Accepting request 1226801 from mozilla:Factory

- Mozilla Firefox 133.0 https://www.mozilla.org/en-US/firefox/133.0/releasenotes MFSA 2024-63 (bsc#1233695) * CVE-2024-11691 (bmo#1914707, bmo#1924184) Memory corruption in Apple GPU drivers * CVE-2024-11700 (bmo#1836921) Potential Tapjacking Exploit for Intent Confirmation on Android * CVE-2024-11692 (bmo#1909535) Select list elements could be shown over another site * CVE-2024-11701 (bmo#1914797) Misleading Address Bar State During Navigation Interruption * CVE-2024-11702 (bmo#1918884) Inadequate Clipboard Protection in Private Browsing Mode on Android * CVE-2024-11693 (bmo#1921458) Download Protections were bypassed by .library-ms files on Windows * CVE-2024-11694 (bmo#1924167) CSP Bypass and XSS Exposure via Web Compatibility Shims * CVE-2024-11695 (bmo#1925496) URL Bar Spoofing via Manipulated Punycode and Whitespace Characters * CVE-2024-11703 (bmo#1928779) Password access without authentication via PIN bypass on Android * CVE-2024-11696 (bmo#1929600) Unhandled Exception in Add-on Signature Verification * CVE-2024-11697 (bmo#1842187) Improper Keypress Handling in Executable File Confirmation Dialog * CVE-2024-11704 (bmo#1899402) Potential Double-Free Vulnerability in PKCS#7 Decryption Handling * CVE-2024-11698 (bmo#1916152) OBS-URL: https://build.opensuse.org/request/show/1226801 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=443
- Mozilla Firefox 133.0
2024-11-28 23:08:13 +00:00 · 2024-11-27 07:41:19 +00:00 · 2024-11-25 10:56:51 +00:00 · 2024-11-18 18:56:43 +00:00 · 2024-11-15 13:48:17 +00:00 · 2024-11-11 12:43:37 +00:00
18 changed files with 538 additions and 2706 deletions
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@ -1,3 +1,256 @@
 -------------------------------------------------------------------
 Mon Nov 25 11:00:38 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Mozilla Firefox 133.0
  https://www.mozilla.org/en-US/firefox/133.0/releasenotes
  MFSA 2024-63 (bsc#1233695)
  * CVE-2024-11691 (bmo#1914707, bmo#1924184)
    Memory corruption in Apple GPU drivers
  * CVE-2024-11700 (bmo#1836921)
    Potential Tapjacking Exploit for Intent Confirmation on Android
  * CVE-2024-11692 (bmo#1909535)
    Select list elements could be shown over another site
  * CVE-2024-11701 (bmo#1914797)
    Misleading Address Bar State During Navigation Interruption
  * CVE-2024-11702 (bmo#1918884)
    Inadequate Clipboard Protection in Private Browsing Mode on
    Android
  * CVE-2024-11693 (bmo#1921458)
    Download Protections were bypassed by .library-ms files on
    Windows
  * CVE-2024-11694 (bmo#1924167)
    CSP Bypass and XSS Exposure via Web Compatibility Shims
  * CVE-2024-11695 (bmo#1925496)
    URL Bar Spoofing via Manipulated Punycode and Whitespace Characters
  * CVE-2024-11703 (bmo#1928779)
    Password access without authentication via PIN bypass on Android
  * CVE-2024-11696 (bmo#1929600)
    Unhandled Exception in Add-on Signature Verification
  * CVE-2024-11697 (bmo#1842187)
    Improper Keypress Handling in Executable File Confirmation Dialog
  * CVE-2024-11704 (bmo#1899402)
    Potential Double-Free Vulnerability in PKCS#7 Decryption Handling
  * CVE-2024-11698 (bmo#1916152)
    Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS
  * CVE-2024-11705 (bmo#1921768)
    Null Pointer Dereference in NSC_DeriveKey
  * CVE-2024-11706 (bmo#1923767)
    Null Pointer Dereference in PKCS#12 Utility
  * CVE-2024-11708 (bmo#1922912)
    Data race with PlaybackParams
  * CVE-2024-11699 (bmo#1880582, bmo#1929911)
    Memory safety bugs fixed in Firefox 133, Firefox ESR 128.5,
    and Thunderbird 128.5
 - requires NSS 3.106
 - remove obsolete mozilla-python313.patch
 -------------------------------------------------------------------
 Sat Nov 23 17:52:32 UTC 2024 - Dirk Müller <dmueller@suse.com>
 - add mozilla-python313.patch to fix build with python 3.13+
 -------------------------------------------------------------------
 Fri Nov 15 13:37:19 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Mozilla Firefox 132.0.2
  * Fixed possible errors when playing encrypted media content
    through some streaming providers. (bmo#1929491)
  * Added a mitigation to help reduce the frequency of duplicated
    push notifications reported by some users. (bmo#1928868)
  * Fixed hangs when printing from some sites when using the system
    print dialog. (bmo#1898184)
  * Fixed a crash which could occur when using Microsoft SSO on macOS
    (bmo#1929622)
  * Fixed a crash in the Network Monitor developer tool which could
    occur in some circumstances. (bmo#1924882)
 -------------------------------------------------------------------
 Sun Nov 10 12:56:23 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - require xdg-desktop-portal (boo#1233166)
 -------------------------------------------------------------------
 Tue Nov  5 08:54:03 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Mozilla Firefox 132.0.1
  * Fixed issues causing intermittent video playback problems on
    some sites. (bmo#1928484, bmo#1928798)
 - remove KDE integration patches
  - mozilla-kde.patch
  - firefox-kde.patch
  on KDE use these settings instead
  widget.use-xdg-desktop-portal.file-picker=1
  widget.use-xdg-desktop-portal.mime-handler=1
  (those are set by the latest branding package as well)
 -------------------------------------------------------------------
 Mon Oct 28 11:59:31 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Mozilla Firefox 132.0
  https://www.mozilla.org/en-US/firefox/132.0/releasenotes
  MFSA 2024-55 (bsc#1231879)
  * CVE-2024-10458 (bmo#1921733)
    Permission leak via embed or object elements
  * CVE-2024-10459 (bmo#1919087)
    Use-after-free in layout with accessibility
  * CVE-2024-10460 (bmo#1912537)
    Confusing display of origin for external protocol handler prompt
  * CVE-2024-10461 (bmo#1914521)
    XSS due to Content-Disposition being ignored in
    multipart/x-mixed-replace response
  * CVE-2024-10462 (bmo#1920423)
    Origin of permission prompt could be spoofed by long URL
  * CVE-2024-10463 (bmo#1920800)
    Cross origin video frame leak
  * CVE-2024-10468 (bmo#1914982)
    Race conditions in IndexedDB
  * CVE-2024-10464 (bmo#1913000)
    History interface could have been used to cause a Denial of
    Service condition in the browser
  * CVE-2024-10465 (bmo#1918853)
    Clipboard "paste" button persisted across tabs
  * CVE-2024-10466 (bmo#1924154)
    DOM push subscription message could hang Firefox
  * CVE-2024-10467 (bmo#1829029, bmo#1888538, bmo#1900394, bmo#1904059,
    bmo#1917742, bmo#1919809, bmo#1923706)
    Memory safety bugs fixed in Firefox 132, Thunderbird 132,
    Firefox ESR 128.4, and Thunderbird 128.4
 - requires NSS 3.105
 - rebased patches
 -------------------------------------------------------------------
 Thu Oct 17 06:18:12 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Mozilla Firefox 131.0.3
  * some users could not access the Bill Pay portion of their
    bank's site (bmo#1923500)
  * some VR180 and 360 videos were not properly rendering on YouTube
    (bmo#1922278)
  * Fixed a crash that Windows users with Avast or AVG security
    software were experiencing when visiting certain sites. (bmo#1919678)
  * "List all tabs" button was not able to be moved from the toolbar
    (bmo#1918681)
  NFSA 2024-53
  * CVE-2024-9936 (bmo#1920381)
    Undefined behavior in selection node cache
 - remove obsolete mozilla-rust-disable-future-incompat.patch
 -------------------------------------------------------------------
 Wed Oct  9 07:57:32 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Mozilla Firefox 131.0.2
  MFSA 2024-51 (bsc#1231413)
  * CVE-2024-9680 (bmo#1923344)
    Use-after-free in Animation timeline
 -------------------------------------------------------------------
 Sun Sep 29 10:38:36 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Firefox 131.0
  https://www.mozilla.org/en-US/firefox/131.0/releasenotes/
  MFSA 2024-46 (bsc#1230979)
  * CVE-2024-9391 (bmo#1892407)
    Prevent users from exiting full-screen mode in Firefox Focus
    for Android
  * CVE-2024-9392 (bmo#1899154, bmo#1905843)
    Compromised content process can bypass site isolation
  * CVE-2024-9393 (bmo#1918301)
    Cross-origin access to PDF contents through multipart responses
  * CVE-2024-9394 (bmo#1918874)
    Cross-origin access to JSON contents through multipart responses
  * CVE-2024-9395 (bmo#1906024)
    Specially crafted filename could be used to obscure download type
  * CVE-2024-9396 (bmo#1912471)
    Potential memory corruption may occur when cloning certain objects
  * CVE-2024-9397 (bmo#1916659)
    Potential directory upload bypass via clickjacking
  * CVE-2024-9398 (bmo#1881037)
    External protocol handlers could be enumerated via popups
  * CVE-2024-9399 (bmo#1907726)
    Specially crafted WebTransport requests could lead to denial
    of service
  * CVE-2024-9400 (bmo#1915249)
    Potential memory corruption during JIT compilation
  * CVE-2024-9401 (bmo#1872744, bmo#1897792, bmo#1911317, bmo#1916476)
    Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16,
    Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3
  * CVE-2024-9402 (bmo#1872744, bmo#1897792, bmo#1911317, bmo#1913445,
    bmo#1914106, bmo#1914475, bmo#1914963, bmo#1915008, bmo#1916476)
    Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3,
    Thunderbird 131, and Thunderbird 128.3
  * CVE-2024-9403 (bmo#1917807)
    Memory safety bugs fixed in Firefox 131 and Thunderbird 131
 - requires NSS 3.104
 - rebased patches
 ------------------------------------------------------------------
 Sat Sep 21 08:14:29 UTC 2024 - Manfred Hollstein <manfred.h@gmx.net>
 - Don't use clang18-devel on Leap as they don't have that version.
 ------------------------------------------------------------------
 Wed Sep 18 06:20:01 UTC 2024 - Manfred Hollstein <manfred.h@gmx.net>
 - Firefox 130.0.1 Release
  https://www.mozilla.org/en-US/firefox/130.0.1/releasenotes
  * Enterprise: Added an enterprise policy to disable the
    *Firefox Labs* section in *Settings*. (bmo#1911826)
  * Fixed a recent regression causing some UI elements to
    be rendered as left-to-right instead of right-to-left for
    users of our Saraiki localization. (bmo#1917175)
  * Linux: Fixed black rendering of AVIF images when
    Firefox is built with GCC. (bmo#1916038)
 - removed obsolete patches
  mozilla-bmo1916038.patch
 -------------------------------------------------------------------
 Sat Sep  7 07:06:40 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 - Mozilla Firefox 130.0
  https://www.mozilla.org/en-US/firefox/130.0/releasenotes
  MFSA 2024-39 (bsc#1229821)
  * CVE-2024-8385 (bmo#1911909)
    WASM type confusion involving ArrayTypes
  * CVE-2024-8381 (bmo#1912715)
    Type confusion when looking up a property name in a "with" block
  * CVE-2024-8388 (bmo#1902996, bmo#1839074, bmo#1865413, bmo#1868970,
    bmo#1873367, bmo#1877820, bmo#1884642, bmo#1886469, bmo#1894326,
    bmo#1894891, bmo#1897648)
    Fullscreen notice on Android could be hidden under various
    panels and OS prompts
  * CVE-2024-8382 (bmo#1906744)
    Internal event interfaces were exposed to web content when
    browser EventHandler listener callbacks ran
  * CVE-2024-8383 (bmo#1908496)
    Firefox did not ask before openings news: links in an
    external application
  * CVE-2024-8384 (bmo#1911288)
    Garbage collection could mis-color cross-compartment objects
    in OOM conditions
  * CVE-2024-8386 (bmo#1907032, bmo#1909163, bmo#1909529)
    SelectElements could be shown over another site if popups are
    allowed
  * CVE-2024-8387 (bmo#1857607, bmo#1911858, bmo#1914009)
    Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2,
    and Thunderbird 128.2
  * CVE-2024-8389 (bmo#1907230, bmo#1909367)
    Memory safety bugs fixed in Firefox 130
 - requires NSS 3.103
 - removed obsolete patches
  mozilla-bmo1898476.patch
  mozilla-bmo1907511.patch
 - added mozilla-bmo1916038.patch to fix AVIF decoding (bsc#1230500)
 -------------------------------------------------------------------
 Fri Sep  6 08:36:45 UTC 2024 - Marvin Friedrich <contact@marvinf.com>
 - Update dependency on clang-devel from LLVM15 to LLVM18
 -------------------------------------------------------------------
 Wed Sep  4 03:11:13 UTC 2024 - pallas wept <pallaswept@proton.me>
 - Added mozilla-bmo1746799.patch to fix incorrect audio volume scaling
 -------------------------------------------------------------------
 Sat Aug 24 19:41:08 UTC 2024 - Christian Boltz <suse-beta@cboltz.de>
@ -5001,7 +5254,7 @@ Sat Jun 23 07:25:51 UTC 2018 - wr@rosenauer.org
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
-  * CVE-2018-12371 (bmo#1465686) 
+  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
@ -9033,8 +9286,8 @@ Fri Jul 16 06:48:44 CEST 2010 - wr@rosenauer.org
 Sun Jun 27 20:24:31 CEST 2010 - wr@rosenauer.org
 - update to 3.6.6 release
-  * modifies the crash protection feature to increase the amount 
+  * modifies the crash protection feature to increase the amount
-    of time that plugins are allowed to be non-responsive before 
+    of time that plugins are allowed to be non-responsive before
    being terminated.
 -------------------------------------------------------------------
@ -9192,7 +9445,7 @@ Sat Oct 17 23:19:23 CEST 2009 - wr@rosenauer.org
  * MFSA 2009-64/CVE-2009-3380/CVE-2009-3381/CVE-2009-3383
    Crashes with evidence of memory corruption
 - removed upstreamed patch
-  * firefox-bug506901.patch 
+  * firefox-bug506901.patch
 -------------------------------------------------------------------
 Wed Oct  7 20:11:24 CEST 2009 - llunak@novell.com
@ -9202,7 +9455,7 @@ Wed Oct  7 20:11:24 CEST 2009 - llunak@novell.com
 -------------------------------------------------------------------
 Fri Oct  2 20:26:49 CEST 2009 - wr@rosenauer.org
- improve UI colors to be usable with dark themes at all 
+- improve UI colors to be usable with dark themes at all
  (firefox-browser-css.patch) (bnc#503351)
 - extend list of supported architectures as ABI identifier
  (mozilla-abi.patch) (bnc#543460)
@ -9210,9 +9463,9 @@ Fri Oct  2 20:26:49 CEST 2009 - wr@rosenauer.org
 -------------------------------------------------------------------
 Mon Sep 14 00:07:55 CEST 2009 - wr@rosenauer.org
- added KDE integration patch from llunak@novell.com  
+- added KDE integration patch from llunak@novell.com
-  (firefox-kde.patch)  
+  (firefox-kde.patch)
-  * support for knotify, making -kde4-addon obsolete  
+  * support for knotify, making -kde4-addon obsolete
  * KDE-specific support functional (bnc#170055)
 - do not build libnkgnomevfs (bmo#512671) (firefox-no-gnomevfs)
@ -9235,8 +9488,8 @@ Wed Aug 19 22:14:07 CEST 2009 - wr@rosenauer.org
 - renamed patch firefox-contextmenu-gnome to firefox-cross-desktop
  as it contains more tweaks to handle non-Gnome environments and
-  especially KDE integration: 
+  especially KDE integration:
-  * added the ability to set the KDE default browser 
+  * added the ability to set the KDE default browser
    (still part of bnc#170055)
 -------------------------------------------------------------------
@ -9402,16 +9655,16 @@ Wed Jan 28 13:48:00 CET 2009 - wr@rosenauer.org
 - security update to 3.0.6 (bnc#470074)
  * MFSA 2009-06/CVE-2009-0358: Directives to not cache pages ignored
    (bmo#441751)
-  * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading 
+  * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading
    HTTPOnly cookies (bmo#380418)
-  * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via 
+  * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via
    local .desktop files (bmo#460425)
  * MFSA 2009-03/CVE-2009-0355: Local file stealing with SessionStore
    (bmo#466937)
-  * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method 
+  * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method
    and window.eval (bmo#468581)
-  * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with 
+  * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with
-    evidence of memory corruption (rv:1.9.0.6) (bmo#452913, 
+    evidence of memory corruption (rv:1.9.0.6) (bmo#452913,
    bmo#449006, bmo#331088, bmo#401042, bmo#416461, bmo#422283,
    bmo#422301, bmo#431705, bmo#437142, bmo#421839, bmo#420697,
    bmo#461027)
@ -9456,7 +9709,7 @@ Fri Nov 21 03:11:41 EST 2008 - hfiguiere@suse.de
  * Bookmark editing it now properly locked down. bnc#439335
  * Bookmars are properly hidden.
  * History is properly locked down. bnc#439343
-  * Make sure the search bar is not put back when resetting the 
+  * Make sure the search bar is not put back when resetting the
    toolbar. bnc#439358
 -------------------------------------------------------------------
@ -9577,13 +9830,13 @@ Tue Jul 29 15:02:47 CEST 2008 - vuntz@novell.com
 -------------------------------------------------------------------
 Mon Jul 28 20:54:22 CEST 2008 - mauro@suse.de
- Update to stability/security release 3.0.1 (bnc#407573) 
+- Update to stability/security release 3.0.1 (bnc#407573)
  (thanks, Wolfgang)
  + MFSA 2008-36  Crash with malformed GIF file on Mac OS X
-  + MFSA 2008-35 Command-line URLs launch multiple tabs when 
+  + MFSA 2008-35 Command-line URLs launch multiple tabs when
    Firefox not running
  + MFSA 2008-34 Remote code execution by overflowing CSS reference counter
- Set browser.shell.checkDefaultBrowser to true (bnc#404119) 
+- Set browser.shell.checkDefaultBrowser to true (bnc#404119)
 -------------------------------------------------------------------
 Tue Jun 17 18:49:33 CEST 2008 - maw@suse.de
@ -9794,7 +10047,7 @@ Fri Sep 14 23:13:06 CEST 2007 - maw@suse.de
 -------------------------------------------------------------------
 Wed Sep 12 15:21:06 CEST 2007 - dmueller@suse.de
- fix hardlinks accross partitions 
+- fix hardlinks accross partitions
 -------------------------------------------------------------------
 Thu Sep  6 16:07:12 CEST 2007 - maw@suse.de
@ -9805,12 +10058,12 @@ Thu Sep  6 16:07:12 CEST 2007 - maw@suse.de
 -------------------------------------------------------------------
 Mon Sep  3 22:33:09 CEST 2007 - ro@suse.de
- move last change a bit further in specfile 
+- move last change a bit further in specfile
 -------------------------------------------------------------------
 Fri Aug 31 18:36:16 CEST 2007 - maw@suse.de
- Mark a .png file as nonexecutable. 
+- Mark a .png file as nonexecutable.
 -------------------------------------------------------------------
 Tue Aug 28 16:44:08 CEST 2007 - maw@suse.de
@ -9828,7 +10081,7 @@ Wed Aug 22 17:53:03 CEST 2007 - maw@suse.de
  + Add x11-session.patch, supporting X11 session management
    (#227047)
  + Update to version 2.0.0.6
-    * MFSA 2007-26  Privilege escalation through chrome-loaded 
+    * MFSA 2007-26  Privilege escalation through chrome-loaded
                    about:blank windows
    * MFSA 2007-27  Unescaped URIs passed to external programs
                    (only relevant on Windows)
@ -9841,7 +10094,7 @@ Tue Aug 21 09:45:35 CEST 2007 - aj@suse.de
  page.
 -------------------------------------------------------------------
-Thu Aug 16 14:57:27 CEST 2007 - mauro@suse.de 
+Thu Aug 16 14:57:27 CEST 2007 - mauro@suse.de
 - Revert previous change.
@ -9850,7 +10103,7 @@ Tue Aug 14 11:58:23 CEST 2007 - mauro@suse.de
 - Added support for ymp in the mimetypes.rdf
 - Added OneClickInstallUrlHandler for handing the actual call from firefox.
- Fixes bnc #295677 
+- Fixes bnc #295677
 -------------------------------------------------------------------
 Mon Jul 23 18:57:07 CEST 2007 - maw@suse.de
@ -9906,7 +10159,7 @@ Mon Jun  4 19:53:35 CDT 2007 - maw@suse.de
 -------------------------------------------------------------------
 Mon Apr 30 16:49:55 CEST 2007 - ro@suse.de
- added unzip to BuildRequires 
+- added unzip to BuildRequires
 -------------------------------------------------------------------
 Wed Apr 18 14:16:44 CEST 2007 - mfabian@suse.de
@ -10030,7 +10283,7 @@ Sun Nov 12 11:28:00 CET 2006 - aj@suse.de
 -------------------------------------------------------------------
 Thu Nov  9 19:09:46 CET 2006 - jhargadon@suse.de
- updated tango theme 
+- updated tango theme
 -------------------------------------------------------------------
 Sun Oct 29 12:05:46 CET 2006 - aj@suse.de
@ -10067,10 +10320,10 @@ Fri Oct 20 11:27:23 CEST 2006 - mkoenig@suse.de
 - update to version 2.0rc3:
  * New features: Visual Refresh, Built-in phishing protection,
    Enhanced search capabilities, Improved tabbed browsing,
-    Resuming your browsing session, Previewing and subscribing 
+    Resuming your browsing session, Previewing and subscribing
    to Web feeds, Inline spell checking, Live Titles,
-    Improved Add-ons manager, JavaScript 1.7, Extended search 
+    Improved Add-ons manager, JavaScript 1.7, Extended search
-    plugin format, Updates to the extension system, 
+    plugin format, Updates to the extension system,
    Client-side session and persistent storage, SVG text
 -------------------------------------------------------------------
@ -10092,7 +10345,7 @@ Mon Aug 21 12:53:50 CEST 2006 - stark@suse.de
 -------------------------------------------------------------------
 Fri Aug 11 20:51:48 CEST 2006 - stark@suse.de
- fixed crash in dbus component (patch by thoenig #197928) 
+- fixed crash in dbus component (patch by thoenig #197928)
 - use external adresses for PAC configuration (#196506)
 -------------------------------------------------------------------
@ -10119,7 +10372,7 @@ Thu Jun 29 20:13:28 CEST 2006 - stark@suse.de
 - fixed printing crash if the last used printer is not available
  anymore (#187013)
-  
+
 -------------------------------------------------------------------
 Fri Jun 16 22:11:22 CEST 2006 - stark@suse.de
@ -10196,7 +10449,7 @@ Mon Apr 24 08:04:16 CEST 2006 - stark@suse.de
 - get available paper sizes from CUPS (#65482)
 - replaced/removed complicated gconfd reload in %post (#167989)
 - fixed memory leak in clipboard caching (bmo #289897)
-  
+
 -------------------------------------------------------------------
 Tue Apr 11 08:35:53 CEST 2006 - stark@suse.de
@ -10245,7 +10498,7 @@ Wed Feb 22 13:24:58 CET 2006 - stark@suse.de
 Tue Feb 14 06:45:24 CET 2006 - stark@suse.de
 - modified lockdown patches (#67281, #67282)
- applied set of security patches (#148876) 
+- applied set of security patches (#148876)
  bmo bugs: 282105, 307989, 315625, 320459, 323634, 325403, 325947
 -------------------------------------------------------------------
@ -10287,7 +10540,7 @@ Wed Jan 25 21:33:43 CET 2006 - mls@suse.de
 -------------------------------------------------------------------
 Sun Jan 22 17:06:57 CET 2006 - stark@suse.de
- disable Pango if MOZ_ENABLE_PANGO is not set 
+- disable Pango if MOZ_ENABLE_PANGO is not set
  and no typical language which needs Pango is used (#143428)
 -------------------------------------------------------------------
@ -10351,7 +10604,7 @@ Tue Nov 29 21:33:13 CET 2005 - stark@suse.de
 -------------------------------------------------------------------
 Fri Nov 18 07:41:41 CET 2005 - stark@suse.de
- update to 1.5rc3 (20051117) 
+- update to 1.5rc3 (20051117)
 -------------------------------------------------------------------
 Mon Oct 31 08:58:14 CET 2005 - stark@suse.de
@ -10399,7 +10652,7 @@ Tue Sep 20 10:24:16 CEST 2005 - stark@suse.de
 - security update to 1.0.7 (#117619)
  * MFSA 2005-57: IDN heap overrun using soft-hyphens (bmo #307259)
    (enabled IDN pref again)
-  * MFSA 2005-58: 
+  * MFSA 2005-58:
      CAN-2005-2701 Heap overrun in XBM image processing
      CAN-2005-2702 Crash on "zero-width non-joiner" sequence
      CAN-2005-2703 XMLHttpRequest header spoofing
@ -10444,7 +10697,7 @@ Mon Aug 22 06:10:12 CEST 2005 - stark@suse.de
 - install gconf schema for lockdown also on non-NLD
 - added backports (firefox-backports.patch)
  * gtk_im_context_set_cursor_location() is not used (bmo #281339)
-  * fixed crash in imgCacheValidator::OnStartRequest() 
+  * fixed crash in imgCacheValidator::OnStartRequest()
    (bmo #293307)
 - workaround for linking with pangoxft and pangox
  (broken by gtk 2.8 update) (#105764)
@ -10607,7 +10860,7 @@ Sat Apr 23 15:56:08 CEST 2005 - stark@suse.de
 -------------------------------------------------------------------
 Fri Apr 22 02:06:06 CEST 2005 - ro@suse.de
- use mozilla-gcc4.patch 
+- use mozilla-gcc4.patch
 -------------------------------------------------------------------
 Thu Apr 21 12:51:19 CEST 2005 - stark@suse.de
@ -10622,14 +10875,14 @@ Sat Apr 16 13:05:37 CEST 2005 - stark@suse.de
 -------------------------------------------------------------------
 Fri Apr 15 00:10:54 CEST 2005 - ro@suse.de
- fix problem in postinstall script 
+- fix problem in postinstall script
 -------------------------------------------------------------------
 Wed Apr 14 09:20:02 CEST 2005 - stark@suse.de
 - included fixed lockdown patch for NLD
 - linked proxies within Firefox with gnome settings (NLD)
- added gconfd restart procedure to install script 
+- added gconfd restart procedure to install script
  (only needed if gconf changes are done) (#76852)
 -------------------------------------------------------------------
@ -10652,7 +10905,7 @@ Tue Mar 22 12:33:15 CET 2005 - stark@suse.de
 - added default-plugin-less-annoying from mozilla
 - use GTK2 for Flash
 - use system NSPR on SUSE releases after 9.3
- made startscript PIS aware 
+- made startscript PIS aware
 - set g-application-name correctly (bmo #281979)
 - added man-page
 - use GTK system colors
@ -10674,7 +10927,7 @@ Mon Mar 21 18:20:39 CET 2005 - max@suse.de
 -------------------------------------------------------------------
 Thu Mar 17 21:01:11 CET 2005 - stark@suse.de
- updates from upcoming 1.0.2 
+- updates from upcoming 1.0.2
 - added again logic to use Adobe Reader 7 (#70861)
 - fixed crash in ICO decoding (#67142, bmo #245631)
 - preinstall beagle extension (#72920)
@ -10698,7 +10951,7 @@ Wed Mar  9 21:42:05 CET 2005 - stark@suse.de
 Mon Mar  7 20:47:00 CET 2005 - stark@suse.de
 - disable inclusion of acrobat plugin again (#70861)
- don't use gconfd in registration phase (#66381) 
+- don't use gconfd in registration phase (#66381)
 -------------------------------------------------------------------
 Mon Mar  7 16:13:29 CET 2005 - adrian@suse.de
@ -10752,10 +11005,10 @@ Tue Feb 15 10:26:04 CET 2005 - stark@suse.de
 Thu Feb 10 06:57:33 CET 2005 - stark@suse.de
 - additional fireflashing fix (#50635, bmo #280664)
- some more security related fixes 
+- some more security related fixes
  (bmo #268483, #273498, #277322)
 - fire up GTK2 filepicker if GNOME is running
-  
+
 -------------------------------------------------------------------
 Tue Feb  8 07:51:13 CET 2005 - stark@suse.de
@ -10829,7 +11082,7 @@ Thu Nov 18 21:48:05 CET 2004 - stark@suse.de
 -------------------------------------------------------------------
 Thu Nov 11 09:01:58 CET 2004 - stark@suse.de
- made initial window height smaller again 
+- made initial window height smaller again
 -------------------------------------------------------------------
 Tue Nov  9 09:09:06 CET 2004 - stark@suse.de
@ -10839,7 +11092,7 @@ Tue Nov  9 09:09:06 CET 2004 - stark@suse.de
 -------------------------------------------------------------------
 Thu Nov  4 08:22:36 CET 2004 - stark@suse.de
- update to 1.0rc2 
+- update to 1.0rc2
 -------------------------------------------------------------------
 Sat Oct 30 21:27:29 CEST 2004 - stark@suse.de
@ -10871,7 +11124,7 @@ Fri Oct 15 13:51:54 CEST 2004 - stark@suse.de
 -------------------------------------------------------------------
 Wed Oct  6 23:11:01 CEST 2004 - joeshaw@suse.de
- 
+
 - disable gconf settings as default (Ximian #67718)
 -------------------------------------------------------------------
@ -10882,7 +11135,7 @@ Wed Oct  6 07:04:05 CEST 2004 - stark@suse.de
 -------------------------------------------------------------------
 Tue Oct  5 10:09:04 CEST 2004 - stark@suse.de
- small important fix in firefox-download.patch (Ximian #65472) 
+- small important fix in firefox-download.patch (Ximian #65472)
 -------------------------------------------------------------------
 Sun Oct  3 00:02:09 CEST 2004 - stark@suse.de
@ -10905,7 +11158,7 @@ Thu Sep 30 16:14:10 CEST 2004 - shprasad@suse.de
 -------------------------------------------------------------------
 Wed Sep 29 15:54:46 CEST 2004 - stark@suse.de
- fix inclusion of RealPlayer plugin (Ximian #65711) 
+- fix inclusion of RealPlayer plugin (Ximian #65711)
 -------------------------------------------------------------------
 Mon Sep 27 17:51:24 CEST 2004 - joeshaw@suse.de
@ -10939,7 +11192,7 @@ Wed Sep 22 10:23:01 CEST 2004 - stark@suse.de
 - synced NLD package with 9.2 version
 - GTK2 filepicker does now ask for confirmation when overwriting
  files (Ximian #65068) by sagarwala@novell.com
- no direct update function (Ximian #65615) by rganesan@novell.com 
+- no direct update function (Ximian #65615) by rganesan@novell.com
 - throbber linked to Novell (Ximian #66283) by rganesan@novell.com
 - make industrial the default theme for NLD
  (Ximian #65542) by joeshaw@suse.de
@ -10961,13 +11214,13 @@ Mon Sep 20 17:57:38 CEST 2004 - federico@ximian.com
 -------------------------------------------------------------------
 Sun Sep 19 15:42:30 CEST 2004 - stark@suse.de
- use GNOME system prefs only for NLD by default 
+- use GNOME system prefs only for NLD by default
  (fixes bug #45575)
 -------------------------------------------------------------------
 Fri Sep 17 08:59:32 CEST 2004 - stark@suse.de
- joeshaw@suse.de: Update GConf patch so that proxy settings work 
+- joeshaw@suse.de: Update GConf patch so that proxy settings work
  correctly (Ximian #64461)
 - don't search Java on every path (Ximian #65383)
 - added some missing fixes for official release
@ -10978,7 +11231,7 @@ Sat Sep 11 13:25:41 CEST 2004 - stark@suse.de
 - update to official 1.0PR (0.10)
 - adopted gnome-filepicker patch
- removed obsolete CUPS hack from start-script 
+- removed obsolete CUPS hack from start-script
  (Ximian #65635, #65560)
 -------------------------------------------------------------------
@ -10994,7 +11247,7 @@ Mon Sep  6 17:33:07 CEST 2004 - stark@suse.de
 -------------------------------------------------------------------
 Mon Sep  6 13:48:03 CEST 2004 - stark@suse.de
- update to 1.0PR (aka 0.10) 
+- update to 1.0PR (aka 0.10)
 -------------------------------------------------------------------
 Fri Sep  3 21:35:47 CEST 2004 - stark@suse.de
@ -11004,12 +11257,12 @@ Fri Sep  3 21:35:47 CEST 2004 - stark@suse.de
 -------------------------------------------------------------------
 Thu Sep  2 03:08:59 CEST 2004 - dave@suse.de
- Fixed up the .desktop installation on nld 
+- Fixed up the .desktop installation on nld
 -------------------------------------------------------------------
 Wed Sep  1 15:05:48 CEST 2004 - shprasad@suse.de
- Doesn't ask to set Firefox as default web-browser. 
+- Doesn't ask to set Firefox as default web-browser.
 -------------------------------------------------------------------
 Tue Aug 31 14:01:18 CEST 2004 - stark@suse.de
@ -11027,7 +11280,7 @@ Tue Aug 24 17:35:52 CEST 2004 - stark@suse.de
 -------------------------------------------------------------------
 Fri Aug 20 17:12:48 CEST 2004 - stark@suse.de
- update to snapshot (20040820) 
+- update to snapshot (20040820)
 -------------------------------------------------------------------
 Thu Aug 19 08:46:42 CEST 2004 - stark@suse.de
@ -11051,7 +11304,7 @@ Tue Aug 17 13:12:35 CEST 2004 - stark@suse.de
 -------------------------------------------------------------------
 Thu Aug  5 06:27:41 CEST 2004 - stark@suse.de
- security update to 0.9.3 
+- security update to 0.9.3
  (including #43312 and others)
 - handle RealPlayer 9 plugin
@ -11063,13 +11316,13 @@ Mon Aug  2 15:11:51 CEST 2004 - ro@suse.de
 -------------------------------------------------------------------
 Wed Jul 28 08:46:31 CEST 2004 - stark@suse.de
- added fix against certificate spoofing (#43312) 
+- added fix against certificate spoofing (#43312)
 -------------------------------------------------------------------
 Fri Jul 23 06:31:41 CEST 2004 - stark@suse.de
 - update to 0.9.2
- added workaround for extension registry 
+- added workaround for extension registry
 - removed old (incompatible) mozex extension
 -------------------------------------------------------------------
@ -11081,7 +11334,7 @@ Tue Jun 29 06:27:59 CEST 2004 - stark@suse.de
 -------------------------------------------------------------------
 Tue Jun 15 12:42:28 CEST 2004 - stark@suse.de
- update to 0.9 
+- update to 0.9
 - added patch for newer freetype
 -------------------------------------------------------------------
@ -11097,7 +11350,7 @@ Mon Mar 29 11:43:51 CEST 2004 - stark@suse.de
  milestone builds
 - changed profile-dir to .firefox
 - added some needed files
- enabled gnomevfs extension 
+- enabled gnomevfs extension
 -------------------------------------------------------------------
 Fri Mar 26 18:09:34 CET 2004 - uli@suse.de
@ -11107,13 +11360,13 @@ Fri Mar 26 18:09:34 CET 2004 - uli@suse.de
 -------------------------------------------------------------------
 Wed Mar  3 06:52:00 CET 2004 - stark@suse.de
- removed unused patches for GTK2 build 
+- removed unused patches for GTK2 build
 - more fixes for (#35179)
 -------------------------------------------------------------------
 Mon Mar  1 07:32:52 CET 2004 - stark@suse.de
- improved start-script to interact with thunderbird (#35179) 
+- improved start-script to interact with thunderbird (#35179)
 -------------------------------------------------------------------
 Thu Feb 26 06:57:05 CET 2004 - stark@suse.de
@ -11126,15 +11379,15 @@ Thu Feb 26 06:57:05 CET 2004 - stark@suse.de
 -------------------------------------------------------------------
 Tue Feb 24 16:43:17 CET 2004 - stark@suse.de
- fixed optimization for non-x86 archs 
+- fixed optimization for non-x86 archs
 -------------------------------------------------------------------
 Tue Feb 24 07:43:35 CET 2004 - stark@suse.de
- adopted file-list and build options to original distribution 
+- adopted file-list and build options to original distribution
 - added prdtoa fix (#32963)
 - added hook for static firefox build to rebuild-databases.sh
- added compiler flags for security/ (nss-opt.patch) 
+- added compiler flags for security/ (nss-opt.patch)
 - included mozex (mozex.mozdev.org)
 - added -Os as optimization flag
@ -11142,14 +11395,14 @@ Tue Feb 24 07:43:35 CET 2004 - stark@suse.de
 Mon Feb  9 21:59:37 CET 2004 - stark@suse.de
 - renamed to MozillaFirefox
- update to final version 0.8 
+- update to final version 0.8
 -------------------------------------------------------------------
 Fri Feb  6 08:39:15 CET 2004 - stark@suse.de
 - update to Firebird 0.8 (20040205)
 - added mips build fix
- set PS printer list in MozillaFirebird.sh 
+- set PS printer list in MozillaFirebird.sh
 - use lib64 again for biarch platforms
 -------------------------------------------------------------------
@ -11189,20 +11442,20 @@ Thu Jul 10 09:45:49 CEST 2003 - stark@suse.de
 -------------------------------------------------------------------
 Fri Jun 20 06:53:08 CEST 2003 - stark@suse.de
- update to snapshot 20030622 (0.7pre) 
+- update to snapshot 20030622 (0.7pre)
 -------------------------------------------------------------------
 Mon May 19 08:54:46 CEST 2003 - stark@suse.de
- update to snapshot 20030518 (0.6) 
+- update to snapshot 20030518 (0.6)
 -------------------------------------------------------------------
 Sun May  7 10:11:16 CEST 2003 - stark@suse.de
- update to snapshot 20030507 
+- update to snapshot 20030507
 -------------------------------------------------------------------
 Wed Apr 30 13:26:43 CEST 2003 - stark@suse.de
- initial SuSE package 
+- initial SuSE package
--- a/MozillaFirefox.spec
+++ b/MozillaFirefox.spec
@ -28,9 +28,9 @@
 # orig_suffix b3
 # major 69
 # mainver %%major.99
-%define major          129
+%define major          133
-%define mainver        %major.0.1
+%define mainver        %major.0
-%define orig_version   129.0.1
+%define orig_version   133.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
@ -114,7 +114,7 @@ BuildRequires:  libiw-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.35
-BuildRequires:  mozilla-nss-devel >= 3.102.1
+BuildRequires:  mozilla-nss-devel >= 3.106
 BuildRequires:  nasm >= 2.14
 BuildRequires:  nodejs >= 12.22.12
 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
@ -149,7 +149,11 @@ BuildRequires:  zip
 %if 0%{?suse_version} < 1550
 BuildRequires:  pkgconfig(gconf-2.0) >= 1.2.1
 %endif
 %if 0%{?suse_version} < 1599
 BuildRequires:  clang15-devel
 %else
 BuildRequires:  clang18-devel
 %endif
 BuildRequires:  pkgconfig(glib-2.0) >= 2.22
 BuildRequires:  pkgconfig(gobject-2.0)
 BuildRequires:  pkgconfig(gtk+-3.0) >= 3.14.0
@ -173,10 +177,6 @@ Provides:       firefox = %{version}-%{release}
 Provides:       web_browser
 Provides:       appdata()
 Provides:       appdata(firefox.appdata.xml)
 # this is needed to match this package with the kde4 helper package without the main package
 # having a hard requirement on the kde4 package
 %define kde_helper_version 6
 Provides:       mozilla-kde4-version = %{kde_helper_version}
 Summary:        Mozilla %{appname} Web Browser
 License:        MPL-2.0
 Group:          Productivity/Networking/Web/Browsers
@ -208,7 +208,6 @@ Source20:       https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig
 Source21:       https://ftp.mozilla.org/pub/%{srcname}/releases/%{version}%{orig_suffix}/KEY#/mozilla.keyring
 # Gecko/Toolkit
 Patch1:         mozilla-nongnome-proxies.patch
 Patch2:         mozilla-kde.patch
 Patch3:         mozilla-ntlm-full-path.patch
 Patch4:         mozilla-aarch64-startup-crash.patch
 Patch6:         mozilla-s390-context.patch
@ -222,17 +221,15 @@ Patch18:        mozilla-silence-no-return-type.patch
 Patch19:        mozilla-bmo531915.patch
 Patch20:        one_swizzle_to_rule_them_all.patch
 Patch21:        svg-rendering.patch
-Patch23:        mozilla-rust-disable-future-incompat.patch
+Patch24:        mozilla-bmo1746799.patch
 Patch25:        mozilla-bmo1898476.patch
 Patch26:        mozilla-bmo1907511.patch
 # Firefox/browser
 Patch101:       firefox-kde.patch
 Patch102:       firefox-branded-icons.patch
 %endif
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Requires(post): coreutils shared-mime-info desktop-file-utils
 Requires(postun): shared-mime-info desktop-file-utils
 Requires:       %{name}-branding >= 68
 Requires:       xdg-desktop-portal
 %requires_ge    mozilla-nspr
 %requires_ge    mozilla-nss
 %requires_ge    libfreetype6
@ -345,18 +342,11 @@ find . -regex ".*\.c\|.*\.cpp\|.*\.h" -exec sed -i "s/__DATE__/${DATE}/g;s/__TIM
 # SLE-12 provides python39, but that package does not provide a python3 binary
 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
 #sed -i "s/python3/python3.9/g" configure.in
 sed -i "s|/usr/bin/env python3|/usr/bin/env python3.9|" mach
 sed -i "s|potential_python_binary = f\"python3.{i}\"|potential_python_binary = f\"python3.9.{i}\"|" mach
 export PYTHON3=/usr/bin/python3.9
 %endif
 kdehelperversion=$(cat toolkit/xre/nsKDEUtils.cpp | grep '#define KMOZILLAHELPER_VERSION' | cut -d ' ' -f 3)
 if test "$kdehelperversion" != %{kde_helper_version}; then
  echo fix kde helper version in the .spec file
  exit 1
 fi
 # When doing only_print_mozconfig, this file isn't necessarily available, so skip it
 cp %{SOURCE4} .obsenv.sh
 %else
@ -734,7 +724,7 @@ exit 0
 %{progdir}/crashreporter
 #%{progdir}/crashreporter.ini
 #%{progdir}/Throbber-small.gif
-%{progdir}/minidump-analyzer
+#%{progdir}/minidump-analyzer
 #%{progdir}/browser/crashreporter-override.ini
 %endif
 %{_datadir}/applications/%{desktop_file_name}.desktop
--- a/firefox-129.0.1.source.tar.xz
+++ b/firefox-129.0.1.source.tar.xz
@ -1,3 +0,0 @@
 version https://git-lfs.github.com/spec/v1
 oid sha256:9ddfe823e4c22167a77e47f56a8afde0d9621784a9e4e5dba4906e758175c073
 size 561709736
--- a/firefox-129.0.1.source.tar.xz.asc
+++ b/firefox-129.0.1.source.tar.xz.asc
@ -1,16 +0,0 @@
 -----BEGIN PGP SIGNATURE-----
 iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAma6BisACgkQ4207E/PZ
 MnQlDxAAzavl3Tkgdnpvx7YADuS7u/JIGhI1e6OyeNVzvXtSY4cyIYrFNVpH3qXx
 0vKdk2fyL2c3YYLkMP7BfNKgAhYQhALnvxoAVqocSRmVHRjGyewUM6iC3k/SpgIf
 r700/XNrq/Y++5zpvWO6P2fgipzaYVARyy2i5YUtsdYrNkAgEYYP1Qm4SM8gHg6e
 tyt99uEEyhiAHrW4m9cFm+BzsIg23JhreY0AA/4czTORIcd37Oj0r4CcH5Wkpa15
 N1yU33A+xhIreeNaZHCf9NJjQuP+TLjqZV13940tqe7BJl1Loaj9P68+g51/SEfq
 6ZuRQXQCMKPk/FJ7ZDZPMJpsI7ydvVHkBoWNBf6SeJqJblcguQucgL3q6KWkOauh
 Msy7opz2p1kp8SYGpDoKA+KOHq+kl3/GQe6ACfkjqlqOzrJeAx3E2Cm4puYuqMQe
 duCluu992WvzwDhEEkTaikWXw3MAeWe7wYCL+ya4rxRmjHptbde01XRM6LEXgb7f
 d3HBkxJczEuwYsnYmgWf7leBSf30VLRyegi4k5oJK0qiUeJ5uFj+vV3/6kzcu6KE
 gW6Z6Kr+IkrTGViQrj4z1qg5td6tO+rsfE983Sw2jjRMha9bRM+dGUHvFWXxt9Bo
 vCwDJr5Y4k+MkgQ4L6Fi8hurst3eONIVJrGMgRQJAAeeMUVXjG8=
 =mBRM
 -----END PGP SIGNATURE-----
--- a/firefox-133.0.source.tar.xz
+++ b/firefox-133.0.source.tar.xz
@ -0,0 +1,3 @@
 version https://git-lfs.github.com/spec/v1
 oid sha256:492b2c9a3b6d215e38ce490624e8b2b9473419accdeaddb24ba00bc6adc3cc60
 size 582165112
--- a/firefox-133.0.source.tar.xz.asc
+++ b/firefox-133.0.source.tar.xz.asc
@ -0,0 +1,16 @@
 -----BEGIN PGP SIGNATURE-----
 iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmc/e7sACgkQ4207E/PZ
 MnRqQw//TaAudMwOpvyStSBd1C+W0fOFV+aFNMLGdjflWwyPKt3qR59NcChlFivv
 dRx7ag9KKOFeECF661WXodC3l67f/DqxFsvJz6HM2WIE9XWUG3TxDLoSJyRtoiLQ
 MYZY3KrbiwFn+ZgCCp37UbJYlFZ1O7vWyoGaAOUA0sr7Mfizs2DWEzh4+u70RAgM
 EhpSCi2Vm3dPDVGDaLvT62JyS2F100bcdU6Wbae8UP3VarZCAl3J0JH8R9rEaj3R
 qjgCFUHe8i+U/GtTzgsbW7d3/hENj9HX+b9sLEImSqqX9Lo6YRlO09IrWwoHrijr
 MFUI/JgH52YTofB9ucvZfQkvyNEug0oFGhfTcYnyvOtDzE2oIjPVSSCgnkyXWxTm
 r/EKxN0zWTGRGaGBCtkcrsbMXaAxjfd71CkjsmoUdge5/nERBfUN1TGgZQrq/6Dh
 f/edsUiQxSIjTkI40Xt3NhXPQozWm8WSD87pVm2FSQH9k3rEGnUssLCIO4SRgrDL
 Evs5KBtJmasn8o/G4KQK08CzraPuDXEWqd7o8Tjz2fXnEDi6ChkJZyPMjnEFbwOy
 PvaN5YauaqgOKO3Uo408YE+zcTcSEEqiG+sBYOseMo/K1fmIBRhQxpYMU6r8FWiE
 XjfE63U5tk+LJl2RKNqdg4Dw6SBC5T7qfwpQXJfs/rdrImZ+fhE=
 =g/x2
 -----END PGP SIGNATURE-----
--- a/firefox-kde.patch
+++ b/firefox-kde.patch
@ -1,302 +0,0 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: Martin Sirringhaus <msirringhaus@suse.de>
 Date: Tue, 8 Aug 2023 16:18:24 +0300
 Subject: [PATCH] Add KDE integration to Firefox
 Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=140751
 Bug: https://bugzilla.suse.com/show_bug.cgi?id=170055
 How to apply this patch:
 1. Import and apply it
 2. cp browser/base/content/browser.xul browser/base/content/browser-kde.xul
 3. Find editBookmarkPanelDoneButton
 4. Replace #ifndef with #ifdef in the line above (this hanges the button order from Gnome-style to KDE-style)
 5. hg qrefresh
 ---
 browser/components/preferences/main.js        |  18 +++
 browser/components/shell/moz.build            |   2 +
 .../components/shell/nsKDEShellService.cpp    | 109 ++++++++++++++++++
 browser/components/shell/nsKDEShellService.h  |  32 +++++
 .../components/shell/nsUnixShellService.cpp   |  22 ++++
 browser/components/shell/nsUnixShellService.h |  15 +++
 6 files changed, 198 insertions(+)
 create mode 100644 browser/components/shell/nsKDEShellService.cpp
 create mode 100644 browser/components/shell/nsKDEShellService.h
 create mode 100644 browser/components/shell/nsUnixShellService.cpp
 create mode 100644 browser/components/shell/nsUnixShellService.h
 diff --git a/browser/components/preferences/main.js b/browser/components/preferences/main.js
 --- a/browser/components/preferences/main.js
 +++ b/browser/components/preferences/main.js
@@ -292,16 +292,23 @@ var gMainPane = {
         }, backoffTimes[this._backoffIndex + 1 < backoffTimes.length ? this._backoffIndex++ : backoffTimes.length - 1]);
       };
       window.setTimeout(() => {
         window.requestIdleCallback(pollForDefaultBrowser);
       }, backoffTimes[this._backoffIndex]);
     }
 +    var env = Components.classes["@mozilla.org/process/environment;1"]
 +      .getService(Components.interfaces.nsIEnvironment);
 +    var kde_session = 0;
 +    if (env.get('KDE_FULL_SESSION') == "true") {
 +      kde_session = 1;
 +    }
 +
     this.initBrowserContainers();
     this.buildContentProcessCountMenuList();
     this.updateDefaultPerformanceSettingsPref();
     let defaultPerformancePref = Preferences.get(
       "browser.preferences.defaultPerformanceSettings.enabled"
     );
@@ -1753,16 +1760,27 @@ var gMainPane = {
       // Disable the set default button, so that the user doesn't try to hit it again
       // while awaiting on setDefaultBrowser
       let setDefaultButton = document.getElementById("setDefaultButton");
       setDefaultButton.disabled = true;
       try {
         await shellSvc.setDefaultBrowser(false);
 +        if (kde_session == 1) {
 +          var shellObj = Components.classes["@mozilla.org/file/local;1"]
 +            .createInstance(Components.interfaces.nsILocalFile);
 +          shellObj.initWithPath("/usr/bin/kwriteconfig");
 +          var process = Components.classes["@mozilla.org/process/util;1"]
 +            .createInstance(Components.interfaces.nsIProcess);
 +          process.init(shellObj);
 +          var args = ["--file", "kdeglobals", "--group", "General", "--key",
 +              "BrowserApplication", "firefox"];
 +          process.run(false, args, args.length);
 +        }
       } catch (ex) {
         console.error(ex);
         return;
       } finally {
         // Make sure to re-enable the default button when we're finished, regardless of the outcome
         setDefaultButton.disabled = false;
       }
 diff --git a/browser/components/shell/moz.build b/browser/components/shell/moz.build
 --- a/browser/components/shell/moz.build
 +++ b/browser/components/shell/moz.build
@@ -31,16 +31,18 @@ if CONFIG["MOZ_WIDGET_TOOLKIT"] == "coco
     ]
 elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "gtk":
     XPIDL_SOURCES += [
         "nsIGNOMEShellService.idl",
     ]
     SOURCES += [
         "nsGNOMEShellService.cpp",
 +        "nsKDEShellService.cpp",
 +        "nsUnixShellService.cpp",
     ]
     if CONFIG["MOZ_ENABLE_DBUS"]:
         SOURCES += [
             "nsGNOMEShellDBusHelper.cpp",
             "nsGNOMEShellSearchProvider.cpp",
         ]
         include("/ipc/chromium/chromium-config.mozbuild")
 diff --git a/browser/components/shell/nsKDEShellService.cpp b/browser/components/shell/nsKDEShellService.cpp
 new file mode 100644
 --- /dev/null
 +++ b/browser/components/shell/nsKDEShellService.cpp
@@ -0,0 +1,108 @@
 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
 +/* This Source Code Form is subject to the terms of the Mozilla Public
 + * License, v. 2.0. If a copy of the MPL was not distributed with this
 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 +
 +#include "mozilla/ArrayUtils.h"
 +
 +#include "nsCOMPtr.h"
 +#include "nsKDEShellService.h"
 +#include "nsShellService.h"
 +#include "nsKDEUtils.h"
 +#include "nsIPrefService.h"
 +#include "nsIProcess.h"
 +#include "nsIFile.h"
 +#include "nsServiceManagerUtils.h"
 +#include "nsComponentManagerUtils.h"
 +#include "nsIMutableArray.h"
 +#include "nsISupportsPrimitives.h"
 +#include "nsArrayUtils.h"
 +
 +using namespace mozilla;
 +
 +nsresult
 +nsKDEShellService::Init()
 +{
 +    if( !nsKDEUtils::kdeSupport())
 +        return NS_ERROR_NOT_AVAILABLE;
 +    return NS_OK;
 +}
 +
 +NS_IMPL_ISUPPORTS(nsKDEShellService, nsIGNOMEShellService, nsIShellService)
 +
 +NS_IMETHODIMP
 +nsKDEShellService::IsDefaultBrowser(bool aForAllTypes,
 +                                    bool* aIsDefaultBrowser)
 +{
 +    *aIsDefaultBrowser = false;
 +
 +    nsCOMPtr<nsIMutableArray> command = do_CreateInstance( NS_ARRAY_CONTRACTID );
 +    if (!command)
 +        return NS_ERROR_FAILURE;
 +
 +    nsCOMPtr<nsISupportsCString> str = do_CreateInstance( NS_SUPPORTS_CSTRING_CONTRACTID );
 +    if (!str)
 +        return NS_ERROR_FAILURE;
 +
 +    str->SetData("ISDEFAULTBROWSER"_ns);
 +    command->AppendElement( str );
 +
 +    if( nsKDEUtils::command( command ))
 +        *aIsDefaultBrowser = true;
 +    return NS_OK;
 +}
 +
 +NS_IMETHODIMP
 +nsKDEShellService::SetDefaultBrowser(bool aForAllUsers)
 +{
 +    nsCOMPtr<nsIMutableArray> command = do_CreateInstance( NS_ARRAY_CONTRACTID );
 +    if (!command)
 +        return NS_ERROR_FAILURE;
 +
 +    nsCOMPtr<nsISupportsCString> cmdstr = do_CreateInstance( NS_SUPPORTS_CSTRING_CONTRACTID );
 +    nsCOMPtr<nsISupportsCString> paramstr = do_CreateInstance( NS_SUPPORTS_CSTRING_CONTRACTID );
 +    if (!cmdstr || !paramstr)
 +        return NS_ERROR_FAILURE;
 +
 +    cmdstr->SetData("SETDEFAULTBROWSER"_ns);
 +    command->AppendElement( cmdstr );
 +
 +    paramstr->SetData("ALLTYPES"_ns);
 +    command->AppendElement( paramstr );
 +
 +    return nsKDEUtils::command( command ) ? NS_OK : NS_ERROR_FAILURE;
 +}
 +
 +NS_IMETHODIMP
 +nsKDEShellService::GetCanSetDesktopBackground(bool* aResult)
 +{
 +  *aResult = true;
 +  return NS_OK;
 +}
 +
 +NS_IMETHODIMP
 +nsKDEShellService::SetDesktopBackground(dom::Element* aElement,
 +                                        int32_t aPosition,
 +                                        const nsACString& aImageName)
 +{
 +    return NS_ERROR_NOT_IMPLEMENTED;
 +}
 +
 +NS_IMETHODIMP
 +nsKDEShellService::GetDesktopBackgroundColor(PRUint32 *aColor)
 +{
 +    return NS_ERROR_NOT_IMPLEMENTED;
 +}
 +
 +NS_IMETHODIMP
 +nsKDEShellService::SetDesktopBackgroundColor(PRUint32 aColor)
 +{
 +    return NS_ERROR_NOT_IMPLEMENTED;
 +}
 +
 +NS_IMETHODIMP
 +nsKDEShellService::IsDefaultForScheme(nsTSubstring<char> const& aScheme, bool* aIsDefaultBrowser)
 +{
 +    return NS_ERROR_NOT_IMPLEMENTED;
 +}
 +
 diff --git a/browser/components/shell/nsKDEShellService.h b/browser/components/shell/nsKDEShellService.h
 new file mode 100644
 --- /dev/null
 +++ b/browser/components/shell/nsKDEShellService.h
@@ -0,0 +1,32 @@
 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
 +/* This Source Code Form is subject to the terms of the Mozilla Public
 + * License, v. 2.0. If a copy of the MPL was not distributed with this
 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 +
 +#ifndef nskdeshellservice_h____
 +#define nskdeshellservice_h____
 +
 +#include "nsIGNOMEShellService.h"
 +#include "nsToolkitShellService.h"
 +#include "nsString.h"
 +#include "mozilla/Attributes.h"
 +
 +class nsKDEShellService final : public nsIGNOMEShellService,
 +                                public nsToolkitShellService
 +{
 +public:
 +  nsKDEShellService() : mCheckedThisSession(false) { }
 +
 +  NS_DECL_ISUPPORTS
 +  NS_DECL_NSISHELLSERVICE
 +  NS_DECL_NSIGNOMESHELLSERVICE
 +
 +  nsresult Init();
 +
 +private:
 +  ~nsKDEShellService() {}
 +
 +  bool mCheckedThisSession;
 +};
 +
 +#endif // nskdeshellservice_h____
 diff --git a/browser/components/shell/nsUnixShellService.cpp b/browser/components/shell/nsUnixShellService.cpp
 new file mode 100644
 --- /dev/null
 +++ b/browser/components/shell/nsUnixShellService.cpp
@@ -0,0 +1,22 @@
 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
 +/* This Source Code Form is subject to the terms of the Mozilla Public
 + * License, v. 2.0. If a copy of the MPL was not distributed with this
 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 +
 +
 +#include "nsUnixShellService.h"
 +#include "nsGNOMEShellService.h"
 +#include "nsKDEShellService.h"
 +#include "nsKDEUtils.h"
 +#include "mozilla/ModuleUtils.h"
 +
 +NS_GENERIC_FACTORY_CONSTRUCTOR_INIT(nsGNOMEShellService, Init)
 +NS_GENERIC_FACTORY_CONSTRUCTOR_INIT(nsKDEShellService, Init)
 +
 +NS_IMETHODIMP
 +nsUnixShellServiceConstructor(REFNSIID aIID, void **aResult)
 +{
 +    if( nsKDEUtils::kdeSupport())
 +        return nsKDEShellServiceConstructor( aIID, aResult );
 +    return nsGNOMEShellServiceConstructor( aIID, aResult );
 +}
 diff --git a/browser/components/shell/nsUnixShellService.h b/browser/components/shell/nsUnixShellService.h
 new file mode 100644
 --- /dev/null
 +++ b/browser/components/shell/nsUnixShellService.h
@@ -0,0 +1,15 @@
 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
 +/* This Source Code Form is subject to the terms of the Mozilla Public
 + * License, v. 2.0. If a copy of the MPL was not distributed with this
 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 +
 +
 +#ifndef nsunixshellservice_h____
 +#define nsunixshellservice_h____
 +
 +#include "nsIGNOMEShellService.h"
 +
 +NS_IMETHODIMP
 +nsUnixShellServiceConstructor(nsISupports *aOuter, REFNSIID aIID, void **aResult);
 +
 +#endif // nsunixshellservice_h____
--- a/l10n-129.0.1.tar.xz
+++ b/l10n-129.0.1.tar.xz
@ -1,3 +0,0 @@
 version https://git-lfs.github.com/spec/v1
 oid sha256:eeaffb7ee1447376e76ea12095541e6ec4e8d6148207c260da4da947b56d3ef6
 size 34484384
--- a/l10n-133.0.tar.xz
+++ b/l10n-133.0.tar.xz
@ -0,0 +1,3 @@
 version https://git-lfs.github.com/spec/v1
 oid sha256:767905b231198d4b0cdbc00970cd4de63315bf63fb1d88bf53c844d4e694f8fe
 size 35102084
--- a/mozilla-bmo1504834-part1.patch
+++ b/mozilla-bmo1504834-part1.patch
@ -1,11 +1,11 @@
 # HG changeset patch
-# Parent  125a78208d2cef58191a0328ffe894dd14c6b146
+# Parent  e31f5228a09ed69d7ac3c84e54f0faa6a5910ae0
 Taken from https://bugzilla.mozilla.org/show_bug.cgi?id=1504834
 diff --git a/gfx/2d/DrawTargetSkia.cpp b/gfx/2d/DrawTargetSkia.cpp
 --- a/gfx/2d/DrawTargetSkia.cpp
 +++ b/gfx/2d/DrawTargetSkia.cpp
-@@ -151,17 +151,18 @@ static IntRect CalculateSurfaceBounds(co
+@@ -155,17 +155,18 @@ static IntRect CalculateSurfaceBounds(co
   if (!sampledBounds.ToIntRect(&bounds)) {
     return surfaceBounds;
   }
@ -28,8 +28,8 @@ diff --git a/gfx/2d/DrawTargetSkia.cpp b/gfx/2d/DrawTargetSkia.cpp
 diff --git a/gfx/2d/Types.h b/gfx/2d/Types.h
 --- a/gfx/2d/Types.h
 +++ b/gfx/2d/Types.h
-@@ -84,28 +84,21 @@ enum class SurfaceFormat : int8_t {
+@@ -94,28 +94,21 @@ enum class SurfaceFormat : int8_t {
-   YUV422,  // Single plane YUV 4:2:2 interleaved as Y`0 Cb Y`1 Cr.
+               // this format.
   HSV,
   Lab,
   Depth,
--- a/mozilla-bmo1746799.patch
+++ b/mozilla-bmo1746799.patch
@ -0,0 +1,72 @@
 From 535dc3c97fd19a30a329a188786998ae00cdf017 Mon Sep 17 00:00:00 2001
 From: andrew <andrew@arobeia.co.uk>
 Date: Thu, 23 Dec 2021 16:18:30 +0000
 Subject: [PATCH] Map linearly from cubeb volume to pa volume
 Fixes incorrect volume mapping.
 Rebased to current SUSE sources and updated checksums Wed Sep 04 00:00:00 2024
 diff --git a/third_party/rust/cubeb-pulse/.cargo-checksum.json b/third_party/rust/cubeb-pulse/.cargo-checksum.json
 --- a/third_party/rust/cubeb-pulse/.cargo-checksum.json
 +++ b/third_party/rust/cubeb-pulse/.cargo-checksum.json
@@ -1,1 +1,1 @@
 -{"files":{".editorconfig":"bf047bd1da10cabb99eea666d1e57c321eba4716dccb3e4ed0e2c5fe3ca53858",".github/workflows/build.yml":"477366d58c9dc059dbe4a158a6e910f23a3e9ecac7411f73616e06375583b764","AUTHORS":"0e0ac930a68ce2f6b876126b195add177f0d3886facb9260f4d9b69f1988f0cc","Cargo.toml":"4dc677a2a769c0f1667c7ad52bc7b09d22ae8e47bb95389223a5075eb4228d13","LICENSE":"44c6b5ae5ec3fe2fbc608b00e6f4896f4d2d5c7e525fcbaa3eaa3cf2f3d5a983","README.md":"0079450bb4b013bac065ed1750851e461a3710ebad1f323817da1cb82db0bc4f","src/backend/context.rs":"c0db5f2447de1d6df5aa2812fa342a085e73156a072c221c7379b9a6a9b86786","src/backend/cork_state.rs":"4a0f1afc7d9f333dac89218cc56d7d32fbffb487cd48c1c9a4e03d79cb3b5e28","src/backend/intern.rs":"11ca424e4eb77f8eb9fd5a6717d1e791facf9743156a8534f0016fcf64d57b0f","src/backend/mod.rs":"dfb30ec497d6215e4535e936fea8fe3a407ef24dc1cec43b52c0ffa923d9229c","src/backend/stream.rs":"dfe5b747e100cae4aeae36cf2ebb9dc4715b411b4116721a40eec2944eb0ec23","src/capi.rs":"fa0fa020f0d0efe55aa0fc3596405e8407bbe2cbe6c7a558345304e6da87994e","src/lib.rs":"b41bbdc562cbfb130ed7c1e53fe69944774f515705341d8ce48a2f82c8c0c2c5"},"package":null}
 \ No newline at end of file
 +{"files":{".editorconfig":"bf047bd1da10cabb99eea666d1e57c321eba4716dccb3e4ed0e2c5fe3ca53858",".github/workflows/build.yml":"477366d58c9dc059dbe4a158a6e910f23a3e9ecac7411f73616e06375583b764","AUTHORS":"0e0ac930a68ce2f6b876126b195add177f0d3886facb9260f4d9b69f1988f0cc","Cargo.toml":"4dc677a2a769c0f1667c7ad52bc7b09d22ae8e47bb95389223a5075eb4228d13","LICENSE":"44c6b5ae5ec3fe2fbc608b00e6f4896f4d2d5c7e525fcbaa3eaa3cf2f3d5a983","README.md":"0079450bb4b013bac065ed1750851e461a3710ebad1f323817da1cb82db0bc4f","src/backend/context.rs":"c0db5f2447de1d6df5aa2812fa342a085e73156a072c221c7379b9a6a9b86786","src/backend/cork_state.rs":"4a0f1afc7d9f333dac89218cc56d7d32fbffb487cd48c1c9a4e03d79cb3b5e28","src/backend/intern.rs":"11ca424e4eb77f8eb9fd5a6717d1e791facf9743156a8534f0016fcf64d57b0f","src/backend/mod.rs":"dfb30ec497d6215e4535e936fea8fe3a407ef24dc1cec43b52c0ffa923d9229c","src/backend/stream.rs":"2dfc61c4eac69624558756d87283496d01f56f44bf311119eff0f1d124cd88f3","src/capi.rs":"fa0fa020f0d0efe55aa0fc3596405e8407bbe2cbe6c7a558345304e6da87994e","src/lib.rs":"b41bbdc562cbfb130ed7c1e53fe69944774f515705341d8ce48a2f82c8c0c2c5"},"package":null}
 diff --git a/third_party/rust/cubeb-pulse/src/backend/stream.rs b/third_party/rust/cubeb-pulse/src/backend/stream.rs
 --- a/third_party/rust/cubeb-pulse/src/backend/stream.rs
 +++ b/third_party/rust/cubeb-pulse/src/backend/stream.rs
@@ -760,18 +760,18 @@ impl<'ctx> StreamOps for PulseStream<'ct
                             _ => pulse::SinkFlags::empty(),
                         }
                     };
                     if flags.contains(pulse::SinkFlags::FLAT_VOLUME) {
                         self.volume = volume;
                     } else {
                         let channels = stm.get_sample_spec().channels;
 -                        let vol = pulse::sw_volume_from_linear(f64::from(volume));
 -                        cvol.set(u32::from(channels), vol);
 +                        let vol = volume * (PA_VOLUME_NORM as f32);
 +                        cvol.set(u32::from(channels), vol as pa_volume_t);
                         let index = stm.get_index();
                         let context_ptr = self.context as *const _ as *mut _;
                         if let Ok(o) = context.set_sink_input_volume(
                             index,
                             &cvol,
                             context_success,
 diff --git a/third_party/rust/pulse-ffi/.cargo-checksum.json b/third_party/rust/pulse-ffi/.cargo-checksum.json
 --- a/third_party/rust/pulse-ffi/.cargo-checksum.json
 +++ b/third_party/rust/pulse-ffi/.cargo-checksum.json
@@ -1,1 +1,1 @@
 -{"files":{"Cargo.toml":"d0d7e81366920147911554f68c95567cae0931950c6d96ccc2c986508473642e","src/ffi_funcs.rs":"a16646c5e7c49e94b907a7a404cfcadf3007688005c689cca936f0c2ee2e28e6","src/ffi_types.rs":"2ca56bc3638a40d331e53117a5dd175d0a6e102b1e0eccb9c2adc565c6861a33","src/lib.rs":"6aff308de11954a067d0f6ef95bf3126aabb6d928a5191e91d9a38ebadba91c2"},"package":null}
 \ No newline at end of file
 +{"files":{"Cargo.toml":"d0d7e81366920147911554f68c95567cae0931950c6d96ccc2c986508473642e","src/ffi_funcs.rs":"a16646c5e7c49e94b907a7a404cfcadf3007688005c689cca936f0c2ee2e28e6","src/ffi_types.rs":"f39a27712b17256583331f7ce5722413d0c7b51d73d8def8f50e839e23dfb411","src/lib.rs":"6aff308de11954a067d0f6ef95bf3126aabb6d928a5191e91d9a38ebadba91c2"},"package":null}
 diff --git a/third_party/rust/pulse-ffi/src/ffi_types.rs b/third_party/rust/pulse-ffi/src/ffi_types.rs
 --- a/third_party/rust/pulse-ffi/src/ffi_types.rs
 +++ b/third_party/rust/pulse-ffi/src/ffi_types.rs
@@ -17,16 +17,21 @@ pub const PA_SAMPLE_S32BE: c_int = 8;
 pub const PA_SAMPLE_S24LE: c_int = 9;
 pub const PA_SAMPLE_S24BE: c_int = 10;
 pub const PA_SAMPLE_S24_32LE: c_int = 11;
 pub const PA_SAMPLE_S24_32BE: c_int = 12;
 pub const PA_SAMPLE_MAX: c_int = 13;
 pub const PA_SAMPLE_INVALID: c_int = -1;
 pub type pa_sample_format_t = c_int;
 +pub const PA_VOLUME_MUTED: c_uint = 0;
 +pub const PA_VOLUME_NORM: c_uint = 0x10000;
 +pub const PA_VOLUME_MAX: c_uint = 0x7fffffff;
 +
 +
 #[repr(C)]
 #[derive(Copy, Clone, Debug)]
 pub struct Struct_pa_sample_spec {
     pub format: pa_sample_format_t,
     pub rate: u32,
     pub channels: u8,
 }
--- a/mozilla-bmo1898476.patch
+++ b/mozilla-bmo1898476.patch
@ -1,401 +0,0 @@
 # HG changeset patch
 # User stransky <stransky@redhat.com>
 # Date 1720609192 0
 # Node ID f9323daf7abeb19f69ac5762a0a442c0dc15636e
 # Parent  5afadee4e18fc5779d789d9371a3d2d67a29d1da
 Bug 1898476 [Wayland] Move MozContainerSurfaceLock from MozContainerWayland to MozContainerSurfaceLock module r=emilio
 Differential Revision: https://phabricator.services.mozilla.com/D214883
 diff --git a/widget/gtk/MozContainerSurfaceLock.cpp b/widget/gtk/MozContainerSurfaceLock.cpp
 new file mode 100644
 --- /dev/null
 +++ b/widget/gtk/MozContainerSurfaceLock.cpp
@@ -0,0 +1,31 @@
 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
 +/* This Source Code Form is subject to the terms of the Mozilla Public
 + * License, v. 2.0. If a copy of the MPL was not distributed with this
 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 +
 +#include "MozContainerSurfaceLock.h"
 +#include "MozContainer.h"
 +#include "WidgetUtilsGtk.h"
 +
 +using namespace mozilla::widget;
 +
 +MozContainerSurfaceLock::MozContainerSurfaceLock(MozContainer* aContainer) {
 +#ifdef MOZ_WAYLAND
 +  mContainer = aContainer;
 +  if (GdkIsWaylandDisplay()) {
 +    // mSurface can be nullptr if we lock hidden MozContainer and
 +    // that's correct, MozContainer is still locked.
 +    mSurface = moz_container_wayland_surface_lock(aContainer);
 +  }
 +#endif
 +}
 +
 +MozContainerSurfaceLock::~MozContainerSurfaceLock() {
 +#ifdef MOZ_WAYLAND
 +  if (GdkIsWaylandDisplay()) {
 +    moz_container_wayland_surface_unlock(mContainer, &mSurface);
 +  }
 +#endif
 +}
 +
 +struct wl_surface* MozContainerSurfaceLock::GetSurface() { return mSurface; }
 diff --git a/widget/gtk/MozContainerSurfaceLock.h b/widget/gtk/MozContainerSurfaceLock.h
 new file mode 100644
 --- /dev/null
 +++ b/widget/gtk/MozContainerSurfaceLock.h
@@ -0,0 +1,28 @@
 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
 +/* This Source Code Form is subject to the terms of the Mozilla Public
 + * License, v. 2.0. If a copy of the MPL was not distributed with this
 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 +
 +#ifndef widget_gtk_MozContainerSurfaceLock_h
 +#define widget_gtk_MozContainerSurfaceLock_h
 +
 +struct wl_surface;
 +struct _MozContainer;
 +typedef struct _MozContainer MozContainer;
 +
 +class MozContainerSurfaceLock {
 + public:
 +  explicit MozContainerSurfaceLock(MozContainer* aContainer);
 +  ~MozContainerSurfaceLock();
 +
 +  // wl_surface can be nullptr if we lock hidden MozContainer.
 +  struct wl_surface* GetSurface();
 +
 + private:
 +#ifdef MOZ_WAYLAND
 +  MozContainer* mContainer = nullptr;
 +#endif
 +  struct wl_surface* mSurface = nullptr;
 +};
 +
 +#endif  // widget_gtk_MozContainerSurfaceLock_h
 diff --git a/widget/gtk/MozContainerWayland.cpp b/widget/gtk/MozContainerWayland.cpp
 --- a/widget/gtk/MozContainerWayland.cpp
 +++ b/widget/gtk/MozContainerWayland.cpp
@@ -82,33 +82,16 @@ using namespace mozilla;
 using namespace mozilla::widget;
 static bool moz_container_wayland_surface_create_locked(
     const MutexAutoLock& aProofOfLock, MozContainer* container);
 static void moz_container_wayland_set_opaque_region_locked(
     const MutexAutoLock& aProofOfLock, MozContainer* container,
     const LayoutDeviceIntRegion&);
 -// Lock mozcontainer and get wayland surface of it. You need to pair with
 -// moz_container_wayland_surface_unlock() even
 -// if moz_container_wayland_surface_lock() fails and returns nullptr.
 -static struct wl_surface* moz_container_wayland_surface_lock(
 -    MozContainer* container);
 -static void moz_container_wayland_surface_unlock(MozContainer* container,
 -                                                 struct wl_surface** surface);
 -
 -MozContainerSurfaceLock::MozContainerSurfaceLock(MozContainer* aContainer) {
 -  mContainer = aContainer;
 -  mSurface = moz_container_wayland_surface_lock(aContainer);
 -}
 -MozContainerSurfaceLock::~MozContainerSurfaceLock() {
 -  moz_container_wayland_surface_unlock(mContainer, &mSurface);
 -}
 -struct wl_surface* MozContainerSurfaceLock::GetSurface() { return mSurface; }
 -
 // Invalidate gtk wl_surface to commit changes to wl_subsurface.
 // wl_subsurface changes are effective when parent surface is commited.
 static void moz_container_wayland_invalidate(MozContainer* container) {
   LOGWAYLAND("moz_container_wayland_invalidate [%p]\n",
              (void*)moz_container_get_nsWindow(container));
   GdkWindow* window = gtk_widget_get_window(GTK_WIDGET(container));
   if (!window) {
 diff --git a/widget/gtk/MozContainerWayland.h b/widget/gtk/MozContainerWayland.h
 --- a/widget/gtk/MozContainerWayland.h
 +++ b/widget/gtk/MozContainerWayland.h
@@ -8,16 +8,17 @@
 #ifndef __MOZ_CONTAINER_WAYLAND_H__
 #define __MOZ_CONTAINER_WAYLAND_H__
 #include <gtk/gtk.h>
 #include <functional>
 #include <vector>
 #include "mozilla/Mutex.h"
 #include "WindowSurface.h"
 +#include "MozContainerSurfaceLock.h"
 /*
  * MozContainer
  *
  * This class serves three purposes in the nsIWidget implementation.
  *
  *   - It provides objects to receive signals from GTK for events on native
  *     windows.
@@ -56,25 +57,22 @@ struct MozContainerWayland {
   mozilla::Mutex container_lock{"MozContainerWayland::container_lock"};
 };
 struct _MozContainer;
 struct _MozContainerClass;
 typedef struct _MozContainer MozContainer;
 typedef struct _MozContainerClass MozContainerClass;
 -class MozContainerSurfaceLock {
 -  MozContainer* mContainer;
 -  struct wl_surface* mSurface;
 -
 - public:
 -  explicit MozContainerSurfaceLock(MozContainer* aContainer);
 -  ~MozContainerSurfaceLock();
 -  struct wl_surface* GetSurface();
 -};
 +// Lock mozcontainer and get wayland surface of it. You need to pair with
 +// moz_container_wayland_surface_unlock() even
 +// if moz_container_wayland_surface_lock() fails and returns nullptr.
 +struct wl_surface* moz_container_wayland_surface_lock(MozContainer* container);
 +void moz_container_wayland_surface_unlock(MozContainer* container,
 +                                          struct wl_surface** surface);
 void moz_container_wayland_map(GtkWidget*);
 gboolean moz_container_wayland_map_event(GtkWidget*, GdkEventAny*);
 void moz_container_wayland_size_allocate(GtkWidget*, GtkAllocation*);
 void moz_container_wayland_unmap(GtkWidget*);
 struct wl_egl_window* moz_container_wayland_get_egl_window(
     MozContainer* container, double scale);
 diff --git a/widget/gtk/moz.build b/widget/gtk/moz.build
 --- a/widget/gtk/moz.build
 +++ b/widget/gtk/moz.build
@@ -28,16 +28,17 @@ if CONFIG["MOZ_WAYLAND"]:
 if CONFIG["MOZ_ENABLE_VAAPI"]:
     DIRS += ["vaapitest"]
 if CONFIG["MOZ_ENABLE_V4L2"]:
     DIRS += ["v4l2test"]
 EXPORTS += [
     "MozContainer.h",
 +    "MozContainerSurfaceLock.h",
     "nsGTKToolkit.h",
     "nsGtkUtils.h",
     "nsImageToPixbuf.h",
 ]
 EXPORTS.mozilla += [
     "GfxInfo.h",
     "GfxInfoUtils.h",
@@ -66,16 +67,17 @@ UNIFIED_SOURCES += [
     "DMABufLibWrapper.cpp",
     "DMABufSurface.cpp",
     "GfxInfo.cpp",
     "gtk3drawing.cpp",
     "GtkCompositorWidget.cpp",
     "IMContextWrapper.cpp",
     "InProcessGtkCompositorWidget.cpp",
     "MozContainer.cpp",
 +    "MozContainerSurfaceLock.cpp",
     "MPRISServiceHandler.cpp",
     "NativeKeyBindings.cpp",
     "NativeMenuGtk.cpp",
     "NativeMenuSupport.cpp",
     "nsApplicationChooser.cpp",
     "nsAppShell.cpp",
     "nsBidiKeyboard.cpp",
     "nsClipboard.cpp",
@@ -109,16 +111,17 @@ if CONFIG["MOZ_WAYLAND"]:
     UNIFIED_SOURCES += [
         "MozContainerWayland.cpp",
         "nsClipboardWayland.cpp",
         "nsWaylandDisplay.cpp",
         "WaylandBuffer.cpp",
         "WindowSurfaceWaylandMultiBuffer.cpp",
     ]
     EXPORTS.mozilla.widget += [
 +        "MozContainerSurfaceLock.h",
         "MozContainerWayland.h",
         "nsWaylandDisplay.h",
         "WaylandBuffer.h",
     ]
 if CONFIG["MOZ_X11"]:
     UNIFIED_SOURCES += [
         "nsClipboardX11.cpp",
 # HG changeset patch
 # User stransky <stransky@redhat.com>
 # Date 1720609193 0
 # Node ID a264ff9e9f6f87ca0520a884b29c4be90001533e
 # Parent  f9323daf7abeb19f69ac5762a0a442c0dc15636e
 Bug 1898476 [Wayland] Provide surface lock by GtkCompositorWidget r=emilio
 Depends on D214883
 Differential Revision: https://phabricator.services.mozilla.com/D214884
 diff --git a/widget/gtk/GtkCompositorWidget.cpp b/widget/gtk/GtkCompositorWidget.cpp
 --- a/widget/gtk/GtkCompositorWidget.cpp
 +++ b/widget/gtk/GtkCompositorWidget.cpp
@@ -206,10 +206,14 @@ void GtkCompositorWidget::SetRenderingSu
 }
 #ifdef MOZ_LOGGING
 bool GtkCompositorWidget::IsPopup() {
   return mWidget ? mWidget->IsPopup() : false;
 }
 #endif
 +UniquePtr<MozContainerSurfaceLock> GtkCompositorWidget::LockSurface() {
 +  return mWidget->LockSurface();
 +}
 +
 }  // namespace widget
 }  // namespace mozilla
 diff --git a/widget/gtk/GtkCompositorWidget.h b/widget/gtk/GtkCompositorWidget.h
 --- a/widget/gtk/GtkCompositorWidget.h
 +++ b/widget/gtk/GtkCompositorWidget.h
@@ -5,16 +5,18 @@
 #ifndef widget_gtk_GtkCompositorWidget_h
 #define widget_gtk_GtkCompositorWidget_h
 #include "GLDefs.h"
 #include "mozilla/DataMutex.h"
 #include "mozilla/widget/CompositorWidget.h"
 #include "WindowSurfaceProvider.h"
 +#include "mozilla/UniquePtr.h"
 +#include "MozContainerSurfaceLock.h"
 class nsIWidget;
 class nsWindow;
 namespace mozilla {
 namespace layers {
 class NativeLayerRootWayland;
@@ -91,16 +93,18 @@ class GtkCompositorWidget : public Compo
   RefPtr<mozilla::layers::NativeLayerRoot> GetNativeLayerRoot() override;
 #endif
   // PlatformCompositorWidgetDelegate Overrides
   void NotifyClientSizeChanged(const LayoutDeviceIntSize& aClientSize) override;
   GtkCompositorWidget* AsGtkCompositorWidget() override { return this; }
 +  UniquePtr<MozContainerSurfaceLock> LockSurface();
 +
  private:
 #if defined(MOZ_WAYLAND)
   void ConfigureWaylandBackend();
 #endif
 #if defined(MOZ_X11)
   void ConfigureX11Backend(Window aXWindow, bool aShaped);
 #endif
 #ifdef MOZ_LOGGING
 diff --git a/widget/gtk/nsWindow.cpp b/widget/gtk/nsWindow.cpp
 --- a/widget/gtk/nsWindow.cpp
 +++ b/widget/gtk/nsWindow.cpp
@@ -10271,8 +10271,15 @@ void nsWindow::SetDragSource(GdkDragCont
   mSourceDragContext = aSourceDragContext;
   if (IsPopup() &&
       (widget::GdkIsWaylandDisplay() || widget::IsXWaylandProtocol())) {
     if (auto* menuPopupFrame = GetMenuPopupFrame(GetFrame())) {
       menuPopupFrame->SetIsDragSource(!!aSourceDragContext);
     }
   }
 }
 +
 +UniquePtr<MozContainerSurfaceLock> nsWindow::LockSurface() {
 +  if (mIsDestroyed) {
 +    return nullptr;
 +  }
 +  return MakeUnique<MozContainerSurfaceLock>(mContainer);
 +}
 diff --git a/widget/gtk/nsWindow.h b/widget/gtk/nsWindow.h
 --- a/widget/gtk/nsWindow.h
 +++ b/widget/gtk/nsWindow.h
@@ -8,16 +8,17 @@
 #ifndef __nsWindow_h__
 #define __nsWindow_h__
 #include <gdk/gdk.h>
 #include <gtk/gtk.h>
 #include "CompositorWidget.h"
 #include "MozContainer.h"
 +#include "MozContainerSurfaceLock.h"
 #include "VsyncSource.h"
 #include "mozilla/EventForwards.h"
 #include "mozilla/Maybe.h"
 #include "mozilla/RefPtr.h"
 #include "mozilla/TouchEvents.h"
 #include "mozilla/UniquePtr.h"
 #include "mozilla/RWLock.h"
 #include "mozilla/widget/WindowSurface.h"
@@ -416,16 +417,18 @@ class nsWindow final : public nsBaseWidg
   static bool TitlebarUseShapeMask();
   bool IsRemoteContent() { return HasRemoteContent(); }
   void NativeMoveResizeWaylandPopupCallback(const GdkRectangle* aFinalSize,
                                             bool aFlippedX, bool aFlippedY);
   static bool IsToplevelWindowTransparent();
   static nsWindow* GetFocusedWindow();
 +  mozilla::UniquePtr<MozContainerSurfaceLock> LockSurface();
 +
 #ifdef MOZ_WAYLAND
   // Use xdg-activation protocol to transfer focus from gFocusWindow to aWindow.
   static void TransferFocusToWaylandWindow(nsWindow* aWindow);
   void FocusWaylandWindow(const char* aTokenID);
   bool GetCSDDecorationOffset(int* aDx, int* aDy);
   bool SetEGLNativeWindowSize(const LayoutDeviceIntSize& aEGLWindowSize);
   void WaylandDragWorkaround(GdkEventButton* aEvent);
 # HG changeset patch
 # User stransky <stransky@redhat.com>
 # Date 1720609193 0
 # Node ID eb230ecdf8eb26a9ed340873b58fe7b71f94f8e8
 # Parent  a264ff9e9f6f87ca0520a884b29c4be90001533e
 Bug 1898476 [Wayland] Lock Wayland surface before Swap buffers in RenderCompositorEGL r=emilio
 Depends on D214884
 Differential Revision: https://phabricator.services.mozilla.com/D214885
 diff --git a/gfx/webrender_bindings/RenderCompositorEGL.cpp b/gfx/webrender_bindings/RenderCompositorEGL.cpp
 --- a/gfx/webrender_bindings/RenderCompositorEGL.cpp
 +++ b/gfx/webrender_bindings/RenderCompositorEGL.cpp
@@ -149,16 +149,26 @@ RenderedFrameId RenderCompositorEGL::End
       const auto width = right - left;
       const auto height = bottom - top;
       bufferInvalid.OrWith(
           gfx::IntRect(left, (GetBufferSize().height - bottom), width, height));
     }
     gl()->SetDamage(bufferInvalid);
   }
 +
 +#ifdef MOZ_WIDGET_GTK
 +  // Rendering on Wayland has to be atomic (buffer attach + commit) and
 +  // wayland surface is also used by main thread so lock it before
 +  // we paint at SwapBuffers().
 +  UniquePtr<MozContainerSurfaceLock> lock;
 +  if (auto* gtkWidget = mWidget->AsGTK()) {
 +    lock = gtkWidget->LockSurface();
 +  }
 +#endif
   gl()->SwapBuffers();
   return frameId;
 }
 void RenderCompositorEGL::Pause() { DestroyEGLSurface(); }
 bool RenderCompositorEGL::Resume() {
   if (kIsAndroid) {
--- a/mozilla-bmo1907511.patch
+++ b/mozilla-bmo1907511.patch
@ -1,29 +0,0 @@
 # HG changeset patch
 # User stransky <stransky@redhat.com>
 # Date 1720807971 0
 # Node ID d8a0164db5db7090fd7549b03dd0391f7151649c
 # Parent  e243955016ffa880296b8d82cf531887dfb3ac22
 Bug 1907511 [Linux/X11] Check mWindow at GtkCompositorWidget::LockSurface() r=emilio
 Differential Revision: https://phabricator.services.mozilla.com/D216380
 diff --git a/widget/gtk/GtkCompositorWidget.cpp b/widget/gtk/GtkCompositorWidget.cpp
 --- a/widget/gtk/GtkCompositorWidget.cpp
 +++ b/widget/gtk/GtkCompositorWidget.cpp
@@ -207,13 +207,13 @@ void GtkCompositorWidget::SetRenderingSu
 #ifdef MOZ_LOGGING
 bool GtkCompositorWidget::IsPopup() {
   return mWidget ? mWidget->IsPopup() : false;
 }
 #endif
 UniquePtr<MozContainerSurfaceLock> GtkCompositorWidget::LockSurface() {
 -  return mWidget->LockSurface();
 +  return mWidget ? mWidget->LockSurface() : nullptr;
 }
 }  // namespace widget
 }  // namespace mozilla
--- a/mozilla-kde.patch
+++ b/mozilla-kde.patch
--- a/mozilla-ntlm-full-path.patch
+++ b/mozilla-ntlm-full-path.patch
@ -1,18 +1,28 @@
 # HG changeset patch
 # User Petr Cerny <pcerny@novell.com>
 # Parent 7308e4a7c1f769f4bbbc90870b849cadd99495a6
-# Parent  1c6a565013e4c5f3494f964269783939cd5ed0b8
+# Parent  3399aced682c232525633755ff79b37a0be75548
 Bug 634334 - call to the ntlm_auth helper fails
 diff --git a/extensions/auth/nsAuthSambaNTLM.cpp b/extensions/auth/nsAuthSambaNTLM.cpp
 --- a/extensions/auth/nsAuthSambaNTLM.cpp
 +++ b/extensions/auth/nsAuthSambaNTLM.cpp
-@@ -160,7 +160,7 @@ nsresult nsAuthSambaNTLM::SpawnNTLMAuthH
+@@ -148,17 +148,17 @@ nsresult nsAuthSambaNTLM::SpawnNTLMAuthH
-   const char* username = PR_GetEnv("USER");
+     }
-   if (!username) return NS_ERROR_FAILURE;
+ 
     base::LaunchOptions options;
     options.fds_to_remap.push_back(
         std::pair{toChildPipeRead.get(), STDIN_FILENO});
     options.fds_to_remap.push_back(
         std::pair{fromChildPipeWrite.get(), STDOUT_FILENO});
 -    std::vector<std::string> argvVec{"ntlm_auth",        "--helper-protocol",
 +    std::vector<std::string> argvVec{"/usr/bin/ntlm_auth",        "--helper-protocol",
                                      "ntlmssp-client-1", "--use-cached-creds",
                                      "--username",       username};
     auto result = base::LaunchApp(argvVec, std::move(options), &mChildPID);
     if (result.isErr()) {
       return NS_ERROR_FAILURE;
     }
 -  const char* const args[] = {"ntlm_auth",
 +  const char* const args[] = {"/usr/bin/ntlm_auth",
                               "--helper-protocol",
                               "ntlmssp-client-1",
                               "--use-cached-creds",
--- a/mozilla-rust-disable-future-incompat.patch
+++ b/mozilla-rust-disable-future-incompat.patch
@ -1,16 +0,0 @@
 # HG changeset patch
 # Parent  83a5e219b271976ee9dfa46b74ecc1c1c6d49f94
 Index: firefox-128.0/Cargo.toml
 ===================================================================
 --- firefox-128.0.orig/Cargo.toml
 +++ firefox-128.0/Cargo.toml
@@ -236,3 +236,8 @@ mio_0_8 = { package = "mio", git = "http
 # Patch `gpu-descriptor` 0.3.0 to remove unnecessary `allocator-api2` dep.:
 # Still waiting for the now-merged <https://github.com/zakarumych/gpu-descriptor/pull/40> to be released.
 gpu-descriptor = { git = "https://github.com/zakarumych/gpu-descriptor", rev = "7b71a4e47c81903ad75e2c53deb5ab1310f6ff4d" }
 +
 +# Package code v0.1.4 uses code "that will be rejected by a future version of Rust"
 +# Shut up such messages for now to make the build succeed
 +[future-incompat-report]
 +frequency = "never"
--- a/mozilla-silence-no-return-type.patch
+++ b/mozilla-silence-no-return-type.patch
@ -1,5 +1,5 @@
 # HG changeset patch
-# Parent  ed4bafa3b0d1f1da83e0a81545a0144602530a80
+# Parent  5cc2e34f46adee952bab6c6955d5b2d5a248d06a
 diff --git a/gfx/skia/skia/include/codec/SkEncodedOrigin.h b/gfx/skia/skia/include/codec/SkEncodedOrigin.h
 --- a/gfx/skia/skia/include/codec/SkEncodedOrigin.h
@ -363,7 +363,7 @@ diff --git a/intl/icu/source/i18n/number_rounding.cpp b/intl/icu/source/i18n/num
 diff --git a/js/src/irregexp/imported/regexp-parser.cc b/js/src/irregexp/imported/regexp-parser.cc
 --- a/js/src/irregexp/imported/regexp-parser.cc
 +++ b/js/src/irregexp/imported/regexp-parser.cc
-@@ -2776,16 +2776,17 @@ bool MayContainStrings(ClassSetOperandTy
+@@ -2780,16 +2780,17 @@ bool MayContainStrings(ClassSetOperandTy
       return false;
     case ClassSetOperandType::kCharacterClassEscape:
     case ClassSetOperandType::kClassStringDisjunction:
@ -405,7 +405,7 @@ diff --git a/third_party/libwebrtc/api/adaptation/resource.cc b/third_party/libw
 diff --git a/third_party/libwebrtc/api/rtp_parameters.cc b/third_party/libwebrtc/api/rtp_parameters.cc
 --- a/third_party/libwebrtc/api/rtp_parameters.cc
 +++ b/third_party/libwebrtc/api/rtp_parameters.cc
-@@ -28,16 +28,17 @@ const char* DegradationPreferenceToStrin
+@@ -32,16 +32,17 @@ const char* DegradationPreferenceToStrin
     case DegradationPreference::MAINTAIN_FRAMERATE:
       return "maintain-framerate";
     case DegradationPreference::MAINTAIN_RESOLUTION:
@ -426,7 +426,7 @@ diff --git a/third_party/libwebrtc/api/rtp_parameters.cc b/third_party/libwebrtc
 diff --git a/third_party/libwebrtc/api/video/video_frame_buffer.cc b/third_party/libwebrtc/api/video/video_frame_buffer.cc
 --- a/third_party/libwebrtc/api/video/video_frame_buffer.cc
 +++ b/third_party/libwebrtc/api/video/video_frame_buffer.cc
-@@ -101,16 +101,18 @@ const char* VideoFrameBufferTypeToString
+@@ -107,16 +107,18 @@ const char* VideoFrameBufferTypeToString
       return "kI210";
     case VideoFrameBuffer::Type::kI410:
       return "kI410";
@ -469,7 +469,7 @@ diff --git a/third_party/libwebrtc/api/video_codecs/video_codec.cc b/third_party
 diff --git a/third_party/libwebrtc/api/video_codecs/video_encoder_software_fallback_wrapper.cc b/third_party/libwebrtc/api/video_codecs/video_encoder_software_fallback_wrapper.cc
 --- a/third_party/libwebrtc/api/video_codecs/video_encoder_software_fallback_wrapper.cc
 +++ b/third_party/libwebrtc/api/video_codecs/video_encoder_software_fallback_wrapper.cc
-@@ -187,16 +187,17 @@ class VideoEncoderSoftwareFallbackWrappe
+@@ -186,16 +186,17 @@ class VideoEncoderSoftwareFallbackWrappe
         [[fallthrough]];
       case EncoderState::kMainEncoderUsed:
         return encoder_.get();
@ -487,7 +487,7 @@ diff --git a/third_party/libwebrtc/api/video_codecs/video_encoder_software_fallb
   // Settings used in the last InitEncode call and used if a dynamic fallback to
   // software is required.
-@@ -382,16 +383,17 @@ int32_t VideoEncoderSoftwareFallbackWrap
+@@ -381,16 +382,17 @@ int32_t VideoEncoderSoftwareFallbackWrap
     case EncoderState::kMainEncoderUsed: {
       return EncodeWithMainEncoder(frame, frame_types);
     }
@ -627,7 +627,7 @@ diff --git a/third_party/libwebrtc/call/video_send_stream.cc b/third_party/libwe
 diff --git a/third_party/libwebrtc/media/base/codec.cc b/third_party/libwebrtc/media/base/codec.cc
 --- a/third_party/libwebrtc/media/base/codec.cc
 +++ b/third_party/libwebrtc/media/base/codec.cc
-@@ -257,16 +257,17 @@ bool Codec::Matches(const Codec& codec) 
+@@ -267,16 +267,17 @@ bool Codec::Matches(const Codec& codec) 
                (codec.bitrate == 0 || bitrate <= 0 ||
                 bitrate == codec.bitrate) &&
                ((codec.channels < 2 && channels < 2) ||
@ -745,7 +745,7 @@ diff --git a/third_party/libwebrtc/modules/audio_processing/audio_processing_imp
     const StreamConfig& input_config,
     const StreamConfig& output_config) {
   AudioFormatValidity input_validity = ValidateAudioFormat(input_config);
-@@ -2420,16 +2421,17 @@ void AudioProcessingImpl::InitializeNois
+@@ -2176,16 +2177,17 @@ void AudioProcessingImpl::InitializeNois
             case NoiseSuppresionConfig::kModerate:
               return NsConfig::SuppressionLevel::k12dB;
             case NoiseSuppresionConfig::kHigh:
@ -763,40 +763,6 @@ diff --git a/third_party/libwebrtc/modules/audio_processing/audio_processing_imp
         cfg, proc_sample_rate_hz(), num_proc_channels());
   }
 }
 diff --git a/third_party/libwebrtc/modules/audio_processing/include/audio_processing.cc b/third_party/libwebrtc/modules/audio_processing/include/audio_processing.cc
 --- a/third_party/libwebrtc/modules/audio_processing/include/audio_processing.cc
 +++ b/third_party/libwebrtc/modules/audio_processing/include/audio_processing.cc
@@ -27,28 +27,30 @@ std::string NoiseSuppressionLevelToStrin
     case AudioProcessing::Config::NoiseSuppression::Level::kModerate:
       return "Moderate";
     case AudioProcessing::Config::NoiseSuppression::Level::kHigh:
       return "High";
     case AudioProcessing::Config::NoiseSuppression::Level::kVeryHigh:
       return "VeryHigh";
   }
   RTC_CHECK_NOTREACHED();
 +  return "";
 }
 std::string GainController1ModeToString(const Agc1Config::Mode& mode) {
   switch (mode) {
     case Agc1Config::Mode::kAdaptiveAnalog:
       return "AdaptiveAnalog";
     case Agc1Config::Mode::kAdaptiveDigital:
       return "AdaptiveDigital";
     case Agc1Config::Mode::kFixedDigital:
       return "FixedDigital";
   }
   RTC_CHECK_NOTREACHED();
 +  return "";
 }
 }  // namespace
 constexpr int AudioProcessing::kNativeSampleRatesHz[];
 void CustomProcessing::SetRuntimeSetting(
     AudioProcessing::RuntimeSetting setting) {}
 diff --git a/third_party/libwebrtc/modules/audio_processing/transient/transient_suppressor_impl.cc b/third_party/libwebrtc/modules/audio_processing/transient/transient_suppressor_impl.cc
 --- a/third_party/libwebrtc/modules/audio_processing/transient/transient_suppressor_impl.cc
 +++ b/third_party/libwebrtc/modules/audio_processing/transient/transient_suppressor_impl.cc
@ -821,7 +787,7 @@ diff --git a/third_party/libwebrtc/modules/audio_processing/transient/transient_
 diff --git a/third_party/libwebrtc/modules/congestion_controller/goog_cc/goog_cc_network_control.cc b/third_party/libwebrtc/modules/congestion_controller/goog_cc/goog_cc_network_control.cc
 --- a/third_party/libwebrtc/modules/congestion_controller/goog_cc/goog_cc_network_control.cc
 +++ b/third_party/libwebrtc/modules/congestion_controller/goog_cc/goog_cc_network_control.cc
-@@ -90,16 +90,18 @@ BandwidthLimitedCause GetBandwidthLimite
+@@ -81,16 +81,18 @@ BandwidthLimitedCause GetBandwidthLimite
       // Probes may not be sent in this state.
       return BandwidthLimitedCause::kLossLimitedBwe;
     case LossBasedState::kIncreasing:
@ -838,8 +804,8 @@ diff --git a/third_party/libwebrtc/modules/congestion_controller/goog_cc/goog_cc
 GoogCcNetworkController::GoogCcNetworkController(NetworkControllerConfig config,
                                                  GoogCcConfig goog_cc_config)
-     : key_value_config_(config.key_value_config ? config.key_value_config
+     : env_(config.env),
-                                                 : &trial_based_config_),
+       packet_feedback_only_(goog_cc_config.feedback_only),
 diff --git a/third_party/libwebrtc/modules/desktop_capture/linux/wayland/screencast_portal.cc b/third_party/libwebrtc/modules/desktop_capture/linux/wayland/screencast_portal.cc
 --- a/third_party/libwebrtc/modules/desktop_capture/linux/wayland/screencast_portal.cc
 +++ b/third_party/libwebrtc/modules/desktop_capture/linux/wayland/screencast_portal.cc
@ -864,7 +830,7 @@ diff --git a/third_party/libwebrtc/modules/desktop_capture/linux/wayland/screenc
 diff --git a/third_party/libwebrtc/modules/pacing/bitrate_prober.cc b/third_party/libwebrtc/modules/pacing/bitrate_prober.cc
 --- a/third_party/libwebrtc/modules/pacing/bitrate_prober.cc
 +++ b/third_party/libwebrtc/modules/pacing/bitrate_prober.cc
-@@ -79,16 +79,17 @@ bool BitrateProber::ReadyToSetActiveStat
+@@ -80,16 +80,17 @@ bool BitrateProber::ReadyToSetActiveStat
         return true;
       }
       // If config_.min_packet_size > 0, a "large enough" packet must be
@ -898,6 +864,27 @@ diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/create_video_rtp_depa
 }
 }  // namespace webrtc
 diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/rtcp_packet/congestion_control_feedback.cc b/third_party/libwebrtc/modules/rtp_rtcp/source/rtcp_packet/congestion_control_feedback.cc
 --- a/third_party/libwebrtc/modules/rtp_rtcp/source/rtcp_packet/congestion_control_feedback.cc
 +++ b/third_party/libwebrtc/modules/rtp_rtcp/source/rtcp_packet/congestion_control_feedback.cc
@@ -105,16 +105,17 @@ uint16_t To2BitEcn(rtc::EcnMarking ecn_m
       return 0;
     case rtc::EcnMarking::kEct1:
       return kEcnEct1 << 13;
     case rtc::EcnMarking::kEct0:
       return kEcnEct0 << 13;
     case rtc::EcnMarking::kCe:
       return kEcnCe << 13;
   }
 +  return 0; // should not be reached
 }
 rtc::EcnMarking ToEcnMarking(uint16_t receive_info) {
   const uint16_t ecn = (receive_info >> 13) & 0b11;
   if (ecn == kEcnEct1) {
     return rtc::EcnMarking::kEct1;
   }
   if (ecn == kEcnEct0) {
 diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc b/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc
 --- a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc
 +++ b/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc
@ -922,7 +909,7 @@ diff --git a/third_party/libwebrtc/modules/rtp_rtcp/source/rtp_sender.cc b/third
 diff --git a/third_party/libwebrtc/modules/video_coding/codecs/vp8/default_temporal_layers.cc b/third_party/libwebrtc/modules/video_coding/codecs/vp8/default_temporal_layers.cc
 --- a/third_party/libwebrtc/modules/video_coding/codecs/vp8/default_temporal_layers.cc
 +++ b/third_party/libwebrtc/modules/video_coding/codecs/vp8/default_temporal_layers.cc
-@@ -105,16 +105,17 @@ size_t BufferToIndex(Vp8BufferReference 
+@@ -104,16 +104,17 @@ size_t BufferToIndex(Vp8BufferReference 
       return 0;
     case Vp8FrameConfig::Vp8BufferReference::kGolden:
       return 1;
@ -964,7 +951,7 @@ diff --git a/third_party/libwebrtc/modules/video_coding/codecs/vp8/temporal_laye
 diff --git a/third_party/libwebrtc/modules/video_coding/h26x_packet_buffer.cc b/third_party/libwebrtc/modules/video_coding/h26x_packet_buffer.cc
 --- a/third_party/libwebrtc/modules/video_coding/h26x_packet_buffer.cc
 +++ b/third_party/libwebrtc/modules/video_coding/h26x_packet_buffer.cc
-@@ -66,16 +66,17 @@ bool BeginningOfIdr(const H26xPacketBuff
+@@ -58,16 +58,17 @@ bool BeginningOfIdr(const H26xPacketBuff
     case kH264StapA:
     case kH264SingleNalu: {
       return contains_idr_nalu;
@ -979,7 +966,7 @@ diff --git a/third_party/libwebrtc/modules/video_coding/h26x_packet_buffer.cc b/
 bool HasSps(const H26xPacketBuffer::Packet& packet) {
   auto& h264_header =
       absl::get<RTPVideoHeaderH264>(packet.video_header.video_type_header);
-   return absl::c_any_of(GetNaluInfos(h264_header), [](const auto& nalu_info) {
+   return absl::c_any_of(h264_header.nalus, [](const auto& nalu_info) {
     return nalu_info.type == H264::NaluType::kSps;
   });
 diff --git a/third_party/libwebrtc/video/adaptation/video_stream_encoder_resource_manager.cc b/third_party/libwebrtc/video/adaptation/video_stream_encoder_resource_manager.cc
@ -1003,3 +990,45 @@ diff --git a/third_party/libwebrtc/video/adaptation/video_stream_encoder_resourc
     flags.resize(codec.VP9().numberOfSpatialLayers);
     for (size_t i = 0; i < flags.size(); ++i) {
       flags[i] = codec.spatialLayers[i].active;
 diff --git a/third_party/libwebrtc/video/config/encoder_stream_factory.cc b/third_party/libwebrtc/video/config/encoder_stream_factory.cc
 --- a/third_party/libwebrtc/video/config/encoder_stream_factory.cc
 +++ b/third_party/libwebrtc/video/config/encoder_stream_factory.cc
@@ -104,16 +104,17 @@ int GetDefaultMaxQp(webrtc::VideoCodecTy
     case webrtc::kVideoCodecH265:
       return kDefaultVideoMaxQpH26x;
     case webrtc::kVideoCodecVP8:
     case webrtc::kVideoCodecVP9:
     case webrtc::kVideoCodecAV1:
     case webrtc::kVideoCodecGeneric:
       return kDefaultVideoMaxQpVpx;
   }
 +  return kDefaultVideoMaxQpVpx; // fake return for hopefully not reached
 }
 // Round size to nearest simulcast-friendly size.
 // Simulcast stream width and height must both be dividable by
 // |2 ^ (simulcast_layers - 1)|.
 int NormalizeSimulcastSize(const FieldTrialsView& field_trials,
                            int size,
                            size_t simulcast_layers) {
 diff --git a/third_party/libwebrtc/video/quality_convergence_controller.cc b/third_party/libwebrtc/video/quality_convergence_controller.cc
 --- a/third_party/libwebrtc/video/quality_convergence_controller.cc
 +++ b/third_party/libwebrtc/video/quality_convergence_controller.cc
@@ -31,16 +31,17 @@ int GetDefaultStaticQpThreshold(VideoCod
       return kAv1DefaultStaticQpThreshold;
     case kVideoCodecGeneric:
     case kVideoCodecH264:
     case kVideoCodecH265:
       // -1 will effectively disable the static QP threshold since QP values are
       // always >= 0.
       return -1;
   }
 +  return -1;
 }
 }  // namespace
 void QualityConvergenceController::Initialize(
     int number_of_layers,
     absl::optional<int> static_qp_threshold,
     VideoCodecType codec,
     const FieldTrialsView& trials) {
--- a/8
+++ b/8
@ -1,10 +1,10 @@
 PRODUCT="firefox"
 CHANNEL="release"
-VERSION="129.0.1"
+VERSION="133.0"
 VERSION_SUFFIX=""
-PREV_VERSION="129.0"
+PREV_VERSION="132.0.2"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
-RELEASE_TAG="9a56b747aa5f53cb8784337f8c5d6a056d11c5e7"
+RELEASE_TAG="8141aab3ba856d7cbae6c851dd71f2e0cb69649c"
-RELEASE_TIMESTAMP="20240812083845"
+RELEASE_TIMESTAMP="20241121140525"
Author	SHA256	Message	Date
Ana Guerrero	d1d6a0968b	Accepting request 1226801 from mozilla:Factory - Mozilla Firefox 133.0 https://www.mozilla.org/en-US/firefox/133.0/releasenotes MFSA 2024-63 (bsc#1233695) * CVE-2024-11691 (bmo#1914707, bmo#1924184) Memory corruption in Apple GPU drivers * CVE-2024-11700 (bmo#1836921) Potential Tapjacking Exploit for Intent Confirmation on Android * CVE-2024-11692 (bmo#1909535) Select list elements could be shown over another site * CVE-2024-11701 (bmo#1914797) Misleading Address Bar State During Navigation Interruption * CVE-2024-11702 (bmo#1918884) Inadequate Clipboard Protection in Private Browsing Mode on Android * CVE-2024-11693 (bmo#1921458) Download Protections were bypassed by .library-ms files on Windows * CVE-2024-11694 (bmo#1924167) CSP Bypass and XSS Exposure via Web Compatibility Shims * CVE-2024-11695 (bmo#1925496) URL Bar Spoofing via Manipulated Punycode and Whitespace Characters * CVE-2024-11703 (bmo#1928779) Password access without authentication via PIN bypass on Android * CVE-2024-11696 (bmo#1929600) Unhandled Exception in Add-on Signature Verification * CVE-2024-11697 (bmo#1842187) Improper Keypress Handling in Executable File Confirmation Dialog * CVE-2024-11704 (bmo#1899402) Potential Double-Free Vulnerability in PKCS#7 Decryption Handling * CVE-2024-11698 (bmo#1916152) OBS-URL: https://build.opensuse.org/request/show/1226801 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=443	2024-11-28 23:08:13 +00:00
Wolfgang Rosenauer	9e86c649c9	- Mozilla Firefox 133.0 https://www.mozilla.org/en-US/firefox/133.0/releasenotes MFSA 2024-63 (bsc#1233695) * CVE-2024-11691 (bmo#1914707, bmo#1924184) Memory corruption in Apple GPU drivers * CVE-2024-11700 (bmo#1836921) Potential Tapjacking Exploit for Intent Confirmation on Android * CVE-2024-11692 (bmo#1909535) Select list elements could be shown over another site * CVE-2024-11701 (bmo#1914797) Misleading Address Bar State During Navigation Interruption * CVE-2024-11702 (bmo#1918884) Inadequate Clipboard Protection in Private Browsing Mode on Android * CVE-2024-11693 (bmo#1921458) Download Protections were bypassed by .library-ms files on Windows * CVE-2024-11694 (bmo#1924167) CSP Bypass and XSS Exposure via Web Compatibility Shims * CVE-2024-11695 (bmo#1925496) URL Bar Spoofing via Manipulated Punycode and Whitespace Characters * CVE-2024-11703 (bmo#1928779) Password access without authentication via PIN bypass on Android * CVE-2024-11696 (bmo#1929600) Unhandled Exception in Add-on Signature Verification * CVE-2024-11697 (bmo#1842187) Improper Keypress Handling in Executable File Confirmation Dialog * CVE-2024-11704 (bmo#1899402) Potential Double-Free Vulnerability in PKCS#7 Decryption Handling * CVE-2024-11698 (bmo#1916152) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1191	2024-11-27 07:41:19 +00:00
Wolfgang Rosenauer	a409d8adda	- add mozilla-python313.patch to fix build with python 3.13+ * CVE-2018-12371 (bmo#1465686) * modifies the crash protection feature to increase the amount of time that plugins are allowed to be non-responsive before * firefox-bug506901.patch - improve UI colors to be usable with dark themes at all - added KDE integration patch from llunak@novell.com (firefox-kde.patch) * support for knotify, making -kde4-addon obsolete especially KDE integration: * added the ability to set the KDE default browser * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with evidence of memory corruption (rv:1.9.0.6) (bmo#452913, * Make sure the search bar is not put back when resetting the - Update to stability/security release 3.0.1 (bnc#407573) + MFSA 2008-35 Command-line URLs launch multiple tabs when - Set browser.shell.checkDefaultBrowser to true (bnc#404119) - fix hardlinks accross partitions - move last change a bit further in specfile - Mark a .png file as nonexecutable. * MFSA 2007-26 Privilege escalation through chrome-loaded - Fixes bnc #295677 - added unzip to BuildRequires - updated tango theme Resuming your browsing session, Previewing and subscribing Improved Add-ons manager, JavaScript 1.7, Extended search OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1190	2024-11-25 10:56:51 +00:00
Ana Guerrero	78130d13f6	Accepting request 1224785 from mozilla:Factory - Mozilla Firefox 132.0.2 * Fixed possible errors when playing encrypted media content through some streaming providers. (bmo#1929491) * Added a mitigation to help reduce the frequency of duplicated push notifications reported by some users. (bmo#1928868) * Fixed hangs when printing from some sites when using the system print dialog. (bmo#1898184) * Fixed a crash which could occur when using Microsoft SSO on macOS (bmo#1929622) * Fixed a crash in the Network Monitor developer tool which could occur in some circumstances. (bmo#1924882) OBS-URL: https://build.opensuse.org/request/show/1224785 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=442	2024-11-18 18:56:43 +00:00
Wolfgang Rosenauer	df90b62ed6	- Mozilla Firefox 132.0.2 * Fixed possible errors when playing encrypted media content through some streaming providers. (bmo#1929491) * Added a mitigation to help reduce the frequency of duplicated push notifications reported by some users. (bmo#1928868) * Fixed hangs when printing from some sites when using the system print dialog. (bmo#1898184) * Fixed a crash which could occur when using Microsoft SSO on macOS (bmo#1929622) * Fixed a crash in the Network Monitor developer tool which could occur in some circumstances. (bmo#1924882) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1188	2024-11-15 13:48:17 +00:00
Dominique Leuenberger	cd12b8e0e6	Accepting request 1223284 from mozilla:Factory - require xdg-desktop-portal (boo#1233166) - Mozilla Firefox 132.0.1 * Fixed issues causing intermittent video playback problems on some sites. (bmo#1928484, bmo#1928798) - remove KDE integration patches - mozilla-kde.patch - firefox-kde.patch on KDE use these settings instead widget.use-xdg-desktop-portal.file-picker=1 widget.use-xdg-desktop-portal.mime-handler=1 (those are set by the latest branding package as well) - Mozilla Firefox 132.0 https://www.mozilla.org/en-US/firefox/132.0/releasenotes MFSA 2024-55 (bsc#1231879) * CVE-2024-10458 (bmo#1921733) Permission leak via embed or object elements * CVE-2024-10459 (bmo#1919087) Use-after-free in layout with accessibility * CVE-2024-10460 (bmo#1912537) Confusing display of origin for external protocol handler prompt * CVE-2024-10461 (bmo#1914521) XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response * CVE-2024-10462 (bmo#1920423) Origin of permission prompt could be spoofed by long URL * CVE-2024-10463 (bmo#1920800) Cross origin video frame leak * CVE-2024-10468 (bmo#1914982) OBS-URL: https://build.opensuse.org/request/show/1223284 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=441	2024-11-11 12:43:37 +00:00
Wolfgang Rosenauer	f50f411e72	- require xdg-desktop-portal (boo#1233166) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1186	2024-11-11 07:13:08 +00:00
Wolfgang Rosenauer	944ffaaffb	OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1185	2024-11-06 08:15:15 +00:00
Wolfgang Rosenauer	d5ecca7d59	- Mozilla Firefox 132.0.1 * Fixed issues causing intermittent video playback problems on some sites. (bmo#1928484, bmo#1928798) - remove KDE integration patches - mozilla-kde.patch - firefox-kde.patch on KDE use these settings instead widget.use-xdg-desktop-portal.file-picker=1 widget.use-xdg-desktop-portal.mime-handler=1 (those are set by the latest branding package as well) - Mozilla Firefox 132.0 https://www.mozilla.org/en-US/firefox/132.0/releasenotes MFSA 2024-55 (bsc#1231879) * CVE-2024-10458 (bmo#1921733) Permission leak via embed or object elements * CVE-2024-10459 (bmo#1919087) Use-after-free in layout with accessibility * CVE-2024-10460 (bmo#1912537) Confusing display of origin for external protocol handler prompt * CVE-2024-10461 (bmo#1914521) XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response * CVE-2024-10462 (bmo#1920423) Origin of permission prompt could be spoofed by long URL * CVE-2024-10463 (bmo#1920800) Cross origin video frame leak * CVE-2024-10468 (bmo#1914982) Race conditions in IndexedDB * CVE-2024-10464 (bmo#1913000) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1184	2024-11-05 10:48:26 +00:00
Ana Guerrero	446a0e7696	Accepting request 1208839 from mozilla:Factory - Mozilla Firefox 131.0.3 * some users could not access the Bill Pay portion of their bank's site (bmo#1923500) * some VR180 and 360 videos were not properly rendering on YouTube (bmo#1922278) * Fixed a crash that Windows users with Avast or AVG security software were experiencing when visiting certain sites. (bmo#1919678) * "List all tabs" button was not able to be moved from the toolbar (bmo#1918681) NFSA 2024-53 * CVE-2024-9936 (bmo#1920381) Undefined behavior in selection node cache - remove obsolete mozilla-rust-disable-future-incompat.patch OBS-URL: https://build.opensuse.org/request/show/1208839 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=440	2024-10-20 08:13:22 +00:00
Wolfgang Rosenauer	46b65f8c49	- Mozilla Firefox 131.0.3 * some users could not access the Bill Pay portion of their bank's site (bmo#1923500) * some VR180 and 360 videos were not properly rendering on YouTube (bmo#1922278) * Fixed a crash that Windows users with Avast or AVG security software were experiencing when visiting certain sites. (bmo#1919678) * "List all tabs" button was not able to be moved from the toolbar (bmo#1918681) NFSA 2024-53 * CVE-2024-9936 (bmo#1920381) Undefined behavior in selection node cache - remove obsolete mozilla-rust-disable-future-incompat.patch OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1182	2024-10-18 10:29:37 +00:00
Ana Guerrero	51bca241c8	Accepting request 1206551 from mozilla:Factory - Mozilla Firefox 131.0.2 MFSA 2024-51 (bsc#1231413) * CVE-2024-9680 (bmo#1923344) Use-after-free in Animation timeline OBS-URL: https://build.opensuse.org/request/show/1206551 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=439	2024-10-11 15:01:08 +00:00
Wolfgang Rosenauer	fe2ab4d47d	- Mozilla Firefox 131.0.2 MFSA 2024-51 (bsc#1231413) * CVE-2024-9680 (bmo#1923344) Use-after-free in Animation timeline OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1180	2024-10-09 14:55:13 +00:00
Ana Guerrero	b292b641fd	Accepting request 1205704 from mozilla:Factory - Firefox 131.0 https://www.mozilla.org/en-US/firefox/131.0/releasenotes/ MFSA 2024-46 (bsc#1230979) * CVE-2024-9391 (bmo#1892407) Prevent users from exiting full-screen mode in Firefox Focus for Android * CVE-2024-9392 (bmo#1899154, bmo#1905843) Compromised content process can bypass site isolation * CVE-2024-9393 (bmo#1918301) Cross-origin access to PDF contents through multipart responses * CVE-2024-9394 (bmo#1918874) Cross-origin access to JSON contents through multipart responses * CVE-2024-9395 (bmo#1906024) Specially crafted filename could be used to obscure download type * CVE-2024-9396 (bmo#1912471) Potential memory corruption may occur when cloning certain objects * CVE-2024-9397 (bmo#1916659) Potential directory upload bypass via clickjacking * CVE-2024-9398 (bmo#1881037) External protocol handlers could be enumerated via popups * CVE-2024-9399 (bmo#1907726) Specially crafted WebTransport requests could lead to denial of service * CVE-2024-9400 (bmo#1915249) Potential memory corruption during JIT compilation * CVE-2024-9401 (bmo#1872744, bmo#1897792, bmo#1911317, bmo#1916476) Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 * CVE-2024-9402 (bmo#1872744, bmo#1897792, bmo#1911317, bmo#1913445, OBS-URL: https://build.opensuse.org/request/show/1205704 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=438	2024-10-06 15:51:24 +00:00
Wolfgang Rosenauer	d873e57e81	- Firefox 131.0 https://www.mozilla.org/en-US/firefox/131.0/releasenotes/ MFSA 2024-46 (bsc#1230979) * CVE-2024-9391 (bmo#1892407) Prevent users from exiting full-screen mode in Firefox Focus for Android * CVE-2024-9392 (bmo#1899154, bmo#1905843) Compromised content process can bypass site isolation * CVE-2024-9393 (bmo#1918301) Cross-origin access to PDF contents through multipart responses * CVE-2024-9394 (bmo#1918874) Cross-origin access to JSON contents through multipart responses * CVE-2024-9395 (bmo#1906024) Specially crafted filename could be used to obscure download type * CVE-2024-9396 (bmo#1912471) Potential memory corruption may occur when cloning certain objects * CVE-2024-9397 (bmo#1916659) Potential directory upload bypass via clickjacking * CVE-2024-9398 (bmo#1881037) External protocol handlers could be enumerated via popups * CVE-2024-9399 (bmo#1907726) Specially crafted WebTransport requests could lead to denial of service * CVE-2024-9400 (bmo#1915249) Potential memory corruption during JIT compilation * CVE-2024-9401 (bmo#1872744, bmo#1897792, bmo#1911317, bmo#1916476) Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 * CVE-2024-9402 (bmo#1872744, bmo#1897792, bmo#1911317, bmo#1913445, bmo#1914106, bmo#1914475, bmo#1914963, bmo#1915008, bmo#1916476) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1178	2024-10-04 13:15:49 +00:00
Ana Guerrero	e21c4e6bf7	Accepting request 1202047 from mozilla:Factory ------------------------------------------------------------------ - Firefox 130.0.1 Release https://www.mozilla.org/en-US/firefox/130.0.1/releasenotes * Enterprise: Added an enterprise policy to disable the Firefox Labs section in Settings. (bmo#1911826) * Fixed a recent regression causing some UI elements to be rendered as left-to-right instead of right-to-left for users of our Saraiki localization. (bmo#1917175) * Linux: Fixed black rendering of AVIF images when Firefox is built with GCC. (bmo#1916038) - removed obsolete patches mozilla-bmo1916038.patch - Mozilla Firefox 130.0 https://www.mozilla.org/en-US/firefox/130.0/releasenotes MFSA 2024-39 (bsc#1229821) * CVE-2024-8385 (bmo#1911909) WASM type confusion involving ArrayTypes * CVE-2024-8381 (bmo#1912715) Type confusion when looking up a property name in a "with" block * CVE-2024-8388 (bmo#1902996, bmo#1839074, bmo#1865413, bmo#1868970, bmo#1873367, bmo#1877820, bmo#1884642, bmo#1886469, bmo#1894326, bmo#1894891, bmo#1897648) Fullscreen notice on Android could be hidden under various panels and OS prompts * CVE-2024-8382 (bmo#1906744) Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran * CVE-2024-8383 (bmo#1908496) Firefox did not ask before openings news: links in an OBS-URL: https://build.opensuse.org/request/show/1202047 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=437	2024-09-22 09:05:23 +00:00
Wolfgang Rosenauer	4ad63c96a3	- Update dependency on clang-devel from LLVM15 to LLVM18 - Added mozilla-bmo1746799.patch to fix incorrect audio volume scaling OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1176	2024-09-19 20:06:25 +00:00
Wolfgang Rosenauer	1b43cd3da8	https://www.mozilla.org/en-US/firefox/130.0.1/releasenotes https://www.mozilla.org/en-US/firefox/130.0/releasenotes OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1175	2024-09-19 16:55:30 +00:00
Wolfgang Rosenauer	f2f6b49a7f	------------------------------------------------------------------ - Firefox 130.0.1 Release * Enterprise: Added an enterprise policy to disable the Firefox Labs section in Settings. (bmo#1911826) * Fixed a recent regression causing some UI elements to be rendered as left-to-right instead of right-to-left for users of our Saraiki localization. (bmo#1917175) * Linux: Fixed black rendering of AVIF images when Firefox is built with GCC. (bmo#1916038) - removed obsolete patches mozilla-bmo1916038.patch - Mozilla Firefox 130.0 MFSA 2024-39 (bsc#1229821) * CVE-2024-8385 (bmo#1911909) WASM type confusion involving ArrayTypes * CVE-2024-8381 (bmo#1912715) Type confusion when looking up a property name in a "with" block * CVE-2024-8388 (bmo#1902996, bmo#1839074, bmo#1865413, bmo#1868970, bmo#1873367, bmo#1877820, bmo#1884642, bmo#1886469, bmo#1894326, bmo#1894891, bmo#1897648) Fullscreen notice on Android could be hidden under various panels and OS prompts * CVE-2024-8382 (bmo#1906744) Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran * CVE-2024-8383 (bmo#1908496) Firefox did not ask before openings news: links in an external application * CVE-2024-8384 (bmo#1911288) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1174	2024-09-19 16:43:14 +00:00