Merge branch 'palemoon-bump' into 'master'

Palemoon 28.5.0

See merge request bgstack15/stackrpms!56

2 files changed, 56 insertions, 1 deletions

diff --git a/palemoon/debian/bgstack15-palemoon-prefs.js b/palemoon/debian/bgstack15-palemoon-prefs.js
index d944010..f3ae4e7 100644
--- a/palemoon/debian/bgstack15-palemoon-prefs.js
+++ b/palemoon/debian/bgstack15-palemoon-prefs.js
@@ -1,6 +1,6 @@
 // file: /usr/lib/palemoon/browser/defaults/preferences/bgstack15-palemoon-prefs.js
 // deployed with palemoon-stackrpms package (rpm or dpkg) built by bgstack15
-// last modified 2019-03-27
+// last modified 2019-04-30
 // reference:
 //    https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig
 pref("browser.allTabs.previews", false);
@@ -20,6 +20,7 @@ pref("extensions.update.autoUpdateDefault", false);
 pref("general.warnOnAboutConfig", false);
 pref("network.automatic-ntlm-auth.trusted-uris", ".ipa.smith122.com");
 pref("network.cookie.prefsMigrated", true);
+pref("network.http.spdy.enabled", false);
 pref("network.negotiate-auth.trusted-uris", ".ipa.smith122.com");
 pref("network.stricttransportsecurity.preloadlist", false);
 pref("privacy.sanitize.migrateFx3Prefs", true);
diff --git a/palemoon/debian/changelog b/palemoon/debian/changelog
index 24911ec..7df77e2 100644
--- a/palemoon/debian/changelog
+++ b/palemoon/debian/changelog
@@ -1,3 +1,57 @@
+palemoon (28.5.0-1+devuan) manual; urgency=low
+
+  * From releasenotes.shtml: This is a major development and bugfix update.
+    - Redesigned the about box.
+    - Added "Check for updates" menu entries to the AppMenu and classic menu (since the About box redesign no longer has application update in it).
+    - Restored the app.update.url.override pref for AUS testing/override.
+    - Added "Loop" control to html5 video.
+    - Fixed a crash with frames (e.g. when using Tile Tabs).
+    - Fixed an issue with textarea placeholders (spec compliance).
+    - Removed the Windows Maintenance Service one last time.
+    - Improved http basic auth DoS heuristics.
+    - Fixed an issue on big-endian machines (e.g. PPC64/linux).
+    - Removed e10s code from widgets.
+    - Preffed the various http "Accept" headers and aligned with the Fetch spec (except for image requests).
+    - Aligned URLSearchParams with the spec.
+    - Updated several site-specific UA overrides.
+    - Fixed "Yet Another special case of a flex frame being the absolute containing block"
+    - Fixed border drawing when the tab bar is hidden.
+    - Pref-controlled and disabled the use of unboxed plain objects in JavaScript's JIT compiler.
+    - Improved handling of interrupted connections through proxies and pseudo-VPN extensions.
+    - Removed contextual identity.
+    - Updated the 7zip installer stub to a much more recent code version.
+    - Fixed an issue with applying percentages to 0 in layout sizes.
+    - Fixed an issue with calculating linear sums in JS JITed code.
+    - Added default value feature to get*Pref() preference functions.
+    - Fixed an issue that would occasionally overwrite the new tab custom URL.
+    - Updated the SQLite library to 3.27.2
+    - Killed the crashreporter toolkit files and exception handler hooks.
+    - Fixed an issue with a missing border on the tab bar when on the bottom.
+    - Fixed a crash with badly-formatted SVG files.
+    - Showed the robots to the exit after squatting in the browser for decades.
+    - JavaScript: Implemented TC39 toString() revision proposal.
+    - Rearchitectured the JavaScript front-end parser to provide better and more logical parsing of JS code.
+    - Removed support code and leftovers for unsupported SunOS, AIX, BEOS, HPUX and OS/2 operating systems.
+    - Fixed a scrollbar arrow issue on OS X.
+    - Removed all Firefox Accounts code.
+    - Made the CSS parser more robust and aligned url() behavior with the CSS3 spec in case of bad input.
+    - Fixed an issue with blocklist updates not actually dynamically applying due to a wrong URL.
+    - Updated the embedded emoji font to the TweMoji v11.4.0 equivalent.
+    - Fixed an issue with async/deferred scripts preventing page loads from completing.
+
+  * From github: Import new 28.5.0 major development and security release:
+    - Added several site-specific overrides for web compatibility.
+    - Aligned http "Accept:" headers with the fetch spec, with the exception of image requests to continue allowing content negotiation.
+    - Fixed potential denial-of-service issues involving FTP (loading of subresources and spamming errors).
+    - Aligned URLSearchParams with the spec.
+    - Fixed a corner case for flexbox layouts, improving rendering of some websites.
+    - Fixed Widevine compatibility issues.
+    - Fixed security issues: CVE-2019-9791, CVE-2019-9792, CVE-2019-9796, CVE-2019-9801, CVE-2019-9793, CVE-2019-9794, CVE-2019-9808, CVE-2019-9790, CVE-2019-9797, CVE-2019-9804 and ZDI-CAN-8368.
+    - Fixed several memory safety hazards and crashes.
+    - Windows binaries are now code-signed again (including the setup program for the installer).
+
+ -- B Stack <bgstack15@gmail.com>  Tue, 30 Apr 2019 08:36:47 -0500
+
 palemoon (28.4.1-1devuan) manual; urgency=low
 
   * New 28.4.1 security and bugfix release: