diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index b3c34b1..acd50a5 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,76 @@ +------------------------------------------------------------------- +Sat Jan 26 22:37:01 UTC 2019 - Wolfgang Rosenauer + +- Mozilla Firefox 65.0 + * Enhanced tracking protection + * allow switching of UI locales within preferences + * support for the WebP image format + * "top"-like about:performance + MFSA 2019-01 (bsc#1122983) + * CVE-2018-18500 bmo#1510114 + Use-after-free parsing HTML5 stream + * CVE-2018-18503 bmo#1509442 + Memory corruption with Audio Buffer + * CVE-2018-18504 bmo#1496413 + Memory corruption and out-of-bounds read of texture client + * CVE-2018-18505 bmo#1497749 + Privilege escalation through IPC channel messages + * CVE-2018-18506 bmo#1503393 + Proxy Auto-Configuration file can define localhost access to be proxied + * CVE-2018-18502 bmo#1499426 bmo#1480090 bmo#1472990 bmo#1514762 + bmo#1501482 bmo#1505887 bmo#1508102 bmo#1508618 bmo#1511580 + bmo#1493497 bmo#1510145 bmo#1516289 bmo#1506798 bmo#1512758 + Memory safety bugs fixed in Firefox 65 + * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619 + bmo#1502871 bmo#1516738 bmo#1516514 + Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 +- requires + NSS 3.41 + rust/carge 1.30 + rust-cbindgen 0.6.7 +- rebased patches +- remove workaround for build memory consumption on i586; other + mitigations meanwhile introduced (mainly parallelity) will be + sufficient + mozilla-reduce-files-per-UnifiedBindings.patch + +------------------------------------------------------------------- +Tue Jan 15 14:32:03 UTC 2019 - Martin Liška + +- Increase disk constraint. + +------------------------------------------------------------------- +Mon Jan 14 12:12:12 UTC 2019 - Martin Liška + +- Remove -v from mach build in order to work-around bmo#1500436. + +------------------------------------------------------------------- +Fri Jan 11 15:07:14 UTC 2019 - Martin Liška + +- Set %clang_build to false on all architectures +- Do not use -fno-delete-null-pointer-checks and -fno-strict-aliasing: + it should not be needed anymore +- Do not overwrite enable-optimize and when possible + enable --enable-debug-symbols. +- Add -v to mach in order to make build verbose. + +------------------------------------------------------------------- +Wed Jan 9 22:40:14 UTC 2019 - astieger@suse.com + +- Mozilla Firefox 64.0.2: + * Update the Japanese translation for missing strings (bmo#1513259) + * Properly restore column sizes in developer tools inspector (bmo#1503175) + * Fixed video stuttering on Youtube (bmo#1513511) + * Fix updates for some lightweight themes (bmo#1508777) + +------------------------------------------------------------------- +Tue Dec 18 14:46:41 UTC 2018 - Guillaume GARDET + +- Enable build_hardened for all architectures +- Switch back aarch64 to clang as '-fPIC' fixes bmo#1513605 +- Remove obolete '--enable-pie' as -pie is always enabled for + gcc and clang + ------------------------------------------------------------------- Wed Dec 12 17:33:29 UTC 2018 - Guillaume GARDET diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index e4b118c..f196597 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -1,8 +1,8 @@ # # spec file for package MozillaFirefox # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. -# 2006-2018 Wolfgang Rosenauer +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# 2006-2019 Wolfgang Rosenauer # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,29 +18,20 @@ # changed with every update -%define major 64 +%define major 65 %define mainver %major.0 -%define orig_version 64.0 +%define orig_version 65.0 %define orig_suffix %{nil} %define update_channel release %define branding 1 -%define releasedate 20181206201918 +%define releasedate 20190124174741 %define source_prefix firefox-%{orig_version} -# use clang (upstream default since 64.0) -%if 0%{?suse_version} > 1320 -%define clang_build 1 -%endif -# Except on aarch64 due to bmo#1513605 -# and on %%arm due to large ld memory requirements -%ifarch %arm aarch64 +# always build with GCC as SUSE Security Team requires that %define clang_build 0 -%endif -# PIE, full relro (x86_64 for now) -%ifnarch %arm aarch64 +# PIE, full relro %define build_hardened 1 -%endif # Firefox only supports i686 %ifarch %ix86 @@ -78,7 +69,7 @@ BuildRequires: gcc7-c++ %else BuildRequires: gcc-c++ %endif -BuildRequires: cargo >= 1.29 +BuildRequires: cargo >= 1.30 BuildRequires: libXcomposite-devel BuildRequires: libcurl-devel BuildRequires: libidl-devel @@ -87,13 +78,13 @@ BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.20 -BuildRequires: mozilla-nss-devel >= 3.40.1 +BuildRequires: mozilla-nss-devel >= 3.41 BuildRequires: nodejs8 >= 8.11 BuildRequires: python-devel BuildRequires: python2-xml BuildRequires: python3 >= 3.5 -BuildRequires: rust >= 1.29 -BuildRequires: rust-cbindgen >= 0.6.4 +BuildRequires: rust >= 1.30 +BuildRequires: rust-cbindgen >= 0.6.7 BuildRequires: startup-notification-devel BuildRequires: unzip BuildRequires: update-desktop-files @@ -168,7 +159,6 @@ Patch1: mozilla-nongnome-proxies.patch Patch2: mozilla-kde.patch Patch3: mozilla-ntlm-full-path.patch Patch4: mozilla-openaes-decl.patch -Patch6: mozilla-reduce-files-per-UnifiedBindings.patch Patch7: mozilla-aarch64-startup-crash.patch Patch8: mozilla-bmo256180.patch Patch9: mozilla-bmo1463035.patch @@ -276,9 +266,6 @@ cd $RPM_BUILD_DIR/%{source_prefix} %patch2 -p1 %patch3 -p1 %patch4 -p1 -%ifarch %ix86 -%patch6 -p1 -%endif %patch7 -p1 %patch8 -p1 %patch9 -p1 @@ -316,21 +303,12 @@ export CC=gcc export CXX=g++ %endif %endif -export CFLAGS="%{optflags} -fno-strict-aliasing" -# boo#986541: add -fno-delete-null-pointer-checks for gcc6 -%if 0%{?clang_build} == 0 -%if 0%{?suse_version} > 1320 -export CFLAGS="$CFLAGS -fno-delete-null-pointer-checks" -%endif -%endif %ifarch %arm %ix86 # Limit RAM usage during link export LDFLAGS="${LDFLAGS} -Wl,--no-keep-memory -Wl,--reduce-memory-overheads" %endif %if 0%{?build_hardened} -%ifarch x86_64 -export LDFLAGS="${LDFLAGS} -Wl,-z,relro,-z,now" -%endif +export LDFLAGS="${LDFLAGS} -fPIC -Wl,-z,relro,-z,now" %endif %ifarch ppc64 ppc64le %if 0%{?clang_build} == 0 @@ -354,18 +332,11 @@ ac_add_options --enable-default-toolkit=cairo-gtk3 %if 0%{?suse_version} >= 1550 ac_add_options --disable-gconf %endif -%if 0%{?build_hardened} -%if 0%{?clang_build} == 0 -ac_add_options --enable-pie -%endif -%endif -# gcc7 (boo#104105) -%if 0%{?suse_version} > 1320 -ac_add_options --enable-optimize="-g -O2" -%endif # bmo#1441155 - Disable the generation of Rust debug symbols on Linux32 %ifarch %ix86 %arm ac_add_options --disable-debug-symbols +%else +ac_add_options --enable-debug-symbols %endif %if 0%{?suse_version} > 1549 %ifnarch aarch64 ppc64 ppc64le diff --git a/_constraints b/_constraints index 03d5c58..e20741d 100644 --- a/_constraints +++ b/_constraints @@ -2,10 +2,10 @@ - 16 + 20 - 12 + 8 diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 3495ea7..7c3ce45 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:08c89c246ee082e7b61a333ee0d0a2e6ddf8c9ac12688cbf4ad50dafb0de7ad5 -size 28388 +oid sha256:5a96011ec759ab6ca2c649f56e48f5ea39a2a3f63ebce2ffcdaa9f98cdeb0ff2 +size 28384 diff --git a/create-tar.sh b/create-tar.sh index f20723a..3e80696 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="8337ebb86a425a1c65467fc68eb7c26b9046159e" -VERSION="64.0" +RELEASE_TAG="896611703c2b8f04f596ebcb09e612b7ab06eea3" +VERSION="65.0" VERSION_SUFFIX="" LOCALE_FILE="firefox-$VERSION/browser/locales/l10n-changesets.json" diff --git a/firefox-64.0.source.tar.xz b/firefox-64.0.source.tar.xz deleted file mode 100644 index 0c64d74..0000000 --- a/firefox-64.0.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:da40f2f8f1cbf0ddb3454aa9f65bb1a2b2043ca9b1724aecd016337be77d537f -size 271865888 diff --git a/firefox-64.0.source.tar.xz.asc b/firefox-64.0.source.tar.xz.asc deleted file mode 100644 index 670fd03..0000000 --- a/firefox-64.0.source.tar.xz.asc +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v2.0.14 (GNU/Linux) - -iQIcBAABCAAGBQJcCeLpAAoJELu+vbskxvNVG04QAKA6B6cBMdQIHAjxkIrWS9nQ -rprO4iQlLhI0OHVxc5aKpG2/dhA3QffmQ/PdlZQZ5Y4hKKyJhQYXeQC4I7aaUmND -FzEqEtdAkGLNInkcT4wdTs0qR8pTh5QpuM/wzUWUlpkJz5RKGN4aMCzG6Ls5ciKT -BBE153MHwCuIlE+dnlYfgOu4ljjqW/diHRFcUcg/hPK/twnPXzWszaJwWjjCfHcy -tMYqDKI+GEbUSVRdM9gWy6rEXTBJ9HhCRth2PVfH9WxAesGJFw34Q0sn1EYbkrKM -AiT+GKGJqNr/jbZMhOtiJJM1ORK2gGTnTDJnOHO0CXJKn6lYNQz/mBgrKK7Fr/L7 -9Dn27+ub7OM/XctfVsv02VMPKHSzh+81Eh/53ea1W/IK/BKzuXvx9kc3czzDuDHb -+e11gQepxi8RGIRiy+mzLga2mp0Y4ihddbaZXVqJBN9vPMAEm+50wjATOYpTWZya -JBs4XCIthJbzrOSEafqhZY6bJS7u4i2yKFmjscmf1S0AnETTE3v+ykWp3eX4UTcc -IQD8mlOMuV6vq1uEmGObdl9YUzhVA0N14jJwYW5x9MKqI14gg76VbN49mlFq7boq -EKilKGBsgDsdIgOuKjx6e4gkopnhxVwupaj0pNGNjp1qTvdZNqqp9oUUWWfaCM+L -pdlP7yJCMnBYjcU6fncZ -=wngo ------END PGP SIGNATURE----- diff --git a/firefox-65.0.source.tar.xz b/firefox-65.0.source.tar.xz new file mode 100644 index 0000000..d082cdd --- /dev/null +++ b/firefox-65.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:75b1b14605d63e8c83b60e0a4020cdb75b8671fb646959da865cbead0c2b466d +size 278317028 diff --git a/firefox-65.0.source.tar.xz.asc b/firefox-65.0.source.tar.xz.asc new file mode 100644 index 0000000..c41c44c --- /dev/null +++ b/firefox-65.0.source.tar.xz.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.14 (GNU/Linux) + +iQIcBAABCAAGBQJcSgmSAAoJELu+vbskxvNVUikQAK66ARnk4m24Ln7nX8hhmeON +o10g7HhoKSAJctMdL1W5l9MANe9yIwYwrjT1B2DXYMlOW7xEnZ7OGWTwnE4AdMha +V/no/t5/9JnUuvsqr61CmJpe378kLoLhgTfBkhvdLLqsrHlQwwHjfsKBRmHQD9J/ +MSQ3/R33b1x4ObGg4zBVcGb6XE3A9szO8eIBegLXl0EgZVvQ12f/HIz7/1rSXoRQ +T/J6TtUtqKAk9+oumqaAx1s3nqoTRDBF4B329n0om6iowMxTOMiyLvENLEUq0tiG +GQAsPWQIyifabe08vu03XrStAoeSCmzSnKzrzNA9rXmJBbHuNl3+c1LVYV82+Nyu +eSz29GNoCPzLPGgvAqKa6YKwpBpjZi+Ue1mBfjVcxyCyh4pwVlkANRIvkfEsTGtg +H09/xco5DtjvN+aZpNfDgzx8go7TtlSag4M1acWvUUzm+z8wUih6rdHJl2EHegZC +mBYpDhRZ5rbtM8A3ZLU61ZozP8dOJzOCdp8bZ8l4GkNCkCaGkAkwtcs9GRZKenKH +A1/INF8RQI4RUSfuhw5FA1rpx66ba83ZhG146cvYm89EjHSEepw2AQW1oaKY9raj +8tXxgx0DwpXp8eXiGmhwGKaIdEySdk8XolxrZW7u+ziBPVaZ2cvmfIyIjL5Fq4kr +3+LGOK8BXcHSyx2hrETN +=G3VV +-----END PGP SIGNATURE----- diff --git a/firefox-kde.patch b/firefox-kde.patch index be379b5..e2fc9d2 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent f2429084f187d5758508ae547c411943cba60fcf +# Parent 693f0baece29cc958a7d91b89fd12e3b89a502e3 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1384 @@ +@@ -0,0 +1,1395 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -81,6 +81,7 @@ new file mode 100644 + persist="screenX screenY width height sizemode" +#ifdef BROWSER_XHTML + hidden="true" ++ mozpersist="" +#endif + > + @@ -95,7 +96,22 @@ new file mode 100644 +#endif +> + Services.scriptloader.loadSubScript("chrome://global/content/contentAreaUtils.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-captivePortal.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-compacttheme.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-contentblocking.js", this); ++#ifdef MOZ_DATA_REPORTING ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-data-submission-info-bar.js", this); ++#endif ++#ifndef MOZILLA_OFFICIAL ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-development-helpers.js", this); ++#endif ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-media.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-pageActions.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-plugins.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-sidebar.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/browser-tabsintitlebar.js", this); + Services.scriptloader.loadSubScript("chrome://browser/content/tabbrowser.js", this); ++ Services.scriptloader.loadSubScript("chrome://browser/content/search/searchbar.js", this); + + window.onload = gBrowserInit.onLoad.bind(gBrowserInit); + window.onunload = gBrowserInit.onUnload.bind(gBrowserInit); @@ -152,6 +168,9 @@ new file mode 100644 + ++ + + @@ -262,13 +281,16 @@ new file mode 100644 + + + -+ + + ++ + + -+ ++ +