MozillaFirefox/MozillaFirefox.changes
branchfirefox89
changeset 1158 00846b9a35cd
parent 1157 57fc0524b50c
child 1159 c4aba2fa0908
--- a/MozillaFirefox/MozillaFirefox.changes	Sat May 29 22:52:13 2021 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Sun Jul 11 10:26:32 2021 +0200
@@ -1,7 +1,61 @@
 -------------------------------------------------------------------
-Tue May 11 14:17:33 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
-
-- do not rely on nodejs10 anymore
+Wed Jun 23 16:54:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 89.0.2 (boo#1187648):
+  * Fix occasional hangs with Software WebRender on Linux (bmo#1708224)
+
+-------------------------------------------------------------------
+Sat Jun 19 09:00:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 89.0.1 (boo#1187475):
+  * Updated translations, including full Spanish (Mexico)
+    localization and other improvements (bmo#1714946)
+  * Fix various font related regressions (bmo#1694174)
+  * Linux: Fix performance and stability regressions with
+    WebRender (bmo#1715895, bmo#1715902)
+  * Enterprise: Fix for the `DisableDeveloperTools` policy not
+    having effect anymore (bmo#1715777)
+  * Linux: Fix broken scrollbars on some GTK themes (bmo#1714103)
+  * Various stability fixes
+
+-------------------------------------------------------------------
+Sat May 29 20:55:56 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Firefox 89.0
+  * UI redesign
+  * The Event Timing API is now supported
+  * The CSS forced-colors media query is now supported
+  MFSA 2021-23 (bsc#1186696)
+  * CVE-2021-29965 (bmo#1709257)
+    Password Manager on Firefox for Android susceptible to domain
+    spoofing
+  * CVE-2021-29960 (bmo#1675965)
+    Filenames printed from private browsing mode incorrectly
+    retained in preferences
+  * CVE-2021-29961 (bmo#1700235)
+    Firefox UI spoof using `<select>` elements and CSS scaling
+  * CVE-2021-29963 (bmo#1705068)
+    Shared cookies for search suggestions in private browsing mode
+  * CVE-2021-29964 (bmo#1706501)
+    Out of bounds-read when parsing a `WM_COPYDATA` message
+  * CVE-2021-29959 (bmo#1395819)
+    Devices could be re-enabled without additional permission prompt
+  * CVE-2021-29962 (bmo#1701673)
+    No rate-limiting for popups on Firefox for Android
+  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
+    bmo#1704722, bmo#1706041)
+    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
+  * CVE-2021-29966 (bmo#1660307, bmo#1686154, bmo#1702948, bmo#1708124)
+    Memory safety bugs fixed in Firefox 89
+- require
+  NSS >= 3.64
+  rust-cbindgen >= 0.19.0
+- do not rely on nodejs10 packagename anymore
+- updated mozilla.keyring
+- switched TW/x86_64 to clang as the last platform due to
+  https://bugs.gentoo.org/792705
+- but LTO with clang is broken in TW so disable LTO for it
+  https://bugs.llvm.org/show_bug.cgi?id=47872
 
 -------------------------------------------------------------------
 Thu May  6 13:40:10 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>