From 5fcce29637745822154ede2fccb3268e890c7375426e901f6616bb6b4552a9e0 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Thu, 17 Dec 2015 00:06:36 +0000 Subject: [PATCH] - update to Firefox 43.0 (bnc#959277) * Improved API support for m4v video playback * Users can opt-in to receive search suggestions from the Awesome Bar * WebRTC streaming on multiple monitors * User selectable second block list for Private Browsing's Tracking Protection security fixes: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards * MFSA 2015-135/CVE-2015-7204 (bmo#1216130) Crash with JavaScript variable assignment with unboxed objects * MFSA 2015-136/CVE-2015-7207 (bmo#1185256) Same-origin policy violation using perfomance.getEntries and history navigation * MFSA 2015-137/CVE-2015-7208 (bmo#1191423) Firefox allows for control characters to be set in cookies * MFSA 2015-138/CVE-2015-7210 (bmo#1218326) Use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 (bmo#1222809) Integer overflow allocating extremely large textures * MFSA 2015-140/CVE-2015-7215 (bmo#1160890) Cross-origin information leak through web workers error events * MFSA 2015-141/CVE-2015-7211 (bmo#1221444) Hash in data URI is incorrectly parsed * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820) DOS due to malformed frames in HTTP/2 * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078) Linux file chooser crashes on malformed images due to flaws in Jasper library OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=473 --- MozillaFirefox.changes | 49 ++++++++ MozillaFirefox.spec | 4 +- compare-locales.tar.xz | 4 +- create-tar.sh | 4 +- firefox-42.0-source.tar.xz | 3 - firefox-43.0-source.tar.xz | 3 + firefox-kde.patch | 239 +++++++++++++++---------------------- l10n-42.0.tar.xz | 3 - l10n-43.0.tar.xz | 3 + mozilla-bmo1005535.patch | 152 +++++++++++++++++++++++ mozilla-kde.patch | 20 ++-- mozilla-repo.patch | 8 +- source-stamp.txt | 2 +- 13 files changed, 323 insertions(+), 171 deletions(-) delete mode 100644 firefox-42.0-source.tar.xz create mode 100644 firefox-43.0-source.tar.xz delete mode 100644 l10n-42.0.tar.xz create mode 100644 l10n-43.0.tar.xz create mode 100644 mozilla-bmo1005535.patch diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 735b44a..ab6ce45 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,52 @@ +------------------------------------------------------------------- +Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org + +- update to Firefox 43.0 (bnc#959277) + * Improved API support for m4v video playback + * Users can opt-in to receive search suggestions from the Awesome Bar + * WebRTC streaming on multiple monitors + * User selectable second block list for Private Browsing's Tracking + Protection + security fixes: + * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 + Miscellaneous memory safety hazards + * MFSA 2015-135/CVE-2015-7204 (bmo#1216130) + Crash with JavaScript variable assignment with unboxed objects + * MFSA 2015-136/CVE-2015-7207 (bmo#1185256) + Same-origin policy violation using perfomance.getEntries and + history navigation + * MFSA 2015-137/CVE-2015-7208 (bmo#1191423) + Firefox allows for control characters to be set in cookies + * MFSA 2015-138/CVE-2015-7210 (bmo#1218326) + Use-after-free in WebRTC when datachannel is used after being + destroyed + * MFSA 2015-139/CVE-2015-7212 (bmo#1222809) + Integer overflow allocating extremely large textures + * MFSA 2015-140/CVE-2015-7215 (bmo#1160890) + Cross-origin information leak through web workers error events + * MFSA 2015-141/CVE-2015-7211 (bmo#1221444) + Hash in data URI is incorrectly parsed + * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820) + DOS due to malformed frames in HTTP/2 + * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078) + Linux file chooser crashes on malformed images due to flaws in + Jasper library + * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221 + (bmo#1201183, bmo#1178033, bmo#1199400) + Buffer overflows found through code inspection + * MFSA 2015-145/CVE-2015-7205 (bmo#1220493) + Underflow through code inspection + * MFSA 2015-146/CVE-2015-7213 (bmo#1206211) + Integer overflow in MP4 playback in 64-bit versions + * MFSA 2015-147/CVE-2015-7222 (bmo#1216748) + Integer underflow and buffer overflow processing MP4 metadata in + libstagefright + * MFSA 2015-148/CVE-2015-7223 (bmo#1226423) + Privilege escalation vulnerabilities in WebExtension APIs + * MFSA 2015-149/CVE-2015-7214 (bmo#1228950) + Cross-site reading attack through data and view-source URIs +- rebased patches + ------------------------------------------------------------------- Sun Nov 15 19:52:20 UTC 2015 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index d073789..a623399 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,10 +18,10 @@ # changed with every update -%define major 42 +%define major 43 %define mainver %major.0 %define update_channel release -%define releasedate 2015103000 +%define releasedate 2015121300 # general build definitions %if "%{update_channel}" != "aurora" diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index edcb6e7..88a88b5 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:5369d055695e4fd6757541f3951eea4e581c14d0886b974b0254189b958e43dd -size 28400 +oid sha256:bd4f98f3d7ed94b9a840f7090e3dbc2d1d9b798835dfe2a47cc9028e7222efa4 +size 28416 diff --git a/create-tar.sh b/create-tar.sh index 5c59593..cdfad80 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_42_0_RELEASE" -VERSION="42.0" +RELEASE_TAG="FIREFOX_43_0_RELEASE" +VERSION="43.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-42.0-source.tar.xz b/firefox-42.0-source.tar.xz deleted file mode 100644 index 635e3cb..0000000 --- a/firefox-42.0-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:dc36edb9dbff3bd40b9570a248b777e4222fd234581f779f9e0932e34e60309d -size 174319672 diff --git a/firefox-43.0-source.tar.xz b/firefox-43.0-source.tar.xz new file mode 100644 index 0000000..ec24fea --- /dev/null +++ b/firefox-43.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:78c2be9ecbf3017cc26a56e5fc148d2ee03c4023242e3f6b41e487e6ab1a2202 +size 185216796 diff --git a/firefox-kde.patch b/firefox-kde.patch index cc7aca6..52c65d9 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 95b421ca30846be2b5d7230d72263e6dff042d0b +# Parent 3fedb882f767b2e4ff72ef972a9cce4c5d1af4af diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1234 @@ +@@ -0,0 +1,1222 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -91,6 +91,7 @@ new file mode 100644 + onpopuphidden="if (event.target == this) TabContextMenu.contextTab = null;"> + ++ + +