Accepting request 1059273 from mozilla:Factory

- Mozilla Firefox 109.0 MFSA 2023-01 (bsc#1207119) * CVE-2023-23597 (bmo#1538028) Logic bug in process allocation allowed to read arbitrary files * CVE-2023-23598 (bmo#1800425) Arbitrary file read from GTK drag and drop on Linux * CVE-2023-23599 (bmo#1777800) Malicious command could be hidden in devtools output on Windows * CVE-2023-23600 (bmo#1787034) Notification permissions persisted between Normal and Private Browsing on Android * CVE-2023-23601 (bmo#1794268) URL being dragged from cross-origin iframe into same tab triggers navigation * CVE-2023-23602 (bmo#1800890) Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers * CVE-2023-23603 (bmo#1800832) Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive * CVE-2023-23604 (bmo#1802346) Creation of duplicate <code>SystemPrincipal</code> from less secure contexts * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974) Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 * CVE-2023-23606 (bmo#1764974, bmo#1798591, bmo#1799201, bmo#1800446, bmo#1801248, bmo#1802100, bmo#1803393, bmo#1804626, bmo#1804971, bmo#1807004) OBS-URL: https://build.opensuse.org/request/show/1059273 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=387
2023-01-20 16:36:31 +00:00 · 2023-01-20 16:36:31 +00:00 · 953b85891d
commit 953b85891d
parent 30792c4d34 b45fd771cd
14 changed files with 123 additions and 86 deletions
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@ -1,3 +1,40 @@
+-------------------------------------------------------------------
+Mon Jan 16 06:54:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Firefox 109.0
+  MFSA 2023-01 (bsc#1207119)
+  * CVE-2023-23597 (bmo#1538028)
+    Logic bug in process allocation allowed to read arbitrary
+    files
+  * CVE-2023-23598 (bmo#1800425)
+    Arbitrary file read from GTK drag and drop on Linux
+  * CVE-2023-23599 (bmo#1777800)
+    Malicious command could be hidden in devtools output on
+    Windows
+  * CVE-2023-23600 (bmo#1787034)
+    Notification permissions persisted between Normal and Private
+    Browsing on Android
+  * CVE-2023-23601 (bmo#1794268)
+    URL being dragged from cross-origin iframe into same tab
+    triggers navigation
+  * CVE-2023-23602 (bmo#1800890)
+    Content Security Policy wasn't being correctly applied to
+    WebSockets in WebWorkers
+  * CVE-2023-23603 (bmo#1800832)
+    Calls to <code>console.log</code> allowed bypasing Content
+    Security Policy via format directive
+  * CVE-2023-23604 (bmo#1802346)
+    Creation of duplicate <code>SystemPrincipal</code> from less
+    secure contexts
+  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
+    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7
+  * CVE-2023-23606 (bmo#1764974, bmo#1798591, bmo#1799201,
+    bmo#1800446, bmo#1801248, bmo#1802100, bmo#1803393,
+    bmo#1804626, bmo#1804971, bmo#1807004)
+    Memory safety bugs fixed in Firefox 109
+- requires NSS 3.86
+- rebased patches
+
 -------------------------------------------------------------------
 Fri Jan  6 06:57:25 UTC 2023 - Luciano Santos <luc14n0@opensuse.org>

--- a/MozillaFirefox.spec
+++ b/MozillaFirefox.spec
@ -2,7 +2,7 @@
 # spec file
 #
 # Copyright (c) 2023 SUSE LLC
-# Copyright (c) 2006-2022 Wolfgang Rosenauer <wr@rosenauer.org>
+# Copyright (c) 2006-2023 Wolfgang Rosenauer <wr@rosenauer.org>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@ -28,9 +28,9 @@
 # orig_suffix b3
 # major 69
 # mainver %major.99
-%define major          108
-%define mainver        %major.0.2
-%define orig_version   108.0.2
+%define major          109
+%define mainver        %major.0
+%define orig_version   109.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
@ -120,7 +120,7 @@ BuildRequires:  libiw-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.35
-BuildRequires:  mozilla-nss-devel >= 3.85
+BuildRequires:  mozilla-nss-devel >= 3.86
 BuildRequires:  nasm >= 2.14
 BuildRequires:  nodejs >= 10.22.1
 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
--- a/firefox-108.0.2.source.tar.xz
+++ b/firefox-108.0.2.source.tar.xz
@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:42e6d6b27ad0694a4fc9dd736888ad36c99eb2dbcce96e134584805d644ca300
-size 509638740
--- a/firefox-108.0.2.source.tar.xz.asc
+++ b/firefox-108.0.2.source.tar.xz.asc
@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmO15FUACgkQ6+QekPbx
-L21cOg/9Hu7FjDMCTYRG1KkdSO/E7XPEZXJhFkypi0NiwBHctLs1yaJ5yGkXx1e4
-P8/4fptJvLCY0Xoj0htvyDMqLWPIxzkfkjMssDwmVD5oIBSx7/FIlHzuFmgQr6lE
-Gor6u8OIEsdtJY3xCfJOQmsiN/z5s7MGxX2F4H4hmUOGMfuJsgbO0aeMQMSepVKy
-rPmVqQtnKo52YVPoGW12uNJlxPoNFO+W1qWDehaat3jkeZw8UlNyZq9FV3hu+iIQ
-cJuw4mcEboMMRnbbrkVOc/sRD6yNo3pndlAyxeRcyscGuRoNDE/yOsvWwd5rPUWR
-VMI2MMrYH6ZwFOEuoBv/QY/F/usb84lIs8CHomy0lT2I03pNhkwrNe1qf9LiAIvi
-ULv2JKsgPt1dQ8fFMfAvKHZj4o2sr5rTr8dS7BznGBw+MyhxYFVVpfV02UXoRyFL
-ky7nhKrkgKcJfcLyAfx9O8cuNqXDNcjepUc/VeIlEjEIJ+tIPPuvS5/3hMO4LOrH
-sIf64ItPGUaAjUVKod536oUdDRtFRvXTrUL7iQTVDskSDkq3lYBvwrIqe2OecyuK
-W3LuyU7C6vxzVsOKeEhPYhEQgxvMjfxQVHtnlZxurtFwAF+Uq+0KlMZrvQQVNgd3
-8PWfYBs5jHfUXWakhtJqLwJmv03g61NIBRaGIo9TsBFIncjRMFA=
-=zMIu
-----END PGP SIGNATURE-----
--- a/firefox-109.0.source.tar.xz
+++ b/firefox-109.0.source.tar.xz
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0678a03b572b5992fb85f0923a25b236acf81e5ea2c08e549b63a56076a69351
+size 493231972
--- a/firefox-109.0.source.tar.xz.asc
+++ b/firefox-109.0.source.tar.xz.asc
@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=mgCv
+-----END PGP SIGNATURE-----
--- a/firefox-kde.patch
+++ b/firefox-kde.patch
@ -3,7 +3,7 @@
 # Date 1559300151 -7200
 #      Fri May 31 12:55:51 2019 +0200
 # Node ID 54d41b0033b8d649d842a1f862c6fed8b9874dec
-# Parent  c9baf1c9eb9359b7968a52157e8892cdd20f2c6d
+# Parent  95d798f72d832c953086aa27675498fdf84177f0
 How to apply this patch:
 1. Import and apply it
 2. cp browser/base/content/browser.xul browser/base/content/browser-kde.xul
@ -14,7 +14,7 @@ How to apply this patch:
 diff --git a/browser/components/preferences/main.js b/browser/components/preferences/main.js
 --- a/browser/components/preferences/main.js
 +++ b/browser/components/preferences/main.js
-@@ -303,16 +303,23 @@ var gMainPane = {
+@@ -296,16 +296,23 @@ var gMainPane = {
         }, backoffTimes[this._backoffIndex + 1 < backoffTimes.length ? this._backoffIndex++ : backoffTimes.length - 1]);
       };
 
@ -38,7 +38,7 @@ diff --git a/browser/components/preferences/main.js b/browser/components/prefere
     );
     let performanceSettingsUrl =
       Services.urlFormatter.formatURLPref("app.support.baseURL") +
-@@ -1334,16 +1341,27 @@ var gMainPane = {
+@@ -1333,16 +1340,27 @@ var gMainPane = {
       this._backoffIndex = 0;
 
       let shellSvc = getShellService();
@ -59,7 +59,7 @@ diff --git a/browser/components/preferences/main.js b/browser/components/prefere
 +          process.run(false, args, args.length);
 +        }
       } catch (ex) {
-         Cu.reportError(ex);
+         console.error(ex);
         return;
       }
 
--- a/l10n-108.0.2.tar.xz
+++ b/l10n-108.0.2.tar.xz
@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:933641ebd898ed18d4f64b75f44f1c12ae3c7154946b98572d56e36d61c4e95f
-size 49742312
--- a/l10n-109.0.tar.xz
+++ b/l10n-109.0.tar.xz
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fbbc3ce4f0f383cfb74d5e22af9390d6e1ce3681d1d3e1b96a92d752417b3116
+size 50226324
--- a/mozilla-bmo1568145.patch
+++ b/mozilla-bmo1568145.patch
@ -10,25 +10,25 @@ for the definition of this variable.
 diff --git a/python/mozbuild/mozbuild/action/langpack_manifest.py b/python/mozbuild/mozbuild/action/langpack_manifest.py
 --- a/python/mozbuild/mozbuild/action/langpack_manifest.py
 +++ b/python/mozbuild/mozbuild/action/langpack_manifest.py
-@@ -11,16 +11,17 @@
- from __future__ import absolute_import, print_function, unicode_literals
+@@ -15,16 +15,17 @@ from __future__ import absolute_import, 
 
 import argparse
- import sys
- import os
- import json
- import io
 import datetime
+ import io
+ import json
+ import logging
+ import os
+ import sys
 +import time
- import requests
- import mozversioncontrol
+ 
+ import fluent.syntax.ast as FTL
 import mozpack.path as mozpath
- from mozpack.chrome.manifest import (
-     Manifest,
-     ManifestLocale,
-     parse_manifest,
- )
-@@ -100,17 +101,17 @@ def get_dt_from_hg(path):
+ import mozversioncontrol
+ import requests
+ from fluent.syntax.parser import FluentParser
+ from mozbuild.configure.util import Version
+ from mozpack.chrome.manifest import Manifest, ManifestLocale, parse_manifest
+@@ -102,17 +103,17 @@ def get_dt_from_hg(path):
 #    ts == "20170914215617"
 ###
 def get_timestamp_for_locale(path):
@ -45,5 +45,5 @@ diff --git a/python/mozbuild/mozbuild/action/langpack_manifest.py b/python/mozbu
 
 
 ###
- # Parses multiple defines files into a single key-value pair object.
- #
+ # Parses an FTL file into a key-value pair object.
+ # Does not support attributes, terms, variables, functions or selectors;
--- a/mozilla-kde.patch
+++ b/mozilla-kde.patch
@ -3,7 +3,7 @@
 # Date 1559294891 -7200
 #      Fri May 31 11:28:11 2019 +0200
 # Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112
-# Parent  e8919158faed3f4a08289fb293dd87ce56bdcc4d
+# Parent  a6ee87356867ce6ed5b0be1ba2c2690a488beb55
 Description: Add KDE integration to Firefox (toolkit parts)
 Author: Wolfgang Rosenauer <wolfgang@rosenauer.org>
 Author: Lubos Lunak <lunak@suse.com>
@ -13,9 +13,9 @@ Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=140751
 diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
 --- a/modules/libpref/Preferences.cpp
 +++ b/modules/libpref/Preferences.cpp
-@@ -89,16 +89,17 @@
- #include "PLDHashTable.h"
+@@ -90,16 +90,17 @@
 #include "plstr.h"
+ #include "prdtoa.h"
 #include "prlink.h"
 #include "xpcpublic.h"
 #include "js/RootingAPI.h"
@ -31,7 +31,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
 #ifdef MOZ_MEMORY
 #  include "mozmemory.h"
 #endif
-@@ -4847,16 +4848,27 @@ nsresult Preferences::InitInitialObjects
+@@ -4878,16 +4879,27 @@ nsresult Preferences::InitInitialObjects
     "unix.js"
 #  if defined(_AIX)
     ,
@ -59,7 +59,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
 
 #if defined(MOZ_WIDGET_GTK)
   // Under Flatpak/Snap package, load /etc/firefox/defaults/pref/*.js.
-@@ -4938,17 +4950,17 @@ nsresult Preferences::InitInitialObjects
+@@ -4969,17 +4981,17 @@ nsresult Preferences::InitInitialObjects
       }
 
       nsCOMPtr<nsIFile> path = do_QueryInterface(elem);
@ -790,7 +790,7 @@ diff --git a/uriloader/exthandler/HandlerServiceParent.cpp b/uriloader/exthandle
 diff --git a/uriloader/exthandler/moz.build b/uriloader/exthandler/moz.build
 --- a/uriloader/exthandler/moz.build
 +++ b/uriloader/exthandler/moz.build
-@@ -78,17 +78,19 @@ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "ui
+@@ -81,17 +81,19 @@ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "ui
 else:
     # These files can't be built in unified mode because they redefine LOG.
     SOURCES += [
@ -810,7 +810,7 @@ diff --git a/uriloader/exthandler/moz.build b/uriloader/exthandler/moz.build
     ]
 elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "windows":
     UNIFIED_SOURCES += [
-@@ -126,16 +128,17 @@ include("/ipc/chromium/chromium-config.m
+@@ -129,16 +131,17 @@ include("/ipc/chromium/chromium-config.m
 FINAL_LIBRARY = "xul"
 
 LOCAL_INCLUDES += [
@ -1807,7 +1807,7 @@ diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp
 #  include "prmem.h"
 #  include "plbase64.h"
 
-@@ -2094,20 +2095,29 @@ nsLocalFile::SetPersistentDescriptor(con
+@@ -2157,20 +2158,29 @@ nsLocalFile::SetPersistentDescriptor(con
 
 NS_IMETHODIMP
 nsLocalFile::Reveal() {
@ -1839,7 +1839,7 @@ diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp
     ::CFRelease(url);
     return rv;
   }
-@@ -2119,16 +2129,23 @@ nsLocalFile::Reveal() {
+@@ -2182,16 +2192,23 @@ nsLocalFile::Reveal() {
 
 NS_IMETHODIMP
 nsLocalFile::Launch() {
--- a/mozilla-pgo.patch
+++ b/mozilla-pgo.patch
@ -1,6 +1,6 @@
 # HG changeset patch
 # User Wolfgang Rosenauer <wr@rosenauer.org>
-# Parent  02ffee15578fd4dc2dd5ade32e7dab907d633b0d
+# Parent  855b1f176633af8ae11c0d791c8b33e9a2ae88e0

 diff --git a/build/moz.configure/lto-pgo.configure b/build/moz.configure/lto-pgo.configure
 --- a/build/moz.configure/lto-pgo.configure
@ -48,20 +48,20 @@ diff --git a/build/pgo/profileserver.py b/build/pgo/profileserver.py
 +++ b/build/pgo/profileserver.py
@@ -6,17 +6,17 @@
 
+ import glob
 import json
 import os
- import sys
- import glob
 import subprocess
+ import sys
 
 import mozcrash
-from mozbuild.base import MozbuildObject, BinaryNotFoundException
-+from mozbuild.base import MozbuildObject, BinaryNotFoundException, BuildEnvironmentNotFoundException
+-from mozbuild.base import BinaryNotFoundException, MozbuildObject
+from mozbuild.base import BinaryNotFoundException, MozbuildObject, BuildEnvironmentNotFoundException
 from mozfile import TemporaryDirectory
 from mozhttpd import MozHttpd
 from mozprofile import FirefoxProfile, Preferences
 from mozprofile.permissions import ServerLocations
- from mozrunner import FirefoxRunner, CLI
+ from mozrunner import CLI, FirefoxRunner
 from six import string_types
 
 PORT = 8888
@ -101,7 +101,7 @@ diff --git a/build/pgo/profileserver.py b/build/pgo/profileserver.py
             base_profiles = json.load(fh)["profileserver"]
 
         prefpaths = [
-@@ -207,16 +220,20 @@ if __name__ == "__main__":
+@@ -208,16 +221,20 @@ if __name__ == "__main__":
 
         # Try to move the crash reports to the artifacts even if Firefox appears
         # to exit successfully, in case there's a crash that doesn't set the
@ -166,7 +166,7 @@ diff --git a/extensions/spellcheck/src/moz.build b/extensions/spellcheck/src/moz
 diff --git a/toolkit/components/terminator/nsTerminator.cpp b/toolkit/components/terminator/nsTerminator.cpp
 --- a/toolkit/components/terminator/nsTerminator.cpp
 +++ b/toolkit/components/terminator/nsTerminator.cpp
-@@ -461,16 +461,21 @@ void nsTerminator::StartWatchdog() {
+@@ -455,16 +455,21 @@ void nsTerminator::StartWatchdog() {
       // Defend against overflow
       crashAfterMS = INT32_MAX;
     } else {
--- a/mozilla-silence-no-return-type.patch
+++ b/mozilla-silence-no-return-type.patch
@ -1,10 +1,10 @@
 # HG changeset patch
-# Parent  b1cfd1fa113437854cff1f201e2e9721104d2f61
+# Parent  9d5642506b3a46c3bb28c659173d7055c9674c77

 diff --git a/Cargo.lock b/Cargo.lock
 --- a/Cargo.lock
 +++ b/Cargo.lock
-@@ -2318,18 +2318,16 @@ name = "glsl-to-cxx"
+@@ -2348,18 +2348,16 @@ name = "glsl-to-cxx"
 version = "0.1.0"
 dependencies = [
  "glsl",
@ -26,7 +26,7 @@ diff --git a/Cargo.lock b/Cargo.lock
 diff --git a/Cargo.toml b/Cargo.toml
 --- a/Cargo.toml
 +++ b/Cargo.toml
-@@ -151,16 +151,17 @@ async-task = { git = "https://github.com
+@@ -154,16 +154,17 @@ async-task = { git = "https://github.com
 chardetng = { git = "https://github.com/hsivonen/chardetng", rev="3484d3e3ebdc8931493aa5df4d7ee9360a90e76b" }
 chardetng_c = { git = "https://github.com/hsivonen/chardetng_c", rev="ed8a4c6f900a90d4dbc1d64b856e61490a1c3570" }
 coremidi = { git = "https://github.com/chris-zen/coremidi.git", rev="fc68464b5445caf111e41f643a2e69ccce0b4f83" }
@ -38,12 +38,12 @@ diff --git a/Cargo.toml b/Cargo.toml
 +glslopt = { path = "third_party/rust/glslopt/" }
 
 # application-services overrides to make updating them all simpler.
- interrupt-support = { git = "https://github.com/mozilla/application-services", rev = "b09ffe23ee60a066176e5d7f9f2c6cd95c528ceb" }
- sql-support = { git = "https://github.com/mozilla/application-services", rev = "b09ffe23ee60a066176e5d7f9f2c6cd95c528ceb" }
- sync15 = { git = "https://github.com/mozilla/application-services", rev = "b09ffe23ee60a066176e5d7f9f2c6cd95c528ceb" }
- tabs = { git = "https://github.com/mozilla/application-services", rev = "b09ffe23ee60a066176e5d7f9f2c6cd95c528ceb" }
- viaduct = { git = "https://github.com/mozilla/application-services", rev = "b09ffe23ee60a066176e5d7f9f2c6cd95c528ceb" }
- webext-storage = { git = "https://github.com/mozilla/application-services", rev = "b09ffe23ee60a066176e5d7f9f2c6cd95c528ceb" }
+ interrupt-support = { git = "https://github.com/mozilla/application-services", rev = "d7dbd32fa379ad46820476222f4d2aeaed2d7175" }
+ sql-support = { git = "https://github.com/mozilla/application-services", rev = "d7dbd32fa379ad46820476222f4d2aeaed2d7175" }
+ sync15 = { git = "https://github.com/mozilla/application-services", rev = "d7dbd32fa379ad46820476222f4d2aeaed2d7175" }
+ tabs = { git = "https://github.com/mozilla/application-services", rev = "d7dbd32fa379ad46820476222f4d2aeaed2d7175" }
+ viaduct = { git = "https://github.com/mozilla/application-services", rev = "d7dbd32fa379ad46820476222f4d2aeaed2d7175" }
+ webext-storage = { git = "https://github.com/mozilla/application-services", rev = "d7dbd32fa379ad46820476222f4d2aeaed2d7175" }
 diff --git a/gfx/skia/skia/include/codec/SkEncodedOrigin.h b/gfx/skia/skia/include/codec/SkEncodedOrigin.h
 --- a/gfx/skia/skia/include/codec/SkEncodedOrigin.h
 +++ b/gfx/skia/skia/include/codec/SkEncodedOrigin.h
@ -1985,10 +1985,10 @@ diff --git a/third_party/libwebrtc/api/rtp_parameters.cc b/third_party/libwebrtc
 diff --git a/third_party/libwebrtc/api/video/video_frame_buffer.cc b/third_party/libwebrtc/api/video/video_frame_buffer.cc
 --- a/third_party/libwebrtc/api/video/video_frame_buffer.cc
 +++ b/third_party/libwebrtc/api/video/video_frame_buffer.cc
-@@ -87,16 +87,18 @@ const char* VideoFrameBufferTypeToString
-       return "kI422";
-     case VideoFrameBuffer::Type::kI010:
+@@ -94,16 +94,18 @@ const char* VideoFrameBufferTypeToString
       return "kI010";
+     case VideoFrameBuffer::Type::kI210:
+       return "kI210";
     case VideoFrameBuffer::Type::kNV12:
       return "kNV12";
     default:
@ -2007,7 +2007,7 @@ diff --git a/third_party/libwebrtc/api/video/video_frame_buffer.cc b/third_party
 diff --git a/third_party/libwebrtc/api/video_codecs/video_codec.cc b/third_party/libwebrtc/api/video_codecs/video_codec.cc
 --- a/third_party/libwebrtc/api/video_codecs/video_codec.cc
 +++ b/third_party/libwebrtc/api/video_codecs/video_codec.cc
-@@ -117,16 +117,17 @@ const char* CodecTypeToPayloadString(Vid
+@@ -113,16 +113,17 @@ const char* CodecTypeToPayloadString(Vid
     case kVideoCodecH264:
       return kPayloadNameH264;
     case kVideoCodecMultiplex:
@ -2223,7 +2223,7 @@ diff --git a/third_party/libwebrtc/modules/audio_processing/agc2/rnn_vad/rnn_fc.
 diff --git a/third_party/libwebrtc/modules/audio_processing/audio_processing_impl.cc b/third_party/libwebrtc/modules/audio_processing/audio_processing_impl.cc
 --- a/third_party/libwebrtc/modules/audio_processing/audio_processing_impl.cc
 +++ b/third_party/libwebrtc/modules/audio_processing/audio_processing_impl.cc
-@@ -116,16 +116,17 @@ GainControl::Mode Agc1ConfigModeToInterf
+@@ -114,16 +114,17 @@ GainControl::Mode Agc1ConfigModeToInterf
     case Agc1Config::kAdaptiveAnalog:
       return GainControl::kAdaptiveAnalog;
     case Agc1Config::kAdaptiveDigital:
@ -2241,7 +2241,7 @@ diff --git a/third_party/libwebrtc/modules/audio_processing/audio_processing_imp
 
 // Maximum lengths that frame of samples being passed from the render side to
 // the capture side can have (does not apply to AEC3).
-@@ -1921,16 +1922,17 @@ void AudioProcessingImpl::InitializeNois
+@@ -1955,16 +1956,17 @@ void AudioProcessingImpl::InitializeNois
             case NoiseSuppresionConfig::kModerate:
               return NsConfig::SuppressionLevel::k12dB;
             case NoiseSuppresionConfig::kHigh:
@ -2312,7 +2312,7 @@ diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/create_video_rtp_depa
 diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc b/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc
 --- a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc
 +++ b/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc
-@@ -132,16 +132,17 @@ bool IsNonVolatile(RTPExtensionType type
+@@ -137,16 +137,17 @@ bool IsNonVolatile(RTPExtensionType type
 #if defined(WEBRTC_MOZILLA_BUILD)
     case kRtpExtensionCsrcAudioLevel:
       // TODO: Mozilla implement for CsrcAudioLevel
@ -2333,7 +2333,7 @@ diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc b/third
 diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender_audio.cc b/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender_audio.cc
 --- a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender_audio.cc
 +++ b/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender_audio.cc
-@@ -42,16 +42,17 @@ const char* FrameTypeToString(AudioFrame
+@@ -40,16 +40,17 @@ namespace {
     case AudioFrameType::kEmptyFrame:
       return "empty";
     case AudioFrameType::kAudioFrameSpeech:
@ -2344,13 +2344,13 @@ diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender_audio.cc b
   RTC_CHECK_NOTREACHED();
 +  return "";
 }
- #endif
 
 constexpr char kIncludeCaptureClockOffset[] =
     "WebRTC-IncludeCaptureClockOffset";
 
 }  // namespace
 
+ RTPSenderAudio::RTPSenderAudio(Clock* clock, RTPSender* rtp_sender)
 diff --git a/third_party/libwebrtc/modules/video_coding/codecs/vp8/temporal_layers_checker.cc b/third_party/libwebrtc/modules/video_coding/codecs/vp8/temporal_layers_checker.cc
 --- a/third_party/libwebrtc/modules/video_coding/codecs/vp8/temporal_layers_checker.cc
 +++ b/third_party/libwebrtc/modules/video_coding/codecs/vp8/temporal_layers_checker.cc
--- a/8
+++ b/8
@ -1,10 +1,10 @@
 PRODUCT="firefox"
 CHANNEL="release"
-VERSION="108.0.2"
+VERSION="109.0"
 VERSION_SUFFIX=""
-PREV_VERSION="108.0"
+PREV_VERSION="108.0.2"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
-RELEASE_TAG="a486bbf619936d4f8516c853ea6ffad2d576e2a3"
-RELEASE_TIMESTAMP="20230104165113"
+RELEASE_TAG="4de36fef43a27c91f7b8408a117f43d55df3abaf"
+RELEASE_TIMESTAMP="20230112150232"