--- a/MozillaFirefox/MozillaFirefox.changes Sat Jun 23 17:04:50 2018 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes Thu Aug 23 16:35:52 2018 +0200
@@ -1,4 +1,31 @@
-------------------------------------------------------------------
+Thu Aug 9 14:22:00 UTC 2018 - wr@rosenauer.org
+
+- update to Firefox 61.0.2
+ * Improved website rendering with the Retained Display List feature
+ enabled (bmo#1474402)
+ * Fixed broken DevTools panels with certain extensions installed
+ (bmo#1474379)
+ * Fixed a crash for users with some accessibility tools enabled
+ (bmo#1474007)
+
+-------------------------------------------------------------------
+Mon Jul 9 07:22:09 UTC 2018 - astieger@suse.com
+
+- Mozilla Firefox 61.0.1:
+ * Fix missing content on the New Tab Page and the Home section of
+ the Preferences page (bmo#1471375)
+ * Fixed loss of bookmarks under rare circumstances when upgrading
+ from Firefox 60 (bmo#1472127)
+ * Improved playback of Twitch 1080p video streams (bmo#1469257)
+ * Web pages no longer lose focus when a browser popup window is
+ opened (bmo#1471415)
+ * Re-allowed downloading files from FTP sites via the "Save Link
+ As" option when linked from HTTP pages (bmo#1470295)
+ * Fixed extensions being unable to override the default homepage
+ in certain situations (bmo#1466846)
+
+-------------------------------------------------------------------
Sat Jun 23 07:25:51 UTC 2018 - wr@rosenauer.org
- update to Firefox 61.0
@@ -8,15 +35,57 @@
* OpenSearch plugins offered by web pages can now be added from the
page action menu for easier installation
* Improved support for allowing WebExtensions to manage and hide tabs
+ MFSA 2018-15 (bsc#1098998)
+ * CVE-2018-12359 (bmo#1459162)
+ Buffer overflow using computed size of canvas element
+ * CVE-2018-12360 (bmo#1459693)
+ Use-after-free when using focus()
+ * CVE-2018-12361 (bmo#1463244)
+ Integer overflow in SwizzleData
+ * CVE-2018-12358 (bmo#1467852)
+ Same-origin bypass using service worker and redirection
+ * CVE-2018-12362 (bmo#1452375)
+ Integer overflow in SSSE3 scaler
+ * CVE-2018-5156 (bmo#1453127)
+ Media recorder segmentation fault when track type is changed during capture
+ * CVE-2018-12363 (bmo#1464784)
+ Use-after-free when appending DOM nodes
+ * CVE-2018-12364 (bmo#1436241)
+ CSRF attacks through 307 redirects and NPAPI plugins
+ * CVE-2018-12365 (bmo#1459206)
+ Compromised IPC child process can list local filenames
+ * CVE-2018-12371 (bmo#1465686)
+ Integer overflow in Skia library during edge builder allocation
+ * CVE-2018-12366 (bmo#1464039)
+ Invalid data handling during QCMS transformations
+ * CVE-2018-12367 (bmo#1462891)
+ Timing attack mitigation of PerformanceNavigationTiming
+ * CVE-2018-12369 (bmo#1454909)
+ WebExtension security permission checks bypassed by embedded experiments
+ * CVE-2018-12370 (bmo#1456652)
+ SameSite cookie protections bypassed when exiting Reader View
+ * CVE-2018-5186 (bmo#1464872,bmo#1463329,bmo#1419373,bmo#1412882,
+ bmo#1413033,bmo#1444673,bmo#1454448,bmo#1453505,bmo#1438671)
+ Memory safety bugs fixed in Firefox 61
+ * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
+ bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
+ bmo#1463884)
+ Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
+ * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
+ bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
+ bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
+ bmo#1464079,bmo#1463494,bmo#1458048)
+ Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- requires NSS 3.37.3
+- requires python >= 3.5 to build
- removed obsolete patches
mozilla-i586-DecoderDoctorLogger.patch
mozilla-i586-domPrefs.patch
mozilla-fix-skia-aarch64.patch
mozilla-bmo1375074.patch
+ mozilla-enable-csd.patch
- patch for new no-return warnings (mozilla-no-return.patch)
- do not disable system installed locales (mozilla-bmo1464766.patch)
-- disabled outdated mozilla-enable-csd.patch temporarily
-------------------------------------------------------------------
Fri Jun 8 10:52:13 UTC 2018 - bjorn.lie@gmail.com