From 1310561bd5bd23381948309661b70a0e2b4f798b66a7196a0f61ccb47155fb49 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Tue, 20 Nov 2012 20:34:15 +0000 Subject: [PATCH] - update to Firefox 17.0 (bnc#790140) * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843 Miscellaneous memory safety hazards * MFSA 2012-92/CVE-2012-4202 (bmo#758200) Buffer overflow while rendering GIF images * MFSA 2012-93/CVE-2012-4201 (bmo#747607) evalInSanbox location context incorrectly applied * MFSA 2012-94/CVE-2012-5836 (bmo#792857) Crash when combining SVG text on path with CSS * MFSA 2012-95/CVE-2012-4203 (bmo#765628) Javascript: URLs run in privileged context on New Tab page * MFSA 2012-96/CVE-2012-4204 (bmo#778603) Memory corruption in str_unescape * MFSA 2012-97/CVE-2012-4205 (bmo#779821) XMLHttpRequest inherits incorrect principal within sandbox * MFSA 2012-99/CVE-2012-4208 (bmo#798264) XrayWrappers exposes chrome-only properties when not in chrome compartment * MFSA 2012-100/CVE-2012-5841 (bmo#805807) Improper security filtering for cross-origin wrappers * MFSA 2012-101/CVE-2012-4207 (bmo#801681) Improper character decoding in HZ-GB-2312 charset * MFSA 2012-102/CVE-2012-5837 (bmo#800363) Script entered into Developer Toolbar runs with chrome privileges * MFSA 2012-103/CVE-2012-4209 (bmo#792405) Frames can shadow top.location * MFSA 2012-104/CVE-2012-4210 (bmo#796866) CSS and HTML injection through Style Inspector * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/ CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/ OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=303 --- MozillaFirefox.changes | 50 +++ MozillaFirefox.spec | 36 ++- compare-locales.tar.bz2 | 4 +- create-tar.sh | 4 +- firefox-16.0.2-source.tar.bz2 | 3 - firefox-17.0-source.tar.bz2 | 3 + firefox-kde-114.patch | 2 +- firefox-kde.patch | 323 ++++++++++--------- firefox-multilocale-chrome.patch | 16 +- l10n-16.0.2.tar.bz2 | 3 - l10n-17.0.tar.bz2 | 3 + mozilla-gcc43-enums.patch | 93 ++++++ mozilla-gcc43-template_hacks.patch | 26 ++ mozilla-gcc43-templates_instantiation.patch | 20 ++ mozilla-gstreamer-760140.patch | 67 ++-- mozilla-kde.patch | 329 ++++---------------- mozilla-ntlm-full-path.patch | 6 +- mozilla-prefer_plugin_pref.patch | 38 ++- mozilla-shared-nss-db.patch | 32 +- source-stamp.txt | 2 +- 20 files changed, 539 insertions(+), 521 deletions(-) delete mode 100644 firefox-16.0.2-source.tar.bz2 create mode 100644 firefox-17.0-source.tar.bz2 delete mode 100644 l10n-16.0.2.tar.bz2 create mode 100644 l10n-17.0.tar.bz2 create mode 100644 mozilla-gcc43-enums.patch create mode 100644 mozilla-gcc43-template_hacks.patch create mode 100644 mozilla-gcc43-templates_instantiation.patch diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index a1f80fed..1c3c9b20 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,53 @@ +------------------------------------------------------------------- +Tue Nov 20 19:52:02 UTC 2012 - wr@rosenauer.org + +- update to Firefox 17.0 (bnc#790140) + * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843 + Miscellaneous memory safety hazards + * MFSA 2012-92/CVE-2012-4202 (bmo#758200) + Buffer overflow while rendering GIF images + * MFSA 2012-93/CVE-2012-4201 (bmo#747607) + evalInSanbox location context incorrectly applied + * MFSA 2012-94/CVE-2012-5836 (bmo#792857) + Crash when combining SVG text on path with CSS + * MFSA 2012-95/CVE-2012-4203 (bmo#765628) + Javascript: URLs run in privileged context on New Tab page + * MFSA 2012-96/CVE-2012-4204 (bmo#778603) + Memory corruption in str_unescape + * MFSA 2012-97/CVE-2012-4205 (bmo#779821) + XMLHttpRequest inherits incorrect principal within sandbox + * MFSA 2012-99/CVE-2012-4208 (bmo#798264) + XrayWrappers exposes chrome-only properties when not in chrome + compartment + * MFSA 2012-100/CVE-2012-5841 (bmo#805807) + Improper security filtering for cross-origin wrappers + * MFSA 2012-101/CVE-2012-4207 (bmo#801681) + Improper character decoding in HZ-GB-2312 charset + * MFSA 2012-102/CVE-2012-5837 (bmo#800363) + Script entered into Developer Toolbar runs with chrome privileges + * MFSA 2012-103/CVE-2012-4209 (bmo#792405) + Frames can shadow top.location + * MFSA 2012-104/CVE-2012-4210 (bmo#796866) + CSS and HTML injection through Style Inspector + * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/ + CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/ + CVE-2012-4213/CVE-2012-4217/CVE-2012-4218 + Use-after-free and buffer overflow issues found using Address + Sanitizer + * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838 + Use-after-free, buffer overflow, and memory corruption issues + found using Address Sanitizer +- rebased patches +- disabled WebRTC since build is broken (bmo#776877) + +------------------------------------------------------------------- +Tue Nov 20 15:42:55 UTC 2012 - pcerny@suse.com + +- build on SLE11 + * mozilla-gcc43-enums.patch + * mozilla-gcc43-template_hacks.patch + * mozilla-gcc43-templates_instantiation.patch + ------------------------------------------------------------------- Wed Oct 24 08:27:29 UTC 2012 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index d0b24247..f09ee57d 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -17,8 +17,8 @@ # -%define major 16 -%define mainver %major.0.2 +%define major 17 +%define mainver %major.0 %define update_channel release Name: MozillaFirefox @@ -54,7 +54,7 @@ BuildRequires: pkgconfig(gstreamer-plugins-base-0.10) %endif Version: %{mainver} Release: 0 -%define releasedate 2012102400 +%define releasedate 2012111600 Provides: firefox = %{mainver} Provides: firefox = %{version}-%{release} Provides: web_browser @@ -94,10 +94,14 @@ Patch8: mozilla-ntlm-full-path.patch Patch9: mozilla-repo.patch Patch10: mozilla-sle11.patch Patch11: mozilla-disable-neon-option.patch -Patch13: mozilla-arm-disable-edsp.patch -Patch15: mozilla-gstreamer.patch -Patch16: mozilla-ppc.patch -Patch17: mozilla-gstreamer-760140.patch +Patch12: mozilla-arm-disable-edsp.patch +Patch13: mozilla-gstreamer.patch +Patch14: mozilla-ppc.patch +Patch15: mozilla-gstreamer-760140.patch +# SLE11 patches +Patch20: mozilla-gcc43-enums.patch +Patch21: mozilla-gcc43-template_hacks.patch +Patch22: mozilla-gcc43-templates_instantiation.patch # Firefox/browser Patch30: firefox-browser-css.patch Patch31: firefox-kde.patch @@ -112,10 +116,6 @@ Requires: %{name}-branding > 4.0 Requires: mozilla-nspr >= %(rpm -q --queryformat '%{VERSION}' mozilla-nspr) Requires: mozilla-nss >= %(rpm -q --queryformat '%{VERSION}' mozilla-nss) Recommends: libcanberra0 -# libproxy's mozjs pacrunner crashes FF (bnc#759123) -%if %suse_version < 1220 -Obsoletes: libproxy1-pacrunner-mozjs <= 0.4.7 -%endif %define firefox_appid \{ec8030f7-c20a-464f-9b0e-13a3a9e97384\} %define _use_internal_dependency_generator 0 %define __find_requires sh %{SOURCE4} @@ -227,10 +227,16 @@ cd $RPM_BUILD_DIR/mozilla %patch10 -p1 %endif #%patch11 -p1 +%patch12 -p1 %patch13 -p1 +%patch14 -p1 %patch15 -p1 -%patch16 -p1 -%patch17 -p1 +# SLE patches +%if %suse_version <= 1110 +%patch20 -p1 +%patch21 -p1 +%patch22 -p1 +%endif # %patch30 -p1 %if %suse_version >= 1110 @@ -293,6 +299,7 @@ ac_add_options --disable-debug ac_add_options --enable-startup-notification #ac_add_options --enable-chrome-format=jar ac_add_options --enable-update-channel=%{update_channel} +ac_add_options --disable-webrtc # webrtc build is broken for system NSPR EOF %if %suse_version > 1130 cat << EOF >> $MOZCONFIG @@ -369,7 +376,6 @@ for locale in $(awk '{ print $1; }' ../mozilla/browser/locales/shipped-locales); make -C browser/locales langpack-$locale cp -rL dist/xpi-stage/locale-$locale \ $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org - rm $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org/chrome/.mkdir.done # remove prefs, profile defaults, and hyphenation from langpack rm -rf $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org/defaults rm -rf $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org/hyphenation @@ -394,6 +400,8 @@ find $RPM_BUILD_ROOT%{progdir} \ -name "*.txt" -o \ -name "*.xml" -o \ -name "*.css" | xargs chmod a-x +# remove mkdir.done files from installed base +find $RPM_BUILD_ROOT%{progdir} -name ".mkdir.done" | xargs rm # overwrite the mozilla start-script and link it to /usr/bin mkdir --parents $RPM_BUILD_ROOT/usr/bin sed "s:%%PREFIX:%{_prefix}:g diff --git a/compare-locales.tar.bz2 b/compare-locales.tar.bz2 index eafd2d9e..c44ac121 100644 --- a/compare-locales.tar.bz2 +++ b/compare-locales.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:ea7b236553dd3b2ff8cfb126763af6a72a40564d34babe19f5be7f7b57150387 -size 29935 +oid sha256:de3c0cf1d4cecef9e1195fb8f112d995558aa9e9767dac6554fd878f10ed84b5 +size 29941 diff --git a/create-tar.sh b/create-tar.sh index 997c0a98..17a5c92b 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_16_0_2_RELEASE" -VERSION="16.0.2" +RELEASE_TAG="FIREFOX_17_0_RELEASE" +VERSION="17.0" # mozilla echo "cloning $BRANCH..." diff --git a/firefox-16.0.2-source.tar.bz2 b/firefox-16.0.2-source.tar.bz2 deleted file mode 100644 index 954f11da..00000000 --- a/firefox-16.0.2-source.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:dd8749befde92bb45dabf2f043d022aeca439eead53e64cec16d8619307bacf9 -size 90688319 diff --git a/firefox-17.0-source.tar.bz2 b/firefox-17.0-source.tar.bz2 new file mode 100644 index 00000000..95b1b72c --- /dev/null +++ b/firefox-17.0-source.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0956aa518475fa8b6e019efd95cf2d6378c7c5c720db5c23f7c60cb9e34ceac5 +size 92114962 diff --git a/firefox-kde-114.patch b/firefox-kde-114.patch index 766de6e9..5b50d2dd 100644 --- a/firefox-kde-114.patch +++ b/firefox-kde-114.patch @@ -1,6 +1,6 @@ # HG changeset patch # User Wolfgang Rosenauer -# Parent 5a741476f1d87380057f9fa02c6a580aed6e81ff +# Parent ba2d9b1374e15e7c339a44452169d0afac2ca82e With openSUSE 11.4 the desktop file name changed from MozillaFirefox to firefox diff --git a/browser/components/preferences/advanced.js b/browser/components/preferences/advanced.js diff --git a/firefox-kde.patch b/firefox-kde.patch index 3044e168..81594dc9 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -2,7 +2,7 @@ diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1210 @@ +@@ -0,0 +1,1272 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -14,7 +14,6 @@ new file mode 100644 + + + -+ + + + @@ -60,9 +59,6 @@ new file mode 100644 +#include global-scripts.inc +