diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 7bc26e8e..19b69629 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,88 @@ +------------------------------------------------------------------- +Sun May 19 20:40:30 UTC 2019 - Wolfgang Rosenauer + +- Mozilla Firefox 67.0 + * Firefox 67 will be able to run different Firefox installs side by side + https://blog.nightly.mozilla.org/2019/01/14/moving-to-a-profile-per-install-architecture/ + * Tabs can now be pinned from the Page Actions menu in the address bar + * Users can block known cryptominers and fingerprinters in the + Custom settings or their Content Blocking preferences + * The Import Data from Another Browser feature is now also available + from the File menu + * Firefox will now protect you against running older versions which + can lead to data corruption and stability issues + * Easier access to your list of saved logins from the main menu and + login autocomplete + * We’ve added a toolbar menu for your Firefox Account to provide more + transparency for when you are synced, sharing data across devices + and with Firefox. Personalize the appearance of the menu with your + own avatar + * Enable FIDO U2F API, and permit registrations for Google Accounts + * Enabled AV1 support on Linux + MFSA 2019-13 + * CVE-2019-9815 (bmo#1546544) + Disable hyperthreading on content JavaScript threads on macOS + * CVE-2019-9816 (bmo#1536768) + Type confusion with object groups and UnboxedObjects + * CVE-2019-9817 (bmo#1540221) + Stealing of cross-domain images using canvas + * CVE-2019-9818 (bmo#1542581) (Windows only) + Use-after-free in crash generation server + * CVE-2019-9819 (bmo#1532553) + Compartment mismatch with fetch API + * CVE-2019-9820 (bmo#1536405) + Use-after-free of ChromeEventHandler by DocShell + * CVE-2019-9821 (bmo#1539125) + Use-after-free in AssertWorkerThread + * CVE-2019-11691 (bmo#1542465) + Use-after-free in XMLHttpRequest + * CVE-2019-11692 (bmo#1544670) + Use-after-free removing listeners in the event listener manager + * CVE-2019-11693 (bmo#1532525) + Buffer overflow in WebGL bufferdata on Linux + * CVE-2019-7317 (bmo#1542829) + Use-after-free in png_image_free of libpng library + * CVE-2019-11694 (bmo#1534196) (Windows only) + Uninitialized memory memory leakage in Windows sandbox + * CVE-2019-11695 (bmo#1445844) + Custom cursor can render over user interface outside of web content + * CVE-2019-11696 (bmo#1392955) + Java web start .JNLP files are not recognized as executable files + for download prompts + * CVE-2019-11697 (bmo#1440079) + Pressing key combinations can bypass installation prompt delays and + install extensions + * CVE-2019-11698 (bmo#1543191) + Theft of user history data through drag and drop of hyperlinks + to and from bookmarks + * CVE-2019-11700 (bmo#1549833) (Windows only) + res: protocol can be used to open known local files + * CVE-2019-11699 (bmo#1528939) + Incorrect domain name highlighting during page navigation + * CVE-2019-11701 (bmo#1518627) + webcal: protocol default handler loads vulnerable web page + * CVE-2019-9814 (bmo#1527592, bmo#1534536, bmo#1520132, bmo#1543159, + bmo#1539393, bmo#1459932, bmo#1459182, bmo#1516425) + Memory safety bugs fixed in Firefox 67 + * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136, + bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108, + bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097, + bmo#1532465, bmo#1533554, bmo#1541580) + Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 +- requires + * rust/cargo >= 1.32 + * mozilla-nspr >= 4.21 + * mozilla-nss >= 3.43 + * rust-cbindgen >= 0.8.2 +- rebased patches +- KDE integration for default browser detection is broken in this revision + +------------------------------------------------------------------- +Fri May 17 12:04:49 UTC 2019 - Guillaume GARDET + +- Fix armv7 build with: + * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch + ------------------------------------------------------------------- Fri May 10 10:30:05 UTC 2019 - Manfred Hollstein diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index 8a85804a..807a950f 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,13 +18,13 @@ # changed with every update -%define major 66 -%define mainver %major.0.5 -%define orig_version 66.0.5 +%define major 67 +%define mainver %major.0 +%define orig_version 67.0 %define orig_suffix %{nil} %define update_channel release %define branding 1 -%define releasedate 20190507012018 +%define releasedate 20190516215225 %define source_prefix firefox-%{orig_version} # always build with GCC as SUSE Security Team requires that @@ -69,7 +69,7 @@ BuildRequires: gcc7-c++ %else BuildRequires: gcc-c++ %endif -BuildRequires: cargo >= 1.31 +BuildRequires: cargo >= 1.32 BuildRequires: libXcomposite-devel BuildRequires: libcurl-devel BuildRequires: libidl-devel @@ -77,15 +77,15 @@ BuildRequires: libiw-devel BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo -BuildRequires: mozilla-nspr-devel >= 4.20 -BuildRequires: mozilla-nss-devel >= 3.42.1 +BuildRequires: mozilla-nspr-devel >= 4.21 +BuildRequires: mozilla-nss-devel >= 3.43 BuildRequires: nasm >= 2.13 BuildRequires: nodejs >= 8.11 BuildRequires: python-devel BuildRequires: python2-xml BuildRequires: python3 >= 3.5 -BuildRequires: rust >= 1.31 -BuildRequires: rust-cbindgen >= 0.6.8 +BuildRequires: rust >= 1.32 +BuildRequires: rust-cbindgen >= 0.8.2 BuildRequires: startup-notification-devel BuildRequires: unzip BuildRequires: update-desktop-files @@ -164,6 +164,7 @@ Patch7: mozilla-aarch64-startup-crash.patch Patch9: mozilla-bmo1463035.patch Patch10: mozilla-cubeb-noreturn.patch Patch11: mozilla-fix-aarch64-libopus.patch +Patch12: mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-branded-icons.patch @@ -271,6 +272,7 @@ cd $RPM_BUILD_DIR/%{source_prefix} %patch9 -p1 %patch10 -p1 %patch11 -p1 +%patch12 -p1 # Firefox %patch101 -p1 %patch102 -p1 diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 6f334709..e395906d 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:39b8275de1d7cf4720ea37c183581eec2a610778d01a92c2b4a58ffc71447343 -size 28528 +oid sha256:2d18ee29e0ff9f57d7da75911beb1c02837872deacdf2ac3f586c5f2254f80d2 +size 28376 diff --git a/create-tar.sh b/create-tar.sh index e671e252..fbbf6922 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="96d2576eae4baf0aa961b4f5a1dadd26bb8ee823" -VERSION="66.0.5" +RELEASE_TAG="2a7896ba9aa5d982abe01f859d771d411fda8101" +VERSION="67.0" VERSION_SUFFIX="" LOCALE_FILE="firefox-$VERSION/browser/locales/l10n-changesets.json" diff --git a/firefox-66.0.5.source.tar.xz b/firefox-66.0.5.source.tar.xz deleted file mode 100644 index d29dd37e..00000000 --- a/firefox-66.0.5.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a2aeb4e036d1365a2d2550e24ba8b4dde061281300f2b11a204cc1e9eb1792b5 -size 282561836 diff --git a/firefox-66.0.5.source.tar.xz.asc b/firefox-66.0.5.source.tar.xz.asc deleted file mode 100644 index 118a01af..00000000 --- a/firefox-66.0.5.source.tar.xz.asc +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v2.0.14 (GNU/Linux) - -iQIcBAABCAAGBQJc0Y7NAAoJELu+vbskxvNVq90QAInN1gfX7+MALy9XMPgGmtvL -SsSHx1y+I1CVXXb9dkUQ+2+omqLXhYbxzDl8/fknoiiKlDvmyO3RE9Sxc3t0OgWq -oCdqJynV2IuWv9QGVczDtP790FVV+of4LQiGsWgPGJTGWsUUhPmwziXGmj9Eie0A -8nZlNWB5lxz/7f8JofapzXkbM3nQRsKf41/xDQcHQ+j9OCPqlItAZtL2Tieh/kH+ -v54gLH+H8v/4hh7q27PokBx7w7zqnK/F1xRsxIuTF0GXPMTAYOK/pvNst/5MKYyE -wVdQOATSYSnrBPqtBJx/UBGYL+5+RxRZFmxYS0gXfckPFVtWv601PtRjBKs7jGfN -8oPPnMZJPqq4S2y9xcpUyzBQDASxTccT7rMvSL34f2NUMRzyufN3R1ob/Dq9hqee -siDJ20JCTTzgH/pLmR2Ve3vE07uE7vQNXg+QShV/ViTQr28FRjXfTl6BW5N6jpsv -vpnBoasmzwX8CE5bTIexxoRhmwBDbGsN9Ii+VLgDOCdJRr/EC791HPsCRq8xBTx/ -+07y/1CEJ6xZUIFtv4CNUvQc7mgz5a63dG24sxn5xIzVLS0tYziVqNU5PEJmBH93 -90axZKvYlKCfiimLpNJloGC8b6XNdREvF4Uz90W2Pc6bD+o95jSCUNMaBzmtMUTA -8r2Jo2OEcKL2TZnr7hjo -=Yxmu ------END PGP SIGNATURE----- diff --git a/firefox-67.0.source.tar.xz b/firefox-67.0.source.tar.xz new file mode 100644 index 00000000..0f77f290 --- /dev/null +++ b/firefox-67.0.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2cb937db00e35162393aa5b65d1f2280be1e62d5ee33d3e9997cccba542d791b +size 282874008 diff --git a/firefox-67.0.source.tar.xz.asc b/firefox-67.0.source.tar.xz.asc new file mode 100644 index 00000000..bb19c17f --- /dev/null +++ b/firefox-67.0.source.tar.xz.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.14 (GNU/Linux) + +iQIcBAABCAAGBQJc3gPQAAoJELu+vbskxvNV/5gP/2Z++c31MwW4nb2wFCYwipP0 +WzZYVaKheVmgjgHsTQZUQMD2OoyyX231KuVvAqctr7R2p5jtk2nz3I6nN8g8uMm4 +M2Pj7qWKdboCpuPV+TpdzoBI/Grz0A26qUzont4BdsUItrIhvXZyxiEjFbAfq25T +q+A8XRHduW7z1R4ouUiJXT65I4p8P35sAOpAAuunvakxNcZRcStpAxyPrK2C/G0M +5LDFK8Vaqom8QT0h3OMp1T43nHDNRgwtMpWseKkooIJulBywTsyEqoUgzUBxBVxQ +zcOLRrifdW31/q/UeOTJJnkpx94ghCfBvyux3yVHnLKHhJl2Zv/MDNj4Tn6BI2jA +cLIdCulqQJH02jZDgHbjInDRQCnypPaNeI70+dJDSEJV+ybffqMBqpyu4jhR0YQ/ +YzaCLxqgl7NLo/2hMkoGdS70V00sene+RRpn/F00H/b9dIHuD4rxeJaI26zVhlVv +hdVJEclKiSZKhhGoI0S30CZDLA0V8KwyBt3Rhd6L3BySeODHCWLdqhqBazmfzNW0 +XJCwALO6/9+H2Y5hEH1gAR0/kWsHJYJ32jhLLjk4Gv2BsyYhc2kcaY739PPmRk4K +aUC+TEmou88292MfvgTB2ywnySro1it30ehCduGO+NrGxMLS/Qk7z7fORVU0Y/x2 +M/5e60ftt5bpCkJODxfR +=cYrK +-----END PGP SIGNATURE----- diff --git a/firefox-kde.patch b/firefox-kde.patch index 962ddd04..687fb2ea 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 87262204aa945e6fce864193d103a93659bf76f6 +# Parent 18632e53d0b0c4c03f254ca2dbbeac8f48ec6f5c diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1408 @@ +@@ -0,0 +1,1404 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -80,7 +80,6 @@ new file mode 100644 + retargetdocumentfocus="urlbar" + persist="screenX screenY width height sizemode" +#ifdef BROWSER_XHTML -+ hidden="true" + mozpersist="" +#endif + > @@ -90,11 +89,7 @@ new file mode 100644 +# that they can be shared with macWindow.inc.xul. +#include global-scripts.inc + -+