Accepting request 1036230 from mozilla:Factory

- Mozilla Firefox 107.0 MFSA 2022-47 (bsc#1205270) * CVE-2022-45403 (bmo#1762078) Service Workers might have learned size of cross-origin media files * CVE-2022-45404 (bmo#1790815) Fullscreen notification bypass * CVE-2022-45405 (bmo#1791314) Use-after-free in InputStream implementation * CVE-2022-45406 (bmo#1791975) Use-after-free of a JavaScript Realm * CVE-2022-45407 (bmo#1793314) Loading fonts on workers was not thread-safe * CVE-2022-45408 (bmo#1793829) Fullscreen notification bypass via windowName * CVE-2022-45409 (bmo#1796901) Use-after-free in Garbage Collection * CVE-2022-45410 (bmo#1658869) ServiceWorker-intercepted requests bypassed SameSite cookie policy * CVE-2022-45411 (bmo#1790311) Cross-Site Tracing was possible via non-standard override headers * CVE-2022-45412 (bmo#1791029) Symlinks may resolve to partially uninitialized buffers * CVE-2022-45413 (bmo#1791201) SameSite=Strict cookies could have been sent cross-site via intent URLs * CVE-2022-40674 (bmo#1791598) Use-after-free vulnerability in expat * CVE-2022-45415 (bmo#1793551) Downloaded file may have been saved with malicious extension * CVE-2022-45416 (bmo#1793676) OBS-URL: https://build.opensuse.org/request/show/1036230 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=382
2022-11-17 16:23:52 +00:00 · 2022-11-17 16:23:52 +00:00 · 9488c60e72
commit 9488c60e72
parent 091a155ca4 c9ea1238e9
14 changed files with 113 additions and 108 deletions
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@ -1,10 +1,59 @@
+-------------------------------------------------------------------
+Tue Nov 15 14:22:26 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Firefox 107.0
+  MFSA 2022-47 (bsc#1205270)
+ * CVE-2022-45403 (bmo#1762078)
+    Service Workers might have learned size of cross-origin media files
+  * CVE-2022-45404 (bmo#1790815)
+    Fullscreen notification bypass
+  * CVE-2022-45405 (bmo#1791314)
+    Use-after-free in InputStream implementation
+  * CVE-2022-45406 (bmo#1791975)
+    Use-after-free of a JavaScript Realm
+  * CVE-2022-45407 (bmo#1793314)
+    Loading fonts on workers was not thread-safe
+  * CVE-2022-45408 (bmo#1793829)
+    Fullscreen notification bypass via windowName
+  * CVE-2022-45409 (bmo#1796901)
+    Use-after-free in Garbage Collection
+  * CVE-2022-45410 (bmo#1658869)
+    ServiceWorker-intercepted requests bypassed SameSite cookie policy
+  * CVE-2022-45411 (bmo#1790311)
+    Cross-Site Tracing was possible via non-standard override headers
+  * CVE-2022-45412 (bmo#1791029)
+    Symlinks may resolve to partially uninitialized buffers
+  * CVE-2022-45413 (bmo#1791201)
+    SameSite=Strict cookies could have been sent cross-site via
+    intent URLs
+  * CVE-2022-40674 (bmo#1791598)
+    Use-after-free vulnerability in expat
+  * CVE-2022-45415 (bmo#1793551)
+    Downloaded file may have been saved with malicious extension
+  * CVE-2022-45416 (bmo#1793676)
+    Keystroke Side-Channel Leakage
+  * CVE-2022-45417 (bmo#1794508)
+    Service Workers in Private Browsing Mode may have been
+    written to disk
+  * CVE-2022-45418 (bmo#1795815)
+    Custom mouse cursor could have been drawn over browser UI
+  * CVE-2022-45419 (bmo#1716082)
+    Deleting a security exception did not take effect immediately
+  * CVE-2022-45420 (bmo#1792643)
+    Iframe contents could be rendered outside the iframe
+  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
+    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
+- requires
+  * NSS >= 3.84
+  * rust = 1.64
+
 -------------------------------------------------------------------
 Sat Nov  5 13:16:42 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>

- Mozilla Firefox 106.0.5:
+- Mozilla Firefox 106.0.5
  * Addresses a crash experienced by users with Intel Gemini Lake
    CPUs (bmo#1702019)
- Mozilla Firefox 106.0.4:
+- Mozilla Firefox 106.0.4
  * Fixed an issue with DRM Video playback (bmo#1797292)
  * Fixed broken layout of datetime input when switching
    types (bmo#1797139)
--- a/MozillaFirefox.spec
+++ b/MozillaFirefox.spec
@ -1,5 +1,5 @@
 #
-# spec file for package MozillaFirefox
+# spec file
 #
 # Copyright (c) 2022 SUSE LLC
 #               2006-2022 Wolfgang Rosenauer <wr@rosenauer.org>
@ -28,9 +28,9 @@
 # orig_suffix b3
 # major 69
 # mainver %major.99
-%define major          106
-%define mainver        %major.0.5
-%define orig_version   106.0.5
+%define major          107
+%define mainver        %major.0
+%define orig_version   107.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
@ -108,8 +108,8 @@ BuildRequires:  rust >= 1.61
 # minimal requirement:
 BuildRequires:  rust+cargo >= 1.61
 # actually used upstream:
-BuildRequires:  cargo1.63
-BuildRequires:  rust1.63
+BuildRequires:  cargo1.64
+BuildRequires:  rust1.64
 %endif
 %if 0%{useccache} != 0
 BuildRequires:  ccache
@ -120,7 +120,7 @@ BuildRequires:  libiw-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.35
-BuildRequires:  mozilla-nss-devel >= 3.83
+BuildRequires:  mozilla-nss-devel >= 3.84
 BuildRequires:  nasm >= 2.14
 BuildRequires:  nodejs >= 10.22.1
 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
--- a/firefox-106.0.5.source.tar.xz
+++ b/firefox-106.0.5.source.tar.xz
@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9471a7610d0adc350f14c363f1fcd2e15a85f22744f5850604af01aa844bc8a8
-size 500379208
--- a/firefox-106.0.5.source.tar.xz.asc
+++ b/firefox-106.0.5.source.tar.xz.asc
@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmNlG1UACgkQ6+QekPbx
-L22e4xAAoTyIjEETB8gL0Ph7un8QhZ4ZDyaLFNvmYnMMfcwm9KLPJxXqriv2LS5Q
-HHOfKX4TiXClSlKmyTMsoh5tlmrKvGrzTMj3O0/KFapsCEqKhD1zsRC3WKr3JTMf
-XvBS4GUHVjsatzv8iS+h35ut5m20nV4Vuk47ZECrOgllqtCifJipDhS3d0XhaPwS
-MMKbXwwJBCH84nHN47hVB6KvoQRJTsaPtXPYPorggXOfQjxjDW9fyEXGTInZkvER
-bjDXPVhzErljMlVJUAinTvQUibmjy5tDs6Q1TV/Rc/3qIrPbdm7LVR8/iAuLuh9G
-e280UZ7WbCS7jPjM16N2iKg9W5Ms+1cXYhqrET2J5u1heF2XEF3ln+yhaPsvZ3/H
-J5iGGwR+BoYRZcrbOxlHcTVPVbFz2Zijf29IugGq47wjldTyF17nl+NTKBpGXrMG
-8Kbw8/PIUbntiN51oJOi1dRLG8I35go+5vxrBwcdAMXLUIjcXsjqpPOioLXC+G/Q
-3E6I7TsWNFD2SJI7SiP/DduhWJjXm0Za2+w1/yqJv9vV6WCFmNBsC0RIx9xH2cZD
-5drzfwhxVAMZbO4iQxc5mEtJKhlNJ0s9/K+DUQzbN8EpRn316hHurtMFvVSwGBPX
-yK7CUiRqHqVDBS8DFYXUwCKGscHbJidF93NthoVdIR2YfEJL3as=
-=5Bdv
-----END PGP SIGNATURE-----
--- a/firefox-107.0.source.tar.xz
+++ b/firefox-107.0.source.tar.xz
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8a562e5a397b57e9bf383c2988308ab494c5d28844e792c658fedea27756584a
+size 510848468
--- a/firefox-107.0.source.tar.xz.asc
+++ b/firefox-107.0.source.tar.xz.asc
@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=cWG6
+-----END PGP SIGNATURE-----
--- a/l10n-106.0.5.tar.xz
+++ b/l10n-106.0.5.tar.xz
@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:260dab6c8651c4e500aa4ce17e8826d6869015ad69e031810b5a3acd578ef0a4
-size 49353156
--- a/l10n-107.0.tar.xz
+++ b/l10n-107.0.tar.xz
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6b5391a7c4c28a3cd26b65930112dfb462b4052b236580c89564e3996e71dc6b
+size 49488580
--- a/mozilla-bmo531915.patch
+++ b/mozilla-bmo531915.patch
@ -1,6 +1,6 @@
 # HG changeset patch
 # User Wolfgang Rosenauer <wr@rosenauer.org>
-# Parent  5573047016750e02413781dac0ac4c2361946ed2
+# Parent  fa8a5832a374ccd7af5db927b992b5d9f15273ef

 diff --git a/modules/fdlibm/src/math_private.h b/modules/fdlibm/src/math_private.h
 --- a/modules/fdlibm/src/math_private.h
@ -23,7 +23,6 @@ diff --git a/modules/fdlibm/src/math_private.h b/modules/fdlibm/src/math_private
 +#endif
 typedef __double_t  double_t;
 -typedef float       __float_t;
- typedef __float_t   float_t;
 
 /*
  * The original fdlibm code used statements like:
@ -31,3 +30,4 @@ diff --git a/modules/fdlibm/src/math_private.h b/modules/fdlibm/src/math_private
  *	ix0 = *(n0+(int*)&x);			* high word of x *
  *	ix1 = *((1-n0)+(int*)&x);		* low word of x *
  * to dig two 32 bit words out of the 64 bit IEEE floating point
+  * value.  That is non-ANSI, and, moreover, the gcc instruction
--- a/mozilla-buildfixes.patch
+++ b/mozilla-buildfixes.patch
@ -1,56 +1,12 @@
 # HG changeset patch
 # User Wolfgang Rosenauer <wr@rosenauer.org>
-# Parent  39a0846a4f2df1c4669273933d74567a8774e1da
+# Parent  e583ac9b86ba82dd1c60d307115b4cb96296a6af
 # References: bmo#1792159 - Add missing includes to AtomicOperationsGenerated.h

-diff --git a/js/src/jit/GenerateAtomicOperations.py b/js/src/jit/GenerateAtomicOperations.py
--- a/js/src/jit/GenerateAtomicOperations.py
-+++ b/js/src/jit/GenerateAtomicOperations.py
-@@ -702,16 +702,18 @@ HEADER_TEMPLATE = """\
-  * License, v. 2.0. If a copy of the MPL was not distributed with this
-  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
- 
- #ifndef jit_AtomicOperationsGenerated_h
- #define jit_AtomicOperationsGenerated_h
- 
- /* This file is generated by jit/GenerateAtomicOperations.py. Do not edit! */
- 
-+#include "mozilla/Attributes.h"
-+
- namespace js {
- namespace jit {
- 
- %(contents)s
- 
- } // namespace jit
- } // namespace js
- 
-diff --git a/media/ffvpx/config_unix_aarch64.h b/media/ffvpx/config_unix_aarch64.h
--- a/media/ffvpx/config_unix_aarch64.h
-+++ b/media/ffvpx/config_unix_aarch64.h
-@@ -324,17 +324,17 @@
- #define HAVE_SETCONSOLETEXTATTRIBUTE 0
- #define HAVE_SETCONSOLECTRLHANDLER 0
- #define HAVE_SETDLLDIRECTORY 0
- #define HAVE_SETMODE 0
- #define HAVE_SETRLIMIT 1
- #define HAVE_SLEEP 0
- #define HAVE_STRERROR_R 1
- #define HAVE_SYSCONF 1
-#define HAVE_SYSCTL 1
-+#define HAVE_SYSCTL 0
- #define HAVE_USLEEP 1
- #define HAVE_UTGETOSTYPEFROMSTRING 0
- #define HAVE_VIRTUALALLOC 0
- #define HAVE_WGLGETPROCADDRESS 0
- #define HAVE_BCRYPT 0
- #define HAVE_VAAPI_DRM 0
- #define HAVE_VAAPI_X11 0
- #define HAVE_VDPAU_X11 0
 diff --git a/mozglue/misc/SIMD_avx2.cpp b/mozglue/misc/SIMD_avx2.cpp
 --- a/mozglue/misc/SIMD_avx2.cpp
 +++ b/mozglue/misc/SIMD_avx2.cpp
-@@ -50,17 +50,17 @@ template <typename TValue>
+@@ -53,17 +53,17 @@ template <typename TValue>
   }
   if (sizeof(TValue) == 2) {
     return _mm256_cmpeq_epi16(a, b);
--- a/mozilla-kde.patch
+++ b/mozilla-kde.patch
@ -3,7 +3,7 @@
 # Date 1559294891 -7200
 #      Fri May 31 11:28:11 2019 +0200
 # Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112
-# Parent  b8fad36c438a0d20ffe73630e35c17addb4ee57d
+# Parent  36f9c3a81777563ef87663a210b1cd38fdd734d9
 Description: Add KDE integration to Firefox (toolkit parts)
 Author: Wolfgang Rosenauer <wolfgang@rosenauer.org>
 Author: Lubos Lunak <lunak@suse.com>
@ -13,7 +13,7 @@ Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=140751
 diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
 --- a/modules/libpref/Preferences.cpp
 +++ b/modules/libpref/Preferences.cpp
-@@ -88,16 +88,17 @@
+@@ -89,16 +89,17 @@
 #include "PLDHashTable.h"
 #include "plstr.h"
 #include "prlink.h"
@ -31,7 +31,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
 #ifdef MOZ_MEMORY
 #  include "mozmemory.h"
 #endif
-@@ -4823,16 +4824,27 @@ nsresult Preferences::InitInitialObjects
+@@ -4849,16 +4850,27 @@ nsresult Preferences::InitInitialObjects
     "unix.js"
 #  if defined(_AIX)
     ,
@ -59,7 +59,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
 
   // Load jar:$app/omni.jar!/defaults/preferences/*.js
   // or jar:$gre/omni.jar!/defaults/preferences/*.js.
-@@ -4897,17 +4909,17 @@ nsresult Preferences::InitInitialObjects
+@@ -4923,17 +4935,17 @@ nsresult Preferences::InitInitialObjects
       }
 
       nsCOMPtr<nsIFile> path = do_QueryInterface(elem);
@ -81,7 +81,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
 diff --git a/modules/libpref/moz.build b/modules/libpref/moz.build
 --- a/modules/libpref/moz.build
 +++ b/modules/libpref/moz.build
-@@ -121,16 +121,20 @@ EXPORTS.mozilla += [
+@@ -123,16 +123,20 @@ EXPORTS.mozilla += [
 ]
 EXPORTS.mozilla += sorted(["!" + g for g in gen_h])
 
@ -165,7 +165,7 @@ diff --git a/toolkit/components/downloads/moz.build b/toolkit/components/downloa
 diff --git a/toolkit/mozapps/downloads/HelperAppDlg.jsm b/toolkit/mozapps/downloads/HelperAppDlg.jsm
 --- a/toolkit/mozapps/downloads/HelperAppDlg.jsm
 +++ b/toolkit/mozapps/downloads/HelperAppDlg.jsm
-@@ -1265,36 +1265,66 @@ nsUnknownContentTypeDialog.prototype = {
+@@ -1239,36 +1239,66 @@ nsUnknownContentTypeDialog.prototype = {
         params.handlerApp &&
         params.handlerApp.executable &&
         params.handlerApp.executable.isFile()
@ -1283,8 +1283,8 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp
 #include "nsGtkUtils.h"
 #include "nsIFileURL.h"
 #include "nsIGIOService.h"
-@@ -22,16 +23,18 @@
- #include "nsMemory.h"
+@@ -21,16 +22,18 @@
+ #include "nsArrayEnumerator.h"
 #include "nsEnumeratorUtils.h"
 #include "nsNetUtil.h"
 #include "nsReadableUtils.h"
@ -1302,7 +1302,7 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp
 #  include "Units.h"
 extern mozilla::LazyLogModule gWidgetLog;
 #  define LOG(args) MOZ_LOG(gWidgetLog, mozilla::LogLevel::Debug, args)
-@@ -236,17 +239,19 @@ nsFilePicker::AppendFilters(int32_t aFil
+@@ -235,17 +238,19 @@ nsFilePicker::AppendFilters(int32_t aFil
   mAllowURLs = !!(aFilterMask & filterAllowURLs);
   return nsBaseFilePicker::AppendFilters(aFilterMask);
 }
@ -1323,7 +1323,7 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp
 
   mFilters.AppendElement(filter);
   mFilterNames.AppendElement(name);
-@@ -346,16 +351,39 @@ nsresult nsFilePicker::Show(int16_t* aRe
+@@ -345,16 +350,39 @@ nsresult nsFilePicker::Show(int16_t* aRe
   return NS_OK;
 }
 
@ -1363,7 +1363,7 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp
   GtkFileChooserAction action = GetGtkFileChooserAction(mMode);
 
   const gchar* accept_button;
-@@ -575,16 +603,244 @@ void nsFilePicker::Done(void* file_choos
+@@ -574,16 +602,244 @@ void nsFilePicker::Done(void* file_choos
     mCallback->Done(result);
     mCallback = nullptr;
   } else {
@ -1807,7 +1807,7 @@ diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp
 #  include "prmem.h"
 #  include "plbase64.h"
 
-@@ -2083,20 +2084,29 @@ nsLocalFile::SetPersistentDescriptor(con
+@@ -2088,20 +2089,29 @@ nsLocalFile::SetPersistentDescriptor(con
 
 NS_IMETHODIMP
 nsLocalFile::Reveal() {
@ -1839,7 +1839,7 @@ diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp
     ::CFRelease(url);
     return rv;
   }
-@@ -2108,16 +2118,23 @@ nsLocalFile::Reveal() {
+@@ -2113,16 +2123,23 @@ nsLocalFile::Reveal() {
 
 NS_IMETHODIMP
 nsLocalFile::Launch() {
--- a/mozilla-s390-context.patch
+++ b/mozilla-s390-context.patch
@ -3,15 +3,15 @@
 # Date 1558452408 -7200
 #      Tue May 21 17:26:48 2019 +0200
 # Node ID 602e92722e765a3c238d3b96b26c0c8063b5eeb4
-# Parent  263ccc06617bef4b8ef891eec54995190d5d5df3
+# Parent  6d6ebdace8a9877fe17c1bd14b80307c258c864f
 [mq]: mozilla-s390-context.patch

 diff --git a/js/src/wasm/WasmSignalHandlers.cpp b/js/src/wasm/WasmSignalHandlers.cpp
 --- a/js/src/wasm/WasmSignalHandlers.cpp
 +++ b/js/src/wasm/WasmSignalHandlers.cpp
@@ -163,16 +163,20 @@ using mozilla::DebugOnly;
- #      define RSP_sig(p) ((p)->uc_mcontext.gregs[3])
- #      define RFP_sig(p) ((p)->uc_mcontext.gregs[22])
+ #      define R03_sig(p) ((p)->uc_mcontext.__gregs[3])
+ #      define RFP_sig(p) ((p)->uc_mcontext.__gregs[22])
 #    endif
 #    if defined(__sun__) && defined(__sparc__)
 #      define PC_sig(p) ((p)->uc_mcontext.gregs[REG_PC])
@ -37,7 +37,7 @@ diff --git a/js/src/wasm/WasmSignalHandlers.cpp b/js/src/wasm/WasmSignalHandlers
 #  elif defined(__loongarch__)
 #    define PC_sig(p) EPC_sig(p)
 #    define FP_sig(p) RFP_sig(p)
- #    define SP_sig(p) RSP_sig(p)
+ #    define SP_sig(p) R03_sig(p)
 #    define LR_sig(p) RRA_sig(p)
 +#  elif defined(__s390x__)
 +#    define PC_sig(p) PSWa_sig(p)
--- a/mozilla-silence-no-return-type.patch
+++ b/mozilla-silence-no-return-type.patch
@ -1,10 +1,10 @@
 # HG changeset patch
-# Parent  ccd8f974707cba440cffeb0c66b5bcc0cda73c63
+# Parent  de9644d7851feebc84a70c3d513b8342211acf60

 diff --git a/Cargo.lock b/Cargo.lock
 --- a/Cargo.lock
 +++ b/Cargo.lock
-@@ -2296,18 +2296,16 @@ name = "glsl-to-cxx"
+@@ -2298,18 +2298,16 @@ name = "glsl-to-cxx"
 version = "0.1.0"
 dependencies = [
  "glsl",
@ -26,7 +26,7 @@ diff --git a/Cargo.lock b/Cargo.lock
 diff --git a/Cargo.toml b/Cargo.toml
 --- a/Cargo.toml
 +++ b/Cargo.toml
-@@ -143,16 +143,17 @@ async-task = { git = "https://github.com
+@@ -150,16 +150,17 @@ async-task = { git = "https://github.com
 chardetng = { git = "https://github.com/hsivonen/chardetng", rev="3484d3e3ebdc8931493aa5df4d7ee9360a90e76b" }
 chardetng_c = { git = "https://github.com/hsivonen/chardetng_c", rev="ed8a4c6f900a90d4dbc1d64b856e61490a1c3570" }
 coremidi = { git = "https://github.com/chris-zen/coremidi.git", rev="fc68464b5445caf111e41f643a2e69ccce0b4f83" }
@ -38,11 +38,11 @@ diff --git a/Cargo.toml b/Cargo.toml
 +glslopt = { path = "third_party/rust/glslopt/" }
 
 # application-services overrides to make updating them all simpler.
- interrupt-support = { git = "https://github.com/mozilla/application-services", rev = "fb1c78b13c27b5db1fd5458b8c2d8f433855dd61" }
- sql-support = { git = "https://github.com/mozilla/application-services", rev = "fb1c78b13c27b5db1fd5458b8c2d8f433855dd61" }
- sync15-traits = { git = "https://github.com/mozilla/application-services", rev = "fb1c78b13c27b5db1fd5458b8c2d8f433855dd61" }
- viaduct = { git = "https://github.com/mozilla/application-services", rev = "fb1c78b13c27b5db1fd5458b8c2d8f433855dd61" }
- webext-storage = { git = "https://github.com/mozilla/application-services", rev = "fb1c78b13c27b5db1fd5458b8c2d8f433855dd61" }
+ interrupt-support = { git = "https://github.com/mozilla/application-services", rev = "d8503475f43dbf1d78eef4e23b0578d0fada3f39" }
+ sql-support = { git = "https://github.com/mozilla/application-services", rev = "d8503475f43dbf1d78eef4e23b0578d0fada3f39" }
+ sync15 = { git = "https://github.com/mozilla/application-services", rev = "d8503475f43dbf1d78eef4e23b0578d0fada3f39" }
+ viaduct = { git = "https://github.com/mozilla/application-services", rev = "d8503475f43dbf1d78eef4e23b0578d0fada3f39" }
+ webext-storage = { git = "https://github.com/mozilla/application-services", rev = "d8503475f43dbf1d78eef4e23b0578d0fada3f39" }
 
 diff --git a/gfx/skia/skia/include/codec/SkEncodedOrigin.h b/gfx/skia/skia/include/codec/SkEncodedOrigin.h
 --- a/gfx/skia/skia/include/codec/SkEncodedOrigin.h
--- a/8
+++ b/8
@ -1,10 +1,10 @@
 PRODUCT="firefox"
 CHANNEL="release"
-VERSION="106.0.5"
+VERSION="107.0"
 VERSION_SUFFIX=""
-PREV_VERSION="106.0.3"
+PREV_VERSION="106.0.5"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
-RELEASE_TAG="aaf1f34d6010a4ae9384998d9e2e57911eb28aa7"
-RELEASE_TIMESTAMP="20221104133228"
+RELEASE_TAG="5329e5f08ad8bf97709cddbe37d4d86f5918be9d"
+RELEASE_TIMESTAMP="20221110173214"