1 -------------------------------------------------------------------

     2 Sat Jul 24 07:15:54 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

     3 

     4 - Mozilla Firefox 90.0.2:

     5   * Changed: Updates to support DoH Canada rollout (bmo#1713036)

     6   * Fixed: Fixed truncated output when printing (bmo#1720621)

     7   * Fixed: Fixed menu styling on some Gtk themes (bmo#1720441,

     8     bmo#1720874)

     9 

    10 -------------------------------------------------------------------

    11 Mon Jul 19 20:08:56 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

    12 

    13 - Mozilla Firefox 90.0.1 (boo#1188480):

    14   * Fixed: Fixed busy looping processing some HTTP3 responses

    15     (bmo#1720079)

    16   * Fixed: Fixed transient errors authenticating with some smart

    17     cards (bmo#1715325)

    18   * Fixed: Fixed a rare crash on shutdown (bmo#1707057)

    19   * Fixed: Fixed a race on startup that caused about:support to

    20     end up empty after upgrade (bmo#1717894, boo#1188330)

    21 

    22 -------------------------------------------------------------------

    23 Sun Jul 11 08:53:02 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>

    24 

    25 - Mozilla Firefox 90.0

    26   MFSA 2021-28 (bsc#1188275)

    27   * CVE-2021-29970 (bmo#1709976)

    28     Use-after-free in accessibility features of a document

    29   * CVE-2021-29971 (bmo#1713638)

    30     Granted permissions only compared host; omitting scheme and

    31     port on Android

    32   * CVE-2021-30547 (bmo#1715766)

    33     Out of bounds write in ANGLE

    34   * CVE-2021-29972 (bmo#1696816)

    35     Use of out-of-date library included use-after-free

    36     vulnerability

    37   * CVE-2021-29973 (bmo#1701932)

    38     Password autofill on HTTP websites was enabled without user

    39     interaction on Android

    40   * CVE-2021-29974 (bmo#1704843)

    41     HSTS errors could be overridden when network partitioning was

    42     enabled

    43   * CVE-2021-29975 (bmo#1713259)

    44     Text message could be overlaid on top of another website

    45   * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,

    46     bmo#1711576, bmo#1714391)

    47     Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12

    48   * CVE-2021-29977 (bmo#1665836, bmo#1686138, bmo#1704316,

    49     bmo#1706314, bmo#1709931, bmo#1712084, bmo#1712357,

    50     bmo#1714066)

    51     Memory safety bugs fixed in Firefox 90

    52 - requires

    53   NSPR 4.31

    54   NSS 3.66

    55 - Gtk2 support removed (was only for Flash plugin before)

    56