bump pm and nm to 28.14.2 rc1

1 files changed, 39 insertions, 0 deletions

diff --git a/palemoon/debian/changelog b/palemoon/debian/changelog
index a79d50c..925924e 100644
--- a/palemoon/debian/changelog
+++ b/palemoon/debian/changelog
@@ -1,3 +1,42 @@
+palemoon (28.14.2-1+devuan) obs; urgency=low
+
+  * Fixed some additional crashes caused by the ResizeObserver API. This should take care of all crashes that have been attributed to this new code.
+  * Fixed erroneous parsing of CSS percentages as number values.
+
+ -- Ben Stack <bgstack15@gmail.com>  Sat, 03 Oct 2020 13:18:40 -0400
+
+palemoon (28.14.1-1+devuan) UNRELEASED; urgency=low
+
+  *  This update addresses an intermittent crash in the newly-implemented ResizeObserver API (introduced in 28.14.0) occurring on a number of high-profile and often-used websites.
+
+ -- Ben Stack <bgstack15@gmail.com>  Sat, 03 Oct 2020 13:18:30 -0400
+
+palemoon (28.14.0-1+devuan) UNRELEASED; urgency=low
+
+  * Updated the browser identity code for website security to more clearly indicate website status.
+  * A detailed explanation is available on the forum and beyond the scope of these release notes.
+  * Updated unofficial branding to be more generic and more clearly separate unofficial builds from Pale Moon as a product.
+  * Please note that this goes hand in hand with an update of our redistribution license, and from this point forward any "New Moon" products are to be considered separate, and not unofficial Pale Moon builds or in any way related to or affiliated with Pale Moon, despite the similarity in name.
+  * Added a preference (signon.startup.prompt) to give users the option to ask for the Master Password the moment the application starts (before the main window opens). This allows a workaround for getting multiple Master Password prompts if individual components need access to the password store at the same time.
+  * Changed the way download sources are displayed to always use the actual domain downloads are from. In some situations the browser would previously display the domain of the referring page in an inconsistent fashion.
+  * Implemented the ES2019 Object.fromEntries() utility function.
+  * Implemented the CSS flow-root keyword.
+  * (Re-)implemented percentage-based CSS opacity values according to the updated spec.
+  * Implemented the last few missing bits for a standards-compliant implementation of JavaScript modules.(preloading, resource: scheme, etc.)
+  * Implemented the ResizeObserver DOM API.
+  * Fixed a null crash on some websites using CSS clip paths.
+  * Updated script handling inside SVGs to only run scripts if they are enabled and permitted, avoiding a potential XSS pitfall.
+  * Fixed several memory safety hazards and crashes.
+  * Updated the MediaQueryList interface to the updated spec. It now inherits from EventTarget and implements AddEventListener/RemoveEventListener in addition to AddListener/RemoveListener and should improve web compatibility for some sites.
+  * Removed support for the archaic and non-standard <marquee> element.
+  * Removed some leftovers from the discontinued plugin update checker service.
+  * Removed some internal HPKP implementation leftovers.
+  * Cleaned up the Windows widget code to reduce potentially vulnerable direct-dll loads.
+  * Security issues fixed: CVE-2020-15676 and CVE-2020-15677
+  * Unified XUL Platform Mozilla Security Patch Summary: 2 fixed, 1 defense-in-depth, 7 not applicable.
+
+ -- Ben Stack <bgstack15@gmail.com>  Sat, 03 Oct 2020 13:18:20 -0400
+
 palemoon (28.13.0-4+devuan) obs; urgency=low
 
   * Import xfce-helper/palemoon.desktop from stevep@mxlinux.org release