The first official 20180226 builds are out

[Josa]

Previous Nightly Builds thread 20180225

The first official 20180226 NIGHTLY builds are out
.The Official Firefox 59 Beta 13 builds are not yet out

Previous NIGHTLY: 20180225 (Fx 60.0a1)
Previous BETA: 20180223 (Fx 59.0b12)

Mozilla Inbound Builds
Treeherder
Release Notes: NIGHTLY | BETA
Changelogs: NIGHTLY | BETA


Fixed:

1. NIGHTLY +14
2. #1432490 [Core:CSS Parsing and Computation]-Do a bit of cleanup in nsComputedDOMStyle::GetStyleContext / GetStyleContextNoFlush. [Uns][]
3. #1440221 [Core:CSS Parsing and Computation]-stylo: ComputedValues in undisplayed map is staled and not reported in memory report [Uns][]
4. #1440441 [Core:DOM]-Remove nsIDOMFormData [Uns][]
5. #1441009 [Core:DOM]-Don't null-check OwnerDoc. [Uns][]
6. #1440961 [Core:DOM: Core & HTML]-Canvas in ShadowDOM could probably interact better. [Uns][]
7. #1441014 [Core:DOM: Core & HTML]-Cleanup a bit the slot removal code. [Uns][]
8. #1438467 [Core:Layout]-Avoid reframing the container frame when a display: contents element with pseudos goes away. [Uns][]
9. #1439036 [Core:Layout]-Stop passing bogus next sibling values into restyling / frame construction. [Uns][]
10. #1432017 [Core:Selection]-Remove AccessibleCaretEventHub::PostScrollState. [Uns][]
11. #1440093 [Firefox:Developer Tools: Debugger]-Breakpoints at the end of a line are missed [Uns][]
12. #1439920 [Firefox:Developer Tools: Inspector]-[Accessibility] The button to add an attribute inside the tree node needs a spoken label [All][]
13. #1434376 [Firefox:General]-Make BrowserUtils.promiseReflowed and BrowserUtils.promiseLayoutFlushed reliable [Uns][[fxperf]]
14. #1435929 [Firefox:Sync]-browserid_identity is confusing and error prone and should be refactored [Uns][]
15. #1417880 [Toolkit:WebExtensions: Themes]-Allow theming arrow panels [Uns][]

1. Partial Landings/Diagnostic Patches:
   None

1. Beta 12 -> Beta 13 Changelog +8
2. #1437507
3. #1438425
4. #1426869 [Core:Editor]-td.contenteditable=true focus breaks text selection [Uns][]
5. #1427118 [Core:Graphics]-Crash in OOM | large | mozalloc_abort | mozalloc_handle_oom | moz_xmalloc | mozilla::gfx::RecordedFontData::RecordedFontData<T> [All][[gfx-noted]]
6. #1439001 [Core:WebRTC]-receiver.getSynchronizationSources()[0].audioLevel only present in two-way calls [All][]
7. #1439242 [Firefox:Developer Tools: Netmonitor]-Headers filter broken [Uns][good-first-bug]
8. #1435859 [Toolkit:Safe Browsing]-Crash in OOM | large | NS_ABORT_OOM | mozilla::safebrowsing::Classifier::DeleteTables [Win][]
9. #1435100 [Toolkit:WebExtensions: General]-ExtensionTestCommon.jsm generateZipFile throws NS_ERROR_FILE_ACCESS_DENIED [Uns][]

Nightly 60 fixes since 20180122 (Gecko 59) ~1388
Beta 59 fixes since 20171113 (Gecko 58) ~2591

Nightly Blog
Release Calendar
Release Tracking
MozRegression Guide

[Romani]

Ok, i dont know what they did, but starting from 20180226 i started to get a lot of Your connection is insecure on various HTTPS pages, including various banks i trust (but better not list them here) and even https://appdb.winehq.org. Firefox says that cert issuer is unknown, but it IS present in CA installed list, i checked that.

[bjherbison]

Likely Bug 1434300: Distrust Symantec CAs affected by the distrust plan

A list of major sites affected is in a comment in the bug.
https://bugzilla.mozilla.org/show_bug.c ... 434300#c81

[Romani]

Yes, i had similar idea, but for example Winehq have cert from Geotrust and my bank uses Thawte. I dont really see how they related.

EDIT: Ok, i see it now - https://bugzilla.mozilla.org/show_bug.c ... 434300#c91
The full regression against 496833 hosts run yielded 8434 SEC_ERROR_UNKNOWN_ISSUER regressions. The affected roots and their frequencies are (among a few seemingly self-signed roots in the error set that require further investigation):

4846,GeoTrust Global CA
1794,VeriSign Class 3 Public Primary Certification Authority - G5
881,thawte Primary Root CA
443,GeoTrust Primary Certification Authority - G3
207,thawte Primary Root CA - G3
101,GeoTrust Primary Certification Authority
83,VeriSign Universal Root Certification Authority
11,VeriSign Class 3 Public Primary Certification Authority - G3

Sites affected use these CAs

[Mark12547]

Images (cover art) in Netflix also got hit by Bug 1434300. I ended up adding an exception to get them.

[Josa]

This thread is closed, please use the next one.