* Fixed: Various security fixes. - Mozilla Firefox ESR 140.1.0 https://www.mozilla.org/security/advisories/mfsa2025-59 MFSA 2025-59 (boo#1246664) * CVE-2025-8027 (bmo#1968423) JavaScript engine only wrote partial return value to stack * CVE-2025-8028 (bmo#1971581) Large branch table could lead to truncated instruction * CVE-2025-8029 (bmo#1928021) javascript: URLs executed on object and embed tags * CVE-2025-8036 (bmo#1960834) DNS rebinding circumvents CORS * CVE-2025-8037 (bmo#1964767) Nameless cookies shadow secure cookies * CVE-2025-8030 (bmo#1968414) Potential user-assisted code execution in “Copy as cURL” command * CVE-2025-8031 (bmo#1971719) Incorrect URL stripping in CSP reports * CVE-2025-8032 (bmo#1974407) XSLT documents could bypass CSP * CVE-2025-8038 (bmo#1808979) CSP frame-src was not correctly enforced for paths * CVE-2025-8039 (bmo#1970997) Search terms persisted in URL bar * CVE-2025-8033 (bmo#1973990) Incorrect JavaScript state machine for generators * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422) Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998) Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961) Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/firefox-esr?expand=0&rev=63
51 lines
1.9 KiB
Diff
51 lines
1.9 KiB
Diff
# HG changeset patch
|
|
# Parent e0751ad74e835e80041a61ea00c2a63bf6fbe2de
|
|
# Parent 9309f1ac14b7173985576932c01874184be1dcf9
|
|
|
|
diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/branding-common.mozbuild
|
|
--- a/browser/branding/branding-common.mozbuild
|
|
+++ b/browser/branding/branding-common.mozbuild
|
|
@@ -26,12 +26,15 @@ def FirefoxBranding():
|
|
"PrivateBrowsing_70.png",
|
|
"VisualElements_150.png",
|
|
"VisualElements_70.png",
|
|
]
|
|
elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "gtk":
|
|
FINAL_TARGET_FILES.chrome.icons.default += [
|
|
"default128.png",
|
|
"default16.png",
|
|
+ "default22.png",
|
|
+ "default24.png",
|
|
+ "default256.png",
|
|
"default32.png",
|
|
"default48.png",
|
|
"default64.png",
|
|
]
|
|
diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in
|
|
--- a/browser/installer/package-manifest.in
|
|
+++ b/browser/installer/package-manifest.in
|
|
@@ -221,20 +221,23 @@
|
|
; [Browser Chrome Files]
|
|
@RESPATH@/browser/chrome.manifest
|
|
@RESPATH@/browser/chrome/browser@JAREXT@
|
|
@RESPATH@/browser/chrome/browser.manifest
|
|
@RESPATH@/chrome/toolkit@JAREXT@
|
|
@RESPATH@/chrome/toolkit.manifest
|
|
#ifdef MOZ_GTK
|
|
@RESPATH@/browser/chrome/icons/default/default16.png
|
|
+@RESPATH@/browser/chrome/icons/default/default22.png
|
|
+@RESPATH@/browser/chrome/icons/default/default24.png
|
|
@RESPATH@/browser/chrome/icons/default/default32.png
|
|
@RESPATH@/browser/chrome/icons/default/default48.png
|
|
@RESPATH@/browser/chrome/icons/default/default64.png
|
|
@RESPATH@/browser/chrome/icons/default/default128.png
|
|
+@RESPATH@/browser/chrome/icons/default/default256.png
|
|
#endif
|
|
|
|
; [DevTools Startup Files]
|
|
@RESPATH@/browser/chrome/devtools-startup@JAREXT@
|
|
@RESPATH@/browser/chrome/devtools-startup.manifest
|
|
|
|
; DevTools
|
|
@RESPATH@/browser/chrome/devtools@JAREXT@
|