diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 5f39af4..096a5ee 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,67 @@ +------------------------------------------------------------------- +Sat Sep 22 09:03:53 UTC 2018 - astieger@suse.com + +- Mozilla Firefox 62.0.2: + MFSA 2018-22 + * CVE-2018-12385 (boo#1109363, bmo#1490585) + Crash in TransportSecurityInfo due to cached data + * Unvisited bookmarks can once again be autofilled in the address + bar + * Fix WebGL rendering issues + * Fix fallback on startup when a language pack is missing + * Avoid crash when sharing a profile with newer (as yet + unreleased) versions of Firefox + * Do not undo removal of search engines when using a language + pack + * Fixed rendering of some web sites + * Restored compatibility with some sites using deprecated TLS + settings +- disable rust debug symbols to fix build on %ix86 + +------------------------------------------------------------------- +Mon Sep 3 10:47:43 UTC 2018 - wr@rosenauer.org + +- update to Firefox 62.0 + * Firefox Home (the default New Tab) now allows users to display + up to 4 rows of top sites, Pocket stories, and highlights + * "Reopen in Container" tab menu option appears for users with + Containers that lets them choose to reopen a tab in a different + container + * In advance of removing all trust for Symantec-issued certificates + in Firefox 63, a preference was added that allows users to distrust + certificates issued by Symantec. To use this preference, go to + about:config in the address bar and set the preference + "security.pki.distrust_ca_policy" to 2. + * Support for CSS Shapes, allowing for richer web page layouts. + This goes hand in hand with a brand new Shape Path Editor in the + CSS inspector. + * CSS Variable Fonts (OpenType Font Variations) support, which makes + it possible to create beautiful typography with a single font file + * Added Canadian English (en-CA) locale + MFSA 2018-20 (bsc#1107343) + * CVE-2018-12377 (bmo#1470260) + Use-after-free in refresh driver timers + * CVE-2018-12378 (bmo#1459383) + Use-after-free in IndexedDB + * CVE-2018-12379 (bmo#1473113) (updater is disabled for us) + Out-of-bounds write with malicious MAR file + * CVE-2017-16541 (bmo#1412081) + Proxy bypass using automount and autofs + * CVE-2018-12381 (bmo#1435319) + Dragging and dropping Outlook email message results in page navigation + * CVE-2018-12382 (bmo#1479311) (Android only) + Addressbar spoofing with javascript URI on Firefox for Android + * CVE-2018-12383 (bmo#1475775) + Setting a master password post-Firefox 58 does not delete + unencrypted previously stored passwords + * CVE-2018-12375 + Memory safety bugs fixed in Firefox 62 + * CVE-2018-12376 + Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2 +- requires NSS >= 3.38 +- removed obsolete patch + mozilla-bmo1464766.patch + ------------------------------------------------------------------- Thu Aug 9 14:22:00 UTC 2018 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index edd7be8..6734eac 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -13,18 +13,18 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # # changed with every update -%define major 61 +%define major 62 %define mainver %major.0.2 -%define orig_version 61.0.2 +%define orig_version 62.0.2 %define orig_suffix %{nil} %define update_channel release %define branding 1 -%define releasedate 20180807170231 +%define releasedate 20180921000000 %define source_prefix firefox-%{orig_version} # PIE, full relro (x86_64 for now) @@ -75,7 +75,7 @@ BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.19 -BuildRequires: mozilla-nss-devel >= 3.37.3 +BuildRequires: mozilla-nss-devel >= 3.38 BuildRequires: python-devel BuildRequires: python2-xml BuildRequires: python3 >= 3.5 @@ -160,7 +160,6 @@ Patch6: mozilla-reduce-files-per-UnifiedBindings.patch Patch7: mozilla-aarch64-startup-crash.patch Patch8: mozilla-bmo256180.patch Patch9: mozilla-no-return.patch -Patch10: mozilla-bmo1464766.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-branded-icons.patch @@ -271,7 +270,6 @@ cd $RPM_BUILD_DIR/%{source_prefix} %patch7 -p1 %patch8 -p1 %patch9 -p1 -%patch10 -p1 # Firefox %patch101 -p1 %patch102 -p1 @@ -347,11 +345,15 @@ ac_add_options --enable-pie %if 0%{?suse_version} > 1320 ac_add_options --enable-optimize="-g -O2" %endif -%ifarch %ix86 %arm +%ifarch %arm %if 0%{?suse_version} > 1230 ac_add_options --disable-optimize %endif %endif +# bmo#1441155 - Disable the generation of Rust debug symbols on Linux32 +%ifarch %ix86 +ac_add_options --disable-debug-symbols +%endif %ifarch %arm ac_add_options --disable-elf-hack %endif @@ -372,6 +374,7 @@ ac_add_options --enable-startup-notification ac_add_options --enable-update-channel=%{update_channel} ac_add_options --with-mozilla-api-keyfile=%{SOURCE18} ac_add_options --with-google-api-keyfile=%{SOURCE19} +ac_add_options --with-unsigned-addon-scopes=app %if %branding ac_add_options --enable-official-branding %endif @@ -508,7 +511,6 @@ rm -f %{buildroot}%{progdir}/old-homepage-default.properties rm -f %{buildroot}%{progdir}/run-mozilla.sh rm -f %{buildroot}%{progdir}/LICENSE rm -f %{buildroot}%{progdir}/precomplete -rm -f %{buildroot}%{progdir}/dictionaries/en-US* rm -f %{buildroot}%{progdir}/update-settings.ini # devel mkdir -p %{buildroot}%{_bindir} @@ -586,7 +588,6 @@ exit 0 %dir %{progdir}/distribution/ %{progdir}/distribution/extensions/ %{progdir}/defaults/ -%{progdir}/dictionaries/ %dir %{progdir}/gtk2 %{progdir}/gtk2/libmozgtk.so %{progdir}/gmp-clearkey/ diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index c1c9220..f3dee8a 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:b6e345d53252f5367425ef8a382b578f66d9d71b265298fcbcd24756c9fc71d5 -size 28392 +oid sha256:86585e8285593e3a08c14dc238df48a071284127a540dd628a9f468d0d296c12 +size 28832 diff --git a/create-tar.sh b/create-tar.sh index b57fa2b..ad56f26 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_61_0_2_RELEASE" -VERSION="61.0.2" +RELEASE_TAG="150c70d39363b57ea4e92fbbd900b338f09177d6" +VERSION="62.0.2" VERSION_SUFFIX="" LOCALE_FILE="firefox-$VERSION/browser/locales/l10n-changesets.json" diff --git a/firefox-61.0.2.source.tar.xz b/firefox-61.0.2.source.tar.xz deleted file mode 100644 index 7ddf197..0000000 --- a/firefox-61.0.2.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0bdecbbb2a955c9f4c5cd0b33acd1e47afcb6cd57ac89cf11257668e3cef202c -size 266077556 diff --git a/firefox-61.0.2.source.tar.xz.asc b/firefox-61.0.2.source.tar.xz.asc deleted file mode 100644 index ba236d9..0000000 --- a/firefox-61.0.2.source.tar.xz.asc +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v2.0.14 (GNU/Linux) - -iQIcBAABCAAGBQJbafHXAAoJELu+vbskxvNVIhMP/2VqScRCb6eW+UsdFHrFLQHg -APpDgdjc/lKVUN8Zrm4uazM9eutozPTBIvXUGFtIewCA6XNdqdJ9V3qXGUIe+eY0 -dd2BQhHjHCgN1viqvKMtvyC5elAlW4je0r20ON6/ODp2ltFEplWkzPRdvMJdj81c -R+LWlI4BtT7R54wGKeOKmn2L4xx6SYMAfYShMDaeWxT4KywYWFIDf2Is7ogLJpH4 -cPzvuPkUdZPcZ0r3clp/DbNHB5NLrmcrKk1rD1LndKoe45qb75ZDKK4Vsc9I98VW -pRxNQwvg01bbo4S/Qc4MgyGQBoaW+5H2NuwOLhIsbN3+vK4bfjF+/TQ4ZTtpyBbV -vTjvnEq7WzrNqwVWkLjZINdeByADyLDMGilSHBiV3D1/Ueafzd81fwuroqC8FEil -Z2uVmFaK7flERMpcPPV9hk3g9vXn28g9Pe0Gk51Sro0mGiFSh/6C5ROeS3+LV96Q -TPVzptkkhwjKF8BnOgK1kkwNhk5/KTEBYAOuGefXrTnddaKpMiaDOQAVA3mZaIU4 -VyzFh9v7sWQIl1c0iuE115Z33WoY7iPC+YY9DVhvUbeA+/XuzG/8CuqXPLrjE5Zp -Ljww6gv+r+/tZGKEF/dLmQw2WOpP9KwXvn21xyzMeltrmRCpG55v+Q3cyzlAExby -MKFxldx23Uvzqxzj1qoi -=Qg+b ------END PGP SIGNATURE----- diff --git a/firefox-62.0.2.source.tar.xz b/firefox-62.0.2.source.tar.xz new file mode 100644 index 0000000..65a537a --- /dev/null +++ b/firefox-62.0.2.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0474ce1bc9ed512e926d2d58d570e93f958f32bb7da755008e8fedca94f0e2ad +size 258831964 diff --git a/firefox-62.0.2.source.tar.xz.asc b/firefox-62.0.2.source.tar.xz.asc new file mode 100644 index 0000000..17dd2e6 --- /dev/null +++ b/firefox-62.0.2.source.tar.xz.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.14 (GNU/Linux) + +iQIcBAABCAAGBQJbo9BZAAoJELu+vbskxvNV1YcQAKD2cZpaBvIHDOKbAWsuDDxO +czRU6b8mB9wJCGZzaktjv9m8yMZRVjK05EvOzfJM2QjrouE3YvFcQxz8cCnL9/Ql +eVRMAWMEIQoSIoM+fhGjHXZTEM/xpgRYFuBDNrvDVnIfkc7hIEkJbmg3v3Qdq5/6 +03R4YR1JOuxA22laYLjTyIVcD7iAYpbM+GC7sfLv1XLPAWl/os0/Y96dYReLLPtQ +fDcCscw0B0vLDihHGZN88jQUXpuzphJSPqmoWS4fUC3JL3Ksj/JMctn22PmwzeGu +R/PmrRB7KKLzZdTRWGL7yn9oVWxHIDNvhczoF9wbEpGdq+FQrKf2GWtVkTIpyXTz +A9Bp2o/JaeAeoel7+PNl/rf8XehNuVACnyUMG8qikOwW7LOV4HKK+fdZETztwHZU +l1Sa1MiuBKrpCdGy9d2TRZBnplRlQU32LDczBBqm8RKWi2REZxwZejGvWN5Opcox +P11tnG1fmnnLCWQPuYAycnBVEuM/4SVdEXSFDE0ysZK2P0E87mi0WVZzGXvLFpon +tnkHBkag+HlPbDnTUjYspRTO65tLaQDVIleV9fhVWd/YfK+YgguSv+9CtWKcq8cF +s3bvGW+LKO3F6tB10rlG9CHSTO69jkYKUS5Puvxm5BzMPX8ZwH0OI70VjLcR1i2J +z3HlK8VrTJhyXZuJV9O3 +=iVXX +-----END PGP SIGNATURE----- diff --git a/firefox-kde.patch b/firefox-kde.patch index 7b11b84..52d698a 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 242712e5a1879111d1a93a5d55dfae3fd5d47abc +# Parent 0629fb9c6879e14c1b5e3cbff53b0d44371f0127 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1293 @@ +@@ -0,0 +1,1291 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -21,6 +21,7 @@ new file mode 100644 + + + ++ + + + @@ -107,6 +108,8 @@ new file mode 100644 + + ++