2 Tue May 11 14:17:33 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>

     2 Wed Jun 23 16:54:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

     3 

     3 

     4 - do not rely on nodejs10 anymore

     4 - Mozilla Firefox 89.0.2 (boo#1187648):

     5   * Fix occasional hangs with Software WebRender on Linux (bmo#1708224)

     6 

     7 -------------------------------------------------------------------

     8 Sat Jun 19 09:00:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

     9 

    10 - Mozilla Firefox 89.0.1 (boo#1187475):

    11   * Updated translations, including full Spanish (Mexico)

    12     localization and other improvements (bmo#1714946)

    13   * Fix various font related regressions (bmo#1694174)

    14   * Linux: Fix performance and stability regressions with

    15     WebRender (bmo#1715895, bmo#1715902)

    16   * Enterprise: Fix for the `DisableDeveloperTools` policy not

    17     having effect anymore (bmo#1715777)

    18   * Linux: Fix broken scrollbars on some GTK themes (bmo#1714103)

    19   * Various stability fixes

    20 

    21 -------------------------------------------------------------------

    22 Sat May 29 20:55:56 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>

    23 

    24 - Mozilla Firefox 89.0

    25   * UI redesign

    26   * The Event Timing API is now supported

    27   * The CSS forced-colors media query is now supported

    28   MFSA 2021-23 (bsc#1186696)

    29   * CVE-2021-29965 (bmo#1709257)

    30     Password Manager on Firefox for Android susceptible to domain

    31     spoofing

    32   * CVE-2021-29960 (bmo#1675965)

    33     Filenames printed from private browsing mode incorrectly

    34     retained in preferences

    35   * CVE-2021-29961 (bmo#1700235)

    36     Firefox UI spoof using `<select>` elements and CSS scaling

    37   * CVE-2021-29963 (bmo#1705068)

    38     Shared cookies for search suggestions in private browsing mode

    39   * CVE-2021-29964 (bmo#1706501)

    40     Out of bounds-read when parsing a `WM_COPYDATA` message

    41   * CVE-2021-29959 (bmo#1395819)

    42     Devices could be re-enabled without additional permission prompt

    43   * CVE-2021-29962 (bmo#1701673)

    44     No rate-limiting for popups on Firefox for Android

    45   * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,

    46     bmo#1704722, bmo#1706041)

    47     Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11

    48   * CVE-2021-29966 (bmo#1660307, bmo#1686154, bmo#1702948, bmo#1708124)

    49     Memory safety bugs fixed in Firefox 89

    50 - require

    51   NSS >= 3.64

    52   rust-cbindgen >= 0.19.0

    53 - do not rely on nodejs10 packagename anymore

    54 - updated mozilla.keyring

    55 - switched TW/x86_64 to clang as the last platform due to

    56   https://bugs.gentoo.org/792705

    57 - but LTO with clang is broken in TW so disable LTO for it

    58   https://bugs.llvm.org/show_bug.cgi?id=47872