Commit Graph

  • 062ac2aed4 Accepting request 1103590 from home:adamm:ldbug Wolfgang Rosenauer 2023-08-12 20:13:40 +0000
  • 2d4931ecd0 Accepting request 1103536 from mozilla:Factory Dominique Leuenberger 2023-08-12 13:06:14 +0000
  • 5ef499faa4 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1096 Wolfgang Rosenauer 2023-08-11 14:23:29 +0000
  • 3a86056012 Accepting request 1103454 from home:adamm:branches:mozilla:Factory Wolfgang Rosenauer 2023-08-11 14:20:02 +0000
  • 155b3d9c31 Accepting request 1103362 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-08-10 20:13:00 +0000
  • 49fcd30862 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1093 Wolfgang Rosenauer 2023-08-07 07:24:23 +0000
  • ef55d0543e Accepting request 1102535 from home:Andreas_Schwab:riscv:mozilla Wolfgang Rosenauer 2023-08-06 07:59:16 +0000
  • b4c782f656 Accepting request 1102496 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-08-06 07:58:18 +0000
  • 9f4536dddd OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1090 Wolfgang Rosenauer 2023-08-04 17:04:22 +0000
  • 119d807d14 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1089 Wolfgang Rosenauer 2023-08-04 17:03:28 +0000
  • 28cc6cc335 - drop obsolete mozilla-bmo1775202.patch Wolfgang Rosenauer 2023-08-04 10:40:33 +0000
  • d9a83463ef - re-enable ppc64le - ship v4l2test binary for supported archs Wolfgang Rosenauer 2023-08-04 10:12:18 +0000
  • b33933d92e OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1086 Wolfgang Rosenauer 2023-08-03 06:11:35 +0000
  • af84a81635 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1085 Wolfgang Rosenauer 2023-08-03 04:42:17 +0000
  • e2f2e91dcf OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1084 Wolfgang Rosenauer 2023-08-02 18:35:36 +0000
  • f8dc58b23c OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1083 Wolfgang Rosenauer 2023-08-02 12:41:25 +0000
  • ebfb67fa55 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1082 Wolfgang Rosenauer 2023-08-02 09:08:02 +0000
  • a83fab0562 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1081 Wolfgang Rosenauer 2023-08-02 07:55:21 +0000
  • 03b7e7950d * https://www.mozilla.org/en-US/firefox/116.0/releasenotes/ MFSA 2023-29 (bsc#1213746) * CVE-2023-4045 (bmo#1833876) Offscreen Canvas could have bypassed cross-origin restrictions * CVE-2023-4046 (bmo#1837686) Incorrect value used during WASM compilation * CVE-2023-4047 (bmo#1839073) Potential permissions request bypass via clickjacking * CVE-2023-4048 (bmo#1841368) Crash in DOMParser due to out-of-memory conditions * CVE-2023-4049 (bmo#1842658) Fix potential race conditions when releasing platform objects * CVE-2023-4050 (bmo#1843038) Stack buffer overflow in StorageManager * CVE-2023-4051 (bmo#1821884) Full screen notification obscured by file open dialog * CVE-2023-4052 (bmo#1824420) File deletion and privilege escalation through Firefox uninstaller * CVE-2023-4053 (bmo#1839079) Full screen notification obscured by external program * CVE-2023-4054 (bmo#1840777) Lack of warning when opening appref-ms files * CVE-2023-4055 (bmo#1782561) Cookie jar overflow caused unexpected cookie jar state * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 * CVE-2023-4057 (bmo#1841682) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Wolfgang Rosenauer 2023-08-02 07:26:14 +0000
  • 8197a462a5 - Mozilla Firefox 116.0 - require NSS 3.91 - remove obsolete mozilla-fix-top-level-asm.patch - re-enable LTO Wolfgang Rosenauer 2023-08-01 20:59:19 +0000
  • 0c88ab7335 Accepting request 1101322 from mozilla:Factory Dominique Leuenberger 2023-07-30 18:57:38 +0000
  • 38ca28006f Accepting request 1101319 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-07-29 12:27:50 +0000
  • 25ef0ddad6 Accepting request 1098544 from mozilla:Factory Dominique Leuenberger 2023-07-15 21:14:27 +0000
  • eea8e1ad28 - Mozilla Firefox 115.0.2 * Fixed a bug with displaying a caret in the text editor on some websites (bmo#1840804) * Fixed a bug with broken audio rendering on some websites (bmo#1841982) * Fixed a bug with patternTransform translate using the wrong units (bmo#1840746) MFSA 2023-26 (bsc#1213230) * CVE-2023-3600 (bmo#1839703) Use-after-free in workers Wolfgang Rosenauer 2023-07-13 13:44:31 +0000
  • b3b53fc404 Accepting request 1097630 from mozilla:Factory Dominique Leuenberger 2023-07-08 20:46:13 +0000
  • 888ad71ef0 Accepting request 1097629 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-07-07 20:25:49 +0000
  • 954bf15261 Accepting request 1097019 from mozilla:Factory Fabian Vogt 2023-07-06 16:28:06 +0000
  • 82053303d3 - Mozilla Firefox 115.0 * Support for importing payment methods saved in Chrome-based browser * Hardware video decoding is now enabled for Intel GPUs on Linux * The Tab Manager dropdown now features close buttons, so tabs can be closed more quickly * Streamlined the user interface for importing data in from other browsers * Users without platform support for H264 video decoding can now fallback to Cisco's OpenH264 plugin for playback. * Undo and redo are now available in Password fields * Changed: On Linux, middle clicks on the new tab button will now open the xclipboard contents in the new tab. If the xclipboard content is a URL then that URL is opened, any other text is opened with your default search provider. * Changed: For users with a Firefox Colorways built-in theme, the theme will be automatically migrated to the same theme hosted on addons.mozilla.org for Firefox profiles that have disabled add-ons auto-updates. This will allow users to keep their Colorways theme when they are later removed from Firefox installer files. * Changed: Certain Firefox users may come across a message in the extensions panel indicating that their add-ons are not allowed on the site currently open. We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run on specific websites for various reasons, including security concerns. * HTML5: The builtin editor now behaves similarly to other browsers with contenteditable and designMode when splitting a node, e.g. typing Enter to split a paragraph, and also when joining two nodes, e.g. typing Backspace at the start of a paragraph to join the paragraph and the previous Wolfgang Rosenauer 2023-07-05 21:06:07 +0000
  • 5680dcf760 Accepting request 1094241 from mozilla:Factory Dominique Leuenberger 2023-06-21 20:37:30 +0000
  • 871587aafc Accepting request 1094224 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-06-20 21:30:52 +0000
  • 62c83bccda - do not enable LTO as it caused crashes now (boo#1212101) mozilla-bmo1005535.patch mozilla-s390x-skia-gradient.patch Wolfgang Rosenauer 2023-06-20 06:31:10 +0000
  • bbf30e466b Accepting request 1092022 from mozilla:Factory Dominique Leuenberger 2023-06-12 13:25:06 +0000
  • 24a9e3ddcb Accepting request 1092018 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-06-10 15:11:56 +0000
  • 55dff7d4a5 Accepting request 1089039 from mozilla:Factory Dominique Leuenberger 2023-05-26 18:15:11 +0000
  • 6caaefa8ca Accepting request 1088911 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-05-25 13:45:47 +0000
  • e1cc4cc48a Accepting request 1087124 from mozilla:Factory Dominique Leuenberger 2023-05-15 14:54:03 +0000
  • d4b52ebc4a Accepting request 1087021 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-05-14 18:44:10 +0000
  • 3a7d9558a7 Accepting request 1085989 from mozilla:Factory Dominique Leuenberger 2023-05-11 10:31:37 +0000
  • c51a7ff93a OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1060 Wolfgang Rosenauer 2023-05-10 06:34:41 +0000
  • 9ce57073ae - Mozilla Firefox 113.0 * https://www.mozilla.org/en-US/firefox/113.0/releasenotes MFSA 2023-16 (bsc#1211175) * CVE-2023-32205 (bmo#1753339, bmo#1753341) Browser prompts could have been obscured by popups * CVE-2023-32206 (bmo#1824892) Crash in RLBox Expat driver * CVE-2023-32207 (bmo#1826116) Potential permissions request bypass via clickjacking * CVE-2023-32208 (bmo#1646034) Leak of script base URL in service workers via import() * CVE-2023-32209 (bmo#1767194) Persistent DoS via favicon image * CVE-2023-32210 (bmo#1776755) Incorrect principal object ordering * CVE-2023-32211 (bmo#1823379) Content process crash due to invalid wasm code * CVE-2023-32212 (bmo#1826622) Potential spoof due to obscured address bar * CVE-2023-32213 (bmo#1826666) Potential memory corruption in FileReader::DoReadData() * MFSA-TMP-2023-0002 (bmo#1814560, bmo#1814790, bmo#1819796) Race condition in dav1d decoding * CVE-2023-32214 (bmo#1828716) Potential DoS via exposed protocol handlers * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856, bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024, bmo#1827144, bmo#1827359, bmo#1830186) Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 * CVE-2023-32216 (bmo#1746479, bmo#1806852, bmo#1815987, Wolfgang Rosenauer 2023-05-10 06:26:50 +0000
  • 932f9acd0c Accepting request 1085402 from mozilla:Factory Dominique Leuenberger 2023-05-09 11:07:21 +0000
  • c1a18b007d Accepting request 1085361 from home:aaronpuchert:branches:mozilla:Factory Wolfgang Rosenauer 2023-05-08 05:59:59 +0000
  • 5fb3b3490a Accepting request 1082809 from mozilla:Factory Dominique Leuenberger 2023-04-27 17:56:49 +0000
  • a2aae95ca7 Accepting request 1082806 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-04-25 17:09:11 +0000
  • 9de11f7822 Accepting request 1080954 from mozilla:Factory Dominique Leuenberger 2023-04-22 19:56:24 +0000
  • 10e1ac0514 Accepting request 1080895 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-04-20 19:38:57 +0000
  • 258ef68e59 Accepting request 1078521 from mozilla:Factory Dominique Leuenberger 2023-04-13 12:09:31 +0000
  • df4a0a1c4b - Mozilla Firefox 112.0 * https://www.mozilla.org/en-US/firefox/112.0/releasenotes/ MFSA 2023-13 (bsc#1210212) * CVE-2023-29531 (bmo#1794292) Out-of-bound memory access in WebGL on macOS * CVE-2023-29532 (bmo#1806394) Mozilla Maintenance Service Write-lock bypass * CVE-2023-29533 (bmo#1798219, bmo#1814597) Fullscreen notification obscured * CVE-2023-29534 (bmo#1816007, bmo#1816059, bmo#1821155, bmo#1821576, bmo#1821906, bmo#1822298, bmo#1822305) Fullscreen notification could have been obscured on Firefox for Android * MFSA-TMP-2023-0001 (bmo#1819244) Double-free in libwebp * CVE-2023-29535 (bmo#1820543) Potential Memory Corruption following Garbage Collector compaction * CVE-2023-29536 (bmo#1821959) Invalid free from JavaScript code * CVE-2023-29537 (bmo#1823365, bmo#1824200, bmo#1825569) Data Races in font initialization code * CVE-2023-29538 (bmo#1685403) Directory information could have been leaked to WebExtensions * CVE-2023-29539 (bmo#1784348) Content-Disposition filename truncation leads to Reflected File Download * CVE-2023-29540 (bmo#1790542) Iframe sandbox bypass using redirects and sourceMappingUrls * CVE-2023-29541 (bmo#1810191) Files with malicious extensions could have been downloaded Wolfgang Rosenauer 2023-04-11 21:09:55 +0000
  • 808948fb2b Accepting request 1077029 from mozilla:Factory Dominique Leuenberger 2023-04-04 19:17:24 +0000
  • 01aefd0ce5 - exclude i586/i686 once again because it fails to link libxul due to its size Wolfgang Rosenauer 2023-03-27 15:18:05 +0000
  • 28f1396420 - Mozilla Firefox 111.0.1 (boo#1209688) * Fixed a crash on macOS while pinch-zooming under some circumstances (bmo#1658986) * Fixed a bug causing Firefox to freeze on startup for some Windows users (bmo#1823159) - fix build on Tumbleweed (mozilla-bmo1807652.patch) Wolfgang Rosenauer 2023-03-26 17:00:08 +0000
  • 708d958a66 Accepting request 1072979 from home:Thaodan:branches:mozilla:Factory Wolfgang Rosenauer 2023-03-20 07:47:31 +0000
  • 38ab2454d8 - Mozilla Firefox 111.0 * https://www.mozilla.org/en-US/firefox/111.0/releasenotes MFSA 2023-09 (bsc#1209173) * CVE-2023-28159 (bmo#1783561) Fullscreen Notification could have been hidden by download popups on Android * CVE-2023-25748 (bmo#1798798) Fullscreen Notification could have been hidden by window prompts on Android * CVE-2023-25749 (bmo#1810705) Firefox for Android may have opened third-party apps without a prompt * CVE-2023-25750 (bmo#1814733) Potential ServiceWorker cache leak during private browsing mode * CVE-2023-25751 (bmo#1814899) Incorrect code generation during JIT compilation * CVE-2023-28160 (bmo#1802385) Redirect to Web Extension files may have leaked local path * CVE-2023-28164 (bmo#1809122) URL being dragged from a removed cross-origin iframe into the same tab triggered navigation * CVE-2023-28161 (bmo#1811181) One-time permissions granted to a local file were extended to other local files loaded in the same tab * CVE-2023-28162 (bmo#1811327) Invalid downcast in Worklets * CVE-2023-25752 (bmo#1811627) Potential out-of-bounds when accessing throttled streams * CVE-2023-28163 (bmo#1817768) Windows Save As dialog resolved environment variables Wolfgang Rosenauer 2023-03-15 08:38:02 +0000
  • 348a85f8c0 Accepting request 1070344 from mozilla:Factory Dominique Leuenberger 2023-03-11 17:22:13 +0000
  • 0cc95b3368 Accepting request 1069866 from mozilla:Factory Dominique Leuenberger 2023-03-08 13:51:33 +0000
  • 7506067808 - Fix 32 bit build bmo#1810584 (add mozilla-bmo1810584.patch) - Mozilla Firefox 110.0.1 (boo#1208886) Digital ID in Denmark (bmo#1819096) Wolfgang Rosenauer 2023-03-07 10:04:24 +0000
  • 1886b3b7c9 Accepting request 1069880 from home:marxin:branches:mozilla:Factory Wolfgang Rosenauer 2023-03-07 10:01:14 +0000
  • 5e3b24dd6a Accepting request 1069865 from openSUSE:Factory:RISCV Wolfgang Rosenauer 2023-03-07 08:46:06 +0000
  • abe3bb20b2 Accepting request 1069444 from mozilla:Factory Dominique Leuenberger 2023-03-06 17:54:05 +0000
  • 4161893523 Accepting request 1069419 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-03-05 06:01:08 +0000
  • a0299253b8 Accepting request 1069272 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-03-03 22:24:28 +0000
  • 8c7db35439 - Mozilla Firefox 110.0 * https://www.mozilla.org/en-US/firefox/110.0/releasenotes MFSA 2023-05 (bsc#1208144) * CVE-2023-25728 (bmo#1790345) Content security policy leak in violation reports using iframes * CVE-2023-25730 (bmo#1794622) Screen hijack via browser fullscreen mode * CVE-2023-25743 (bmo#1800203) Fullscreen notification not shown in Firefox Focus * CVE-2023-0767 (bmo#1804640) Arbitrary memory write via PKCS 12 in NSS * CVE-2023-25735 (bmo#1810711) Potential use-after-free from compartment mismatch in SpiderMonkey * CVE-2023-25737 (bmo#1811464) Invalid downcast in SVGUtils::SetupStrokeGeometry * CVE-2023-25738 (bmo#1811852) Printing on Windows could potentially crash Firefox with some device drivers * CVE-2023-25739 (bmo#1811939) Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext * CVE-2023-25729 (bmo#1792138) Extensions could have opened external schemes without user knowledge * CVE-2023-25732 (bmo#1804564) Out of bounds memory write from EncodeInputStream * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143, bmo#1812338) Opening local .url files could cause unexpected network loads * CVE-2023-25740 (bmo#1812354) Opening local .scf files could cause unexpected network loads * CVE-2023-25731 (bmo#1801542) Prototype pollution when rendering URLPreview Wolfgang Rosenauer 2023-02-15 21:11:31 +0000
  • 32850f782e Accepting request 1062544 from mozilla:Factory Dominique Leuenberger 2023-02-02 17:07:47 +0000
  • 7938696dc2 Accepting request 1062535 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-02-01 20:43:46 +0000
  • 953b85891d Accepting request 1059273 from mozilla:Factory Dominique Leuenberger 2023-01-20 16:36:31 +0000
  • b45fd771cd - Mozilla Firefox 109.0 MFSA 2023-01 (bsc#1207119) * CVE-2023-23597 (bmo#1538028) Logic bug in process allocation allowed to read arbitrary files * CVE-2023-23598 (bmo#1800425) Arbitrary file read from GTK drag and drop on Linux * CVE-2023-23599 (bmo#1777800) Malicious command could be hidden in devtools output on Windows * CVE-2023-23600 (bmo#1787034) Notification permissions persisted between Normal and Private Browsing on Android * CVE-2023-23601 (bmo#1794268) URL being dragged from cross-origin iframe into same tab triggers navigation * CVE-2023-23602 (bmo#1800890) Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers * CVE-2023-23603 (bmo#1800832) Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive * CVE-2023-23604 (bmo#1802346) Creation of duplicate <code>SystemPrincipal</code> from less secure contexts * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974) Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 * CVE-2023-23606 (bmo#1764974, bmo#1798591, bmo#1799201, bmo#1800446, bmo#1801248, bmo#1802100, bmo#1803393, bmo#1804626, bmo#1804971, bmo#1807004) Wolfgang Rosenauer 2023-01-18 07:21:07 +0000
  • 30792c4d34 Accepting request 1056394 from mozilla:Factory Dominique Leuenberger 2023-01-07 16:16:07 +0000
  • 6767b9f284 Accepting request 1056391 from home:luc14n0:branches:mozilla:Factory Wolfgang Rosenauer 2023-01-06 12:39:34 +0000
  • 47e33a892c Accepting request 1044163 from mozilla:Factory Dominique Leuenberger 2022-12-23 09:20:48 +0000
  • 58f0d1e270 - add mozilla-bmo1805809.patch to fix build for x86-32 (boo#1206600) Wolfgang Rosenauer 2022-12-21 16:08:13 +0000
  • 7d1196d8c6 Accepting request 1043934 from mozilla:Factory Dominique Leuenberger 2022-12-21 15:05:48 +0000
  • 1045a27659 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1027 Wolfgang Rosenauer 2022-12-20 15:28:29 +0000
  • 1498efd183 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1026 Wolfgang Rosenauer 2022-12-20 15:27:14 +0000
  • ec5a29f477 - Mozilla Firefox 108.0.1 (boo#1206507) * Fixes the default search engine being reset on upgrade for profiles which were previously copied from a different location Wolfgang Rosenauer 2022-12-20 08:04:12 +0000
  • 1c9c2f3dd5 - Mozilla Firefox 108.0 https://www.mozilla.org/en-US/firefox/108.0/releasenotes/ MFSA 2022-51 (bsc#1206242) * CVE-2022-46871 (bmo#1795697) libusrsctp library out of date * CVE-2022-46872 (bmo#1799156) Arbitrary file read from a compromised content process * CVE-2022-46873 (bmo#1644790) Firefox did not implement the CSP directive unsafe-hashes * CVE-2022-46874 (bmo#1746139) Drag and Dropped Filenames could have been truncated to malicious extensions * CVE-2022-46875 (bmo#1786188) Download Protections were bypassed by .atloc and .ftploc files on Mac OS * CVE-2022-46877 (bmo#1795139) Fullscreen notification bypass * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685, bmo#1801102, bmo#1801315, bmo#1802395) Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6 * CVE-2022-46879 (bmo#1736224, bmo#1793407, bmo#1794249, bmo#1795845, bmo#1797682, bmo#1797720, bmo#1798494, bmo#1799479) Memory safety bugs fixed in Firefox 108 - requires NSS >= 3.85 rustc/cargo 1.65 Wolfgang Rosenauer 2022-12-13 21:48:56 +0000
  • 948218484d Accepting request 1041338 from home:milachew:branches:mozilla:Factory Wolfgang Rosenauer 2022-12-09 09:40:12 +0000
  • fc347e1056 Accepting request 1039406 from mozilla:Factory Dominique Leuenberger 2022-12-02 12:12:25 +0000
  • 8200399c53 Accepting request 1039401 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2022-12-01 21:39:40 +0000
  • 9488c60e72 Accepting request 1036230 from mozilla:Factory Dominique Leuenberger 2022-11-17 16:23:52 +0000
  • c9ea1238e9 - Mozilla Firefox 107.0 MFSA 2022-47 (bsc#1205270) * CVE-2022-45403 (bmo#1762078) Service Workers might have learned size of cross-origin media files * CVE-2022-45404 (bmo#1790815) Fullscreen notification bypass * CVE-2022-45405 (bmo#1791314) Use-after-free in InputStream implementation * CVE-2022-45406 (bmo#1791975) Use-after-free of a JavaScript Realm * CVE-2022-45407 (bmo#1793314) Loading fonts on workers was not thread-safe * CVE-2022-45408 (bmo#1793829) Fullscreen notification bypass via windowName * CVE-2022-45409 (bmo#1796901) Use-after-free in Garbage Collection * CVE-2022-45410 (bmo#1658869) ServiceWorker-intercepted requests bypassed SameSite cookie policy * CVE-2022-45411 (bmo#1790311) Cross-Site Tracing was possible via non-standard override headers * CVE-2022-45412 (bmo#1791029) Symlinks may resolve to partially uninitialized buffers * CVE-2022-45413 (bmo#1791201) SameSite=Strict cookies could have been sent cross-site via intent URLs * CVE-2022-40674 (bmo#1791598) Use-after-free vulnerability in expat * CVE-2022-45415 (bmo#1793551) Downloaded file may have been saved with malicious extension * CVE-2022-45416 (bmo#1793676) Wolfgang Rosenauer 2022-11-16 13:36:59 +0000
  • 091a155ca4 Accepting request 1033697 from mozilla:Factory Dominique Leuenberger 2022-11-06 11:41:37 +0000
  • 1e9f34d721 Accepting request 1033693 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2022-11-05 16:17:24 +0000
  • 1bb45920a5 Accepting request 1032848 from mozilla:Factory Dominique Leuenberger 2022-11-03 18:13:16 +0000
  • 383a39a2f4 - Mozilla Firefox 106.0.3 * Fixes for other platforms Wolfgang Rosenauer 2022-11-02 07:04:04 +0000
  • 9f69cda729 Accepting request 1031637 from mozilla:Factory Dominique Leuenberger 2022-10-28 17:29:32 +0000
  • ecb5748542 - Mozilla Firefox 106.0.2 * Fix missing content on some PDF forms (bmo#1794351) * Fix column width for the Notification sub-panel in Settings (bmo#1793558) * Fix a browser freeze with accessibility enabled on some sites such as the Proxmox Web UI (bmo#1793748) * Fix page reloading not working with Firefox View and not refreshing synced data (bmo#1792680, bmo#1794474) Wolfgang Rosenauer 2022-10-27 21:08:41 +0000
  • 2a6fdd7c5b Accepting request 1030584 from mozilla:Factory Dominique Leuenberger 2022-10-23 14:32:45 +0000
  • 521232e015 - Mozilla Firefox 106.0.1 * Addresses a crash experienced by users with AMD Zen 1 CPUs (bmo#1796126) Wolfgang Rosenauer 2022-10-23 08:53:25 +0000
  • 44f5500b05 Accepting request 1030290 from mozilla:Factory Dominique Leuenberger 2022-10-22 12:12:03 +0000
  • f8be38ac8b - added -msse2 flag to fix i386 build and workaround bmo#1795993 - fixed used buildflags - renamed mozilla-i686-build.patch to mozilla-buildfixes.patch as it was extended with changes for other archs Wolfgang Rosenauer 2022-10-20 21:12:10 +0000
  • 4dd806ea87 - Mozilla Firefox 106.0 * support editing of PDFs * introduced Firefox View * major WebRTC update - Better screen sharing for Windows and Linux Wayland users - RTP performance and reliability improvements - Richer statistics - Cross-browser and service compatibility improvements * detailed releasenotes https://www.mozilla.org/en-US/firefox/106.0/releasenotes MFSA 2022-44 (bsc#1204421) * CVE-2022-42927 (bmo#1789128) Same-origin policy violation could have leaked cross-origin URLs * CVE-2022-42928 (bmo#1791520) Memory Corruption in JS Engine * CVE-2022-42929 (bmo#1789439) Denial of Service via window.print * CVE-2022-42930 (bmo#1789503) Race condition in DOM Workers * CVE-2022-42931 (bmo#1780571) Username saved to a plaintext file on disk * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041) Memory safety bugs fixed in Firefox Wolfgang Rosenauer 2022-10-18 20:10:44 +0000
  • 9c18aa5479 Accepting request 1009258 from mozilla:Factory Dominique Leuenberger 2022-10-12 16:22:55 +0000
  • faf5bbda6a OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1006 Wolfgang Rosenauer 2022-10-09 20:45:53 +0000
  • c23a3695e5 Accepting request 1008938 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2022-10-09 07:54:20 +0000
  • 64f10b5910 Accepting request 1008280 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2022-10-06 07:14:45 +0000
  • 3fffbcb70d Accepting request 1002272 from mozilla:Factory Dominique Leuenberger 2022-09-10 18:16:51 +0000
  • 5ffc1b196b Accepting request 1002263 from home:Guillaume_G:branches:mozilla:Factory Wolfgang Rosenauer 2022-09-09 09:09:55 +0000
  • e4d9cbf026 Accepting request 1001583 from mozilla:Factory Dominique Leuenberger 2022-09-08 12:21:21 +0000
  • e19b31cbfd - Mozilla Firefox 104.0.2 (boo#1203177) https://www.mozilla.org/en-US/firefox/104.0.2/releasenotes/ * Fixed a bug making it impossible to use touch or a stylus to drag the scrollbar on pages (bmo#1787361) * Fixed an issue causing some users to crash in out-of-memory conditions (bmo#1774155) * Fixed an issue that would sometimes affect video & audio playback when loaded via a cross-origin iframe src attribute (bmo#1781759) * Fixed an issue that would sometimes affect video & audio playback when served with Content-Security-Policy: sandbox (bmo#1781063) Wolfgang Rosenauer 2022-09-07 06:58:25 +0000
  • c37c6eba55 - Mozilla Firefox 104.0.1 * Addresses an issue with Youtube video playback that was affecting some users (boo#1203003) Wolfgang Rosenauer 2022-09-01 07:15:39 +0000