diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index f04d6e6..b7c50b6 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,57 @@ +------------------------------------------------------------------- +Tue Jun 7 19:47:25 UTC 2016 - wr@rosenauer.org + +- update to Firefox 47.0 (boo#983549) + * Enable VP9 video codec for users with fast machines + * Embedded YouTube videos now play with HTML5 video if Flash is + not installed + * View and search open tabs from your smartphone or another + computer in a sidebar + * Allow no-cache on back/forward navigations for https resources + security fixes: + * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818 + (boo#983638) + (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743, + bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493, + bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752, + bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130, + bmo#1269729, bmo#1273202, bmo#1273701) + Miscellaneous memory safety hazards (rv:47.0 / rv:45.2) + * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381) + Buffer overflow parsing HTML5 fragments + * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460) + Use-after-free deleting tables from a contenteditable document + * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129) + Addressbar spoofing though the SELECT element + * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580) + Out-of-bounds write with WebGL shader + * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093) + Partial same-origin-policy through setting location.host + through data URI + * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810) + Use-after-free when textures are used in WebGL operations + after recycle pool destruction + * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329) + Incorrect icon displayed on permissions notifications + * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933) + Entering fullscreen and persistent pointerlock without user + permission + * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267) + Information disclosure of disabled plugins through CSS + pseudo-classes + * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933) + Java applets bypass CSP protections + * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283, + bmo#1221620, bmo#1241034, bmo#1241037) + Network Security Services (NSS) vulnerabilities + fixed by requiring NSS 3.23 + packaging changes: + * cleanup configure options (boo#981695): + - notably remove GStreamer support which is gone from FF + * remove obsolete patches + - mozilla-libproxy.patch + - mozilla-repo.patch + ------------------------------------------------------------------- Wed May 25 16:36:23 UTC 2016 - badshah400@gmail.com diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index 377a1e4..0afda59 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,10 +18,10 @@ # changed with every update -%define major 46 -%define mainver %major.0.1 +%define major 47 +%define mainver %major.0 %define update_channel release -%define releasedate 2016050300 +%define releasedate 20160606000000 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -44,12 +44,6 @@ %define __find_requires sh %{SOURCE4} %global provfind sh -c "grep -v '.so' | %__find_provides" %global __find_provides %provfind -%if 0%{?suse_version} > 1310 -%define gstreamer_ver 1.0 -%define gstreamer 1 -%else -%define gstreamer_ver 0.10 -%endif # Set up Google API keys, see http://www.chromium.org/developers/how-tos/api-keys # Note: these are for the openSUSE Firefox builds ONLY. For your own distribution, # please get your own set of keys. @@ -81,7 +75,7 @@ BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.12 -BuildRequires: mozilla-nss-devel >= 3.22.3 +BuildRequires: mozilla-nss-devel >= 3.23 BuildRequires: nss-shared-helper-devel BuildRequires: python-devel BuildRequires: startup-notification-devel @@ -90,9 +84,6 @@ BuildRequires: update-desktop-files BuildRequires: xorg-x11-libXt-devel BuildRequires: yasm BuildRequires: zip -BuildRequires: pkgconfig(gstreamer-%gstreamer_ver) -BuildRequires: pkgconfig(gstreamer-app-%gstreamer_ver) -BuildRequires: pkgconfig(gstreamer-plugins-base-%gstreamer_ver) BuildRequires: pkgconfig(libpulse) %if 0%{?firefox_use_gtk3} BuildRequires: pkgconfig(glib-2.0) @@ -100,26 +91,11 @@ BuildRequires: pkgconfig(gobject-2.0) BuildRequires: pkgconfig(gtk+-3.0) >= 3.4.0 BuildRequires: pkgconfig(gtk+-unix-print-3.0) %endif -# libavcodec is already used if available for H.264 but -# explicitely loaded by FF. For proper H.264 support the -# openSUSE delivered version is not sufficient but currently -# prevents even the use of the GStreamer method -# https://bugzilla.mozilla.org/show_bug.cgi?id=1234157 -# to get H.264 working correctly libavcodec from packman -# is required. As of today the following recommends will -# pull in libavcodec52 from packman since it's the only -# package providing libavcodec but it's not loaded from -# Firefox as the minimal version is 53 -#Recommends: libavcodec -%if 0%{?gstreamer} == 1 -Requires: libgstreamer-1_0-0 -Recommends: gstreamer-fluendo-mp3 -Recommends: gstreamer-plugins-libav -%else -Requires: libgstreamer-0_10-0 -Recommends: gstreamer-0_10-fluendo-mp3 -Recommends: gstreamer-0_10-plugins-ffmpeg -%endif +# libavcodec is required for H.264 support but the +# openSUSE version is currently not able to play H.264 +# therefore the Packman version is required +# minimum version of libavcodec is 53 +Recommends: libavcodec-full >= 0.10.16 Version: %{mainver} Release: 0 %if "%{name}" == "MozillaFirefox" @@ -165,15 +141,13 @@ Patch3: mozilla-kde.patch Patch4: mozilla-preferences.patch Patch5: mozilla-language.patch Patch6: mozilla-ntlm-full-path.patch -Patch7: mozilla-repo.patch Patch8: mozilla-openaes-decl.patch Patch10: mozilla-no-stdcxx-check.patch -Patch11: mozilla-libproxy.patch -Patch12: mozilla-reduce-files-per-UnifiedBindings.patch -Patch13: mozilla-gtk3_20.patch -Patch14: mozilla-check_return.patch -Patch15: mozilla-gcc6.patch -Patch16: mozilla-exclude-nametablecpp.patch +Patch11: mozilla-reduce-files-per-UnifiedBindings.patch +Patch12: mozilla-gtk3_20.patch +Patch13: mozilla-check_return.patch +Patch14: mozilla-gcc6.patch +Patch15: mozilla-exclude-nametablecpp.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-no-default-ualocale.patch @@ -279,17 +253,15 @@ cd $RPM_BUILD_DIR/mozilla %patch4 -p1 %patch5 -p1 %patch6 -p1 -%patch7 -p1 %patch8 -p1 %patch10 -p1 %patch11 -p1 -%patch12 -p1 %if 0%{?firefox_use_gtk3} -%patch13 -p1 +%patch12 -p1 %endif +%patch13 -p1 %patch14 -p1 %patch15 -p1 -%patch16 -p1 # Firefox %patch101 -p1 %patch102 -p1 @@ -308,7 +280,7 @@ if test "$kdehelperversion" != %{kde_helper_version}; then exit 1 fi source %{SOURCE5} -export MOZ_SOURCE_STAMP=$REV +export MOZ_SOURCE_CHANGESET=$REV export SOURCE_REPO=$REPO export source_repo=$REPO export MOZ_SOURCE_REPO=$REPO @@ -325,13 +297,11 @@ export CFLAGS="${CFLAGS/-g / }" # Limit RAM usage during link export LDFLAGS="${LDFLAGS} -Wl,--no-keep-memory -Wl,--reduce-memory-overheads" %endif - %if 0%{?build_hardened} %ifarch x86_64 export LDFLAGS="${LDFLAGS} -Wl,-z,relro,-z,now" %endif %endif - %ifarch ppc64 ppc64le export CFLAGS="$CFLAGS -mminimal-toc" %endif @@ -362,8 +332,8 @@ ac_add_options --enable-pie ac_add_options --disable-optimize %endif %endif -%ifnarch ppc ppc64 ppc64le aarch64 -ac_add_options --enable-elf-hack +%ifarch ppc ppc64 ppc64le aarch64 %arm +ac_add_options --disable-elf-hack %endif ac_add_options --with-system-nspr ac_add_options --with-system-nss @@ -373,16 +343,12 @@ ac_add_options --with-l10n-base=$RPM_BUILD_DIR/l10n #ac_add_options --with-system-jpeg # libjpeg-turbo is used internally #ac_add_options --with-system-png # doesn't work because of missing APNG support ac_add_options --with-system-zlib -ac_add_options --disable-installer ac_add_options --disable-updater ac_add_options --disable-tests ac_add_options --disable-debug ac_add_options --enable-startup-notification #ac_add_options --enable-chrome-format=jar ac_add_options --enable-update-channel=%{update_channel} -%if 0%{?gstreamer} == 1 -ac_add_options --enable-gstreamer=1.0 -%endif %if %branding ac_add_options --enable-official-branding %endif @@ -391,7 +357,6 @@ ac_add_options --enable-libproxy ac_add_options --disable-crashreporter %endif %ifarch %arm -ac_add_options --disable-elf-hack ac_add_options --with-fpu=vfpv3-d16 ac_add_options --with-float-abi=hard ac_add_options --with-arch=armv7-a diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 018e3f2..de293f1 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:2d9566f78b25b2af9028e7cfd2ada63ce5685ac8f80686751335dc2f5ddb7875 -size 28388 +oid sha256:c4152df4a9b9c731975f3805a2be896f2a5f5652f817564938867ee0aba6fbdc +size 28352 diff --git a/create-tar.sh b/create-tar.sh index de7805f..f920abd 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_46_0_1_RELEASE" -VERSION="46.0.1" +RELEASE_TAG="FIREFOX_47_0_RELEASE" +VERSION="47.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-46.0.1-source.tar.xz b/firefox-46.0.1-source.tar.xz deleted file mode 100644 index ef0107b..0000000 --- a/firefox-46.0.1-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:560ace25ca79f96377b4f0e3f52ca75d151555952051d7984442297391515ba9 -size 196701304 diff --git a/firefox-47.0-source.tar.xz b/firefox-47.0-source.tar.xz new file mode 100644 index 0000000..35c84eb --- /dev/null +++ b/firefox-47.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:7ccff7ad45fbce062caec6861ccdec4a819ce0491ffb49079cd11d3c774f5a5e +size 197750616 diff --git a/firefox-kde.patch b/firefox-kde.patch index 0f7a3b2..7fc90e7 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent fd5629206dcf3f64d85ab177be6bc6076f0f1619 +# Parent 4311c6bdf61ac317bc60b25cd89ff67662a75049 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1175 @@ +@@ -0,0 +1,1160 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -77,6 +77,8 @@ new file mode 100644 + +