This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository pale-moon. from a1c8564 debian/patches: add new patch disabling offscreen image rendering when using the GTK2 backend. adds ae971bf Add hover state arrow images. adds 333c64e Prevent loading of document subresources over FTP. adds 9676ebd [Palemoon] Disable Microsoft Family Safety support (Windows 8.1). adds 932ecf5 Remove unused SSL errorReporting prefs adds 38986a4 [PALEMOON] Add SSUAO override for firefox.com (native mode) adds 90a44b3 Remove harmless assertions by using IgnoredErrorResult. adds 80dfca4 Pref the use of unboxed plain objects in JS and disable by default. adds 5ec124c Force expected crashes on unexpected magic values. adds f8c7e32 Check for dead wrappers in CallerGetterImpl/CallerSetterImpl. adds 9d01447 Check child container count in NotifyRefreshDriverCreated. adds aabb357 Clean up nsOSHelperAppService. adds 181cb52 Add nullcheck for frames in FindNearestCommonAncestorFrame adds 6478daf Implement origin-clean algorithm for ImageBitmap. adds 2ae457f Extend origin-clean algorithm (DiD). adds 9e3ca28 Restrict ExtractLinearSum to monotonous operation in infinite math space. adds cc53748 Grab caching capturing content with local variable. adds 1af286f Convert UI-dictating FTP errors to console errors. adds 3be7cb9 Escape '!' to '\041' in posix strings ($'...') adds b4a65a3 Check for osint argument when checking for greomni and appomni arguments. adds cee1324f Disallow getUserMedia on null principals. adds 7243684 Check if CopyData succeeded. adds a5b2695 Version bump adds 98bd23c Add SSUAO for polyfill.io adds 9ffed6e Simplify some alias sets in IonMonkey. new 8bac50b Merge branch 'upstream/28.4.1+repack-1' new ae8c5a8 debian: sync directory with Steven Pusser's palemoon_28.4.1+repack-1 version. new 3ca7db1 debian/changelog: update to 28.4.1. The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: application/palemoon/app/profile/palemoon.js | 3 + .../palemoon/branding/shared/pref/uaoverrides.inc | 4 + application/palemoon/config/version.txt | 2 +- debian/changelog | 33 +++- debian/control.in | 3 +- devtools/client/shared/curl.js | 1 + dom/canvas/CanvasRenderingContext2D.cpp | 24 ++- dom/canvas/CanvasRenderingContext2D.h | 12 ++ dom/canvas/ImageBitmap.cpp | 101 ++++++----- dom/canvas/ImageBitmap.h | 12 ++ dom/canvas/ImageBitmapRenderingContext.cpp | 5 + dom/canvas/WebGLContext.h | 3 +- dom/canvas/WebGLTextureUpload.cpp | 22 ++- dom/canvas/test/test_imagebitmap.html | 23 ++- dom/html/HTMLCanvasElement.cpp | 2 +- dom/html/HTMLCanvasElement.h | 4 +- dom/html/HTMLTableElement.cpp | 15 +- dom/html/HTMLTableSectionElement.cpp | 2 +- .../en-US/chrome/security/security.properties | 2 + dom/media/MediaManager.cpp | 11 +- dom/media/VideoFrameContainer.cpp | 12 +- dom/security/nsContentSecurityManager.cpp | 56 ++++++ dom/security/nsContentSecurityManager.h | 1 + dom/smil/nsSMILAnimationController.cpp | 2 +- js/public/Value.h | 7 +- js/src/jit/AliasAnalysisShared.cpp | 3 +- js/src/jit/IonAnalysis.cpp | 21 ++- js/src/jit/JitOptions.cpp | 2 +- js/src/jit/MIR.h | 7 +- js/src/jsapi.cpp | 3 + js/src/jsapi.h | 25 +-- js/src/jsfun.cpp | 58 ++----- js/xpconnect/src/XPCJSContext.cpp | 4 + layout/base/nsLayoutUtils.cpp | 4 + layout/base/nsPresShell.cpp | 10 +- modules/libpref/init/all.js | 1 + netwerk/base/security-prefs.js | 4 - netwerk/protocol/ftp/FTPChannelChild.cpp | 41 +---- netwerk/protocol/ftp/nsFtpConnectionThread.cpp | 81 +-------- toolkit/themes/shared/non-mac.jar.inc.mn | 2 + .../themes/windows/global/arrow/arrow-lft-hov.gif | Bin 0 -> 91 bytes .../themes/windows/global/arrow/arrow-rit-hov.gif | Bin 0 -> 91 bytes toolkit/xre/nsAppRunner.cpp | 14 +- uriloader/exthandler/win/nsOSHelperAppService.cpp | 192 ++++++--------------- 44 files changed, 416 insertions(+), 418 deletions(-) create mode 100644 toolkit/themes/windows/global/arrow/arrow-lft-hov.gif create mode 100644 toolkit/themes/windows/global/arrow/arrow-rit-hov.gif -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/pale-moon.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository pale-moon. commit 8bac50bc4f936b4724901ed2545a2ca97aae4251 Merge: a1c8564 9ffed6e Author: Mihai Moldovan <ionic@ionic.de> Date: Thu Apr 25 09:12:22 2019 +0200 Merge branch 'upstream/28.4.1+repack-1' application/palemoon/app/profile/palemoon.js | 3 + .../palemoon/branding/shared/pref/uaoverrides.inc | 4 + application/palemoon/config/version.txt | 2 +- devtools/client/shared/curl.js | 1 + dom/canvas/CanvasRenderingContext2D.cpp | 24 ++- dom/canvas/CanvasRenderingContext2D.h | 12 ++ dom/canvas/ImageBitmap.cpp | 101 ++++++----- dom/canvas/ImageBitmap.h | 12 ++ dom/canvas/ImageBitmapRenderingContext.cpp | 5 + dom/canvas/WebGLContext.h | 3 +- dom/canvas/WebGLTextureUpload.cpp | 22 ++- dom/canvas/test/test_imagebitmap.html | 23 ++- dom/html/HTMLCanvasElement.cpp | 2 +- dom/html/HTMLCanvasElement.h | 4 +- dom/html/HTMLTableElement.cpp | 15 +- dom/html/HTMLTableSectionElement.cpp | 2 +- .../en-US/chrome/security/security.properties | 2 + dom/media/MediaManager.cpp | 11 +- dom/media/VideoFrameContainer.cpp | 12 +- dom/security/nsContentSecurityManager.cpp | 56 ++++++ dom/security/nsContentSecurityManager.h | 1 + dom/smil/nsSMILAnimationController.cpp | 2 +- js/public/Value.h | 7 +- js/src/jit/AliasAnalysisShared.cpp | 3 +- js/src/jit/IonAnalysis.cpp | 21 ++- js/src/jit/JitOptions.cpp | 2 +- js/src/jit/MIR.h | 7 +- js/src/jsapi.cpp | 3 + js/src/jsapi.h | 25 +-- js/src/jsfun.cpp | 58 ++----- js/xpconnect/src/XPCJSContext.cpp | 4 + layout/base/nsLayoutUtils.cpp | 4 + layout/base/nsPresShell.cpp | 10 +- modules/libpref/init/all.js | 1 + netwerk/base/security-prefs.js | 4 - netwerk/protocol/ftp/FTPChannelChild.cpp | 41 +---- netwerk/protocol/ftp/nsFtpConnectionThread.cpp | 81 +-------- toolkit/themes/shared/non-mac.jar.inc.mn | 2 + .../themes/windows/global/arrow/arrow-lft-hov.gif | Bin 0 -> 91 bytes .../themes/windows/global/arrow/arrow-rit-hov.gif | Bin 0 -> 91 bytes toolkit/xre/nsAppRunner.cpp | 14 +- uriloader/exthandler/win/nsOSHelperAppService.cpp | 192 ++++++--------------- 42 files changed, 383 insertions(+), 415 deletions(-) -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/pale-moon.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository pale-moon. commit ae8c5a8145830f10e90b18074e3d3c0c0a4196cf Author: Mihai Moldovan <ionic@ionic.de> Date: Thu Apr 25 09:17:39 2019 +0200 debian: sync directory with Steven Pusser's palemoon_28.4.1+repack-1 version. --- debian/changelog | 26 +++++++++++++++++++++++++- debian/control.in | 3 +-- 2 files changed, 26 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index a941d55..1eab9d6 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,27 @@ +palemoon (28.4.1+repack-1) obs; urgency=medium + + * New upstream security and bugfix release: + - Fixed hover state arrows on some controls. + - Fixed potential denial-of-service issues involving FTP (loading of + subresources and spamming errors). + - Disabled Microsoft Family Safety (Win 8.1) by default. This prevents + security issues as a result of a local MitM setup. + - Added several site-specific overrides (Firefox Send and polyfill.io) to + work around website UA-sniffing isues. + - Implemented the origin-clean algorithm for controlling access to image + resources. + - Cleaned up the helper application service code. + - Ported applicable security fixes from Mozilla (CVE-2019-9791, + CVE-2019-9792, CVE-2019-9796, CVE-2019-9801, CVE-2019-9793, CVE-2019-9794, + CVE-2019-9808 and ZDI-CAN-8368). + - Implemented several defense-in-depth measures (for CVE-2019-9790, + CVE-2019-9797, CVE-2019-9804, and a JavaScript issue). + - Fixed several memory safety hazards and crashes. + + * Add provides for www-browser and gnome-www-browser. + + -- Steven Pusser <stevep@mxlinux.org> Tue, 26 Mar 2019 13:01:22 -0700 + palemoon (28.4.0+repack-1-0x2go1) UNRELEASED; urgency=medium [ Mihai Moldovan ] @@ -11,7 +35,7 @@ palemoon (28.4.0+repack-1-0x2go1) UNRELEASED; urgency=medium -- Mihai Moldovan <ionic@ionic.de> Wed, 27 Feb 2019 05:34:45 +0100 -palemoon (28.4.0+repack-1) obs; urgency=medium +palemoon (28.4.0+repack-1~mx17+1) mx; urgency=medium * New upstream major development, stability and security release: - Removed more telemetry code from the platform. diff --git a/debian/control.in b/debian/control.in index 6d856d0..71a95fb 100644 --- a/debian/control.in +++ b/debian/control.in @@ -113,8 +113,7 @@ Conflicts: j2re1.4, palemoon-nonsse2, Replaces: palemoon-nonsse2 Breaks: xul-ext-torbutton -Provides: x-www-browser, - gnome-www-browser +Provides: x-www-browser, www-browser, gnome-www-browser Description: Firefox-based, efficient and easy to use web browser Pale Moon offers selected features and optimizations to maximize the browser's speed, stability and user experience, while maintaining -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/pale-moon.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository pale-moon. commit 3ca7db1c72cb104aac16e8d1f68a44074dc08bdd Author: Mihai Moldovan <ionic@ionic.de> Date: Thu Apr 25 09:20:05 2019 +0200 debian/changelog: update to 28.4.1. --- debian/changelog | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/debian/changelog b/debian/changelog index 1eab9d6..3fae94c 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +palemoon (28.4.1+repack-1-0x2go1) UNRELEASED; urgency=medium + + [ Mihai Moldovan ] + * New downstream version (28.4.1): + + -- Mihai Moldovan <ionic@ionic.de> Wed, 25 Apr 2019 09:19:33 +0200 + palemoon (28.4.1+repack-1) obs; urgency=medium * New upstream security and bugfix release: -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/pale-moon.git