seamonkey-2.53.5

[Bruce Dubbs]

New point version.

Belatedly marking as high priority, there are other security fixes beyond what we had in patched 2.53.4.

[ken@…]

SeaMonkey 2.53.5 contains (among other changes) the following major changes relative to SeaMonkey 2.53.4:

Provide WebP support bug 1653869. Add startpage.com as a search engine available to all locales bug 1655283. Added av1 support. Included latest version of freetype2. Added support for the resizeObserver web API. Support for rust 1.47.0 on Linux and macOS platforms. Dropped support for use of system sqlite. Various security and general platform fixes.

Since they don't detail any security fixes, I compared this to our patched version: fixed, but in a slightly different way.

[ken@…]

I've started looking at this, so I suppose I'd better take it ;-)

Changes so far: --enable-system-sqlite no longer accepted, it looks for nasm as well as yasm (needed for dav1D, i.e. playing av1 videos) - it looks as if it might build without that so I propose to add it as recommended, as for firefox.

[ken@…]

The diff from 2.53.4 is enormous, much like a diff from one latest version of firefox to the next. among the changes, shipped libjpeg (which we don't build) has been updated through versions 1.5.2, 2.0.0, 2.0.3 to 2.0.4). We don't use the shipped updated libfreetype2. Shipped libvpx has also been updated - as with firefox, I guess we are stuck with the system version (ditto brotli which was also updated).

[ken@…]

Also updates to security/sandbox/chromium which might be security-related.

Various changes in third_party rust code.

Shipped sqlite3 updated to 3.33.0.

It looks as thought we can use --with-system-webp, rebuilding to confirm that.

[ken@…]

r23901