- update to Firefox 59.0

* Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=636

MozillaFirefox.changes

@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Sun Mar 11 22:12:12 UTC 2018 - wr@rosenauer.org
+
+- update to Firefox 59.0
+  * Performance enhancements
+  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
+  * added features for Firefox Screenshots
+  * Enhanced WebExtensions API
+  * Improved RTC capabilities
+  MFSA 2018-06 (bsc#1085130)
+  * CVE-2018-5127 (bmo#1430557)
+    Buffer overflow manipulating SVG animatedPathSegList
+  * CVE-2018-5128 (bmo#1431336)
+    Use-after-free manipulating editor selection ranges
+  * CVE-2018-5129 (bmo#1428947)
+    Out-of-bounds write with malformed IPC messages
+  * CVE-2018-5130 (bmo#1433005)
+    Mismatched RTP payload type can trigger memory corruption
+  * CVE-2018-5131 (bmo#1440775)
+    Fetch API improperly returns cached copies of no-store/no-cache resources
+  * CVE-2018-5132 (bmo#1408194)
+    WebExtension Find API can search privileged pages
+  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
+    Value of the app.support.baseURL preference is not properly sanitized
+  * CVE-2018-5134 (bmo#1429379)
+    WebExtensions may use view-source: URLs to bypass content restrictions
+  * CVE-2018-5135 (bmo#1431371)
+    WebExtension browserAction can inject scripts into unintended contexts
+  * CVE-2018-5136 (bmo#1419166)
+    Same-origin policy violation with data: URL shared workers
+  * CVE-2018-5137 (bmo#1432870)
+    Script content can access legacy extension non-contentaccessible resources
+  * CVE-2018-5138 (bmo#1432624) (Android only)
+    Android Custom Tab address spoofing through long domain names
+  * CVE-2018-5140 (bmo#1424261)
+    Moz-icon images accessible to web content through moz-icon: protocol
+  * CVE-2018-5141 (bmo#1429093)
+    DOS attack through notifications Push API
+  * CVE-2018-5142 (bmo#1366357)
+    Media Capture and Streams API permissions display incorrect origin
+    with data: and blob: URLs
+  * CVE-2018-5143 (bmo#1422643)
+    Self-XSS pasting javascript: URL with embedded tab into addressbar
+  * CVE-2018-5126
+    Memory safety bugs fixed in Firefox 59
+  * CVE-2018-5125
+    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
+- requires NSPR 4.18 and NSS 3.35
+- requires rust >= 1.22.1
+- removed obsolete patches:
+  mozilla-alsa-sandbox.patch
+  mozilla-enable-csd.patch
+  firefox-no-default-ualocale.patch
+- removed l10n_changesets.txt since same information is now in
+  Firefox source tree (updated create-tar.sh now requires jq)
+
 -------------------------------------------------------------------
 Fri Feb  9 13:37:46 UTC 2018 - astieger@suse.com
 
@@ -25,7 +81,7 @@ Mon Jan 29 22:32:21 UTC 2018 - wr@rosenauer.org
 
 - update to Firefox 58.0.1
   MFSA 2018-05
-  *  Arbitrary code execution through unsanitized browser UI (bmo#1432966)
+  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
 - use correct language packs
 - readd mozilla-enable-csd.patch as it only lands for FF59 upstream
 - allow larger number of nested elements (mozilla-bmo256180.patch)

MozillaFirefox.spec

@@ -18,11 +18,11 @@
 
 
 # changed with every update
-%define major 58
+%define major 59
-%define mainver %major.0.2
+%define mainver %major.0
 %define update_channel release
 %define branding 1
-%define releasedate 20180207000000
+%define releasedate 20180310025718
 
 # PIE, full relro (x86_64 for now)
 %define build_hardened 1
@@ -70,11 +70,11 @@ BuildRequires:  libiw-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
-BuildRequires:  mozilla-nspr-devel >= 4.17
+BuildRequires:  mozilla-nspr-devel >= 4.18
-BuildRequires:  mozilla-nss-devel >= 3.34.1
+BuildRequires:  mozilla-nss-devel >= 3.35
 BuildRequires:  python-devel
 BuildRequires:  python2-xml
-BuildRequires:  rust >= 1.21
+BuildRequires:  rust >= 1.22.1
 BuildRequires:  rust-std
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip
@@ -136,7 +136,6 @@ Source13:       spellcheck.js
 Source14:       create-tar.sh
 Source15:       firefox-appdata.xml
 Source16:       MozillaFirefox.changes
-Source17:       l10n_changesets.txt
 # Set up API keys, see http://www.chromium.org/developers/how-tos/api-keys
 # Note: these are for the openSUSE Firefox builds ONLY. For your own distribution,
 # please get your own set of keys.
@@ -150,13 +149,10 @@ Patch4:         mozilla-openaes-decl.patch
 Patch5:         mozilla-no-stdcxx-check.patch
 Patch6:         mozilla-reduce-files-per-UnifiedBindings.patch
 Patch7:         mozilla-aarch64-startup-crash.patch
-Patch8:         mozilla-enable-csd.patch
+Patch8:         mozilla-bmo256180.patch
-Patch9:         mozilla-bmo256180.patch
-Patch10:        mozilla-alsa-sandbox.patch
 # Firefox/browser
 Patch101:       firefox-kde.patch
-Patch102:       firefox-no-default-ualocale.patch
+Patch102:       firefox-branded-icons.patch
-Patch103:       firefox-branded-icons.patch
 
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Requires(post):   coreutils shared-mime-info desktop-file-utils
@@ -264,12 +260,9 @@ cd $RPM_BUILD_DIR/mozilla
 %endif
 %patch7 -p1
 %patch8 -p1
-%patch9 -p1
-%patch10 -p1
 # Firefox
 %patch101 -p1
 %patch102 -p1
-%patch103 -p1
 
 %build
 # no need to add build time to binaries
@@ -404,7 +397,7 @@ install -m 644 %{SOURCE9} %{buildroot}%{progdir}/browser/defaults/preferences/fi
 %if %localize
 rm -f %{_tmppath}/translations.*
 touch %{_tmppath}/translations.{common,other}
-for locale in $(awk '{ print $1; }' %{SOURCE17}); do
+for locale in $(cat $RPM_BUILD_DIR/mozilla/browser/locales/shipped-locales) ; do
   case $locale in
    ja-JP-mac|en-US|'')
 	;;
@@ -475,10 +468,10 @@ cp %{SOURCE11} %{buildroot}%{_mandir}/man1/%{progname}.1
 mkdir -p %{buildroot}%{_datadir}/mozilla/extensions/%{firefox_appid}
 mkdir -p %{buildroot}%{_libdir}/mozilla/extensions/%{firefox_appid}
 mkdir -p %{buildroot}/usr/share/pixmaps/
-ln -sf %{progdir}/browser/icons/mozicon128.png %{buildroot}/usr/share/pixmaps/%{progname}.png
+ln -sf %{progdir}/browser/chrome/icons/default/default128.png %{buildroot}/usr/share/pixmaps/%{progname}.png
-ln -sf %{progdir}/browser/icons/mozicon128.png %{buildroot}/usr/share/pixmaps/%{progname}-gnome.png
+ln -sf %{progdir}/browser/chrome/icons/default/default128.png %{buildroot}/usr/share/pixmaps/%{progname}-gnome.png
 %if %branding
-for size in 16 22 24 32 48 256; do
+for size in 16 22 24 32 48 64 128 256; do
 %else
 for size in 16 32 48; do
 %endif
@@ -566,7 +559,6 @@ exit 0
 %dir %{progdir}/browser/extensions/
 %{progdir}/browser/defaults
 %{progdir}/browser/features/
-%{progdir}/browser/icons/
 %{progdir}/browser/chrome/icons
 %{progdir}/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
 %{progdir}/browser/blocklist.xml
@@ -585,7 +577,7 @@ exit 0
 %{progdir}/application.ini
 %{progdir}/chrome.manifest
 %{progdir}/dependentlibs.list
-%{progdir}/icudt59l.dat
+%{progdir}/icudt*.dat
 %{progdir}/*.so
 %{progdir}/omni.ja
 %{progdir}/fonts/

compare-locales.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:b2528402c5a3381c83db0116efe05064251b57a7597ef936d3d831b57b2870b3
+oid sha256:d862283072ef0cda760c0566d6aa8d3dc350ff6f273f4429b296fe9636127688
-size 28816
+size 28372

create-tar.sh

@@ -7,8 +7,13 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_58_0_2_RELEASE"
+RELEASE_TAG="c61f5f5ead48c78a80c80db5c489bdc7cfaf8175"
-VERSION="58.0.2"
+VERSION="59.0"
+
+# check required tools
+test -x /usr/bin/hg || ( echo "hg missing: execute zypper in mercurial"; exit 5 )
+test -x /usr/bin/jq || ( echo "jq missing: execute zypper in jq"; exit 5 )
+
 
 # mozilla
 if [ -d mozilla ]; then
@@ -54,19 +59,19 @@ tar $compression -cf firefox-$VERSION-source.tar.xz --exclude=.hgtags --exclude=
 # l10n
 echo "fetching locales..."
 test ! -d l10n && mkdir l10n
-for locale in $(awk '{ print $1; }' l10n_changesets.txt); do
+jq -r 'to_entries[]| "\(.key) \(.value|.revision)"' mozilla/browser/locales/l10n-changesets.json | \
-  case $locale in
+  while read locale changeset ; do
-    ja-JP-mac|en-US)
+    case $locale in
-      ;;
+      ja-JP-mac|en-US)
-    *)
+        ;;
-      echo "reading changeset information for $locale"
+      *)
-      _changeset=$(grep ^$locale l10n_changesets.txt | awk '{ print $2; }')
+        echo "reading changeset information for $locale"
-      echo "fetching $locale changeset $_changeset ..."
+        echo "fetching $locale changeset $changeset ..."
-      hg clone http://hg.mozilla.org/l10n-central/$locale l10n/$locale
+        hg clone http://hg.mozilla.org/l10n-central/$locale l10n/$locale
-      [ "$RELEASE_TAG" == "default" ] || hg -R l10n/$locale up -C -r $_changeset
+        [ "$RELEASE_TAG" == "default" ] || hg -R l10n/$locale up -C -r $changeset
-      ;;
+        ;;
-  esac
+    esac
-done
+  done
 echo "creating l10n archive..."
 tar $compression -cf l10n-$VERSION.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg l10n
 

firefox-58.0.2-source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4dda38d4eea0b9be6ee116cb304e43d1fdfcf74a32dfcad56068c50255665eb2
-size 274076776

firefox-59.0-source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1b8050ac93c9fff4858e2e616a251c65dd34b63d409023bc09a0b613a7f09659
+size 262740492

firefox-branded-icons.patch

@@ -1,39 +1,30 @@
 # HG changeset patch
 # Parent e0751ad74e835e80041a61ea00c2a63bf6fbe2de
-# Parent  75308bbaaf73d672c88cb283591d4aefc7db9804
+# Parent  38e46d7f98d3e392de95d83660ecd147b30dc9aa
 
 diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/branding-common.mozbuild
 --- a/browser/branding/branding-common.mozbuild
 +++ b/browser/branding/branding-common.mozbuild
-@@ -38,18 +38,24 @@ def FirefoxBranding():
+@@ -17,12 +17,15 @@ def FirefoxBranding():
-             'disk.icns',
+         FINAL_TARGET_FILES.VisualElements += [
-             'document.icns',
+             'VisualElements_150.png',
-             'dsstore',
+             'VisualElements_70.png',
-             'firefox.icns',
          ]
      elif 'gtk' in CONFIG['MOZ_WIDGET_TOOLKIT']:
-         BRANDING_FILES += [
-             'default16.png',
-+            'default22.png',
-+            'default24.png',
-+            'default256.png',
-             'default32.png',
-             'default48.png',
-             'mozicon128.png',
-         ]
-         FINAL_TARGET_FILES.icons += ['mozicon128.png']
          FINAL_TARGET_FILES.chrome.icons.default += [
+             'default128.png',
              'default16.png',
-+            'default22.png',
++	    'default22.png',
-+            'default24.png',
++	    'default24.png',
-+            'default256.png',
++	    'default256.png',
              'default32.png',
              'default48.png',
+             'default64.png',
          ]
 diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in
 --- a/browser/installer/package-manifest.in
 +++ b/browser/installer/package-manifest.in
-@@ -618,18 +618,21 @@
+@@ -601,20 +601,23 @@
  @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/chrome.manifest
  @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf
  @RESPATH@/chrome/toolkit@JAREXT@
@@ -46,6 +37,8 @@ diff --git a/browser/installer/package-manifest.in b/browser/installer/package-m
 +@RESPATH@/browser/chrome/icons/default/default24.png
  @RESPATH@/browser/chrome/icons/default/default32.png
  @RESPATH@/browser/chrome/icons/default/default48.png
+ @RESPATH@/browser/chrome/icons/default/default64.png
+ @RESPATH@/browser/chrome/icons/default/default128.png
 +@RESPATH@/browser/chrome/icons/default/default256.png
  #endif
  @RESPATH@/browser/features/*

firefox-kde.patch

@@ -1,11 +1,11 @@
 # HG changeset patch
-# Parent  89cbe8c49d05965b87815143d1944ab6964f12c7
+# Parent  ffcd96e120857e207bd357b2005f0b5bc776e375
 
 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul
 new file mode 100644
 --- /dev/null
 +++ b/browser/base/content/browser-kde.xul
-@@ -0,0 +1,1248 @@
+@@ -0,0 +1,1238 @@
 +#filter substitution
 +<?xml version="1.0"?>
 +# -*- Mode: HTML -*-
@@ -286,26 +286,26 @@ new file mode 100644
 +                     key="viewBookmarksSidebarKb"
 +                     observes="viewBookmarksSidebar"
 +                     oncommand="SidebarUI.show('viewBookmarksSidebar');">
-+         <observes element="viewBookmarksSidebar" attribute="checked"/>
++        <observes element="viewBookmarksSidebar" attribute="checked"/>
-+       </toolbarbutton>
++      </toolbarbutton>
 +      <toolbarbutton id="sidebar-switcher-history"
 +                     label="&historyButton.label;"
 +                     class="subviewbutton subviewbutton-iconic"
 +                     key="key_gotoHistory"
 +                     observes="viewHistorySidebar"
 +                     oncommand="SidebarUI.show('viewHistorySidebar');">
-+         <observes element="viewHistorySidebar" attribute="checked"/>
++        <observes element="viewHistorySidebar" attribute="checked"/>
-+       </toolbarbutton>
++      </toolbarbutton>
 +      <toolbarbutton id="sidebar-switcher-tabs"
 +                     label="&syncedTabs.sidebar.label;"
 +                     class="subviewbutton subviewbutton-iconic"
 +                     observes="viewTabsSidebar"
 +                     oncommand="SidebarUI.show('viewTabsSidebar');">
-+         <observes element="viewTabsSidebar" attribute="checked"/>
++        <observes element="viewTabsSidebar" attribute="checked"/>
-+       </toolbarbutton>
++      </toolbarbutton>
-+      <toolbarseparator/>
-+      <vbox id="sidebar-extensions"></vbox>
 +      <toolbarseparator/>
++      <!-- Extension toolbarbuttons go here. -->
++      <toolbarseparator id="sidebar-extensions-separator"/>
 +      <toolbarbutton id="sidebar-reverse-position"
 +                     class="subviewbutton"
 +                     oncommand="SidebarUI.reversePosition()"/>
@@ -425,15 +425,15 @@ new file mode 100644
 +           emailLink-title="&emailPageCmd.label;"
 +           sendToDevice-title="&pageAction.sendTabToDevice.label;"
 +           sendToDevice-notReadyTitle="&sendToDevice.syncNotReady.label;">
-+      <photonpanelmultiview id="pageActionPanelMultiView"
++      <panelmultiview id="pageActionPanelMultiView"
-+                            mainViewId="pageActionPanelMainView"
++                      mainViewId="pageActionPanelMainView"
-+                            viewCacheId="appMenu-viewCache">
++                      viewCacheId="appMenu-viewCache">
 +        <panelview id="pageActionPanelMainView"
 +                   context="pageActionContextMenu"
 +                   class="PanelUI-subView">
 +          <vbox class="panel-subview-body"/>
 +        </panelview>
-+      </photonpanelmultiview>
++      </panelmultiview>
 +    </panel>
 +    <panel id="pageActionFeedback"
 +           role="alert"
@@ -444,7 +444,8 @@ new file mode 100644
 +           tabspecific="true"
 +           noautofocus="true"
 +           copyURLFeedback="&copyURLFeedback.label;"
-+           sendToDeviceFeedback="&sendToDeviceFeedback.label;">
++           sendToDeviceFeedback="&sendToDeviceFeedback.label;"
++           sendToDeviceOfflineFeedback="&sendToDeviceOfflineFeedback.label;">
 +      <hbox id="pageActionFeedbackAnimatableBox">
 +        <image id="pageActionFeedbackAnimatableImage"/>
 +      </hbox>
@@ -603,13 +604,10 @@ new file mode 100644
 +</vbox>
 +#endif
 +
-+<deck flex="1" id="tab-view-deck">
++  <toolbox id="navigator-toolbox">
-+<vbox flex="1" id="browser-panel">
-+
-+  <toolbox id="navigator-toolbox" mode="icons">
 +    <!-- Menu -->
 +    <toolbar type="menubar" id="toolbar-menubar" class="chromeclass-menubar" customizable="true"
-+             mode="icons" iconsize="small"
++             mode="icons"
 +#ifdef MENUBAR_CAN_AUTOHIDE
 +             toolbarname="&menubarCmd.label;"
 +             accesskey="&menubarCmd.accesskey;"
@@ -635,7 +633,6 @@ new file mode 100644
 +             fullscreentoolbar="true"
 +             customizable="true"
 +             mode="icons"
-+             iconsize="small"
 +             aria-label="&tabsToolbar.label;"
 +             context="toolbar-context-menu"
 +             collapsed="true">
@@ -718,7 +715,6 @@ new file mode 100644
 +    <toolbar id="nav-bar"
 +             aria-label="&navbarCmd.label;"
 +             fullscreentoolbar="true" mode="icons" customizable="true"
-+             iconsize="small"
 +             customizationtarget="nav-bar-customization-target"
 +             overflowable="true"
 +             overflowbutton="nav-bar-overflow-button"
@@ -822,6 +818,8 @@ new file mode 100644
 +                         tooltiptext="&urlbar.persistentStorageBlocked.tooltip;"/>
 +                  <image data-permission-id="popup" class="blocked-permission-icon popup-icon" role="button"
 +                         tooltiptext="&urlbar.popupBlocked.tooltip;"/>
++                  <image data-permission-id="canvas" class="blocked-permission-icon canvas-icon" role="button"
++                         tooltiptext="&urlbar.canvasBlocked.tooltip;"/>
 +                </box>
 +                <box id="notification-popup-box"
 +                     hidden="true"
@@ -936,7 +934,7 @@ new file mode 100644
 +
 +        <toolbarbutton id="library-button" class="toolbarbutton-1 chromeclass-toolbar-additional subviewbutton-nav"
 +                       removable="true"
-+                       onmousedown="PanelUI.showSubView('appMenu-libraryView', this, null, event);"
++                       onmousedown="PanelUI.showSubView('appMenu-libraryView', this, event);"
 +                       closemenu="none"
 +                       cui-areatype="toolbar"
 +                       tooltiptext="&libraryButton.tooltip;"
@@ -983,10 +981,8 @@ new file mode 100644
 +      </hbox>
 +    </toolbar>
 +
-+    <toolbarset id="customToolbars" context="toolbar-context-menu"/>
-+
 +    <toolbar id="PersonalToolbar"
-+             mode="icons" iconsize="small"
++             mode="icons"
 +             class="chromeclass-directories"
 +             context="toolbar-context-menu"
 +             toolbarname="&personalbarCmd.label;" accesskey="&personalbarCmd.accesskey;"
@@ -1160,7 +1156,7 @@ new file mode 100644
 +      </toolbarbutton>
 +
 +      <toolbaritem id="search-container"
-+                   class="chromeclass-toolbar-additional panel-wide-item"
++                   class="chromeclass-toolbar-additional"
 +                   title="&searchItem.title;"
 +                   align="center"
 +                   flex="100"
@@ -1247,17 +1243,11 @@ new file mode 100644
 +    <notificationbox id="global-notificationbox" notificationside="bottom"/>
 +  </vbox>
 +
-+</vbox>
-+# <iframe id="tab-view"> is dynamically appended as the 2nd child of #tab-view-deck.
-+#     Introducing the iframe dynamically, as needed, was found to be better than
-+#     starting with an empty iframe here in browser.xul from a Ts standpoint.
-+</deck>
-+
 +</window>
 diff --git a/browser/base/jar.mn b/browser/base/jar.mn
 --- a/browser/base/jar.mn
 +++ b/browser/base/jar.mn
-@@ -52,16 +52,18 @@ browser.jar:
+@@ -45,16 +45,18 @@ browser.jar:
          content/browser/aboutRobots-icon.png          (content/aboutRobots-icon.png)
          content/browser/aboutRobots-widget-left.png   (content/aboutRobots-widget-left.png)
          content/browser/aboutTabCrashed.css           (content/aboutTabCrashed.css)
@@ -1339,7 +1329,7 @@ diff --git a/browser/components/build/nsModule.cpp b/browser/components/build/ns
 diff --git a/browser/components/preferences/in-content/main.js b/browser/components/preferences/in-content/main.js
 --- a/browser/components/preferences/in-content/main.js
 +++ b/browser/components/preferences/in-content/main.js
-@@ -193,16 +193,23 @@ var gMainPane = {
+@@ -330,16 +330,23 @@ var gMainPane = {
            this._backoffIndex++ : backoffTimes.length - 1]);
        };
  
@@ -1363,7 +1353,7 @@ diff --git a/browser/components/preferences/in-content/main.js b/browser/compone
      performanceSettingsLink.setAttribute("href", performanceSettingsUrl);
  
      this.updateDefaultPerformanceSettingsPref();
-@@ -898,16 +905,27 @@ var gMainPane = {
+@@ -1035,16 +1042,27 @@ var gMainPane = {
        // Reset exponential backoff delay time in order to do visual update in pollForDefaultBrowser.
        this._backoffIndex = 0;
  
@@ -1707,7 +1697,7 @@ new file mode 100644
 diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in
 --- a/browser/installer/package-manifest.in
 +++ b/browser/installer/package-manifest.in
-@@ -657,16 +657,18 @@
+@@ -649,16 +649,18 @@
  @RESPATH@/browser/defaults/blocklists
  @RESPATH@/browser/defaults/pinning
  

firefox-no-default-ualocale.patch

@@ -1,28 +0,0 @@
-# HG changeset patch
-# User Wolfgang Rosenauer <wr@rosenauer.org>
-# Parent 099312626f5f7c9cb5573a61d0230574ee12a660
-# Parent  3d1dbfbdfa41b433352fadf3efe4a21cb45a468f
-Do not overwrite the locale dynamic pref from xulrunner's all.js with a wrong default value
-
-diff --git a/browser/app/profile/firefox.js b/browser/app/profile/firefox.js
---- a/browser/app/profile/firefox.js
-+++ b/browser/app/profile/firefox.js
-@@ -219,17 +219,17 @@ pref("browser.uitour.requireSecure", tru
- pref("browser.uitour.themeOrigin", "https://addons.mozilla.org/%LOCALE%/firefox/themes/");
- pref("browser.uitour.url", "https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/");
- // How long to show a Hearbeat survey (two hours, in seconds)
- pref("browser.uitour.surveyDuration", 7200);
- 
- pref("keyword.enabled", true);
- pref("browser.fixup.domainwhitelist.localhost", true);
- 
--pref("general.useragent.locale", "@AB_CD@");
-+pref("general.useragent.locale", "chrome://global/locale/intl.properties");
- pref("general.skins.selectedSkin", "classic/1.0");
- 
- pref("general.smoothScroll", true);
- #ifdef UNIX_BUT_NOT_MAC
- pref("general.autoScroll", false);
- #else
- pref("general.autoScroll", true);
- #endif

firefox.js

@@ -1,3 +1,3 @@
-pref("intl.locale.matchOS", true);
+pref("intl.locale.requested", "");
 pref("browser.preferences.instantApply", true);
 pref("geo.wifi.uri", "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%");

l10n-58.0.2.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c98a457396f881f7b9c32de341b7ed3025d64dc44352d8a977459217596b9981
-size 53030504

l10n-59.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:07beb4c97a18f19edb666bf24dbd53367febb3d9be3b2920341bd55a49153d16
+size 49054920

l10n_changesets.txt

@@ -1,97 +0,0 @@
-ach 51053376f3b4
-af 9699e648d04f
-an 35bf2af54c6e
-ar 11e28461eedd
-as f48681f3cb1c
-ast a0365b2d2204
-az c9f8178b760e
-be 6a81fe13730e
-bg f5f7827ddaf6
-bn-BD 40173c2773dc
-bn-IN 8a4d7efa4656
-br 87dd84f3fb15
-bs f9194e1b9d1f
-ca 2393377daf04
-cak 358337cd8e62
-cs b2f2d66e474f
-cy cd528119b1f0
-da 3d4f38f6c602
-de c4580757245b
-dsb 6cae073a841f
-el 7c198d3d5d8c
-en-GB 108b5a928fb5
-en-ZA 5b50bebf4e4f
-eo eb148ada0d56
-es-AR 08d927e7ad92
-es-CL 02584a2d25b7
-es-ES 1c9d3c3c689d
-es-MX 6435282dbc75
-et e29f6a05d5a8
-eu 756e60b234ec
-fa 8aee74bd73fe
-ff b529c4fc084b
-fi 124ad6d2caeb
-fr 87ec33d89386
-fy-NL 3705ebdd28f5
-ga-IE 2453123d83ab
-gd da7de9b6e635
-gl 99003c9cd063
-gn 54547111d875
-gu-IN 88180147b7f5
-he 9837e2cc4a95
-hi-IN e1dddb32c7d0
-hr 1699e5d11dfc
-hsb b779311b0bd0
-hu 5f446a971f03
-hy-AM 024da8b34b46
-id 0f0141ed9bb6
-is 4b3c58c9d645
-it 6e2c7978b0e7
-ja f30c0c2f2bc4
-ja-JP-mac 4230da7b0695
-ka 6650158784f6
-kab 6b3c6e707013
-kk 1e85339bcb5c
-km d934d1e2fbba
-kn 9d356f38d208
-ko 6370c2a0f030
-lij 0ab26fda46bc
-lt 450e1219d46f
-lv 78a846f93b16
-mai 53cf7cd14176
-mk 3d22bc5b8e99
-ml 128c7b806403
-mr 074d705e44b7
-ms 7fa602755a3b
-my eee9ab816d7c
-nb-NO 963968719128
-ne-NP c318f683bdb7
-nl fca30e75c8a2
-nn-NO 484b14dee153
-or 9420e75f84ba
-pa-IN 5634ac6e7d9b
-pl 45fa8ed87819
-pt-BR 38d2f920e7b1
-pt-PT 60446c901737
-rm cf0859e63177
-ro 7fea5671214f
-ru 67b070efcbd9
-si 5b5533ef2e97
-sk 4c17a502b748
-sl 8c446da2c7c5
-son 914d74ec145e
-sq 704b52416e5e
-sr cbf4a5eafb4d
-sv-SE 2e8d40795c69
-ta 26d7cbe37e4a
-te 9338813fedc1
-th aa91b43781fe
-tr a392fcf83ab9
-uk 214311bf7877
-ur 60247a51a921
-uz 51175e255277
-vi 2731355cccc7
-xh a756d272d1fe
-zh-CN 9ab59b4c446a
-zh-TW a56ff00fa7b0
-

mozilla-aarch64-startup-crash.patch

@@ -1,12 +1,12 @@
 # HG changeset patch
 # Parent a5cfa3aa11a9d3391df49de6fc5a0e5232c12c10
-# Parent  6906d2adcc834114de3118365cb75b113df8564e
+# Parent  3005da37da3f1e2c568b1675307d10860182d214
 Bug 991344 - Rpi3: Firefox crashes after a few seconds of usage
 
 diff --git a/netwerk/base/nsIOService.cpp b/netwerk/base/nsIOService.cpp
 --- a/netwerk/base/nsIOService.cpp
 +++ b/netwerk/base/nsIOService.cpp
-@@ -892,17 +892,23 @@ nsIOService::NewChannelFromURIWithProxyF
+@@ -887,17 +887,23 @@ nsIOService::NewChannelFromURIWithProxyF
                      "doesn't support nsIUploadChannel2. An extension has "
                      "supplied a non-functional http protocol handler. This will "
                      "break behavior and in future releases not work at all.");

mozilla-alsa-sandbox.patch

@@ -1,12 +0,0 @@
---- mozilla/security/sandbox/linux/moz.build	2018-02-06 07:58:27.127145777 +0100
-+++ mozilla/security/sandbox/linux/moz.build	2018-02-06 08:01:22.213706297 +0100
-@@ -77,6 +77,9 @@
-         'SandboxOpenedFiles.cpp',
-     ]
- 
-+if CONFIG['MOZ_ALSA']:
-+    DEFINES['MOZ_ALSA'] = True
-+
- # This copy of SafeSPrintf doesn't need to avoid the Chromium logging
- # dependency like the one in libxul does, but this way the behavior is
- # consistent.  See also the comment in SandboxLogging.h.

mozilla-no-stdcxx-check.patch

@@ -1,11 +1,11 @@
 # HG changeset patch
 # User Wolfgang Rosenauer <wr@rosenauer.org>
-# Parent  8f6d1846ca837387965573161577b1c5a483bcda
+# Parent  f62746698c37af9593338fe75fbff6b319cd370c
 
 diff --git a/config/config.mk b/config/config.mk
 --- a/config/config.mk
 +++ b/config/config.mk
-@@ -579,17 +579,16 @@ ifeq ($(MOZ_WIDGET_TOOLKIT),android)
+@@ -471,17 +471,16 @@ ifeq ($(MOZ_WIDGET_TOOLKIT),android)
  # of the linker command line), if libmozglue.so ends up after libc.so, all
  # hell breaks loose, so better safe than sorry, and check it's actually the
  # case.

mozilla-ntlm-full-path.patch

@@ -1,13 +1,13 @@
 # HG changeset patch
 # User Petr Cerny <pcerny@novell.com>
 # Parent 7308e4a7c1f769f4bbbc90870b849cadd99495a6
-# Parent  6a285f641aa53b55ec6480a8a7945a179e5c1506
+# Parent  46dd9332e67440fb779e99a694a2bf0edf5c203e
 Bug 634334 - call to the ntlm_auth helper fails
 
 diff --git a/extensions/auth/nsAuthSambaNTLM.cpp b/extensions/auth/nsAuthSambaNTLM.cpp
 --- a/extensions/auth/nsAuthSambaNTLM.cpp
 +++ b/extensions/auth/nsAuthSambaNTLM.cpp
-@@ -169,17 +169,17 @@ static uint8_t* ExtractMessage(const nsA
+@@ -170,17 +170,17 @@ static uint8_t* ExtractMessage(const nsA
  nsresult
  nsAuthSambaNTLM::SpawnNTLMAuthHelper()
  {

source-stamp.txt

@@ -1,2 +1,2 @@
-REV=849c090094db
+REV=c61f5f5ead48
 REPO=http://hg.mozilla.org/releases/mozilla-release