1
0

Commit Graph

  • 58fc7f28bf Accepting request 1199138 from mozilla:Factory factory Ana Guerrero 2024-09-06 15:17:41 +0000
  • 9978f0bae4 - _constraints: increase RAM on s390x to fix the build devel Wolfgang Rosenauer 2024-09-06 08:46:31 +0000
  • 657e9a281d Accepting request 1195695 from mozilla:Factory Ana Guerrero 2024-08-25 10:09:39 +0000
  • c9813ec197 - Mozilla Firefox 129.0.1 * Fixed playback issues on some websites with copyrighted video served via digital rights management. (bmo#1911283) * Fixed a crash when dragging a video file onto some websites (bmo#1910990) Wolfgang Rosenauer 2024-08-16 09:33:53 +0000
  • 8a18bf4d27 Accepting request 1193124 from mozilla:Factory Dominique Leuenberger 2024-08-13 11:21:48 +0000
  • 351b951583 - Mozilla Firefox 129.0 https://www.mozilla.org/en-US/firefox/129.0/releasenotes MFSA 2024-33 (bsc#1228648)) * CVE-2024-7518 (bmo#1875354) Fullscreen notification dialog can be obscured by document content * CVE-2024-7519 (bmo#1902307) Out of bounds memory access in graphics shared memory handling * CVE-2024-7520 (bmo#1903041) Type confusion in WebAssembly * CVE-2024-7521 (bmo#1904644) Incomplete WebAssembly exception handing * CVE-2024-7522 (bmo#1906727) Out of bounds read in editor component * CVE-2024-7523 (bmo#1908344) Document content could partially obscure security prompts * CVE-2024-7524 (bmo#1909241) CSP strict-dynamic bypass using web-compatibility shims * CVE-2024-7525 (bmo#1909298) Missing permission check when creating a StreamFilter * CVE-2024-7526 (bmo#1910306) Uninitialized memory used by WebGL * CVE-2024-7527 (bmo#1871303) Use-after-free in JavaScript garbage collection * CVE-2024-7528 (bmo#1895951) Use-after-free in IndexedDB * CVE-2024-7529 (bmo#1903187) Document content could partially obscure security prompts * CVE-2024-7530 (bmo#1904011) Use-after-free in JavaScript code coverage collection * CVE-2024-7531 (bmo#1905691) Wolfgang Rosenauer 2024-08-10 12:42:53 +0000
  • 59dbe96551 Accepting request 1190457 from mozilla:Factory Dominique Leuenberger 2024-07-31 11:28:35 +0000
  • 5bbcb979e1 ------------------------------------------------------------------ - Firefox 128.0.3 Release * Fixed: Fixed an issue causing some sites to not load when connecting via HTTP/2. (bmo#1908161, bmo#1909666) * Fixed: Fixed collapsed table rows not appearing when expected in some situations. (bmo#1907789) * Fixed: Fixed the Windows on-screen keyboard potentially concealing the webpage when displayed. (bmo#1907766) - Firefox 128.0.2 Release * Fixed: Fixed an audio echo in video calls on macOS under certain conditions. (bmo#1908539) * Fixed: Fixed an issue where the Adguard extension popup was not displaying. (bmo#1906132) * Fixed: Fixed an issue causing some screen readers to fail to read when navigating by character in rich text editors. (Bug 1905021) * Fixed: Fixed visual glitches when dark mode is enabled in Windows ARM devices. (bmo#1897444) * Fixed: Fixed an issue causing NTLM authentication failure. (bmo#1908115) * Fixed: Fixed an issue where content displayed on mouseover was not captured in a screenshot. (bmo#1905468) * Fixed: Various stability fixes. - renamed firefox-3781e3117706.patch to mozilla-bmo1905018.patch to conform with patch structure and naming for the package Wolfgang Rosenauer 2024-07-30 11:20:32 +0000
  • 2d4ab48832 Accepting request 1188582 from mozilla:Factory Ana Guerrero 2024-07-22 15:14:28 +0000
  • 41c367e33f - Add firefox-3781e3117706.patch to fix boo#1227856 aka bmo#1905018 where an incompatible pointer assignment is not accepted in C by GCC 14. Wolfgang Rosenauer 2024-07-19 09:54:37 +0000
  • 2ae5300e78 Accepting request 1187677 from mozilla:Factory Ana Guerrero 2024-07-17 13:14:05 +0000
  • 3623424b10 - Mozilla Firefox 128.0 https://www.mozilla.org/en-US/firefox/128.0/releasenotes MFSA 2024-29 (bsc#1226316) * CVE-2024-6605 (bmo#1836786) Firefox Android missed activation delay to prevent tapjacking * CVE-2024-6606 (bmo#1902305) Out-of-bounds read in clipboard component * CVE-2024-6607 (bmo#1694513) Leaving pointerlock by pressing the escape key could be prevented * CVE-2024-6608 (bmo#1743329) Cursor could be moved out of the viewport using pointerlock. * CVE-2024-6609 (bmo#1839258) Memory corruption in NSS * CVE-2024-6610 (bmo#1883396) Form validation popups could block exiting full-screen mode * CVE-2024-6600 (bmo#1888340) Memory corruption in WebGL API * CVE-2024-6601 (bmo#1890748) Race condition in permission assignment * CVE-2024-6602 (bmo#1895032) Memory corruption in NSS * CVE-2024-6603 (bmo#1895081) Memory corruption in thread creation * CVE-2024-6611 (bmo#1844827) Incorrect handling of SameSite cookies * CVE-2024-6612 (bmo#1880374) CSP violation leakage when using devtools * CVE-2024-6613 (bmo#1900523) Incorrect listing of stack frames Wolfgang Rosenauer 2024-07-16 07:10:33 +0000
  • 53ab0a2e0b Accepting request 1185336 from mozilla:Factory Ana Guerrero 2024-07-05 17:44:47 +0000
  • 65de930456 * Fixed an issue where YouTube playback may experience stalling under * Fixed an issue where the Private Window icon was displayed in the taskbar on Windows when browser.privateWindowSeparation.enabled was * Fixed an issue where users with a primary password set on their profile could lose their previous session of tabs upon upgrading if they dismissed * Fixed an issue where Linux users with accessibility.monoaudio.enable set * Fixed an issue where, in some circumstances, the Firefox installer * Fixed an issue causing Firefox to incorrectly reject cookies - Fix GNOME search provider (boo#1225278) Wolfgang Rosenauer 2024-07-04 08:07:19 +0000
  • e22e1216b1 Accepting request 1184300 from home:develop7:branches:mozilla:Factory Wolfgang Rosenauer 2024-07-04 08:00:08 +0000
  • ae5669436c Accepting request 1184277 from home:MSirringhaus:branches:mozilla:Factory Wolfgang Rosenauer 2024-07-04 07:55:26 +0000
  • 42cc248788 Accepting request 1180696 from mozilla:Factory Ana Guerrero 2024-06-14 16:57:28 +0000
  • 26b5620df4 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1156 Wolfgang Rosenauer 2024-06-13 13:44:22 +0000
  • 8d549ff22f - Mozilla Firefox 127.0 https://www.mozilla.org/en-US/firefox/127.0/releasenotes MFSA 2024-25 (bsc#1226027) * CVE-2024-5687 (bmo#1889066) An incorrect principal could have been used when opening new tabs * CVE-2024-5688 (bmo#1895086) Use-after-free in JavaScript object transplant * CVE-2024-5689 (bmo#1389707) User confusion and possible phishing vector via Firefox Screenshots * CVE-2024-5690 (bmo#1883693) External protocol handlers leaked by timing attack * CVE-2024-5691 (bmo#1888695) Sandboxed iframes were able to bypass sandbox restrictions to open a new window * CVE-2024-5692 (bmo#1837514, bmo#1891234) Bypass of file name restrictions during saving * CVE-2024-5693 (bmo#1891319) Cross-Origin Image leak via Offscreen Canvas * CVE-2024-5694 (bmo#1895055) Use-after-free in JavaScript Strings * CVE-2024-5695 (bmo#1895579) Memory Corruption using allocation using out-of-memory conditions * CVE-2024-5696 (bmo#1896555) Memory Corruption in Text Fragments * CVE-2024-5697 (bmo#1414937) Website was able to detect when Firefox was taking a screenshot of them * CVE-2024-5698 (bmo#1828259) Data-list could have overlaid address bar * CVE-2024-5699 (bmo#1891349) Wolfgang Rosenauer 2024-06-12 20:38:41 +0000
  • aee654ea3f Accepting request 1177453 from mozilla:Factory Ana Guerrero 2024-05-30 13:32:10 +0000
  • 7548fa49d0 - Mozilla Firefox 126.0.1 * Fixed an issue with reading tagged PDF documents in a screen reader bmo#1894849 * Fixed not displaying localized text for non-en-US locales in the Crash Reporter dialog box on macOS. (bmo#1896097) * Fixed issues with drag-and-drop functionality on Linux. (bmo#1897115) * Fixed an issue causing high GPU memory usage on certain versions of AMD cards. (bmo#1897006) Wolfgang Rosenauer 2024-05-29 07:15:42 +0000
  • ffc2e2a358 Accepting request 1177370 from home:Guillaume_G:branches:mozilla:Factory Wolfgang Rosenauer 2024-05-29 07:11:01 +0000
  • f2d4ae6b6f Accepting request 1175472 from mozilla:Factory Ana Guerrero 2024-05-21 16:33:21 +0000
  • 5b06ba2de6 - Mozilla Firefox 126.0 https://www.mozilla.org/en-US/firefox/126.0/releasenotes MFSA 2024-21 (bsc#1224056) * CVE-2024-4764 (bmo#1879093) Use-after-free when audio input connected with multiple consumers * CVE-2024-4367 (bmo#1893645) Arbitrary JavaScript execution in PDF.js * CVE-2024-4765 (bmo#1871109) Web application manifests could have been overwritten via hash collision * CVE-2024-4766 (bmo#1871214, bmo#1871217) Fullscreen notification could have been obscured on Firefox for Android * CVE-2024-4767 (bmo#1878577) IndexedDB files retained in private browsing mode * CVE-2024-4768 (bmo#1886082) Potential permissions request bypass via clickjacking * CVE-2024-4769 (bmo#1886108) Cross-origin responses could be distinguished between script and non-script content-types * CVE-2024-4770 (bmo#1893270) Use-after-free could occur when printing to PDF * CVE-2024-4771 (bmo#1893891) Failed allocation could lead to use-after-free * CVE-2024-4772 (bmo#1870579) Use of insecure rand() function to generate nonce * CVE-2024-4773 (bmo#1875248) URL bar could be cleared after network error * CVE-2024-4774 (bmo#1886598) Undefined behavior in ShmemCharMapHashEntry() Wolfgang Rosenauer 2024-05-21 08:22:00 +0000
  • 640c98451f Accepting request 1170867 from mozilla:Factory Dominique Leuenberger 2024-05-01 12:54:55 +0000
  • 072f7b36ed Accepting request 1170864 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2024-04-29 18:30:27 +0000
  • d3c437774c Accepting request 1169983 from mozilla:Factory Ana Guerrero 2024-04-26 21:26:13 +0000
  • 32b276a257 * The 125.0 and 125.0.1 releases were skipped due to problems with a feature that proactively blocked downloads from potentially untrustworthy URLs Use-after-free if garbage collection runs during realm initialization Incorrect JIT optimization of MSubstr leads to out-of-bounds reads Corrupt pointer dereference in js::CheckTracedThing<js::Shape> Download Protections were bypassed by .xrm-ms files on Windows * CVE-2024-3865 (bmo#1881076, bmo#1884887, bmo#1885359, bmo#1889049) Wolfgang Rosenauer 2024-04-24 07:40:26 +0000
  • 3b2b98176a Accepting request 1169748 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2024-04-23 06:12:35 +0000
  • 9ba5b17011 Accepting request 1164364 from mozilla:Factory Ana Guerrero 2024-04-04 20:24:08 +0000
  • d592c1b03e * Fixed an issue where users with a large amount of bookmarks would be unable to restore a bookmarks backup. (bmo#1884308) * Fixed an issue that would cause open Firefox windows Netflix. (bmo#1883932) * Fixed a crash that affected Linux AArch64 builds. (bmo#1866396) * Fixed an issue where some users experienced difficulties loading webpages due to changes made to the default AppArmor configuration shipping in Ubuntu 24.04. (bmo#1884347) Wolfgang Rosenauer 2024-04-03 13:07:33 +0000
  • 32874c1308 Accepting request 1164363 from home:MSirringhaus:branches:mozilla:Factory Wolfgang Rosenauer 2024-04-03 13:05:03 +0000
  • 23c8d9fe7f Accepting request 1160726 from mozilla:Factory Ana Guerrero 2024-03-25 20:06:23 +0000
  • 90db4db449 - Mozilla Firefox 124.0.1 https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/ MFSA 2024-15 (bsc#1221850) * CVE-2024-29943 (bmo#1886849) Out-of-bounds access via Range Analysis bypass * CVE-2024-29944 (bmo#1886852) Privileged JavaScript Execution via Event Handlers Mozilla Firefox 124.0 https://www.mozilla.org/en-US/firefox/124.0/releasenotes/ MFSA 2024-12 (bsc#1221327) * CVE-2024-2605 (bmo#1872920) Windows Error Reporter could be used as a Sandbox escape vector * CVE-2024-2606 (bmo#1879237) Mishandling of WASM register values * CVE-2024-2607 (bmo#1879939) JIT code failed to save return registers on Armv7-A * CVE-2024-2608 (bmo#1880692) Integer overflow could have led to out of bounds write * CVE-2023-5388 (bmo#1780432) NSS susceptible to timing attack against RSA decryption * CVE-2024-2609 (bmo#1866100) Permission prompt input delay could expire when not in focus * CVE-2024-2610 (bmo#1871112) Improper handling of html and body tags enabled CSP nonce leakage * CVE-2024-2611 (bmo#1876675) Clickjacking vulnerability could have led to a user accidentally granting permissions * CVE-2024-2612 (bmo#1879444) Self referencing object could have potentially led to a use- after-free Wolfgang Rosenauer 2024-03-22 16:21:08 +0000
  • 33f287025d Accepting request 1156327 from mozilla:Factory Dominique Leuenberger 2024-03-09 19:53:50 +0000
  • cb3e179034 Accepting request 1156314 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2024-03-08 10:46:33 +0000
  • 7a05ebf18e Accepting request 1150527 from mozilla:Factory Ana Guerrero 2024-02-27 21:43:17 +0000
  • 672b2847a9 - Mozilla Firefox 123.0 https://www.mozilla.org/en-US/firefox/123.0/releasenotes/ MFSA 2024-05 (bsc#1220048) * CVE-2024-1546 (bmo#1843752) Out-of-bounds memory read in networking channels * CVE-2024-1547 (bmo#1877879) Alert dialog could have been spoofed on another site * CVE-2024-1554 (bmo#1816390) fetch could be used to effect cache poisoning * CVE-2024-1548 (bmo#1832627) Fullscreen Notification could have been hidden by select element * CVE-2024-1549 (bmo#1833814) Custom cursor could obscure the permission dialog * CVE-2024-1550 (bmo#1860065) Mouse cursor re-positioned unexpectedly could have led to unintended permission grants * CVE-2024-1551 (bmo#1864385) Multipart HTTP Responses would accept the Set-Cookie header in response parts * CVE-2024-1555 (bmo#1873223) SameSite cookies were not properly respected when opening a website from an external browser * CVE-2024-1556 (bmo#1870414) Invalid memory access in the built-in profiler * CVE-2024-1552 (bmo#1874502) Incorrect code generation on 32-bit ARM devices * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498, bmo#1872296, bmo#1873521, bmo#1873577, bmo#1873597, bmo#1873866, bmo#1874080, bmo#1874740, bmo#1875795, bmo#1875906, bmo#1876425, bmo#1878211, bmo#1878286) Wolfgang Rosenauer 2024-02-25 22:15:18 +0000
  • d1be093a13 Accepting request 1146565 from mozilla:Factory Ana Guerrero 2024-02-15 19:58:57 +0000
  • d2bb239998 Accepting request 1146484 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2024-02-14 12:25:21 +0000
  • dae9c9db48 Accepting request 1143092 from mozilla:Factory Ana Guerrero 2024-02-01 17:03:42 +0000
  • c4d54d7b75 Accepting request 1142978 from home:MSirringhaus:branches:mozilla:Factory Wolfgang Rosenauer 2024-01-31 17:28:29 +0000
  • 0299745734 Accepting request 1142680 from mozilla:Factory Ana Guerrero 2024-01-30 17:24:32 +0000
  • e23269fde0 Accepting request 1142188 from home:Andreas_Schwab:Factory Wolfgang Rosenauer 2024-01-29 22:24:08 +0000
  • fbd6485905 Accepting request 1141490 from mozilla:Factory Ana Guerrero 2024-01-26 21:45:43 +0000
  • 3eb8b737e4 - Mozilla Firefox 122.0 https://www.mozilla.org/en-US/firefox/122.0/releasenotes/ MFSA 2024-01 (bsc#1218955) * CVE-2024-0741 (bmo#1864587) Out of bounds write in ANGLE * CVE-2024-0742 (bmo#1867152) Failure to update user input timestamp * CVE-2024-0743 (bmo#1867408) Crash in NSS TLS method * CVE-2024-0744 (bmo#1871089) Wild pointer dereference in JavaScript * CVE-2024-0745 (bmo#1871838) Stack buffer overflow in WebAudio * CVE-2024-0746 (bmo#1660223) Crash when listing printers on Linux * CVE-2024-0747 (bmo#1764343) Bypass of Content Security Policy when directive unsafe-inline was set * CVE-2024-0748 (bmo#1783504) Compromised content process could modify document URI * CVE-2024-0749 (bmo#1813463) Phishing site popup could show local origin in address bar * CVE-2024-0750 (bmo#1863083) Potential permissions request bypass via clickjacking * CVE-2024-0751 (bmo#1865689) Privilege escalation through devtools * CVE-2024-0752 (bmo#1866840) Use-after-free could occur when applying update on macOS * CVE-2024-0753 (bmo#1870262) HSTS policy on subdomain could bypass policy of upper domain * CVE-2024-0754 (bmo#1871605) Wolfgang Rosenauer 2024-01-25 11:10:30 +0000
  • da52efa0fb Accepting request 1138351 from mozilla:Factory Ana Guerrero 2024-01-14 18:01:25 +0000
  • 7bf217f6ac Accepting request 1137806 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2024-01-12 16:07:06 +0000
  • 9aad02882d Accepting request 1134603 from mozilla:Factory Ana Guerrero 2023-12-22 21:41:04 +0000
  • 20ffb64e05 - Mozilla Firefox 121.0 https://www.mozilla.org/en-US/firefox/121.0/releasenotes MFSA 2023-56 (bsc#1217974) * CVE-2023-6856 (bmo#1843782) Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver * CVE-2023-6135 (bmo#1853908) NSS susceptible to "Minerva" attack * CVE-2023-6865 (bmo#1864123) Potential exposure of uninitialized data in EncryptingOutputStream * CVE-2023-6857 (bmo#1796023) Symlinks may resolve to smaller than expected buffers * CVE-2023-6858 (bmo#1826791) Heap buffer overflow in nsTextFragment * CVE-2023-6859 (bmo#1840144) Use-after-free in PR_GetIdentitiesLayer * CVE-2023-6866 (bmo#1849037) TypedArrays lack sufficient exception handling * CVE-2023-6860 (bmo#1854669) Potential sandbox escape due to VideoBridge lack of texture validation * CVE-2023-6867 (bmo#1863863) Clickjacking permission prompts using the popup transition * CVE-2023-6861 (bmo#1864118) Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode * CVE-2023-6868 (bmo#1865488) WebPush requests on Firefox for Android did not require VAPID key * CVE-2023-6869 (bmo#1799036) Content can paint outside of sandboxed iframe Wolfgang Rosenauer 2023-12-22 09:01:08 +0000
  • 710f8bf00b Accepting request 1132165 from mozilla:Factory Dominique Leuenberger 2023-12-09 21:49:34 +0000
  • 3c65948f42 Accepting request 1132141 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-12-08 21:21:52 +0000
  • a2e18a8139 Accepting request 1129161 from mozilla:Factory Ana Guerrero 2023-11-27 21:42:07 +0000
  • 9a9faccc26 - Mozilla Firefox 120.0 https://www.mozilla.org/en-US/firefox/120.0/releasenotes MFSA 2023-49 (bsc#1217230) * CVE-2023-6204 (bmo#1841050) Out-of-bound memory access in WebGL2 blitFramebuffer * CVE-2023-6205 (bmo#1854076) Use-after-free in MessagePort::Entangled * CVE-2023-6206 (bmo#1857430) Clickjacking permission prompts using the fullscreen transition * CVE-2023-6207 (bmo#1861344) Use-after-free in ReadableByteStreamQueueEntry::Buffer * CVE-2023-6208 (bmo#1855345) Using Selection API would copy contents into X11 primary selection. * CVE-2023-6209 (bmo#1858570) Incorrect parsing of relative URLs starting with "///" * CVE-2023-6210 (bmo#1801501) Mixed-content resources not blocked in a javascript: pop-up * CVE-2023-6211 (bmo#1850200) Clickjacking to load insecure pages in HTTPS-only mode * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252, bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943, bmo#1862782) Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 * CVE-2023-6213 (bmo#1849265, bmo#1851118, bmo#1854911) Memory safety bugs fixed in Firefox 120 - rebased patches Wolfgang Rosenauer 2023-11-27 14:33:21 +0000
  • 6430926302 Accepting request 1124746 from mozilla:Factory Ana Guerrero 2023-11-13 21:15:56 +0000
  • 0682eecc12 Accepting request 1124728 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-11-09 21:23:49 +0000
  • 94af17d03a Accepting request 1121261 from mozilla:Factory Ana Guerrero 2023-10-31 19:24:50 +0000
  • fba3ce914b Accepting request 1121257 from home:iznogood:factory Wolfgang Rosenauer 2023-10-30 17:34:27 +0000
  • ea5dd3dbee - Mozilla Firefox 119.0 https://www.mozilla.org/en-US/firefox/119.0/releasenotes MFSA 2023-45 (bsc#1216338) * CVE-2023-5721 (bmo#1830820) Queued up rendering could have allowed websites to clickjack * CVE-2023-5722 (bmo#1738426) Cross-Origin size and header leakage * CVE-2023-5723 (bmo#1802057) Invalid cookie characters could have led to unexpected errors * CVE-2023-5724 (bmo#1836705) Large WebGL draw could have led to a crash * CVE-2023-5725 (bmo#1845739) WebExtensions could open arbitrary URLs * CVE-2023-5726 (bmo#1846205) Full screen notification obscured by file open dialog on macOS * CVE-2023-5727 (bmo#1847180) Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows * CVE-2023-5728 (bmo#1852729) Improper object tracking during GC in the JavaScript engine could have led to a crash. * CVE-2023-5729 (bmo#1823720) Fullscreen notification dialog could have been obscured by WebAuthn prompts * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694, bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596, bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640, bmo#1856695) Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1 * CVE-2023-5731 (bmo#1690111, bmo#1721904, bmo#1851803, bmo#1854068) Wolfgang Rosenauer 2023-10-27 07:18:39 +0000
  • d3e0fd0201 (boo#1216027) Wolfgang Rosenauer 2023-10-14 14:32:42 +0000
  • 3e7afa6df6 - Activate KDE integration again, included rebased and updated patches (upstream removed special files handling for preferences but that has no effect since we haven't shipped obsolete kde.js for a while) Wolfgang Rosenauer 2023-10-14 12:04:21 +0000
  • 93544be53d Accepting request 1114576 from home:Thaodan:branches:mozilla:Factory Wolfgang Rosenauer 2023-10-14 12:01:14 +0000
  • 865d7485c2 Accepting request 1117058 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-10-12 08:10:17 +0000
  • 3d079c76d1 Accepting request 1114282 from mozilla:Factory Ana Guerrero 2023-09-29 09:43:11 +0000
  • f56b5528a7 (removed mozilla-kde.patch and firefox-kde.patch for now) Wolfgang Rosenauer 2023-09-29 08:34:10 +0000
  • aeb0620d41 - Mozilla Firefox 118.0.1 MFSA 2023-44 (bsc#1215814) * CVE-2023-5217 (bmo#1855550), Heap buffer overflow in libvpx Wolfgang Rosenauer 2023-09-29 08:31:52 +0000
  • 24d80f3612 - add mozilla-bmo1822730.patch Wolfgang Rosenauer 2023-09-23 07:29:59 +0000
  • 226302d631 Accepting request 1113090 from home:biggestsonicfan:branches:mozilla:Factory Wolfgang Rosenauer 2023-09-23 07:28:40 +0000
  • bf59babbb3 Accepting request 1110687 from mozilla:Factory Ana Guerrero 2023-09-13 18:43:34 +0000
  • 202b7e7c4a Accepting request 1110680 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-09-12 17:59:40 +0000
  • 16d69b154b Accepting request 1107944 from mozilla:Factory Ana Guerrero 2023-08-30 08:18:38 +0000
  • bbbb712787 - Mozilla Firefox 117.0 https://www.mozilla.org/en-US/firefox/117.0/releasenotes MFSA 2023-34 (bsc#1214606) * CVE-2023-4573 (bmo#1846687) Memory corruption in IPC CanvasTranslator * CVE-2023-4574 (bmo#1846688) Memory corruption in IPC ColorPickerShownCallback * CVE-2023-4575 (bmo#1846689) Memory corruption in IPC FilePickerShownCallback * CVE-2023-4576 (bmo#1846694) Integer Overflow in RecordedSourceSurfaceCreation * CVE-2023-4577 (bmo#1847397) Memory corruption in JIT UpdateRegExpStatics * CVE-2023-4578 (bmo#1839007) Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception * CVE-2023-4579 (bmo#1842766) Persisted search terms were formatted as URLs * CVE-2023-4580 (bmo#1843046) Push notifications saved to disk unencrypted * CVE-2023-4581 (bmo#1843758) XLL file extensions were downloadable without warnings * CVE-2023-4582 (bmo#1773874) Buffer Overflow in WebGL glGetProgramiv * CVE-2023-4583 (bmo#1842030) Browsing Context potentially not cleared when closing Private Window * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Wolfgang Rosenauer 2023-08-29 12:55:43 +0000
  • 5112b91bbf Accepting request 1104464 from mozilla:Factory Ana Guerrero 2023-08-18 17:27:10 +0000
  • 42f90b08c5 Accepting request 1104460 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-08-17 19:11:10 +0000
  • afd2ed8433 Accepting request 1104036 from home:adamm:ldbug Wolfgang Rosenauer 2023-08-15 21:01:22 +0000
  • 062ac2aed4 Accepting request 1103590 from home:adamm:ldbug Wolfgang Rosenauer 2023-08-12 20:13:40 +0000
  • 2d4931ecd0 Accepting request 1103536 from mozilla:Factory Dominique Leuenberger 2023-08-12 13:06:14 +0000
  • 5ef499faa4 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1096 Wolfgang Rosenauer 2023-08-11 14:23:29 +0000
  • 3a86056012 Accepting request 1103454 from home:adamm:branches:mozilla:Factory Wolfgang Rosenauer 2023-08-11 14:20:02 +0000
  • 155b3d9c31 Accepting request 1103362 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-08-10 20:13:00 +0000
  • 49fcd30862 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1093 Wolfgang Rosenauer 2023-08-07 07:24:23 +0000
  • ef55d0543e Accepting request 1102535 from home:Andreas_Schwab:riscv:mozilla Wolfgang Rosenauer 2023-08-06 07:59:16 +0000
  • b4c782f656 Accepting request 1102496 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-08-06 07:58:18 +0000
  • 9f4536dddd OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1090 Wolfgang Rosenauer 2023-08-04 17:04:22 +0000
  • 119d807d14 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1089 Wolfgang Rosenauer 2023-08-04 17:03:28 +0000
  • 28cc6cc335 - drop obsolete mozilla-bmo1775202.patch Wolfgang Rosenauer 2023-08-04 10:40:33 +0000
  • d9a83463ef - re-enable ppc64le - ship v4l2test binary for supported archs Wolfgang Rosenauer 2023-08-04 10:12:18 +0000
  • b33933d92e OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1086 Wolfgang Rosenauer 2023-08-03 06:11:35 +0000
  • af84a81635 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1085 Wolfgang Rosenauer 2023-08-03 04:42:17 +0000
  • e2f2e91dcf OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1084 Wolfgang Rosenauer 2023-08-02 18:35:36 +0000
  • f8dc58b23c OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1083 Wolfgang Rosenauer 2023-08-02 12:41:25 +0000
  • ebfb67fa55 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1082 Wolfgang Rosenauer 2023-08-02 09:08:02 +0000
  • a83fab0562 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=1081 Wolfgang Rosenauer 2023-08-02 07:55:21 +0000
  • 03b7e7950d * https://www.mozilla.org/en-US/firefox/116.0/releasenotes/ MFSA 2023-29 (bsc#1213746) * CVE-2023-4045 (bmo#1833876) Offscreen Canvas could have bypassed cross-origin restrictions * CVE-2023-4046 (bmo#1837686) Incorrect value used during WASM compilation * CVE-2023-4047 (bmo#1839073) Potential permissions request bypass via clickjacking * CVE-2023-4048 (bmo#1841368) Crash in DOMParser due to out-of-memory conditions * CVE-2023-4049 (bmo#1842658) Fix potential race conditions when releasing platform objects * CVE-2023-4050 (bmo#1843038) Stack buffer overflow in StorageManager * CVE-2023-4051 (bmo#1821884) Full screen notification obscured by file open dialog * CVE-2023-4052 (bmo#1824420) File deletion and privilege escalation through Firefox uninstaller * CVE-2023-4053 (bmo#1839079) Full screen notification obscured by external program * CVE-2023-4054 (bmo#1840777) Lack of warning when opening appref-ms files * CVE-2023-4055 (bmo#1782561) Cookie jar overflow caused unexpected cookie jar state * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 * CVE-2023-4057 (bmo#1841682) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Wolfgang Rosenauer 2023-08-02 07:26:14 +0000
  • 8197a462a5 - Mozilla Firefox 116.0 - require NSS 3.91 - remove obsolete mozilla-fix-top-level-asm.patch - re-enable LTO Wolfgang Rosenauer 2023-08-01 20:59:19 +0000
  • 0c88ab7335 Accepting request 1101322 from mozilla:Factory Dominique Leuenberger 2023-07-30 18:57:38 +0000
  • 38ca28006f Accepting request 1101319 from home:AndreasStieger:branches:mozilla:Factory Wolfgang Rosenauer 2023-07-29 12:27:50 +0000
  • 25ef0ddad6 Accepting request 1098544 from mozilla:Factory Dominique Leuenberger 2023-07-15 21:14:27 +0000
  • eea8e1ad28 - Mozilla Firefox 115.0.2 * Fixed a bug with displaying a caret in the text editor on some websites (bmo#1840804) * Fixed a bug with broken audio rendering on some websites (bmo#1841982) * Fixed a bug with patternTransform translate using the wrong units (bmo#1840746) MFSA 2023-26 (bsc#1213230) * CVE-2023-3600 (bmo#1839703) Use-after-free in workers Wolfgang Rosenauer 2023-07-13 13:44:31 +0000
  • b3b53fc404 Accepting request 1097630 from mozilla:Factory Dominique Leuenberger 2023-07-08 20:46:13 +0000