JAR
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8199
  * CVE-2011-2988 (bmo#665934)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8200
    Heap overflow in ANGLE library
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8201
  * CVE-2011-0084 (bmo#648094)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8202
    Crash in SVGTextElement.getCharNumAtPosition()
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8203
  * CVE-2011-2990
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8204
    Credential leakage using Content Security Policy reports
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8205
  * CVE-2011-2986 (bmo#655836)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8206
    Cross-origin data theft using canvas and Windows D2D
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8207
- removed obsolete curl header dependency (mozilla-curl.patch)
e6df4625c730 update to 7.0b1 (aurora->beta)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 293
diff changeset
  8208
289
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8209
-------------------------------------------------------------------
292
058eaa15d5d8 update to 6.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 291
diff changeset
  8210
Fri Jul 22 13:34:12 UTC 2011 - wr@rosenauer.org
058eaa15d5d8 update to 6.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 291
diff changeset
  8211
058eaa15d5d8 update to 6.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 291
diff changeset
  8212
- update to 6.0b3
289
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8213
  * removed obsolete patches
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8214
    - firefox-shellservice.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8215
    - mozilla-gio.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8216
    - mozilla-ppc-ipc.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8217
    - firefox-linkorder.patch
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8218
    - firefox-no-sync-l10n.patch
293
3fd4e37e5e52 fix symbolstore.py for linux3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 292
diff changeset
  8219
- recognize linux3 as platform for symbolstore.py
289
3c0dff7ca9c4 Update to version 6.0b1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 288
diff changeset
  8220
288
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8221
-------------------------------------------------------------------
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8222
Fri Jul  1 19:53:18 CEST 2011 - vuntz@opensuse.org
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8223
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8224
- Add x-scheme-handler/ftp to the MimeType key in the .desktop, to
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8225
  let desktops know that Firefox can deal with ftp: URIs.
d51f3999a1c2 make Firefox an ftp handler
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 286
diff changeset
  8226
286
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8227
-------------------------------------------------------------------
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8228
Fri Jul  1 06:45:08 UTC 2011 - wr@rosenauer.org
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8229
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8230
- create upstream branding package again (supposedly empty)
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8231
  (bnc#703401)
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8232
- fix build on SLE11 (changes do not affect/are not applied for
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8233
  later versions)
b1d254616456 reenable branding-upstream package
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 283
diff changeset
  8234
283
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8235
-------------------------------------------------------------------
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8236
Wed Jun 22 06:41:17 UTC 2011 - wr@rosenauer.org
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8237
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8238
- enable startup notification (bnc#701465)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8239
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8240
-------------------------------------------------------------------
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8241
Mon Jun 20 19:37:01 UTC 2011 - wr@rosenauer.org
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8242
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8243
- update to 5.0 final
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8244
- included fixes for security issues: (bnc#701296, bnc#700578)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8245
  * MFSA 2011-19/CVE-2011-2374 CVE-2011-2375
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8246
    Miscellaneous memory safety hazards
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8247
  * MFSA 2011-20/CVE-2011-2373 (bmo#617247)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8248
    Use-after-free vulnerability when viewing XUL document with
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8249
    script disabled
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8250
  * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8251
    Memory corruption due to multipart/x-mixed-replace images
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8252
  * MFSA 2011-22/CVE-2011-2371 (bmo#664009)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8253
    Integer overflow and arbitrary code execution in
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8254
    Array.reduceRight()
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8255
  * MFSA 2011-25/CVE-2011-2366
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8256
    Stealing of cross-domain images using WebGL textures
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8257
  * MFSA 2011-26/CVE-2011-2367 CVE-2011-2368
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8258
    Multiple WebGL crashes
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8259
  * MFSA 2011-27/CVE-2011-2369 (bmo#650001)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8260
    XSS encoding hazard with inline SVG
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8261
  * MFSA 2011-28/CVE-2011-2370 (bmo#645699)
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8262
    Non-whitelisted site can trigger xpinstall
418b5f502ff2 update to 5.0final
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 282
diff changeset
  8263
279
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8264
-------------------------------------------------------------------
282
78a523efc513 fix build for 12.1 and above by building dump_syms dynamic
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 281
diff changeset
  8265
Mon Jun 20 09:17:42 UTC 2011 - wr@rosenauer.org
281
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8266
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8267
- update to 5.0b7
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8268
  * updated supported locales
282
78a523efc513 fix build for 12.1 and above by building dump_syms dynamic
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 281
diff changeset
  8269
- do not build dump_syms static (not needed for us)
78a523efc513 fix build for 12.1 and above by building dump_syms dynamic
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 281
diff changeset
  8270
  -> fix build for openSUSE 12.1 and above
281
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8271
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8272
-------------------------------------------------------------------
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8273
Wed Jun 15 14:59:32 UTC 2011 - wr@rosenauer.org
279
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8274
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8275
- update to 5.0b6
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8276
- include proper revision information into the build
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8277
- speedier find-external-requires.sh
eb9e33036fb4 update to 5.0b6
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 277
diff changeset
  8278
263
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8279
-------------------------------------------------------------------
277
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8280
Tue May 31 06:53:55 UTC 2011 - wr@rosenauer.org
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8281
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8282
- update to 5.0b3
263
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8283
- transformed to standalone Firefox (not xulrunner based)
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8284
  (with new Firefox rapid release cycle it makes no sense anymore)
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8285
  * imported all relevant xulrunner patches
277
37db3d6540b8 update to 5.0b3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 276
diff changeset
  8286
- do not compile in build timestamp
263
64adf7ca3005 standalone firefox building now; runtime untested
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 252
diff changeset
  8287
252
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8288
-------------------------------------------------------------------
281
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8289
Fri Apr 15 07:08:53 UTC 2011 - wr@rosenauer.org
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8290
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8291
- security update to 4.0.1 (bnc#689281)
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8292
  * MFSA 2011-12/ CVE-2011-0069 CVE-2011-0070 CVE-2011-0079
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8293
    CVE-2011-0080 CVE-2011-0081
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8294
    Miscellaneous memory safety hazards
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8295
  * MFSA 2011-17/CVE-2011-0068 (bmo#623791)
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8296
    WebGLES vulnerabilities
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8297
  * MFSA 2011-18/CVE-2011-1202 (bmo#640339)
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8298
    XSLT generate-id() function heap address leak
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8299
0bdc059f7280 update for 5.0b7
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 279
diff changeset
  8300
-------------------------------------------------------------------
252
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8301
Wed Mar 30 11:24:36 UTC 2011 - wr@rosenauer.org
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8302
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8303
- add all available icon sizes
5477a696d8f6 install all icons
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 247
diff changeset
  8304
247
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8305
-------------------------------------------------------------------
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8306
Tue Mar 29 11:55:53 UTC 2011 - cfarrell@novell.com
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8307
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8308
- license update: MPLv1.1 or GPLv2+ or LGPLv2+
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8309
  Sync licenses with Fedora. MPL does not state ^or later^
71521dfedb0b license update: MPLv1.1 or GPLv2+ or LGPLv2+
cfarrell@novell.com
parents: 239
diff changeset
  8310
236
a4f5954df3a3 update for 2.0/4.0rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 230
diff changeset
  8311
-------------------------------------------------------------------
239
99a267a3f1d3 update to rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 238
diff changeset
  8312
Fri Mar 18 08:49:15 UTC 2011 - wr@rosenauer.org
99a267a3f1d3 update to rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 238
diff changeset
  8313
99a267a3f1d3 update to rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 238
diff changeset
  8314
- update to version 4.0rc2
238
d537c4a65693 fixed rpm macros (bnc#679950)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 236
diff changeset
  8315
- fixed rpm macros delivered with devel package (bnc#679950)
236
a4f5954df3a3 update for 2.0/4.0rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 230
diff changeset
  8316
230
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8317
-------------------------------------------------------------------
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8318
Wed Feb 23 07:52:04 UTC 2011 - wr@rosenauer.org
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8319
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8320
- update to version 4.0b12
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8321
- rebased patches
e4846f1b81c5 real update to 4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 229
diff changeset
  8322
223
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8323
-------------------------------------------------------------------
229
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8324
Fri Feb  4 09:32:50 UTC 2011 - wr@rosenauer.org
226
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8325
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8326
- update to version 4.0b11
229
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8327
  * loads of bugfixes compared to last beta
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8328
  * added "Do Not Track" option
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8329
- rebased patches
298263f797be update to 2.0b12/4.0b12
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 226
diff changeset
  8330
- disable testpilot
226
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8331
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8332
-------------------------------------------------------------------
6bf3bb4c115e update for 2.0b11/4.0b11
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 225
diff changeset
  8333
Fri Jan 28 08:56:12 UTC 2011 - wr@rosenauer.org
223
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8334
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8335
- set correct desktop file name within KDE for 11.4 and up
225
5a7504b93699 Provide devel package with helper script and rpm macros for easier addon packaging. (patch submitted from Ludwig Nussel)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 223
diff changeset
  8336
- add devel package with macros for extensions (from lnussel@suse.de)
223
4555a5d0d661 patch reorganization
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 221
diff changeset
  8337
221
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8338
-------------------------------------------------------------------
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8339
Sat Jan 22 22:21:52 UTC 2011 - wr@rosenauer.org
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8340
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8341
- update to version 4.0b10
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8342
- removed obsolete firefox-shell-bmo624267.patch
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8343
- testpilot moved to distribution/extensions
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8344
- updated locale provides and removed bn-IN from locales
488440b896fe fixed testpilot packaging
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 217
diff changeset
  8345
210
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8346
-------------------------------------------------------------------
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8347
Tue Jan 11 06:13:40 UTC 2011 - wr@rosenauer.org
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8348
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8349
- update to version 4.0b9
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8350
- added x-scheme-handler for http and https to desktop file for
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8351
  newer Gnome environments
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8352
- fixed default browser check/set for GIO (bmo#611953)
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8353
  (mozilla-shellservice.patch)
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8354
- removed obsolete firefox-appname.patch (integrated into
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8355
  shellservice patch)
217
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8356
- renamed desktop file to firefox.desktop for 11.4 and newer
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8357
  (bnc#664211)
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8358
- removed support for 10.3 and older from the spec file
4b1284f6082b changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 210
diff changeset
  8359
- removed obsolete "Ximian" categories from desktop file
210
f4f4388b26a8 update to 2.0b9/4.0b9
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 207
diff changeset
  8360
207
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8361
-------------------------------------------------------------------
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8362
Mon Jan  3 17:35:46 CET 2011 - meissner@suse.de
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8363
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8364
- Mirror ac_add_options --disable-ipc from xulrunner for PowerPC.
2c6c3d0a8b61 Disable IPC for PowerPC (patch by Marcus Meissner)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 206
diff changeset
  8365
203
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8366
-------------------------------------------------------------------
206
80e6366ea8ce update for 2.0b8/4.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 203
diff changeset
  8367
Wed Dec 15 07:49:45 UTC 2010 - wr@rosenauer.org
80e6366ea8ce update for 2.0b8/4.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 203
diff changeset
  8368
80e6366ea8ce update for 2.0b8/4.0b8
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 203
diff changeset
  8369
- update to version 4.0beta8
203
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8370
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8371
-------------------------------------------------------------------
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8372
Tue Nov 30 14:19:59 UTC 2010 - wr@rosenauer.org
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8373
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8374
- major update to version 4.0beta7
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8375
  * based on mozilla-xulrunner20
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8376
  * far too many internal changes to list
3820fe99f0fe Update to latest snapshot (20101207)
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 195
diff changeset
  8377
195
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8378
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8379
Wed Oct 27 07:12:14 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8380
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8381
- security update to 3.6.12 (bnc#649492)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8382
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8383
    Heap buffer overflow mixing document.write and DOM insertion
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8384
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8385
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8386
Wed Oct  6 07:13:52 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8387
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8388
- security update to 3.6.11 (bnc#645315)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8389
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8390
    Miscellaneous memory safety hazards
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8391
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8392
    Buffer overflow and memory corruption using document.write
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8393
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8394
    Use-after-free error in nsBarProp
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8395
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8396
    Dangling pointer vulnerability in LookupGetterOrSetter
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8397
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8398
    XSS in gopher parser when parsing hrefs
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8399
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8400
    Cross-site information disclosure via modal calls
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8401
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8402
    SSL wildcard certificate matching IP addresses
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8403
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8404
    Unsafe library loading vulnerabilities
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8405
  * MFSA 2010-72/CVE-2010-3173
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8406
    Insecure Diffie-Hellman key exchange
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8407
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8408
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8409
Wed Sep 15 07:39:22 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8410
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8411
- update to 3.6.10
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8412
  * fixing startup topcrash (bmo#594699)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8413
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8414
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8415
Thu Aug 26 07:40:28 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8416
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8417
- security update to 3.6.9 (bnc#637303)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8418
  * MFSA 2010-49/CVE-2010-3169
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8419
    Miscellaneous memory safety hazards
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8420
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8421
    Frameset integer overflow vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8422
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8423
    Dangling pointer vulnerability using DOM plugin array
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8424
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8425
    Heap buffer overflow in nsTextFrameUtils::TransformText
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8426
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8427
    Dangling pointer vulnerability in nsTreeSelection
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8428
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8429
    XUL tree removal crash and remote code execution
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8430
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8431
    Dangling pointer vulnerability in nsTreeContentView
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8432
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8433
    Crash and remote code execution in normalizeDocument
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8434
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8435
    SJOW creates scope chains ending in outer object
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8436
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8437
    UTF-7 XSS by overriding document charset using <object> type
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8438
    attribute
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8439
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8440
    Copy-and-paste or drag-and-drop into designMode document allows
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8441
    XSS
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8442
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8443
    Information leak via XMLHttpRequest statusText
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8444
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8445
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8446
Wed Jul 28 08:33:14 CEST 2010 - meissner@suse.de
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8447
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8448
- disable crash reporter for non x86/x86_64 to make it build.
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8449
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8450
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8451
Sat Jul 24 12:42:58 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8452
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8453
- security update to 3.6.8 (bnc#622506)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8454
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8455
    Dangling pointer crash regression from plugin parameter array
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8456
    fix
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8457
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8458
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8459
Fri Jul 16 06:48:44 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8460
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8461
- security update to 3.6.7 (bnc#622506)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8462
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8463
    Miscellaneous memory safety hazards
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8464
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8465
    DOM attribute cloning remote code execution vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8466
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8467
    Use-after-free error in NodeIterator
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8468
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8469
    Plugin parameter EnsureCachedAttrParamArrays remote code
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8470
    execution vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8471
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8472
    Arbitrary code execution using SJOW and fast native function
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8473
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8474
    nsCSSValue::Array index integer overflow
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8475
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8476
    nsTreeSelection dangling pointer remote code execution
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8477
    vulnerability
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8478
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8479
    Remote code execution using malformed PNG image
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8480
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8481
    Cross-origin data disclosure via Web Workers and importScripts
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8482
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8483
    Same-origin bypass using canvas context
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8484
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8485
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8486
    character to vanish
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8487
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8488
    Multiple location bar spoofing vulnerabilities
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8489
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8490
    Cross-domain data theft using CSS
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8491
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8492
    Cross-origin data leakage from script filename in error messages
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8493
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8494
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8495
Sun Jun 27 20:24:31 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8496
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8497
- update to 3.6.6 release
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8498
  * modifies the crash protection feature to increase the amount 
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8499
    of time that plugins are allowed to be non-responsive before 
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8500
    being terminated.
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8501
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8502
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8503
Wed Jun 23 14:40:35 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8504
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8505
- update to final 3.6.4 release (bnc#603356)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8506
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8507
    CVE-2010-1203
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8508
    Crashes with evidence of memory corruption (rv:1.9.2.4)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8509
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8510
    Freed object reuse across plugin instances
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8511
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8512
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8513
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8514
    Integer Overflow in XSLT Node Sorting
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8515
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8516
    focus() behavior can be used to inject or steal keystrokes
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8517
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8518
    Content-Disposition: attachment ignored if
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8519
    Content-Type: multipart also present
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8520
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8521
    User tracking across sites using Math.random()
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8522
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8523
-------------------------------------------------------------------
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8524
Mon Jun  7 07:07:33 CEST 2010 - wr@rosenauer.org
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8525
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8526
- update to 3.6.4(build6)
50b5cb1f2b86 sync with latest 3.6.x changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 67
diff changeset
  8527
64
7bb1edb78dd5 Update to 1.9.2.4/3.6.4pre to prepare the bigger Lorentz merge
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 63
diff changeset
  8528
-------------------------------------------------------------------
67
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8529
Sun Apr 18 09:42:40 CEST 2010 - wr@rosenauer.org
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8530
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8531
- security update to 3.6.4 (Lorentz)
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8532
  * enable crashreporter also for x86-64
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8533
  * Flash runs in a separate process to avoid crashing Firefox
a05eb1c8699f Prepare for final 3.6.4 release
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 64
diff changeset
  8534
    (ix86 only; x86-64 still uses nspluginwrapper)
64
7bb1edb78dd5 Update to 1.9.2.4/3.6.4pre to prepare the bigger Lorentz merge
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 63
diff changeset
  8535
63
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8536
-------------------------------------------------------------------
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8537
Thu Apr  1 11:15:38 UTC 2010 - wr@rosenauer.org
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8538
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8539
- security update to 3.6.3
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8540
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8541
    Re-use of freed object due to scope confusion
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8542
59
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8543
-------------------------------------------------------------------
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8544
Thu Mar 18 06:43:33 CET 2010 - wr@rosenauer.org
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8545
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8546
- security update to version 3.6.2 (bnc#586567)
63
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8547
  * MFSA 2010-08/CVE-2010-1028
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8548
    WOFF heap corruption due to integer overflow
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8549
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8550
    Deleted frame reuse in multipart/x-mixed-replace image
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8551
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8552
    XSS via plugins and unprotected Location object
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8553
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8554
    Crashes with evidence of memory corruption
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8555
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8556
    XSS using addEventListener and setTimeout on a wrapped object
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8557
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8558
    Content policy bypass with image preloading
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8559
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8560
    Browser chrome defacement via cached XUL stylesheets
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8561
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8562
    Asynchronous Auth Prompt attaches to wrong window
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8563
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8564
    Crashes with evidence of memory corruption
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8565
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8566
    Dangling pointer vulnerability in nsTreeContentView
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8567
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8568
    Dangling pointer vulnerability in nsPluginArray
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8569
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8570
    Chrome privilege escalation via forced URL drag and drop
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8571
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8572
    Update NSS to support TLS renegotiation indication
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8573
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8574
    Image src redirect to mailto: URL opens email editor
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8575
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
9213a0672227 Update to 1.9.2.3/3.6.3
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 59
diff changeset
  8576
    XMLDocument::load() doesn't check nsIContentPolicy
59
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8577
52
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8578
-------------------------------------------------------------------
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8579
Mon Jan 18 09:42:50 CET 2010 - wr@rosenauer.org
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8580
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8581
- update to 3.6rc2 (already named 3.6.0)
59
604517bb16d8 Update to 1.9.2.2/3.6.2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 52
diff changeset
  8582
- removed obsolete orbit-devel build requirement
52
024a595d7885 Update to 1.9.2rc2/3.6rc2
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 48
diff changeset
  8583
46
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8584
-------------------------------------------------------------------
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8585
Wed Jan  6 17:15:40 CET 2010 - wr@rosenauer.org
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8586
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8587
- major update to 3.6rc1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8588
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8589
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8590
Fri Dec 25 09:39:42 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8591
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8592
- update to version 3.5.7 (bnc#568011)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8593
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8594
    proxy servers that support NTLM auth (bmo#535193)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8595
- added missing lockdown preferences (bnc#567131)
46
c743908ffe6f Update to 1.9.2rc1/3.6rc1
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 39
diff changeset
  8596
39
f3cc5e946292 Add Firefox changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 31
diff changeset
  8597
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8598
Thu Dec 17 20:06:38 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8599
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8600
- readded firefox-ui-lockdown.patch (bnc#546158)
39
f3cc5e946292 Add Firefox changelog
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 31
diff changeset
  8601
31
529467fa14cf MozillaFirefox changes
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 19
diff changeset
  8602
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8603
Thu Dec  3 21:53:59 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8604
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8605
- security update to version 3.5.6 (bnc#559807)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8606
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8607
    Crashes with evidence of memory corruption (rv:1.9.1.6)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8608
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8609
    Memory safety fixes in liboggplay media library
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8610
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8611
    Integer overflow, crash in libtheora video library
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8612
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8613
    NTLM reflection vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8614
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8615
    Location bar spoofing vulnerabilities
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8616
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8617
    Privilege escalation via chrome window.opener
19
f21a8e50d93d BNC#561027 - firefox urlbar style broken -> stripped down patch
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 18
diff changeset
  8618
- fixed firefox-browser-css.patch (bnc#561027)
18
c4da314d7975 Update to 1.9.2b5/3.6b5
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 12
diff changeset
  8619
12
1f7c3dc01e1c Prepare MozillaFirefox for KDE integration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 5
diff changeset
  8620
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8621
Mon Nov 23 22:31:21 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8622
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8623
- rebased patches for fuzz=0
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8624
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8625
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8626
Thu Nov  5 19:49:33 UTC 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8627
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8628
- update to version 3.5.5 (bnc#553172)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8629
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8630
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8631
Sat Oct 17 23:19:23 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8632
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8633
- security update to version 3.5.4 (bnc#545277)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8634
  * MFSA 2009-52/CVE-2009-3370 (bmo#511615)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8635
    Form history vulnerable to stealing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8636
  * MFSA 2009-53/CVE-2009-3274 (bmo#514823)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8637
    Local downloaded file tampering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8638
  * MFSA 2009-54/CVE-2009-3371 (bmo#514554)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8639
    Crash with recursive web-worker calls
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8640
  * MFSA 2009-55/CVE-2009-3372 (bmo#500644)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8641
    Crash in proxy auto-configuration regexp parsing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8642
  * MFSA 2009-56/CVE-2009-3373 (bmo#511689)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8643
    Heap buffer overflow in GIF color map parser
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8644
  * MFSA 2009-57/CVE-2009-3374 (bmo#505988)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8645
    Chrome privilege escalation in XPCVariant::VariantDataToJS()
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8646
  * MFSA 2009-59/CVE-2009-1563 (bmo#516396, bmo#516862)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8647
    Heap buffer overflow in string to number conversion
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8648
  * MFSA 2009-61/CVE-2009-3375 (bmo#503226)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8649
    Cross-origin data theft through document.getSelection()
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8650
  * MFSA 2009-62/CVE-2009-3376 (bmo#511521)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8651
    Download filename spoofing with RTL override
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8652
  * MFSA 2009-63/CVE-2009-3377/CVE-2009-3379/CVE-2009-3378
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8653
    Upgrade media libraries to fix memory safety bugs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8654
  * MFSA 2009-64/CVE-2009-3380/CVE-2009-3381/CVE-2009-3383
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8655
    Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8656
- removed upstreamed patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8657
  * firefox-bug506901.patch 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8658
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8659
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8660
Wed Oct  7 20:11:24 CEST 2009 - llunak@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8661
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8662
- fix KDE button order in one more place (bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8663
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8664
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8665
Fri Oct  2 20:26:49 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8666
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8667
- improve UI colors to be usable with dark themes at all 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8668
  (firefox-browser-css.patch) (bnc#503351)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8669
- extend list of supported architectures as ABI identifier
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8670
  (mozilla-abi.patch) (bnc#543460)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8671
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8672
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8673
Mon Sep 14 00:07:55 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8674
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8675
- added KDE integration patch from llunak@novell.com  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8676
  (firefox-kde.patch)  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8677
  * support for knotify, making -kde4-addon obsolete  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8678
  * KDE-specific support functional (bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8679
- do not build libnkgnomevfs (bmo#512671) (firefox-no-gnomevfs)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8680
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8681
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8682
Thu Sep 10 09:34:26 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8683
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8684
- security update to version 3.5.3 (bnc#534458)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8685
  * MFSA 2009-47/CVE-2009-3069/CVE-2009-3070/CVE-2009-3071/
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8686
    CVE-2009-3072/CVE-2009-3073/CVE-2009-3074/CVE-2009-3075
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8687
    Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8688
  * MFSA 2009-49/CVE-2009-3077 (bmo#506871)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8689
    TreeColumns dangling pointer vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8690
  * MFSA 2009-50/CVE-2009-3078 (bmo#453827)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8691
    Location bar spoofing via tall line-height Unicode characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8692
  * MFSA 2009-51/CVE-2009-3079 (bmo#454363)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8693
    Chrome privilege escalation with FeedWriter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8694
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8695
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8696
Wed Aug 19 22:14:07 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8697
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8698
- renamed patch firefox-contextmenu-gnome to firefox-cross-desktop
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8699
  as it contains more tweaks to handle non-Gnome environments and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8700
  especially KDE integration: 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8701
  * added the ability to set the KDE default browser 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8702
    (still part of bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8703
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8704
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8705
Sat Aug  8 00:14:18 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8706
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8707
- split -translations package into -common and -other
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8708
  (bnc#529180)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8709
- remove "set as background" from context menu if not running in
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8710
  Gnome (part of bnc#170055)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8711
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8712
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8713
Fri Jul 31 09:01:57 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8714
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8715
- security update to version 3.5.2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8716
  * MFSA 2009-38/CVE-2009-2470 (bmo#459524)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8717
    Data corruption with SOCKS5 reply containing DNS name longer
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8718
    than 15 characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8719
  * MFSA 2009-44/CVE-2009-2654 (bmo#451898)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8720
    Location bar and SSL indicator spoofing via window.open() on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8721
    invalid URL
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8722
  * MFSA 2009-45
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8723
    Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8724
  * MFSA 2009-46 (bmo#498897)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8725
    Chrome privilege escalation due to incorrectly cached wrapper
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8726
  * various other stability fixes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8727
- export MOZ_APP_LAUNCHER in the startscript (bmo#453689)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8728
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8729
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8730
Tue Jul 28 14:54:46 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8731
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8732
- fixed %exclude usage
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8733
- fixed preferences' advanced pane for fresh profiles (bmo#506901)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8734
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8735
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8736
Wed Jul 15 20:13:19 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8737
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8738
- security update to version 3.5.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8739
  * MFSA 2009-41
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8740
    Corrupt JIT state after deep return from native function
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8741
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8742
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8743
Mon Jul  6 12:33:47 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8744
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8745
- added mozilla-linkorder.patch to fix build with --as-needed
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8746
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8747
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8748
Tue Jun 30 08:52:00 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8749
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8750
- update to final version 3.5 (20090623)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8751
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8752
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8753
Tue Jun 23 09:39:50 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8754
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8755
- fixed build by linking to a real file
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8756
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8757
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8758
Thu Jun 18 10:19:40 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8759
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8760
- update to version 3.5rc2 (20090617)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8761
- BuildRequire mozilla-xulrunner191 = 1.9.1.0
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8762
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8763
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8764
Sat Jun  6 15:59:02 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8765
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8766
- update to version 3.5b99 (20090604)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8767
- BuildRequire mozilla-xulrunner191 = 1.9.1b99
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8768
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8769
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8770
Wed May 27 08:03:16 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8771
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8772
- fixed typos in improved xulrunner dependencies
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8773
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8774
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8775
Mon May 11 18:25:12 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8776
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8777
- use non-localized Downloads folder (bnc#501724)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8778
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8779
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8780
Mon May  4 07:57:50 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8781
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8782
- update to new major version 3.5b4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8783
  * based on Gecko 1.9.1 (mozilla-xulrunner191)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8784
  * Private Browsing Mode
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8785
  * TraceMonkey JavaScript engine
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8786
  * Geolocation support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8787
  * native JSON and web worker threads support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8788
  * speculative parsing for faster content rendering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8789
  * Some HTML5 support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8790
- updated firefox.schemas
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8791
- improved firefox-no-update.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8792
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8793
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8794
Tue Apr 28 10:47:54 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8795
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8796
- security update to 3.0.10
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8797
  * MFSA 2009-23/CVE-2009-1313 (bmo#489647)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8798
      Crash in nsTextFrame::ClearTextRun()
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8799
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8800
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8801
Thu Apr 16 13:52:21 CEST 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8802
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8803
- security update to 3.0.9 (bnc#495473)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8804
  * MFSA 2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304/CVE-2009-1305
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8805
      Crashes with evidence of memory corruption (rv:1.9.0.9)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8806
  * MFSA 2009-15/CVE-2009-0652 (bmo#479336)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8807
      URL spoofing with box drawing character
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8808
  * MFSA 2009-16/CVE-2009-1306 (bmo#474536)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8809
      jar: scheme ignores the content-disposition: header on the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8810
      inner URI
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8811
  * MFSA 2009-17/CVE-2009-1307 (bmo#481342)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8812
      Same-origin violations when Adobe Flash loaded via
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8813
      view-source: scheme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8814
  * MFSA 2009-18/CVE-2009-1308 (bmo#481558)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8815
      XSS hazard using third-party stylesheets and XBL bindings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8816
  * MFSA 2009-19/CVE-2009-1309 (bmo#482206,478433)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8817
      Same-origin violations in XMLHttpRequest and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8818
      XPCNativeWrapper.toString
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8819
  * MFSA 2009-20/CVE-2009-1310 (bmo#483086)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8820
      Malicious search plugins can inject code into arbitrary sites
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8821
  * MFSA 2009-21/CVE-2009-1311 (bmo#471962)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8822
      POST data sent to wrong site when saving web page with
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8823
      embedded frame
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8824
  * MFSA 2009-22/CVE-2009-1312 (bmo#475636)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8825
      Firefox allows Refresh header to redirect to javascript: URIs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8826
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8827
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8828
Fri Mar 27 09:43:43 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8829
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8830
- security update to 1.9.0.8 (bnc#488955,489411)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8831
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8832
      Crash and remote code execution in XSL transformation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8833
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8834
      Arbitrary code execution via XUL tree moveToEdgeShift
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8835
- allow RPM provides for stuff besides shared libraries
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8836
  (e.g. mime-types)
12
1f7c3dc01e1c Prepare MozillaFirefox for KDE integration
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 5
diff changeset
  8837
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  8838
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8839
Sun Mar  1 11:08:58 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8840
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8841
- security update to 3.0.7 (bnc#478625)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8842
  * MFSA 2009-07 - Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8843
    CVE-2009-0771 - Layout Engine Crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8844
    CVE-2009-0772 - Layout Engine Crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8845
    CVE-2009-0773 - crashes in the JavaScript engine
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8846
    CVE-2009-0774 - Layout Engine Crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8847
  * MFSA 2009-08/CVE-2009-0775 - (bmo#474456)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8848
    Mozilla Firefox XUL Linked Clones Double Free Vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8849
  * MFSA 2009-09/CVE-2009-0776 (bmo#414540)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8850
    XML data theft via RDFXMLDataSource and cross-domain redirect
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8851
  * MFSA 2009-10/CVE-2009-0040 (bmo#478901)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8852
    Upgrade PNG library to fix memory safety hazards
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8853
  * MFSA 2009-11/CVE-2009-0777 (bmo#452979)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8854
    URL spoofing with invisible control characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8855
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8856
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8857
Wed Feb  4 18:58:59 EST 2009 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8858
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8859
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8860
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8861
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8862
Wed Jan 28 13:48:00 CET 2009 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8863
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8864
- security update to 3.0.6 (bnc#470074)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8865
  * MFSA 2009-06/CVE-2009-0358: Directives to not cache pages ignored
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8866
    (bmo#441751)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8867
  * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8868
    HTTPOnly cookies (bmo#380418)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8869
  * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8870
    local .desktop files (bmo#460425)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8871
  * MFSA 2009-03/CVE-2009-0355: Local file stealing with SessionStore
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8872
    (bmo#466937)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8873
  * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8874
    and window.eval (bmo#468581)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8875
  * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8876
    evidence of memory corruption (rv:1.9.0.6) (bmo#452913, 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8877
    bmo#449006, bmo#331088, bmo#401042, bmo#416461, bmo#422283,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8878
    bmo#422301, bmo#431705, bmo#437142, bmo#421839, bmo#420697,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8879
    bmo#461027)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8880
  * (non security) added lv locale
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8881
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8882
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8883
Thu Jan 22 11:09:42 EST 2009 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8884
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8885
- Fix the wrapper script for PowerPC 64-bits (bnc#464753)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8886
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8887
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8888
Wed Dec 17 13:13:25 EST 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8889
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8890
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8891
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8892
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8893
Mon Dec 15 16:41:57 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8894
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8895
- security update to 1.9.0.5 (bnc#455804)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8896
  for details
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8897
  http://www.mozilla.org/security/known-vulnerabilities/firefox30.html
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8898
  * removed aboutRights workaround again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8899
  * added et locale
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8900
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8901
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8902
Tue Nov 25 10:14:45 EST 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8903
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8904
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8905
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8906
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8907
Sat Nov 22 13:26:03 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8908
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8909
- replace license agreement with about:rights toolbar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8910
  (backported from upcoming FF 3.0.5) (bnc#436054, bmo#456439)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8911
  (it's always displayed in en-US)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8912
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8913
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8914
Fri Nov 21 03:11:41 EST 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8915
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8916
- Update firefox-lockdown-ui.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8917
  * Print Setup is now properly locked down. bnc#431028
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8918
  * Bookmark editing it now properly locked down. bnc#439335
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8919
  * Bookmars are properly hidden.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8920
  * History is properly locked down. bnc#439343
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8921
  * Make sure the search bar is not put back when resetting the 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8922
    toolbar. bnc#439358
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8923
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8924
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8925
Thu Nov 20 18:49:19 CST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8926
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8927
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8928
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8929
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8930
Thu Nov 13 08:22:13 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8931
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8932
- lockdown cleanup
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8933
  * removed gecko-lockdown.patch from Firefox (it's in xulrunner)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8934
  * stripped out some toolkit stuff from firefox-ui-lockdown
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8935
  * added extra default preferences for lockdown
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8936
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8937
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8938
Wed Nov 12 17:55:19 CST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8939
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8940
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8941
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8942
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8943
Tue Nov 11 09:15:59 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8944
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8945
- update to security/maintenance release 3.0.4 (bnc#439841)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8946
  * support additional locales (bg, cy, eo, oc)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8947
- removed obsolete configure option (enable-gconf)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8948
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8949
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8950
Fri Nov  7 15:39:54 CST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8951
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8952
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8953
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8954
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8955
Tue Nov  4 23:27:03 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8956
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8957
- moved gconf schema into branding packages (bnc#441646)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8958
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8959
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8960
Tue Oct 28 16:16:14 EDT 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8961
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8962
- Fix missing %endif (for fix for bnc#434283)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8963
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8964
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8965
Mon Oct 27 17:05:02 EDT 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8966
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8967
- Add disable_show_passwords to firefox.schemas. (FATE #301534)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8968
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8969
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8970
Mon Oct 27 11:57:29 CET 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8971
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8972
- make biarch dependencies work correctly (bnc#434283)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8973
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8974
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8975
Thu Oct 23 10:14:22 EDT 2008 - hfiguiere@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8976
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8977
- Added firefox-ui-lockdown.patch and gecko-lockdown.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8978
  * Lockdown: FATE#302023, FATE#302024
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8979
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8980
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8981
Mon Oct  6 14:55:48 CEST 2008 - sbrabec@suse.cz
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8982
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8983
- Conflict with other branding providers (FATE#304881).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8984
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8985
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8986
Mon Sep 29 12:27:43 CDT 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8987
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8988
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8989
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8990
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8991
Mon Sep 29 11:36:30 CDT 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8992
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8993
- Remove a reference to a stale patch.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8994
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8995
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8996
Sun Sep 28 18:19:26 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8997
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8998
- update to regression fix release 3.0.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  8999
  * Fixed a problem where users were unable to retrieve saved
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9000
    passwords or save new passwords (bmo#454708, bnc#429179#c20,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9001
    CVE-2008-4063, CVE-2008-4064, CVE-2008-3836, andCVE-2008-4070)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9002
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9003
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9004
Thu Sep 25 14:47:13 CDT 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9005
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9006
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9007
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9008
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9009
Mon Sep 15 13:45:16 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9010
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9011
- update to security/maintenance release 3.0.2 (bnc#429179)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9012
- removed unused files from sources
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9013
- fix more rpmlint complaints and provide a config file to filter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9014
  false positives
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9015
- disable Gnome crashreporter as it has no value
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9016
- brought man-page up to date for the firefox stub
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9017
  (removing firefox-bin reference)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9018
- en-US locale not longer packaged in translations subpackage
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9019
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9020
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9021
Fri Aug 15 18:56:26 CDT 2008 - maw@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9022
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9023
- Review and approve changes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9024
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9025
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9026
Mon Aug  4 09:26:05 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9027
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9028
- Tweak branding split
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9029
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9030
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9031
Tue Jul 29 15:02:47 CEST 2008 - vuntz@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9032
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9033
- Create branding package (bnc#390752):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9034
  + search-addons.tar.bz2, bookmarks.html.suse and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9035
    firefox-suse-default-prefs.js will be moved to
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9036
    MozillaFirefox-branding-openSUSE
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9037
  + create a MozillaFirefox-branding-upstream package
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9038
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9039
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9040
Mon Jul 28 20:54:22 CEST 2008 - mauro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9041
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9042
- Update to stability/security release 3.0.1 (bnc#407573) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9043
  (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9044
  + MFSA 2008-36  Crash with malformed GIF file on Mac OS X
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9045
  + MFSA 2008-35 Command-line URLs launch multiple tabs when 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9046
    Firefox not running
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9047
  + MFSA 2008-34 Remote code execution by overflowing CSS reference counter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9048
- Set browser.shell.checkDefaultBrowser to true (bnc#404119) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9049
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9050
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9051
Tue Jun 17 18:49:33 CEST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9052
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9053
- Merge changes from the build service (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9054
  (bnc#400001 and SWAMP#18164).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9055
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9056
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9057
Tue Jun 17 14:40:04 CEST 2008 - wr@rosenauer.org
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9058
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9059
- update to version 3.0
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9060
- fixed double entry in bookmarks for www.opensuse.org (bnc#396980
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9061
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9062
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9063
Thu May 15 13:45:51 CEST 2008 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9064
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9065
- Add Planet SUSE, forums.o.o and How to participate to default
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9066
  URLs.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9067
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9068
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9069
Fri May  2 16:25:24 CEST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9070
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9071
- network.protocol-handler.app.* prefs are no longer supported;
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9072
  remove references to them from firefox-suse-default-prefs.js
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9073
  (bnc#383697).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9074
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9075
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9076
Thu Apr  3 01:42:34 CEST 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9077
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9078
- Update to Firefox 3.0b5 (2.9.95) (thanks, Wolfgang).
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9079
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9080
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9081
Wed Mar 26 01:05:18 CET 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9082
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9083
- Merge changes from the build service (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9084
- Update to the fourth Firefox 3.0 Beta (2.9.94):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9085
  + Based upon the Gecko 1.9 Web rendering platform, which improves
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9086
    performance, stability, and rendering correctness; it also
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9087
    boasts a considerable simplification in its code
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9088
  + Security improvements:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9089
    * One-click site info
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9090
    * Malware Protection
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9091
    * New Web Forgery Protection page
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9092
    * New SSL error pages
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9093
    * Add-ons and Plugin version check
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9094
    * Secure add-on updates
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9095
    * Effective top-level domain (eTLD) service to better restrict
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9096
      cookies and other restricted content to a single domain
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9097
    * Better protection against cross-site JSON data leaks
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9098
  + Usability improvements:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9099
    * Easier password management
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9100
    * Simplified add-on installation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9101
    * New Download Manager
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9102
    * Resumable downloading
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9103
    * Full page zoom
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9104
    * Podcasts and Videocasts can be associated with your media
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9105
      playback tools
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9106
    * Tab scrolling and quickmenu
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9107
    * Save what you were doing: Firefox will prompt users to save
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9108
      tabs on exit
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9109
    * Optimized Open in Tabs behavior
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9110
    * Location and Search bar size can now be customized with a
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9111
      simple resizer item
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9112
    * Text selection improvements
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9113
    * Find toolbar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9114
    * Improved integration with Linux: Firefox's default icons,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9115
      buttons, and menu styles now use the native GTK theme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9116
  + Personalization improvements:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9117
    * Star button: quickly add bookmarks from the location bar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9118
      with a single click; a second click lets you file and tag them
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9119
    * Tags: associate keywords with your bookmarks to sort them
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9120
      by topic
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9121
    * Location bar & auto-complete
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9122
    * Smart Bookmarks Folder
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9123
    * Places Organizer: view, organize and search through all
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9124
      of your bookmarks, tags, and browsing history with multiple
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9125
      views and smart folders to store your frequent searches
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9126
    * Web-based protocol handlers
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9127
    * Download & Install Add-ons
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9128
    * Easy to use Download Actions
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9129
  + Improved platform for web developers:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9130
    * New graphics and font handling: new graphics and text
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9131
      rendering architectures in Gecko 1.9 provides rendering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9132
      improvements in CSS, SVG as well as improved display of
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9133
      fonts with ligatures and complex scripts
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9134
    * Color management: (set gfx.color_management.enabled on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9135
      in about:config and restart the browser to enable.);
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9136
      Firefox can now adjust images with embedded color profiles
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9137
    * Offline support: enables web applications to provide
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9138
      offline functionality (website authors must add support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9139
      for offline browsing to their site for this feature
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9140
      to be available to users)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9141
  + Improved performance:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9142
    * Speed: improvements to the JavaScript engine as well as
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9143
      profile guided optimizations have resulted in significant
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9144
      improvements in performance; compared to Firefox 2,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9145
      web applications like Google Mail and Zoho Office run
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9146
      twice as fast in Firefox 3 Beta 4, and the popular
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9147
      SunSpider test from Apple shows improvements over
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9148
      previous releases
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9149
    * Memory usage: Several new technologies work together to
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9150
      reduce the amount of memory used by Firefox 3 Beta 4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9151
      over a web browsing session;  memory cycles are broken
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9152
      and collected by an automated cycle collector, a new
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9153
      memory allocator reduces fragmentation, hundreds of leaks
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9154
      have been fixed, and caching strategies have been tuned
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9155
    * Reliability: A user's bookmarks, history, cookies, and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9156
      preferences are now stored in a transactionally secure
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9157
      database format which will prevent data loss even if their
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9158
      system crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9159
- This version depends upon the mozilla-xulrunner190 package
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9160
- Drop various stale packages, respin several that have been
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9161
  kept around, and add a few new ones.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9162
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9163
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9164
Mon Feb 11 18:18:14 CET 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9165
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9166
- Security update to version 2.0.0.12 (bnc#354469):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9167
  + MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9168
    overlay
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9169
  + MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9170
    redirect
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9171
  + MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9172
    text files
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9173
  + MFSA 2008-08/CVE-2008-0591 File action dialog tampering
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9174
  + MFSA 2008-06/CVE-2008-0419 Web browsing history and forward
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9175
    navigation stealing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9176
  + MFSA 2008-05/CVE-2008-0418 Directory traversal via chrome: URI
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9177
  + MFSA 2008-04/CVE-2008-0417 Stored password corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9178
  + MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS, Remote
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9179
    Code Execution
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9180
  + MFSA 2008-02/CVE-2008-0414 Multiple file input focus stealing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9181
    vulnerabilities
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9182
  + MFSA 2008-01/CVE-2008-0412 Crashes with evidence of memory
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9183
    corruption (rv:1.8.1.12)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9184
- Reference libaoss.so in start script (bnc#117079)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9185
- Remove mozilla-canvas-1.8.1.10.patch, as it has been upstreamed
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9186
- Update firefox-ui-lockdown.patch (FATE#301534, FATE#302023, and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9187
  FATE#302024)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9188
- Add application/x-xpinstall mime type to MozillaFirefox.desktop
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9189
- Add MozillaFirefox.xml to bind .xpi to application/x-xpinstall
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9190
  in desktop.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9191
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9192
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9193
Thu Jan 17 17:52:47 CET 2008 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9194
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9195
- Add mozilla-maxpathlen.patch (#354150 and bmo #412610).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9196
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9197
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9198
Fri Dec 21 18:46:50 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9199
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9200
- Add firefox-348446-empty-lists.patch (bnc#348446).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9201
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9202
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9203
Wed Dec  5 02:21:26 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9204
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9205
- Respin proxy-dev.patch (bnc#340678) -- thanks, Anders!
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9206
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9207
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9208
Tue Nov 27 18:25:25 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9209
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9210
- Security update to version 2.0.0.10 (#341905, #341591):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9211
  + MFSA 2007-39  Referer-spoofing via window.location race condition
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9212
  + MFSA 2007-38 Memory corruption vulnerabilities (rv:1.8.1.10)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9213
  + MFSA 2007-37 jar: URI scheme XSS hazard
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9214
  + Fixes for regressions introduced in 2.0.0.8
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9215
  + Updated dbus.patch, startup.patch, misc.dif, and configure.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9216
- Add mozilla-gcc4.3-fixes.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9217
- Add mozilla-canvas-1.8.1.10.patch (#341591#c10).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9218
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9219
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9220
Mon Nov 26 18:27:25 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9221
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9222
- Build with -ftree-vrp -fwrapv, per advice in #342603#c17.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9223
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9224
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9225
Tue Nov 13 17:49:01 CET 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9226
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9227
- Add firefox-gcc4.3-fixes.patch.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9228
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9229
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9230
Fri Oct 19 02:04:45 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9231
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9232
- Security update to version 2.0.0.8 (#332512) (thanks, Wolfgang)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9233
  * MFSA 2007-29 Crashes with evidence of memory corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9234
  * MFSA 2007-30 onUnload Tailgating
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9235
  * MFSA 2007-31 Digest authentication request splitting
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9236
  * MFSA 2007-32 File input focus stealing vulnerability
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9237
  * MFSA 2007-33 XUL pages can hide the window titlebar
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9238
  * MFSA 2007-34 Possible file stealing through sftp protocol
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9239
  * MFSA 2007-35 XPCNativeWraper pollution using Script object
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9240
  complete advisories on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9241
  http://www.mozilla.org/projects/security/known-vulnerabilities.html
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9242
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9243
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9244
Sun Sep 23 19:49:12 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9245
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9246
- Don't explicitly require libaoss.so (#326751).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9247
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9248
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9249
Fri Sep 14 23:13:06 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9250
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9251
- Update the Novell Support search plugin in search-addons.tar.bz2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9252
  (#297261)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9253
- Set the browser.tabs.loadFolderAndReplace preference to false
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9254
  by default (#230759).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9255
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9256
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9257
Wed Sep 12 15:21:06 CEST 2007 - dmueller@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9258
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9259
- fix hardlinks accross partitions 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9260
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9261
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9262
Thu Sep  6 16:07:12 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9263
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9264
- Add http://software.opensuse.org/search?baseproject=openSUSE:10.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9265
  to the default bookmarks (#308223).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9266
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9267
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9268
Mon Sep  3 22:33:09 CEST 2007 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9269
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9270
- move last change a bit further in specfile 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9271
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9272
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9273
Fri Aug 31 18:36:16 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9274
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9275
- Mark a .png file as nonexecutable. 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9276
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9277
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9278
Tue Aug 28 16:44:08 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9279
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9280
- Minor .spec update (#305193)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9281
  + Remove two obsolete patches
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9282
  + Correct releasedate
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9283
  + Include only the officially supported locales.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9284
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9285
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9286
Wed Aug 22 17:53:03 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9287
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9288
- Merge changes from the build service (thanks, Wolfgang):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9289
  + Provide locale dependency information (#302288)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9290
  + Add x11-session.patch, supporting X11 session management
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9291
    (#227047)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9292
  + Update to version 2.0.0.6
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9293
    * MFSA 2007-26  Privilege escalation through chrome-loaded 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9294
                    about:blank windows
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9295
    * MFSA 2007-27  Unescaped URIs passed to external programs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9296
                    (only relevant on Windows)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9297
- Use %fdupes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9298
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9299
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9300
Tue Aug 21 09:45:35 CEST 2007 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9301
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9302
- Adjust bookmarks: Add news.opensuse.org, use new software.o.o
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9303
  page.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9304
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9305
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9306
Thu Aug 16 14:57:27 CEST 2007 - mauro@suse.de 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9307
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9308
- Revert previous change.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9309
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9310
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9311
Tue Aug 14 11:58:23 CEST 2007 - mauro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9312
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9313
- Added support for ymp in the mimetypes.rdf
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9314
- Added OneClickInstallUrlHandler for handing the actual call from firefox.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9315
- Fixes bnc #295677 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9316
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9317
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9318
Mon Jul 23 18:57:07 CEST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9319
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9320
- Security update to version 2.0.0.5 (#288115) which has fixes for:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9321
MFSA 2007-18
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9322
    CVE-2007-3734 - Browser flaws
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9323
    CVE-2007-3735 - Javascript flaws
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9324
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9325
MFSA 2007-19
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9326
    CVE-2007-3736
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9327
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9328
MFSA 2007-20
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9329
    CVE-2007-3089
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9330
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9331
MFSA 2007-21
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9332
    CVE-2007-3737
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9333
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9334
MFSA 2007-22
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9335
    CVE-2007-3285
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9336
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9337
MFSA 2007-23
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9338
    CVE-2007-3670
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9339
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9340
MFSA 2007-24
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9341
    CVE-2007-3656
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9342
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9343
MFSA 2007-25
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9344
    CVE-2007-3738
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9345
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9346
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9347
Thu Jun 21 15:59:01 CEST 2007 - adrian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9348
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9349
- fix changelog entry order
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9350
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9351
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9352
Mon Jun 18 13:22:42 CDT 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9353
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9354
- Use mozilla.sh.in from the build service (#230681).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9355
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9356
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9357
Tue Jun  5 15:55:08 CEST 2007 - sbrabec@suse.cz
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9358
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9359
- Removed invalid desktop category "Application" (#254654).
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9360
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9361
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9362
Mon Jun  4 19:53:35 CDT 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9363
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9364
- Security update to version 2.0.0.4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9365
- Refresh configure.patch, startup.patch, and visibility.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9366
- Now use l10n-%{version}.tar.bz2 instead of l10n.tar.bz2.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9367
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9368
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9369
Mon Apr 30 16:49:55 CEST 2007 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9370
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9371
- added unzip to BuildRequires 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9372
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9373
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9374
Wed Apr 18 14:16:44 CEST 2007 - mfabian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9375
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9376
- add Japanese to the languages which get PANGO enabled in the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9377
  start script to support the Japanese combining characters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9378
  U+3099 U+309A (see bugzilla #262718 comment #29).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9379
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9380
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9381
Mon Mar 12 11:06:10 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9382
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9383
- Package gconf stuff.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9384
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9385
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9386
Wed Feb 21 16:37:25 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9387
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9388
- Security update to 2.0.0.2 (#244923), which covers:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9389
  + mfsa2007-01
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9390
    * CVE-2007-0775 - layout engine crashes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9391
    * CVE-2007-0776 - SVG
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9392
    * CVE-2007-0777 - javascript engine corruption
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9393
  + mfsa2007-02
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9394
    * CVE-2007-0995 - Invalid trailing characters in HTML tag attributes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9395
    * CVE-2007-0996 - Child frame character set inheritance
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9396
    * CVE-2006-6077 - Injected password forms
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9397
  + mfsa2007-02
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9398
  + mfsa2007-03
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9399
    * CVE-2007-0078
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9400
  + mfsa2007-04
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9401
    * CVE-2007-0079
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9402
  + mfsa2007-05
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9403
    * CVE-2007-0780
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9404
    * CVE-2007-0800
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9405
  + mfsa2007-06
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9406
    * CVE-2007-0008 - client flaw
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9407
    * CVE-2007-0009 - server flaw
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9408
  + mfsa2007-07
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9409
    * CVE-2007-0981
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9410
- Updates mozilla.sh.in (#230681)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9411
- Fixes #232209
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9412
- Updates the man page (#243037)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9413
- Properly propagates exit codes (#241492)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9414
- Adds em-356370.patch (#217374)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9415
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9416
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9417
Thu Jan 25 10:16:56 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9418
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9419
- Fixup the Gnome paths, keeping in closer sync with the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9420
 buildservice.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9421
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9422
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9423
Thu Jan 18 09:27:54 CST 2007 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9424
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9425
- Gnome is now in /usr, so remove references to /opt/gnome
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9426
- Install firefox.png with the executable bit not set.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9427
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9428
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9429
Wed Jan 10 12:57:39 CET 2007 - meissner@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9430
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9431
- readd MozillaFirebird provides (was incorrect in removing it).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9432
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9433
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9434
Mon Jan  8 11:16:08 CET 2007 - meissner@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9435
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9436
- Do not provide MozillaFirebird, just obsolete it.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9437
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9438
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9439
Fri Dec  1 02:22:49 CET 2006 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9440
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9441
- Update gecko-lockdown.patch (#220616).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9442
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9443
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9444
Thu Nov 30 19:02:54 CET 2006 - maw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9445
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9446
- Update firefox-suse-default-prefs.js, adding
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9447
  'pref("browser.backspace_action", 2);' (#217374)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9448
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9449
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9450
Thu Nov 30 08:17:28 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9451
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9452
- Fix last change (#224431).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9453
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9454
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9455
Wed Nov 29 11:45:47 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9456
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9457
- Change download bookmark (#224431).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9458
- Rename bookmark folder to openSUSE.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9459
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9460
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9461
Tue Nov 28 08:09:48 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9462
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9463
- Sync from Buildservice with following critical fixes (thanks
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9464
  Wolfgang Rosenauer!):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9465
  * fixed system-proxies.patch to actually work (#223881).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9466
  * Rearrange Bookmarks to pass trademark review.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9467
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9468
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9469
Mon Nov 27 19:40:44 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9470
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9471
- Fix tango theme (#223796).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9472
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9473
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9474
Mon Nov 27 17:40:50 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9475
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9476
- Use www.opensuse.org as home page.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9477
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9478
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9479
Sun Nov 12 11:28:00 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9480
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9481
- Set novell.com as home page.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9482
- Update from BuildService (thanks Wolfgang!):
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9483
  - fixed crash in htmlparser (#217257, bmo #358797)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9484
  - added gconf2 as PreReq (#212505)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9485
  - added 32bit libaoss.so as requirement (#216266)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9486
  - Removed SUSE searchplugin (Portal not available anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9487
    (#216054)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9488
  - Removed obsolete xul-picker.patch and system-nspr.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9489
  - Fixed building on 10.1 and 10.0 (dbus)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9490
  - Removed obsolete throbber preference
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9491
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9492
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9493
Thu Nov  9 19:09:46 CET 2006 - jhargadon@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9494
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9495
- updated tango theme 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9496
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9497
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9498
Sun Oct 29 12:05:46 CET 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9499
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9500
- Another fix for 214125, patch by Wolfgang Rosenauer.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9501
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9502
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9503
Thu Oct 26 06:58:59 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9504
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9505
- Fix gcc warnings about undefined operations, patch by
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9506
  Robert O'Callahan.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9507
- Update system-proxies.patch to fix error box (214125), patch by
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9508
  Robert O'Callahan.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9509
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9510
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9511
Mon Oct 23 21:54:54 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9512
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9513
- Update to current CVS version of 2.0.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9514
- Use www.opensuse.org as default home page for now (#203547).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9515
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9516
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9517
Sat Oct 21 08:53:50 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9518
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9519
- Disable non-working plasticfox and tango themes.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9520
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9521
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9522
Fri Oct 20 20:16:29 CEST 2006 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9523
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9524
- Fix building of locales.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9525
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9526
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9527
Fri Oct 20 11:27:23 CEST 2006 - mkoenig@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9528
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9529
- update to version 2.0rc3:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9530
  * New features: Visual Refresh, Built-in phishing protection,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9531
    Enhanced search capabilities, Improved tabbed browsing,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9532
    Resuming your browsing session, Previewing and subscribing 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9533
    to Web feeds, Inline spell checking, Live Titles,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9534
    Improved Add-ons manager, JavaScript 1.7, Extended search 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9535
    plugin format, Updates to the extension system, 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9536
    Client-side session and persistent storage, SVG text
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9537
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9538
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9539
Tue Oct 17 11:26:44 CEST 2006 - meissner@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9540
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9541
- disabled debugging.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9542
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9543
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9544
Tue Sep 12 20:27:02 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9545
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9546
- security update to version 1.5.0.7
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9547
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9548
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9549
Mon Aug 21 12:53:50 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9550
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9551
- added greasemonkey helper change (#199920)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9552
- fixed packager.mk for new make version
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9553
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9554
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9555
Fri Aug 11 20:51:48 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9556
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9557
- fixed crash in dbus component (patch by thoenig #197928) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9558
- use external adresses for PAC configuration (#196506)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9559
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9560
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9561
Mon Aug  7 09:26:58 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9562
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9563
- added symlink for Firefox 1.0.x compatibility
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9564
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9565
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9566
Sat Jul 29 08:48:53 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9567
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9568
- update to regression release 1.5.0.6 (#195043)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9569
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9570
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9571
Thu Jul 27 06:20:36 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9572
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9573
- security update to version 1.5.0.5 (#195043)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9574
  * observer-lock.patch integrated now
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9575
- fixed leak in JS' liveconnect (#186066)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9576
- fixed desktop file for old distributions
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9577
  (StartupNotify=false)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9578
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9579
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9580
Thu Jun 29 20:13:28 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9581
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9582
- fixed printing crash if the last used printer is not available
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9583
  anymore (#187013)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9584
  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9585
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9586
Fri Jun 16 22:11:22 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9587
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9588
- added 48x48 icon (#185777)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9589
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9590
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9591
Mon Jun 12 20:20:02 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9592
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9593
- fix overwrite confirmation for GTK filesaver (#179531)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9594
- get network.negotiate-auth.trusted-uris and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9595
  network.negotiate-auth.delegation-uris from gconf if
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9596
  system-settings are enabled (#184489)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9597
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9598
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9599
Thu Jun  1 20:34:43 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9600
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9601
- update to security/stability release 1.5.0.4 (#179011)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9602
- moved locale-global prefs to browserconfig.properties (#177881)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9603
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9604
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9605
Tue May 23 21:11:11 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9606
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9607
- complete implementation of startup-notification (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9608
  (including autoconf and remote support)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9609
- different home-pages for SLE10 and SL (#177881)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9610
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9611
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9612
Tue May 16 06:27:26 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9613
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9614
- fixed potential deadlock in nsObserverList::RemoveObserver
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9615
  (#173986, bmo #338069)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9616
- base startup notification on libstartup-notification (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9617
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9618
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9619
Thu May 11 09:39:27 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9620
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9621
- save printer settings properly (#174082, bmo #324072)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9622
- added startup notification support for showing load activity
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9623
  in Gnome and to avoid focus stealing prevention (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9624
- added StartupNotify=true to desktop file (#115417)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9625
- provide legacy symlink for NLD9 update compatibility (#173138)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9626
- fixed system-proxies patch to avoid unwanted wpad requests
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9627
  (#171743, #167613)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9628
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9629
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9630
Mon May  8 14:55:52 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9631
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9632
- preconfigure the theme according to the used desktop (#151163)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9633
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9634
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9635
Thu Apr 27 10:24:07 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9636
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9637
- last minute change for 1.5.0.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9638
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9639
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9640
Wed Apr 26 14:23:33 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9641
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9642
- security update to 1.5.0.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9643
- fix for typo in postscript.patch
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9644
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9645
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9646
Tue Apr 25 14:14:51 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9647
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9648
- fixed iframe crash (#169039, bmo #334515)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9649
- fixed img tag misuse (#168710, bmo #334341)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9650
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9651
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9652
Mon Apr 24 08:04:16 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9653
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9654
- improved postscript output (bmo #334485)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9655
- changed defaults for printer properties (#6534)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9656
- overwrite gnome-vfs' file protocol by providing "desktop-launch"
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9657
  (#131501)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9658
- get available paper sizes from CUPS (#65482)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9659
- replaced/removed complicated gconfd reload in %post (#167989)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9660
- fixed memory leak in clipboard caching (bmo #289897)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9661
  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9662
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9663
Tue Apr 11 08:35:53 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9664
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9665
- added (optional) plastikfox theme (#151163)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9666
- get some more security related patches (#148876)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9667
- finally fixed the default proxy configuration by adding a new
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9668
  UI option (#132398)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9669
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9670
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9671
Mon Apr  3 11:41:13 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9672
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9673
- fixed keyword fixup patch (#162532)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9674
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9675
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9676
Tue Mar 28 07:17:04 CEST 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9677
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9678
- don't use keyword fixup for pasted text (#160034, bmo #331522)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9679
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9680
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9681
Mon Mar 20 09:28:58 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9682
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9683
- added Tango theme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9684
- fixed reading proxies from gconf (#132398)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9685
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9686
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9687
Sun Mar 12 09:04:05 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9688
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9689
- tweaked bookmarks (fixed URLs)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9690
- added Khmer (km-*) to pango locales (#157397)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9691
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9692
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9693
Sat Mar  4 21:08:45 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9694
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9695
- fixed crash with multipart JPEGs (bmo #328684) (#140416)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9696
- got latest security fixes from upstream (#148876)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9697
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9698
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9699
Wed Feb 22 13:24:58 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9700
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9701
- fixed plugin loading when launched from Thunderbird (#151614)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9702
- merged dbus reconnection patch (#150042)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9703
- default to autodetect proxy (network.proxy.type=4) (#151811)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9704
- added GTK category to desktop file
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9705
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9706
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9707
Tue Feb 14 06:45:24 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9708
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9709
- modified lockdown patches (#67281, #67282)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9710
- applied set of security patches (#148876) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9711
  bmo bugs: 282105, 307989, 315625, 320459, 323634, 325403, 325947
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9712
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9713
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9714
Tue Feb  7 20:09:43 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9715
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9716
- fixed disabling of Pango (#148788)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9717
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9718
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9719
Thu Feb  2 21:51:30 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9720
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9721
- define gssapi lib explicitely (#147670)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9722
- use only official Firefox-Icon
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9723
- changed home-download patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9724
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9725
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9726
Sun Jan 29 09:54:49 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9727
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9728
- throbber URL is default again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9729
- removed firefox-showpass patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9730
- removed additional CA certs from builtin NSS
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9731
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9732
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9733
Fri Jan 27 17:55:21 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9734
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9735
- got some l10n changes from 1.8.0 branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9736
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9737
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9738
Fri Jan 27 08:15:09 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9739
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9740
- final 1.5.0.1 version
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9741
- make it possible to choose $HOME as download directory
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9742
  (#144894, bmo #300856)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9743
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9744
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9745
Wed Jan 25 21:33:43 CET 2006 - mls@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9746
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9747
- converted neededforbuild to BuildRequires
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9748
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9749
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9750
Sun Jan 22 17:06:57 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9751
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9752
- disable Pango if MOZ_ENABLE_PANGO is not set 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9753
  and no typical language which needs Pango is used (#143428)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9754
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9755
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9756
Wed Jan 18 10:27:30 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9757
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9758
- fixed DumpStackToFile() for glibc 2.4
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9759
- added default (font) settings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9760
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9761
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9762
Thu Jan 12 10:23:58 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9763
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9764
- update to 1.5.0.1pre (20060111)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9765
- updated man-page
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9766
- fixed hovered tab close button
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9767
- only Requires mozilla-nspr instead of PreReq since
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9768
  there is no postinstall registration necessary anymore
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9769
- use system NSS from CODE10 on
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9770
- use -fstack-protector where available
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9771
- changed unixproxy component to work on older distributions
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9772
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9773
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9774
Mon Jan  2 13:39:09 CET 2006 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9775
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9776
- added unixproxy component written by Robert O'Callahan (#132398)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9777
  (bmo #66057)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9778
- added official translations
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9779
- preload libaoss for plugin sound (#117079)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9780
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9781
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9782
Wed Dec 28 08:16:03 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9783
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9784
- get some patches from 1.8.0 branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9785
- readded modification to gconf-backend (bmo #321315)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9786
- readded lockdown stuff
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9787
- enable additional extension install directory (#120329)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9788
  (/usr/lib/browser-extensions/firefox)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9789
- added patch to make the XUL filechooser optional
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9790
  (MOZ_XUL_PICKER)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9791
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9792
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9793
Wed Dec 14 16:08:12 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9794
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9795
- fixed patch for parsing -remote parameter
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9796
- removed default-plugin patch (not needed anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9797
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9798
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9799
Fri Dec  9 17:21:29 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9800
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9801
- fix to ignore X composite extension (#135373)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9802
- fixed parsing of -remote parameters (#134396)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9803
- activated locales as released
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9804
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9805
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9806
Tue Nov 29 21:33:13 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9807
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9808
- update to 1.5 (20051128)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9809
- don't override startup URL when changing Gecko versions (#135314)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9810
- added patch for GTK2 handling (#134831)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9811
- readded add-plugins stuff for compatibility
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9812
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9813
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9814
Fri Nov 18 07:41:41 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9815
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9816
- update to 1.5rc3 (20051117) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9817
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9818
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9819
Mon Oct 31 08:58:14 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9820
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9821
- updated l10n archive (20051030)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9822
- fixed postinstall script to copy plugin links instead of files
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9823
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9824
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9825
Fri Oct 28 06:43:27 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9826
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9827
- update to 1.5rc1 (20051027)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9828
- fixed profile locking on FAT partitions (bmo #313360)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9829
- introduced an rpath again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9830
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9831
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9832
Wed Oct 19 20:03:48 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9833
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9834
- update to snapshot 1.5 (20051019)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9835
- moved installation to /usr/%{_lib}/firefox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9836
- added dbus component to be able to get network status from
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9837
  NetworkManager (bmo #312793)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9838
- remove all update UI for application
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9839
- removed diable-gconf (no registration at build time anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9840
- removed rebuild-databases.sh (no system registration anymore)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9841
- open links in new windows (#128087)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9842
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9843
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9844
Thu Oct  6 20:44:53 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9845
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9846
- update to Firefox 1.5b2 (20051005)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9847
- added supported translations
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9848
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9849
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9850
Sat Oct  1 15:09:18 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9851
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9852
- update to Firefox 1.5b1 (20050930) RPM version 1.4.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9853
- removed rebuild-databases.sh calls
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9854
- removed add-plugins.sh calls and corresponding triggers
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9855
- enabled SVG and Canvas support
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9856
- fixed gconf urlhandler registration
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9857
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9858
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9859
Tue Sep 20 10:24:16 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9860
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9861
- security update to 1.0.7 (#117619)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9862
  * MFSA 2005-57: IDN heap overrun using soft-hyphens (bmo #307259)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9863
    (enabled IDN pref again)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9864
  * MFSA 2005-58: 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9865
      CAN-2005-2701 Heap overrun in XBM image processing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9866
      CAN-2005-2702 Crash on "zero-width non-joiner" sequence
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9867
      CAN-2005-2703 XMLHttpRequest header spoofing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9868
      CAN-2005-2704 Object spoofing using XBL <implements>
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9869
      CAN-2005-2705 JavaScript integer overflow
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9870
      CAN-2005-2706 Privilege escalation using about: scheme
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9871
      CAN-2005-2707 Chrome window spoofing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9872
                    Regression fixes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9873
- register beagle extension if it gets installed (#116787)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9874
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9875
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9876
Tue Sep 13 15:41:37 CEST 2005 - aj@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9877
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9878
- Change SUSE bookmarks.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9879
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9880
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9881
Sun Sep 11 17:05:07 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9882
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9883
- disable IDN per default (#116070)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9884
- unlocalize bookmarks (#114279)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9885
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9886
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9887
Thu Sep  8 08:52:13 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9888
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9889
- fixed some filemodes (#114849)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9890
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9891
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9892
Sun Sep  4 00:03:53 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9893
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9894
- fixed gconf-backend patch to be able to use
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9895
  system prefs (#114054)
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9896
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
  9897
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9898
Thu Sep  1 13:22:17 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9899
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9900
- changed default font to sans-serif (#114464)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9901
- removed de-de parts of the bookmark-links (#114279)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9902
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9903
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9904
Mon Aug 22 06:10:12 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9905
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9906
- install gconf schema for lockdown also on non-NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9907
- added backports (firefox-backports.patch)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9908
  * gtk_im_context_set_cursor_location() is not used (bmo #281339)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9909
  * fixed crash in imgCacheValidator::OnStartRequest() 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9910
    (bmo #293307)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9911
- workaround for linking with pangoxft and pangox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9912
  (broken by gtk 2.8 update) (#105764)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9913
- remove extensions on deinstallation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9914
- include dragonegg (kparts) plugin (#105468)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9915
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9916
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9917
Thu Aug 18 13:08:55 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9918
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9919
- fixed regression in profile locking change (bmo #303633)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9920
- added rtsp handler to global config (#104434)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9921
- don't blacklist help: protocol (bmo #304833)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9922
- fixed Gdk-WARNING at startup (gtk.patch)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9923
- fixed crash with gtk 2.7 (bmo #300226, bnc #104586)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9924
- fixed installation of the beagle plugin
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9925
- update industrial theme to 1.0.11 (#104564)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9926
- included lockdownV2 (removed obsolete gconf.diff)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9927
- linked firefox-bin with rpath to progdir
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9928
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9929
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9930
Fri Aug  5 09:51:26 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9931
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9932
- fixed profile locking (bmo #151188)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9933
- install beagle extension globally
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9934
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9935
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9936
Fri Jul 29 06:58:24 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9937
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9938
- don't require and provide NSS libs (#98002)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9939
- fixed printing error 'You cannot print while in print preview'
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9940
  (#96991, bmo #302445)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9941
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9942
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9943
Wed Jul 27 09:34:12 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9944
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9945
- fixed Firefox on ppc (stack-direction.patch) (#97359)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9946
- removed open-pref from startscript as it is done
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9947
  automatically now (#73042)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9948
- updated Novell searchplugins
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9949
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9950
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9951
Mon Jul 25 12:32:13 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9952
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9953
- GTK filechooser is now modal (#8533)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9954
- backed out patch to add tooltips to print-preview
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9955
  because it breaks localization
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9956
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9957
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9958
Fri Jul 22 10:54:39 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9959
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9960
- fixed another problem in printing patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9961
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9962
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9963
Tue Jul 19 10:44:59 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9964
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9965
- fixed error in ft-xft-ps2.patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9966
- disabled stripping in spec instead of patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9967
- added NSPR to PreReq
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9968
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9969
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9970
Mon Jul 18 08:43:24 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9971
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9972
- fixed some more regressions with final 1.0.6
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9973
- fixed width calculation in Postscript module (bmo #290292)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9974
- fixed plugin event starvation (bnc #94749, #94751, bmo #301161)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9975
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9976
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9977
Fri Jul 15 11:24:47 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9978
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9979
- searchplugins can now be installed per profile (#8176)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9980
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9981
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9982
Fri Jul 15 06:54:02 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9983
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9984
- update to 1.0.6 which restores API compatibility
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9985
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9986
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9987
Tue Jul 12 06:20:37 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9988
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9989
- update to 1.0.5 final (#88509)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9990
- don't strip explicitely
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9991
- don't ship beagle.xpi
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9992
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9993
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9994
Wed Jul  6 14:13:09 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9995
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9996
- update to 1.0.5-pre (20050705)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9997
- use RPM_OPT_FLAGS for NSS component
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9998
- fixed implicit declarations and uninitialized used variables
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
  9999
- added patch for bmo #87969
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10000
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10001
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10002
Tue Jul  5 10:17:16 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10003
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10004
- fixed regression from security update (#95069, bmo #298478)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10005
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10006
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10007
Mon Jun 27 21:46:58 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10008
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10009
- don't use system-prefs by default on NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10010
- removed basic lockdown stuff for SUSE Linux
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10011
  (it's not needed and caused problems: bnc #75418)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10012
- fixed NLD lockdown patch (bnc #75418)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10013
- don't write prefs back to gconf for now
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10014
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10015
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10016
Wed Jun 22 07:32:42 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10017
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10018
- new NLD lockdown patch which is syncing user prefs to gconf
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10019
- update to 1.0.5pre security-release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10020
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10021
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10022
Thu Jun  9 06:56:02 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10023
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10024
- new revision of NLD lockdown patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10025
- fixed remote usage behaviour in start script (bnc #41903)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10026
- got more bugfixes from the branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10027
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10028
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10029
Thu Jun  2 10:31:48 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10030
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10031
- fixed neededforbuild
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10032
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10033
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10034
Wed Jun  1 20:15:25 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10035
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10036
- fixed IDN for 64bit platforms (bmo #236425, bnc #46268)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10037
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10038
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10039
Fri May 20 15:12:06 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10040
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10041
- fixed keybinding for KP separator (bnc #84147)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10042
- pulled security related patch from upstream branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10043
- update plastikfox theme to version 1.6
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10044
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10045
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10046
Thu May 12 06:16:25 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10047
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10048
- update to final 1.0.4 release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10049
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10050
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10051
Tue May 10 06:38:05 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10052
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10053
- update to 1.0.4 security release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10054
- removed s390(x) patches (upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10055
- made two more files %verify (81692)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10056
- updated NLD lockdown patch (81304)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10057
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10058
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10059
Thu Apr 28 09:45:53 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10060
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10061
- use static NSPR libs from new location
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10062
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10063
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10064
Sat Apr 23 15:56:08 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10065
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10066
- activate usage of system NSPR for distributions after 9.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10067
- add patch to be able to use systen NSPR at all
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10068
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10069
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10070
Fri Apr 22 02:06:06 CEST 2005 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10071
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10072
- use mozilla-gcc4.patch 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10073
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10074
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10075
Thu Apr 21 12:51:19 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10076
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10077
- don't execute gconf magic within build environment
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10078
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10079
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10080
Sat Apr 16 13:05:37 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10081
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10082
- update to final 1.0.3 release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10083
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10084
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10085
Fri Apr 15 00:10:54 CEST 2005 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10086
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10087
- fix problem in postinstall script 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10088
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10089
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10090
Wed Apr 14 09:20:02 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10091
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10092
- included fixed lockdown patch for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10093
- linked proxies within Firefox with gnome settings (NLD)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10094
- added gconfd restart procedure to install script 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10095
  (only needed if gconf changes are done) (#76852)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10096
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10097
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10098
Sat Apr  2 21:03:11 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10099
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10100
- update to security pre-release 1.0.3 (#75692)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10101
  * Manual plug-in install, javascript vulnerability (bmo #288556)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10102
  * Access memory vulnerability (bmo #288688)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10103
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10104
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10105
Fri Apr  1 11:32:44 CEST 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10106
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10107
- added advanced lockdown features for ZLM integration (NLD-only)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10108
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10109
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10110
Tue Mar 22 12:33:15 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10111
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10112
- update to final 1.0.2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10113
- use new theme handling on NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10114
- added default-plugin-less-annoying from mozilla
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10115
- use GTK2 for Flash
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10116
- use system NSPR on SUSE releases after 9.3
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10117
- made startscript PIS aware 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10118
- set g-application-name correctly (bmo #281979)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10119
- added man-page
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10120
- use GTK system colors
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10121
- modify useragent string and add vendor id
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10122
- activate smooth-scrolling by default (#74310)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10123
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10124
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10125
Tue Mar 22 08:59:06 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10126
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10127
- don't register beagle automatically (#74062)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10128
- added default bookmarks for SUSE LINUX
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10129
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10130
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10131
Mon Mar 21 18:20:39 CET 2005 - max@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10132
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10133
- Fixed a typo in the shell code that handles inclusion of the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10134
  Acrobat Reader plugin (#70861).
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10135
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10136
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10137
Thu Mar 17 21:01:11 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10138
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10139
- updates from upcoming 1.0.2 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10140
- added again logic to use Adobe Reader 7 (#70861)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10141
- fixed crash in ICO decoding (#67142, bmo #245631)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10142
- preinstall beagle extension (#72920)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10143
- bugfixes in trigger scripts
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10144
- fixed industrial theming for Gnome (#72918)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10145
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10146
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10147
Sat Mar 12 12:42:16 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10148
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10149
- fixed more security related bugs
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10150
  (bmo #284551, #284627, #285595)
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10151
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10152
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10153
Wed Mar  9 21:42:05 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10154
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10155
- update also GNOME desktop file (#71810)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10156
- added firefox-gnome.png to filelist
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10157
- use correct Firefox icon
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10158
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10159
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10160
Mon Mar  7 20:47:00 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10161
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10162
- disable inclusion of acrobat plugin again (#70861)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10163
- don't use gconfd in registration phase (#66381) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10164
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10165
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10166
Mon Mar  7 16:13:29 CET 2005 - adrian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10167
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10168
- use standard icon again for the default desktop file and
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10169
  add a Gnome-only desktop file for the Gnome icon
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10170
- add plastikfox chrome theme to fix button order within KDE
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10171
- add patch for automatic theme selection for KDE and Gnome
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10172
- do register extensions in rebuild-databases.sh instead of %install,
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10173
  to fix needed timestamps
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10174
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10175
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10176
Fri Mar  4 07:54:47 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10177
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10178
- extend add-plugins to recognize Java 1.5 (#66909)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10179
- changed comment in desktop-file (#66867)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10180
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10181
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10182
Tue Feb 22 09:33:44 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10183
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10184
- make --display parameter working in all cases (bnc #66043)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10185
- revised postscript patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10186
- final 1.0.1 codebase
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10187
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10188
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10189
Mon Feb 21 13:09:30 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10190
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10191
- added patch to create Postscript level 2 (instead of 3)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10192
  (special thanks to Jungshik Shin)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10193
- disabled freetype explicitly to be able to use the above patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10194
  (freetype wasn't used anymore since some time anyway)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10195
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10196
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10197
Fri Feb 18 09:10:10 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10198
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10199
- got more patches from branch to get another IDN fix and to
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10200
  fix bug #51019
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10201
- enabled IDN again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10202
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10203
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10204
Wed Feb 16 09:20:39 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10205
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10206
- bumped version number to 1.0.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10207
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10208
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10209
Tue Feb 15 10:26:04 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10210
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10211
- got updates from 1.0.1 branch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10212
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10213
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10214
Thu Feb 10 06:57:33 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10215
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10216
- additional fireflashing fix (#50635, bmo #280664)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10217
- some more security related fixes 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10218
  (bmo #268483, #273498, #277322)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10219
- fire up GTK2 filepicker if GNOME is running
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10220
  
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10221
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10222
Tue Feb  8 07:51:13 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10223
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10224
- some prefs are ignored (bmo #261934)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10225
- disabled default IDN (#50566)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10226
- fixed some more bugzilla.mozilla.org bugs:
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10227
  #276482, #280056, #280603
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10228
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10229
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10230
Sun Feb  6 13:10:12 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10231
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10232
- use same desktop categories for Professional and NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10233
- added some lockdown stuff for printing and page saving
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10234
  (bmo #280488)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10235
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10236
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10237
Wed Feb  2 13:58:53 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10238
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10239
- modified gconf.diff to honor ignore_hosts (bmo #280742)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10240
- added a JS crasher fix (bmo #268535)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10241
- added more fixes (bmo #255441, #273024, #275405, #275634)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10242
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10243
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10244
Fri Jan 28 12:39:37 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10245
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10246
- added gplflash inclusion
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10247
- improved JRE inclusion
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10248
- reactivated usage of Acrobat Reader plugin
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10249
  (ready for acroread 7)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10250
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10251
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10252
Sat Jan 22 13:16:47 CET 2005 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10253
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10254
- added some backported bugfixes
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10255
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10256
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10257
Sat Dec 18 10:30:11 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10258
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10259
- updated industrial theme to 1.0.9
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10260
- use slightly changed icon for menu-entry (bnc #275)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10261
- use original desktop file for NLD again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10262
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10263
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10264
Thu Dec 16 19:37:48 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10265
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10266
- newer patch for GNOME associations (bnc #362)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10267
- fix overwriting of files with GTK picker (Ximian #65068)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10268
- readded the industrial default theme patch for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10269
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10270
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10271
Wed Dec 15 11:50:56 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10272
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10273
- activate GTK filepicker for NLD again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10274
- fix for GNOME helper applications with parameters
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10275
- make GNOME associations the default on NLD
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10276
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10277
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10278
Sat Dec  4 16:11:01 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10279
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10280
- fixed build on s390/s390x
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10281
- added patch to be able to install-global without running X
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10282
  (bmo #265859)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10283
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10284
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10285
Thu Nov 18 21:48:05 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10286
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10287
- update industrial theme to 1.0.8 (still not activated)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10288
- added patch to make home-directory the default download dir
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10289
  (on NLD is still used Desktop)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10290
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10291
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10292
Thu Nov 11 09:01:58 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10293
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10294
- made initial window height smaller again 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10295
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10296
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10297
Tue Nov  9 09:09:06 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10298
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10299
- update to final 1.0 release (20041109)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10300
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10301
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10302
Thu Nov  4 08:22:36 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10303
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10304
- update to 1.0rc2 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10305
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10306
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10307
Sat Oct 30 21:27:29 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10308
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10309
- added missing s390(x) patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10310
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10311
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10312
Wed Oct 27 07:26:25 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10313
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10314
- update to 1.0rc1 codebase
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10315
- printing via XFT/fontconfig
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10316
- freetype changes to avoid API conflicts with newer freetype2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10317
- fixed build for s390/s390x
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10318
- removed AMD64 patch (included upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10319
- added translations sub-package
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10320
- removed "Show folder" patch for NLD (resolved upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10321
- don't use gnome-filepicker patch for NLD for now
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10322
- removed hppa buildfix (included upstream)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10323
- removed untitled.patch (bmo #24068) resolved by (bmo #262478)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10324
- use make -C browser/installer now to prepare installation
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10325
- don't check for default browser at startup (#47587)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10326
- updated industrial.jar (0.99.13) (disabled)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10327
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10328
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10329
Fri Oct 15 13:51:54 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10330
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10331
- inherit locale from system
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10332
- fixed chrome registration
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10333
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10334
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10335
Wed Oct  6 23:11:01 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10336
 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10337
 - disable gconf settings as default (Ximian #67718)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10338
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10339
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10340
Wed Oct  6 07:04:05 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10341
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10342
- fixed inclusion of RealPlayer plugin again
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10343
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10344
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10345
Tue Oct  5 10:09:04 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10346
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10347
- small important fix in firefox-download.patch (Ximian #65472) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10348
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10349
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10350
Sun Oct  3 00:02:09 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10351
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10352
- added security-fix from 0.10.1 (mozilla.org #259708) (#46687)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10353
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10354
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10355
Fri Oct  1 12:49:38 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10356
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10357
- final fix for downloading to Desktop folder (Ximian #65756)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10358
- remove Postscript from printer names (Ximian #65560)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10359
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10360
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10361
Thu Sep 30 16:14:10 CEST 2004 - shprasad@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10362
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10363
- Modified the MozillaFirefox.desktop file.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10364
  Changed the name 'Firefox' to 'Firefox Web Browser'.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10365
  Also changed it for all languages.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10366
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10367
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10368
Wed Sep 29 15:54:46 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10369
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10370
- fix inclusion of RealPlayer plugin (Ximian #65711) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10371
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10372
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10373
Mon Sep 27 17:51:24 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10374
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10375
- Update the industrial default patch, for some reason it didn't
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10376
  take before.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10377
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10378
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10379
Fri Sep 24 07:34:48 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10380
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10381
- fix for Ximian #65176 (mozilla.org #240068)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10382
- revised patch for update function (Ximian #65615)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10383
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10384
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10385
Thu Sep 23 20:21:39 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10386
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10387
- Uncomment the patch which tells the UI that industrial is the
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10388
  default.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10389
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10390
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10391
Thu Sep 23 12:38:06 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10392
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10393
- open Nautilus on NLD for 'Show folder' in download settings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10394
  (Ximian #65472) by sragavan@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10395
- save to Desktop folder if selected (Ximian #65756)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10396
  by sragavan@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10397
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10398
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10399
Wed Sep 22 10:23:01 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10400
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10401
- synced NLD package with 9.2 version
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10402
- GTK2 filepicker does now ask for confirmation when overwriting
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10403
  files (Ximian #65068) by sagarwala@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10404
- no direct update function (Ximian #65615) by rganesan@novell.com 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10405
- throbber linked to Novell (Ximian #66283) by rganesan@novell.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10406
- make industrial the default theme for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10407
  (Ximian #65542) by joeshaw@suse.de
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10408
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10409
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10410
Mon Sep 20 22:00:55 CEST 2004 - joeshaw@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10411
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10412
- Add default bookmarks.  Ximian #65546.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10413
- Add the industrial theme, but it's not the default yet.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10414
- Remove acroread from add-plugins because it's badly behaved.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10415
  Ximian #65499.
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10416
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10417
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10418
Mon Sep 20 17:57:38 CEST 2004 - federico@ximian.com
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10419
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10420
- Added MozillaFirefox-toplevel-window-height.diff for
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10421
  http://bugzilla.ximian.com/show_bug.cgi?id=65543
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10422
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10423
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10424
Sun Sep 19 15:42:30 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10425
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10426
- use GNOME system prefs only for NLD by default 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10427
  (fixes bug #45575)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10428
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10429
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10430
Fri Sep 17 08:59:32 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10431
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10432
- joeshaw@suse.de: Update GConf patch so that proxy settings work 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10433
  correctly (Ximian #64461)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10434
- don't search Java on every path (Ximian #65383)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10435
- added some missing fixes for official release
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10436
- added new java package name for triggers (#45257)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10437
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10438
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10439
Sat Sep 11 13:25:41 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10440
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10441
- update to official 1.0PR (0.10)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10442
- adopted gnome-filepicker patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10443
- removed obsolete CUPS hack from start-script 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10444
  (Ximian #65635, #65560)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10445
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10446
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10447
Thu Sep  9 21:35:42 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10448
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10449
- fixed endianess on AMD64 in JS component (#34743)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10450
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10451
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10452
Mon Sep  6 17:33:07 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10453
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10454
- fixed filelist
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10455
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10456
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10457
Mon Sep  6 13:48:03 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10458
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10459
- update to 1.0PR (aka 0.10) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10460
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10461
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10462
Fri Sep  3 21:35:47 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10463
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10464
- added ppc64 patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10465
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10466
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10467
Thu Sep  2 03:08:59 CEST 2004 - dave@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10468
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10469
- Fixed up the .desktop installation on nld 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10470
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10471
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10472
Wed Sep  1 15:05:48 CEST 2004 - shprasad@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10473
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10474
- Doesn't ask to set Firefox as default web-browser. 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10475
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10476
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10477
Tue Aug 31 14:01:18 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10478
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10479
- next new version for filepicker stuff
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10480
- deactivated native filepicker for NLD
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10481
- update to snapshot (20040831)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10482
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10483
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10484
Tue Aug 24 17:35:52 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10485
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10486
- new version of gnome-filepicker patch
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10487
- added patch for config
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10488
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10489
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10490
Fri Aug 20 17:12:48 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10491
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10492
- update to snapshot (20040820) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10493
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10494
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10495
Thu Aug 19 08:46:42 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10496
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10497
- added workaround for mozilla bug #246313
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10498
  (Firefox does not start: getting "cannot open display" error)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10499
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10500
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10501
Wed Aug 18 15:07:22 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10502
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10503
- added some patches from Ximian
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10504
  - use GNOME filepicker
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10505
  - use more gconf settings
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10506
  - set startup homepage to Novell
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10507
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10508
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10509
Tue Aug 17 13:12:35 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10510
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10511
- update to pre-1.0.0 (20040817)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10512
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10513
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10514
Thu Aug  5 06:27:41 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10515
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10516
- security update to 0.9.3 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10517
  (including #43312 and others)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10518
- handle RealPlayer 9 plugin
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10519
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10520
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10521
Mon Aug  2 15:11:51 CEST 2004 - ro@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10522
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10523
- recode desktop file to utf-8
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10524
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10525
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10526
Wed Jul 28 08:46:31 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10527
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10528
- added fix against certificate spoofing (#43312) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10529
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10530
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10531
Fri Jul 23 06:31:41 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10532
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10533
- update to 0.9.2
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10534
- added workaround for extension registry 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10535
- removed old (incompatible) mozex extension
5
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10536
17b1dd932700 Add MozillaFirefox package
Wolfgang Rosenauer <wr@rosenauer.org>
parents:
diff changeset
 10537
-------------------------------------------------------------------
48
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10538
Tue Jun 29 06:27:59 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10539
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10540
- update to 0.9.1
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10541
- added hint to run as root first
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10542
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10543
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10544
Tue Jun 15 12:42:28 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10545
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10546
- update to 0.9 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10547
- added patch for newer freetype
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10548
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10549
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10550
Fri Apr  2 10:31:45 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10551
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10552
- removing relocation of TEMP directory (#34391)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10553
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10554
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10555
Mon Mar 29 11:43:51 CEST 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10556
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10557
- update to 0.8.0+ (20040503)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10558
- removed firefox logos and activate official branding for
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10559
  milestone builds
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10560
- changed profile-dir to .firefox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10561
- added some needed files
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10562
- enabled gnomevfs extension 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10563
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10564
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10565
Fri Mar 26 18:09:34 CET 2004 - uli@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10566
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10567
- fixed hang during build on s390* (bug #35440)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10568
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10569
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10570
Wed Mar  3 06:52:00 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10571
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10572
- removed unused patches for GTK2 build 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10573
- more fixes for (#35179)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10574
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10575
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10576
Mon Mar  1 07:32:52 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10577
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10578
- improved start-script to interact with thunderbird (#35179) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10579
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10580
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10581
Thu Feb 26 06:57:05 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10582
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10583
- use official releasedate
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10584
- added official (trademarked) artwork
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10585
- added firefox icon to /usr/share/pixmaps
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10586
- cleaned up spec-file (there will be no GTK1 version)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10587
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10588
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10589
Tue Feb 24 16:43:17 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10590
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10591
- fixed optimization for non-x86 archs 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10592
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10593
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10594
Tue Feb 24 07:43:35 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10595
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10596
- adopted file-list and build options to original distribution 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10597
- added prdtoa fix (#32963)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10598
- added hook for static firefox build to rebuild-databases.sh
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10599
- added compiler flags for security/ (nss-opt.patch) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10600
- included mozex (mozex.mozdev.org)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10601
- added -Os as optimization flag
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10602
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10603
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10604
Mon Feb  9 21:59:37 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10605
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10606
- renamed to MozillaFirefox
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10607
- update to final version 0.8 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10608
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10609
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10610
Fri Feb  6 08:39:15 CET 2004 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10611
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10612
- update to Firebird 0.8 (20040205)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10613
- added mips build fix
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10614
- set PS printer list in MozillaFirebird.sh 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10615
- use lib64 again for biarch platforms
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10616
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10617
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10618
Sat Jan 10 10:33:54 CET 2004 - adrian@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10619
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10620
- build as user
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10621
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10622
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10623
Fri Aug 22 11:32:07 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10624
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10625
- upstream sync for 0.6.1post
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10626
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10627
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10628
Sun Aug 10 22:01:12 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10629
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10630
- removed dmoz from searchplugins-filelist
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10631
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10632
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10633
Fri Aug  8 10:30:50 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10634
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10635
- update to 0.6.1post (TRUNK)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10636
- use -fno-strict-aliasing
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10637
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10638
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10639
Thu Jul 31 11:25:39 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10640
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10641
- update to 0.6.1 (MOZILLA_1_4_BRANCH)
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10642
- synchronized with mozilla-source
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10643
- created file-list
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10644
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10645
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10646
Thu Jul 10 09:45:49 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10647
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10648
- update to snapshot 20030709
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10649
- fixed generation of symlink MozillaFirebird-xremote-client
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10650
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10651
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10652
Fri Jun 20 06:53:08 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10653
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10654
- update to snapshot 20030622 (0.7pre) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10655
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10656
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10657
Mon May 19 08:54:46 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10658
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10659
- update to snapshot 20030518 (0.6) 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10660
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10661
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10662
Sun May  7 10:11:16 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10663
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10664
- update to snapshot 20030507 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10665
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10666
-------------------------------------------------------------------
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10667
Wed Apr 30 13:26:43 CEST 2003 - stark@suse.de
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10668
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10669
- initial SuSE package 
f20f41829b2b Reset changelog to go to Factory as MozillaFirefox update
Wolfgang Rosenauer <wr@rosenauer.org>
parents: 46
diff changeset
 10670