pool/MozillaFirefox
SHA256
14
0
Fork 1
Code Issues Pull Requests Activity

Accepting request 1291039 from mozilla:Factory

Browse Source 
- Mozilla Firefox 140.0.2
  * Fixed a startup crash on Windows experienced by some users
    (bmo#1974259)
- Mozilla Firefox 140.0.1
  * Fixed text contrast issues in the sidebar with some dark themes
    (bmo#1971487)
  * Fixed a startup crash experienced by some users caused by DLL
    injection (mbo#1973947)

- Firefox 140.0 Release
  * New: Vertical Tabs: You can now keep more — or fewer — pinned
    tabs in view for quicker access to important windows. Just
    drag the divider to resize your pinned tabs section.
  * New: Custom Search Engines: Firefox now supports adding even
    more search engines. To add a custom engine, right-click a
    search field of a supported website and select “Add Search
    Engine”, or go to Settings > Search > Add (below the search
    shortcuts table) to manually enter a search URL.
  * New: Firefox Extensions: Customize your toolbar with the
    option to remove the extensions shortcut, giving you more
    control over your browser. When the button is hidden, you can
    access the extensions panel again at any time from the
    Firefox menu by clicking the Extensions menu item.
  * New: You can now unload tabs by right-clicking on a tab (or
    multiple selected tabs) and selecting "Unload Tab". This can
    speed up performance by reducing Firefox's memory and CPU
    usage.
  * New: Full-Page Translations now prioritizes translating only
    the content near your current view, improving speed and
    responsiveness. Content outside your view is skipped unless

OBS-URL: https://build.opensuse.org/request/show/1291039
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=460
This commit is contained in:
Ana Guerrero
2025-07-09 15:25:36 +00:00
committed by Git OBS Bridge
parent 948b5f39d0 f5de6987c8
commit 331649180e
9 changed files with 171 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

148
MozillaFirefox.changes
View File

@@ -1,16 +1,146 @@
-------------------------------------------------------------------
Sun Jun 29 07:33:44 UTC 2025 - Wolfgang Rosenauer <wr@rosenauer.org>
- Mozilla Firefox 140.0.2
* Fixed a startup crash on Windows experienced by some users
(bmo#1974259)
- Mozilla Firefox 140.0.1
* Fixed text contrast issues in the sidebar with some dark themes
(bmo#1971487)
* Fixed a startup crash experienced by some users caused by DLL
injection (mbo#1973947)
-------------------------------------------------------------------
Tue Jun 24 07:09:28 UTC 2025 - Manfred Hollstein <manfred.h@gmx.net>
- Firefox 140.0 Release
* New: Vertical Tabs: You can now keep more — or fewer — pinned
tabs in view for quicker access to important windows. Just
drag the divider to resize your pinned tabs section.
* New: Custom Search Engines: Firefox now supports adding even
more search engines. To add a custom engine, right-click a
search field of a supported website and select “Add Search
Engine”, or go to Settings > Search > Add (below the search
shortcuts table) to manually enter a search URL.
* New: Firefox Extensions: Customize your toolbar with the
option to remove the extensions shortcut, giving you more
control over your browser. When the button is hidden, you can
access the extensions panel again at any time from the
Firefox menu by clicking the Extensions menu item.
* New: You can now unload tabs by right-clicking on a tab (or
multiple selected tabs) and selecting "Unload Tab". This can
speed up performance by reducing Firefox's memory and CPU
usage.
* New: Full-Page Translations now prioritizes translating only
the content near your current view, improving speed and
responsiveness. Content outside your view is skipped unless
you scroll to it, reducing unnecessary resource usage.
* New: Firefox builds in Arabic now come with a built-in Arabic
dictionary for the Firefox spellchecker.
* New: Address autofill enabled for users in Italy, Poland, and
Austria.
* Changed: The Pocket toolbar icon, as well as the Pocket
integrations on New Tab, have been removed per the service
shutdown announcement.
* HTML5: Added platform support for aria-keyshortcuts in Linux,
macOS, and Windows.
* HTML5: Added support for the CookieStore API, an asynchronous
cookie API for scripts running in HTML documents and service
workers.
* HTML5: Added support for the Custom Highlight API, which
allows styling arbitrary text ranges. Support for text-
decoration is not included and is planned for an upcoming
release.
* HTML5: Added support for the pointerrawupdate event. This
event provides lower-latency access to pointer movements by
firing as soon as the pointer data is available, typically
before the main `pointermove` event. Unlike `pointermove`, it
performs an additional hit test to determine the target and
fires more frequently, which may impact performance even if
only a listener is added. This event is intended for
applications that require high-precision input handling and
cannot achieve smooth interaction using coalesced
`pointermove` events alone.
* HTML5: Service Workers are now available in Private Browsing
Mode. This enhancement builds on our efforts to support
IndexedDB and the DOM Cache API in Private Browsing through
encrypted storage. With this change, more websites,
especially those that rely on background tasks, will be able
to benefit from Service workers.
* HTML5: Firefox now applies a uniform user agent (UA) style to
`<h1>` elements, regardless of whether they are used inside
`<article>`, `<aside>`, `<nav>`, or `<section>`.
* HTML5: Firefox will now escape less-than (`<`) and greater-
than (`>`) symbols when serializing HTML attributes, making
certain mXSS attacks on websites more difficult.
* Developer: Improved the search feature in the Inspector panel
to help developers more effectively search the DOM of the
current page. Sorting the results by the number of matching
elements, support “pseudo” selector state, etc.
* Enterprise: You can find information about policy updates and
enterprise specific bug fixes in the Firefox for Enterprise
140 Release Notes.
* Fixed: Various security fixes.
- Mozilla Firefox 140.0
https://www.mozilla.org/en-US/firefox/140.0/releasenotes/
MFSA 2025-51 (bsc#1244670)
* CVE-2025-6424 (bmo#1966423)
Use-after-free in FontFaceSet
* CVE-2025-6425 (bmo#1717672)
The WebCompat WebExtension shipped with Firefox exposed a
persistent UUID
* CVE-2025-6426 (bmo#1964385)
No warning when opening executable terminal files on macOS
* CVE-2025-6427 (bmo#1966927)
connect-src Content Security Policy restriction could be
bypassed
* CVE-2025-6428 (bmo#1970151)
Firefox for Android opened URLs specified in a link
querystring parameter
* CVE-2025-6429 (bmo#1970658)
Incorrect parsing of URLs could have allowed embedding of
youtube.com
* CVE-2025-6430 (bmo#1971140)
Content-Disposition header ignored when a file is included in
an embed or object tag
* CVE-2025-6431 (bmo#1942716)
The prompt in Firefox for Android that asks before opening a
link in an external application could be bypassed
* CVE-2025-6432 (bmo#1943804)
DNS Requests leaked outside of a configured SOCKS proxy
* CVE-2025-6433 (bmo#1954033)
WebAuthn would allow a user to sign a challenge on a webpage
with an invalid TLS certificate
* CVE-2025-6434 (bmo#1955182)
HTTPS-Only exception screen lacked anti-clickjacking delay
* CVE-2025-6435 (bmo#1950056, bmo#1961777)
Save as in Devtools could download files without sanitizing
the extension
* CVE-2025-6436 (bmo#1941377, bmo#1960948, bmo#1966187,
bmo#1966505, bmo#1970764)
Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- requires
NSS >= 3.112
cargo/rust 1.86
-------------------------------------------------------------------
Wed Jun 11 16:59:31 UTC 2025 - Wolfgang Rosenauer <wr@rosenauer.org>
- Firefox 139.0.4 Release
* Fixed: Fixed Firefox freezing when switching between apps or
opening certain panels within the browser. (Bug 1969253 & Bug
1969346)
* Fixed: Fixed difficult selection of drop-down menu options in
the Firefox preferences page when selected via the in-page
search. (bmo#1968949)
* Fixed: Fixed various selection issues when triple-clicking
text in some situations. (Bug 1969100 & Bug 1969432)
* Fixed: Fixed an incorrect filename being used when setting an
image as the desktop wallpaper on Windows. (bmo#1969793)
* Fixed: Various security fixes.
- Mozilla Firefox 139.0.4
* Fixed Firefox freezing when switching between apps or opening
certain panels within the browser. (bmo#1969253, bmo#1969346)
* Fixed difficult selection of drop-down menu options in the Firefox
preferences page when selected via the in-page search. (bmo#1968949)
* Fixed various selection issues when triple-clicking text in some
situations. (bmo#1969100, bmo#1969432)
* Fixed an incorrect filename being used when setting an image
as the desktop wallpaper on Windows. (bmo#1969793)
MFSA 2025-47
https://www.mozilla.org/en-US/firefox/139.0.4/releasenotes/
MFSA 2025-47 (bsc#1244468)
* CVE-2025-49709 (bmo#1966083)
Memory corruption in canvas surfaces
* CVE-2025-49710 (bmo#1970095)

12
MozillaFirefox.spec
View File

@@ -28,9 +28,9 @@
# orig_suffix b3
# major 69
# mainver %%major.99
%define major 139
%define mainver %major.0.4
%define orig_version 139.0.4
%define major 140
%define mainver %major.0.2
%define orig_version 140.0.2
%define orig_suffix %{nil}
%define update_channel release
%define branding 1
@@ -103,8 +103,8 @@ BuildRequires: gcc13-c++
%else
BuildRequires: gcc-c++
%endif
BuildRequires: cargo1.84
BuildRequires: rust1.84
BuildRequires: cargo1.86
BuildRequires: rust1.86
%if 0%{useccache} != 0
BuildRequires: ccache
%endif
@@ -114,7 +114,7 @@ BuildRequires: libiw-devel
BuildRequires: libproxy-devel
BuildRequires: makeinfo
BuildRequires: mozilla-nspr-devel >= 4.36
BuildRequires: mozilla-nss-devel >= 3.110
BuildRequires: mozilla-nss-devel >= 3.112
BuildRequires: nasm >= 2.14
BuildRequires: nodejs >= 12.22.12
%if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000

3
firefox-139.0.4.source.tar.xz
View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:535e053fc3f949c6d7dd78a0a0b4997e5e26db7ef1e11d51b2b9a9f4022287f5
size 644670560

16
firefox-139.0.4.source.tar.xz.asc
View File

@@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=M6/N
-----END PGP SIGNATURE-----

3
firefox-140.0.2.source.tar.xz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:70ae55a840f5d5656a74e224607af3748d2187f880d129e28afe64433c8a5c03
size 639762328

16
firefox-140.0.2.source.tar.xz.asc Normal file
View File

@@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=cxSq
-----END PGP SIGNATURE-----

3
l10n-139.0.4.tar.xz
View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:bb9ab10df7aa69a523b2473f467dcb528634704b4e6e9975b063f55f14218747
size 35117984

3
l10n-140.0.2.tar.xz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:fabe3ab53ebd9301441cac4a9e074c342addae82d820788aa38b181d8f901987
size 37721796

8
tar_stamps
View File

@@ -1,10 +1,10 @@
PRODUCT="firefox"
CHANNEL="release"
VERSION="139.0.4"
VERSION="140.0.2"
VERSION_SUFFIX=""
PREV_VERSION="139.0.1"
PREV_VERSION="140.0"
PREV_VERSION_SUFFIX=""
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
RELEASE_TAG="3825afc77e5b74caa29339e9c0f77c403dfc963b"
RELEASE_TIMESTAMP="20250609112858"
RELEASE_TAG="b27c61d0860f58ea4ebe4ccfa187f8e0b8e6ee8c"
RELEASE_TIMESTAMP="20250627085530"