diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 735b44a..ab6ce45 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,52 @@ +------------------------------------------------------------------- +Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org + +- update to Firefox 43.0 (bnc#959277) + * Improved API support for m4v video playback + * Users can opt-in to receive search suggestions from the Awesome Bar + * WebRTC streaming on multiple monitors + * User selectable second block list for Private Browsing's Tracking + Protection + security fixes: + * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 + Miscellaneous memory safety hazards + * MFSA 2015-135/CVE-2015-7204 (bmo#1216130) + Crash with JavaScript variable assignment with unboxed objects + * MFSA 2015-136/CVE-2015-7207 (bmo#1185256) + Same-origin policy violation using perfomance.getEntries and + history navigation + * MFSA 2015-137/CVE-2015-7208 (bmo#1191423) + Firefox allows for control characters to be set in cookies + * MFSA 2015-138/CVE-2015-7210 (bmo#1218326) + Use-after-free in WebRTC when datachannel is used after being + destroyed + * MFSA 2015-139/CVE-2015-7212 (bmo#1222809) + Integer overflow allocating extremely large textures + * MFSA 2015-140/CVE-2015-7215 (bmo#1160890) + Cross-origin information leak through web workers error events + * MFSA 2015-141/CVE-2015-7211 (bmo#1221444) + Hash in data URI is incorrectly parsed + * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820) + DOS due to malformed frames in HTTP/2 + * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078) + Linux file chooser crashes on malformed images due to flaws in + Jasper library + * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221 + (bmo#1201183, bmo#1178033, bmo#1199400) + Buffer overflows found through code inspection + * MFSA 2015-145/CVE-2015-7205 (bmo#1220493) + Underflow through code inspection + * MFSA 2015-146/CVE-2015-7213 (bmo#1206211) + Integer overflow in MP4 playback in 64-bit versions + * MFSA 2015-147/CVE-2015-7222 (bmo#1216748) + Integer underflow and buffer overflow processing MP4 metadata in + libstagefright + * MFSA 2015-148/CVE-2015-7223 (bmo#1226423) + Privilege escalation vulnerabilities in WebExtension APIs + * MFSA 2015-149/CVE-2015-7214 (bmo#1228950) + Cross-site reading attack through data and view-source URIs +- rebased patches + ------------------------------------------------------------------- Sun Nov 15 19:52:20 UTC 2015 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index d073789..a623399 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,10 +18,10 @@ # changed with every update -%define major 42 +%define major 43 %define mainver %major.0 %define update_channel release -%define releasedate 2015103000 +%define releasedate 2015121300 # general build definitions %if "%{update_channel}" != "aurora" diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index edcb6e7..88a88b5 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:5369d055695e4fd6757541f3951eea4e581c14d0886b974b0254189b958e43dd -size 28400 +oid sha256:bd4f98f3d7ed94b9a840f7090e3dbc2d1d9b798835dfe2a47cc9028e7222efa4 +size 28416 diff --git a/create-tar.sh b/create-tar.sh index 5c59593..cdfad80 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_42_0_RELEASE" -VERSION="42.0" +RELEASE_TAG="FIREFOX_43_0_RELEASE" +VERSION="43.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-42.0-source.tar.xz b/firefox-42.0-source.tar.xz deleted file mode 100644 index 635e3cb..0000000 --- a/firefox-42.0-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:dc36edb9dbff3bd40b9570a248b777e4222fd234581f779f9e0932e34e60309d -size 174319672 diff --git a/firefox-43.0-source.tar.xz b/firefox-43.0-source.tar.xz new file mode 100644 index 0000000..ec24fea --- /dev/null +++ b/firefox-43.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:78c2be9ecbf3017cc26a56e5fc148d2ee03c4023242e3f6b41e487e6ab1a2202 +size 185216796 diff --git a/firefox-kde.patch b/firefox-kde.patch index cc7aca6..52c65d9 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 95b421ca30846be2b5d7230d72263e6dff042d0b +# Parent 3fedb882f767b2e4ff72ef972a9cce4c5d1af4af diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1234 @@ +@@ -0,0 +1,1222 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -91,6 +91,7 @@ new file mode 100644 + onpopuphidden="if (event.target == this) TabContextMenu.contextTab = null;"> + ++ + +