Mailinglist Archive: opensuse-factory (300 mails)

< Previous Next >
[opensuse-factory] Plugins in MOZ_PLUGIN_PATH are dysfunctional for latest Firefox
  • From: Hans-Peter Jansen <hpj@xxxxxxxxx>
  • Date: Mon, 06 Jan 2020 18:12:41 +0100
  • Message-id: <3000565.aqoQ3fOO26@xrated>

as an heads up, FF ignores MOZ_PLUGIN_PATH now, resulting in dysfunctional
plug-ins. Wolfgang is innocent of course, upstream intentionally broke it:

Dirty quick fix for Flash:

ln -s ../../browser-plugins/


Am Mittwoch, 1. Januar 2020, 05:03:05 CET schrieb Dominique Leuenberger:
MozillaFirefox (70.0.1 -> 71.0)

- Mozilla Firefox 71.0
* Improvements to Lockwise, our integrated password manager
* More information about Enhanced Tracking Protection in action
* Native MP3 decoding on Windows, Linux, and macOS
* Configuration page (about:config) reimplemented in HTML
* New kiosk mode functionality, which allows maximum screen space
for customer-facing displays
MFSA 2019-36
* CVE-2019-11756 (bmo#1508776)
Use-after-free of SFTKSession object
* CVE-2019-17008 (bmo#1546331)
Use-after-free in worker destruction
* CVE-2019-13722 (bmo#1580156) (Windows only)
Stack corruption due to incorrect number of arguments in WebRTC code
* CVE-2019-17014 (bmo#1322864)
Dragging and dropping a cross-origin resource, incorrectly loaded
as an image, could result in information disclosure
* CVE-2019-17010 (bmo#1581084)
Use-after-free when performing device orientation checks
* CVE-2019-17005 (bmo#1584170)
Buffer overflow in plain text serializer
* CVE-2019-17011 (bmo#1591334)
Use-after-free when retrieving a document in antitracking
* CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667, bmo#1567209
bmo#1580288, bmo#1585760, bmo#1592502)
Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
* CVE-2019-17013 (bmo#1298509, bmo#1472328, bmo#1577439, bmo#1577937
bmo#1580320, bmo#1584195, bmo#1585106, bmo#1586293, bmo#1593865
Memory safety bugs fixed in Firefox 71
- requires
NSPR >= 4.23
NSS >= 3.47.1
rust/cargo >= 1.37
- reactivate webrtc for platforms where it was disabled
- updated to cover buildid and origin repo information
- > removed obsolete source-stamp.txt
- removed obsolete patches
- changed locale building procedure
* removed obsolete compare-locales.tar.xz
- added mozilla-bmo1601707.patch to fix gcc/LTO builds
(bmo#1601707, boo#1158466)
- added mozilla-bmo849632.patch to fix big endian issues in skia
used for WebGL

To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups