From 2ea3069057e565c25a5cfa6f3c1653cbf77cde05907bd77b852fe7efecab2676 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Tue, 26 Jan 2016 22:39:03 +0000 Subject: [PATCH] - update to Firefox 44.0 (boo#963520) * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 Miscellaneous memory safety hazards * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) Out of Memory crash when parsing GIF format images * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) Buffer overflow in WebGL after out of memory allocation * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) Firefox allows for control characters to be set in cookie names * MFSA 2016-06/CVE-2016-1937 (bmo#724353) Missing delay following user click events in protocol handler dialog * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) Errors in mp_div and mp_exptmod cryptographic functions in NSS (fixed by requiring NSS 3.21) * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590) Addressbar spoofing attacks * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946 (bmo#1186621, bmo#1214782, bmo#1232096) Unsafe memory manipulation found through code inspection * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) Application Reputation service disabled in Firefox 43 * requires NSPR 4.11 * requires NSS 3.21 - prepare mozilla-kde.patch for Gtk3 builds - rebased patches OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=480 --- MozillaFirefox.changes | 29 +++++++++++ MozillaFirefox.spec | 19 ++++--- compare-locales.tar.xz | 4 +- create-tar.sh | 4 +- firefox-43.0.4-source.tar.xz | 3 -- firefox-44.0-source.tar.xz | 3 ++ firefox-branded-icons.patch | 10 ++-- firefox-kde.patch | 94 ++++++++++++++++++++++------------- l10n-43.0.4.tar.xz | 3 -- l10n-44.0.tar.xz | 3 ++ mozilla-kde.patch | 40 +++++++-------- mozilla-language.patch | 4 +- mozilla-no-stdcxx-check.patch | 24 ++------- source-stamp.txt | 2 +- 14 files changed, 142 insertions(+), 100 deletions(-) delete mode 100644 firefox-43.0.4-source.tar.xz create mode 100644 firefox-44.0-source.tar.xz delete mode 100644 l10n-43.0.4.tar.xz create mode 100644 l10n-44.0.tar.xz diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 7cb6f8f..dca3192 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,32 @@ +------------------------------------------------------------------- +Sun Jan 24 09:33:15 UTC 2016 - wr@rosenauer.org + +- update to Firefox 44.0 (boo#963520) + * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 + Miscellaneous memory safety hazards + * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) + Out of Memory crash when parsing GIF format images + * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) + Buffer overflow in WebGL after out of memory allocation + * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) + Firefox allows for control characters to be set in cookie names + * MFSA 2016-06/CVE-2016-1937 (bmo#724353) + Missing delay following user click events in protocol handler dialog + * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) + Errors in mp_div and mp_exptmod cryptographic functions in NSS + (fixed by requiring NSS 3.21) + * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590) + Addressbar spoofing attacks + * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946 + (bmo#1186621, bmo#1214782, bmo#1232096) + Unsafe memory manipulation found through code inspection + * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) + Application Reputation service disabled in Firefox 43 + * requires NSPR 4.11 + * requires NSS 3.21 +- prepare mozilla-kde.patch for Gtk3 builds +- rebased patches + ------------------------------------------------------------------- Mon Jan 11 08:04:24 UTC 2016 - astieger@suse.com diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index be59cec..1073782 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -2,7 +2,7 @@ # spec file for package MozillaFirefox # # Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. -# 2006-2015 Wolfgang Rosenauer +# 2006-2016 Wolfgang Rosenauer # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,10 +18,10 @@ # changed with every update -%define major 43 -%define mainver %major.0.4 +%define major 44 +%define mainver %major.0 %define update_channel release -%define releasedate 2016010600 +%define releasedate 2016012300 # general build definitions %if "%{update_channel}" != "aurora" @@ -77,8 +77,8 @@ BuildRequires: libiw-devel BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo -BuildRequires: mozilla-nspr-devel >= 4.10.10 -BuildRequires: mozilla-nss-devel >= 3.20.2 +BuildRequires: mozilla-nspr-devel >= 4.11 +BuildRequires: mozilla-nss-devel >= 3.21 BuildRequires: nss-shared-helper-devel BuildRequires: python-devel BuildRequires: startup-notification-devel @@ -320,6 +320,9 @@ ac_add_options --sysconfdir=%{_sysconfdir} ac_add_options --mandir=%{_mandir} ac_add_options --includedir=%{_includedir} ac_add_options --enable-release +%if 0%{?suse_version} > 1320 +#ac_add_options --enable-default-toolkit=cairo-gtk3 +%endif %ifarch %ix86 %arm %if 0%{?suse_version} > 1230 ac_add_options --disable-optimize @@ -568,6 +571,10 @@ exit 0 %{progdir}/components/ %{progdir}/defaults/ %{progdir}/dictionaries/ +%if 0%{?suse_version} > 1320 +#%dir %{progdir}/gtk2 +#%{progdir}/gtk2/libmozgtk.so +%endif %{progdir}/webapprt/ %{progdir}/gmp-clearkey/ %attr(755,root,root) %{progdir}/%{progname}.sh diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 1dd6b8c..f736f20 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:c33238a571724750a2429fc48d56cf84b82a3bcae876b1e71b102aea4170120c -size 28624 +oid sha256:59988a3e83eb70d10eee27acc3f255f01cf35f45ad2eee70fc269655227172e0 +size 28356 diff --git a/create-tar.sh b/create-tar.sh index d31e58e..af58001 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_43_0_4_RELEASE" -VERSION="43.0.4" +RELEASE_TAG="FIREFOX_44_0_RELEASE" +VERSION="44.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-43.0.4-source.tar.xz b/firefox-43.0.4-source.tar.xz deleted file mode 100644 index d2f5eaf..0000000 --- a/firefox-43.0.4-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a4f3dbdc7063a6ef421cd9931e09bd099834933037b4cd173e028886619d6750 -size 185574652 diff --git a/firefox-44.0-source.tar.xz b/firefox-44.0-source.tar.xz new file mode 100644 index 0000000..d1eb905 --- /dev/null +++ b/firefox-44.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e4e4edcd14b74b35973af5b7615dc1dac5df71aee8c369a5956eedba0e614aed +size 191818888 diff --git a/firefox-branded-icons.patch b/firefox-branded-icons.patch index 508c3dc..dea926d 100644 --- a/firefox-branded-icons.patch +++ b/firefox-branded-icons.patch @@ -1,6 +1,6 @@ # HG changeset patch # Parent e0751ad74e835e80041a61ea00c2a63bf6fbe2de -# Parent dbca8a673de340999f67eb321169b44cc4109faf +# Parent e10e9bf6ab3a74655998bd0286d248f5d17a601a diff --git a/browser/app/Makefile.in b/browser/app/Makefile.in --- a/browser/app/Makefile.in @@ -21,12 +21,12 @@ diff --git a/browser/app/Makefile.in b/browser/app/Makefile.in +endif endif - ifndef LIBXUL_SDK # channel-prefs.js is handled separate from other prefs due to bug 756325 libs:: $(srcdir)/profile/channel-prefs.js $(NSINSTALL) -D $(DIST)/bin/defaults/pref $(call py_action,preprocessor,-Fsubstitution $(PREF_PPFLAGS) $(ACDEFINES) $^ -o $(DIST)/bin/defaults/pref/channel-prefs.js) - endif + + ifeq (cocoa,$(MOZ_WIDGET_TOOLKIT)) diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/branding-common.mozbuild --- a/browser/branding/branding-common.mozbuild +++ b/browser/branding/branding-common.mozbuild @@ -49,7 +49,7 @@ diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/brandi diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in --- a/browser/installer/package-manifest.in +++ b/browser/installer/package-manifest.in -@@ -669,18 +669,21 @@ +@@ -670,18 +670,21 @@ @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/icon.png @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf @RESPATH@/chrome/toolkit@JAREXT@ @@ -70,4 +70,4 @@ diff --git a/browser/installer/package-manifest.in b/browser/installer/package-m @RESPATH@/browser/chrome/webide.manifest @RESPATH@/browser/@PREF_DIR@/webide-prefs.js - ; shell icons + ; DevTools diff --git a/firefox-kde.patch b/firefox-kde.patch index 52c65d9..32b3694 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 3fedb882f767b2e4ff72ef972a9cce4c5d1af4af +# Parent 77c3bdc27160dfa96aa4b3288c7f12a72f273967 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1222 @@ +@@ -0,0 +1,1250 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -16,7 +16,7 @@ new file mode 100644 + + + -+ ++ + + + @@ -170,6 +170,7 @@ new file mode 100644 + popuponly menulist to be its immediate parent. --> +