Revisions of firefox132

Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 14)
- add mozilla-python313.patch to fix build with python 3.13+
  * CVE-2018-12371 (bmo#1465686)
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
  * firefox-bug506901.patch
- improve UI colors to be usable with dark themes at all
- added KDE integration patch from llunak@novell.com
  (firefox-kde.patch)
  * support for knotify, making -kde4-addon obsolete
  especially KDE integration:
  * added the ability to set the KDE default browser
  * MFSA 2009-05/CVE-2009-0357: XMLHttpRequest allows reading
  * MFSA 2009-04/CVE-2009-0356: Chrome privilege escalation via
  * MFSA 2009-02/CVE-2009-0354: XSS using a chrome XBL method
  * MFSA 2009-01/CVE-2009-0352 - CVE-2009-0353: Crashes with
    evidence of memory corruption (rv:1.9.0.6) (bmo#452913,
  * Make sure the search bar is not put back when resetting the
- Update to stability/security release 3.0.1 (bnc#407573)
  + MFSA 2008-35 Command-line URLs launch multiple tabs when
- Set browser.shell.checkDefaultBrowser to true (bnc#404119)
- fix hardlinks accross partitions
- move last change a bit further in specfile
- Mark a .png file as nonexecutable.
    * MFSA 2007-26  Privilege escalation through chrome-loaded
- Fixes bnc #295677
- added unzip to BuildRequires
- updated tango theme
    Resuming your browsing session, Previewing and subscribing
    Improved Add-ons manager, JavaScript 1.7, Extended search
    plugin format, Updates to the extension system,
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 13)
- Mozilla Firefox 132.0.2
  * Fixed possible errors when playing encrypted media content
    through some streaming providers. (bmo#1929491)
  * Added a mitigation to help reduce the frequency of duplicated
    push notifications reported by some users. (bmo#1928868)
  * Fixed hangs when printing from some sites when using the system
    print dialog. (bmo#1898184)
  * Fixed a crash which could occur when using Microsoft SSO on macOS
    (bmo#1929622)
  * Fixed a crash in the Network Monitor developer tool which could
    occur in some circumstances. (bmo#1924882)
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 12)
- require xdg-desktop-portal (boo#1233166)
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 11)
  - mozilla-kde.patch
  - firefox-kde.patch
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 10)
- Mozilla Firefox 132.0.1
  * Fixed issues causing intermittent video playback problems on
    some sites. (bmo#1928484, bmo#1928798)
  (those are set by the latest branding package as well)
  https://www.mozilla.org/en-US/firefox/132.0/releasenotes
  MFSA 2024-55 (bsc#1231879)
  * CVE-2024-10458 (bmo#1921733)
    Permission leak via embed or object elements
  * CVE-2024-10459 (bmo#1919087)
    Use-after-free in layout with accessibility
  * CVE-2024-10460 (bmo#1912537)
    Confusing display of origin for external protocol handler prompt
  * CVE-2024-10461 (bmo#1914521)
    XSS due to Content-Disposition being ignored in
    multipart/x-mixed-replace response
  * CVE-2024-10462 (bmo#1920423)
    Origin of permission prompt could be spoofed by long URL
  * CVE-2024-10463 (bmo#1920800)
    Cross origin video frame leak
  * CVE-2024-10468 (bmo#1914982)
    Race conditions in IndexedDB
  * CVE-2024-10464 (bmo#1913000)
    History interface could have been used to cause a Denial of
    Service condition in the browser
  * CVE-2024-10465 (bmo#1918853)
    Clipboard "paste" button persisted across tabs
  * CVE-2024-10466 (bmo#1924154)
    DOM push subscription message could hang Firefox
  * CVE-2024-10467 (bmo#1829029, bmo#1888538, bmo#1900394, bmo#1904059,
    bmo#1917742, bmo#1919809, bmo#1923706)
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 9)
- remove KDE integration patches
  on KDE use these settings instead
  widget.use-xdg-desktop-portal.file-picker=1
  widget.use-xdg-desktop-portal.mime-handler=1
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 5)
- disable KDE integration patches temporarily
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 2)
- Mozilla Firefox 132.0
- requires NSS 3.105
- rebased patches
  * some users could not access the Bill Pay portion of their
    bank's site (bmo#1923500)
  * some VR180 and 360 videos were not properly rendering on YouTube
    (bmo#1922278)
  * Fixed a crash that Windows users with Avast or AVG security
    software were experiencing when visiting certain sites. (bmo#1919678)
  * "List all tabs" button was not able to be moved from the toolbar
    (bmo#1918681)
  NFSA 2024-53
  * CVE-2024-9936 (bmo#1920381)
    Undefined behavior in selection node cache
Wolfgang Rosenauer's avatar Wolfgang Rosenauer (wrosenauer) committed (revision 1)
osc copypac from project:mozilla package:firefox131 revision:6
Displaying all 14 revisions
openSUSE Build Service is sponsored by