From 238d2bd9f90cee802acd6636b4d81cdb44274c83f9ff70fa79380e2d09b6c2d3 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Mon, 30 Oct 2017 06:56:57 +0000 Subject: [PATCH 1/3] - update to Firefox 56.0.2 * Disable Form Autofill completely on user request (bmo#1404531) * Fix for video-related crashes on Windows 7 (bmo#1409141) * Correct detection for 64-bit GSSAPI authentication (bmo#1409275) * Fix for shutdown crash (bmo#1404105) - update to Firefox 56.0.1 * Block D3D11 when using Intel drivers on Windows 7 systems with partial AVX support (bmo#1403353) -> just to sync the version number - enable stylo for TW (requires LLVM >= 3.9) - queue KDE filepicker requests to avoid non-opening file dialogs happening in certain situations (contributed by Ignaz Forster) - the placeholder dot in KDE file dialog in case of empty filenames was removed, apparently not required (anymore) (contributed by Ignaz Forster) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=609 --- MozillaFirefox.changes | 23 +++++++++++++++++++++++ MozillaFirefox.spec | 10 +++++++--- compare-locales.tar.xz | 4 ++-- create-tar.sh | 4 ++-- firefox-56.0-source.tar.xz | 3 --- firefox-56.0.2-source.tar.xz | 3 +++ l10n-56.0.2.tar.xz | 3 +++ l10n-56.0.tar.xz | 3 --- mozilla-kde.patch | 33 +++++++++++++++++---------------- source-stamp.txt | 2 +- 10 files changed, 58 insertions(+), 30 deletions(-) delete mode 100644 firefox-56.0-source.tar.xz create mode 100644 firefox-56.0.2-source.tar.xz create mode 100644 l10n-56.0.2.tar.xz delete mode 100644 l10n-56.0.tar.xz diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index a39b7d2..57dd1e3 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,26 @@ +------------------------------------------------------------------- +Sat Oct 28 06:30:37 UTC 2017 - wr@rosenauer.org + +- update to Firefox 56.0.2 + * Disable Form Autofill completely on user request (bmo#1404531) + * Fix for video-related crashes on Windows 7 (bmo#1409141) + * Correct detection for 64-bit GSSAPI authentication (bmo#1409275) + * Fix for shutdown crash (bmo#1404105) + +------------------------------------------------------------------- +Tue Oct 10 11:47:49 UTC 2017 - wr@rosenauer.org + +- update to Firefox 56.0.1 + * Block D3D11 when using Intel drivers on Windows 7 systems with + partial AVX support (bmo#1403353) + -> just to sync the version number +- enable stylo for TW (requires LLVM >= 3.9) +- queue KDE filepicker requests to avoid non-opening file dialogs + happening in certain situations (contributed by Ignaz Forster) +- the placeholder dot in KDE file dialog in case of empty filenames + was removed, apparently not required (anymore) + (contributed by Ignaz Forster) + ------------------------------------------------------------------- Sun Oct 1 18:25:16 UTC 2017 - stefan.bruens@rwth-aachen.de diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index 6058024..cb86d16 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -19,10 +19,10 @@ # changed with every update %define major 56 -%define mainver %major.0 +%define mainver %major.0.2 %define update_channel release %define branding 1 -%define releasedate 20170926190823 +%define releasedate 20171024165158 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -93,7 +93,9 @@ BuildRequires: pkgconfig(gtk+-unix-print-2.0) BuildRequires: pkgconfig(gtk+-unix-print-3.0) BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) -#BuildRequires: llvm-clang-devel >= 3.9.0 +%if 0%{?suse_version} > 1320 +BuildRequires: llvm-clang-devel >= 3.9.0 +%endif # libavcodec is required for H.264 support but the # openSUSE version is currently not able to play H.264 # therefore the Packman version is required @@ -355,7 +357,9 @@ ac_add_options --enable-startup-notification ac_add_options --enable-update-channel=%{update_channel} ac_add_options --with-mozilla-api-keyfile=%{SOURCE18} ac_add_options --with-google-api-keyfile=%{SOURCE19} +%if 0%{?suse_version} <= 1320 ac_add_options --disable-stylo +%endif %if %branding ac_add_options --enable-official-branding %endif diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 6d87aad..a6a1147 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:4d06bd7c006d22e249f2a537935a7df6a27375790f35c5f5e54d52987cfaef05 -size 28376 +oid sha256:e74ef907b2f1e30c66f69bc3246c18f826faf18ed360ed2640ac825a1f4e5dee +size 28384 diff --git a/create-tar.sh b/create-tar.sh index 7cb12ee..469f2b8 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="8fbf05f4b92125e081984f5e39b559b83e5cc729" # 56 build6 -VERSION="56.0" +RELEASE_TAG="FIREFOX_56_0_2_RELEASE" # 56.0.1 build2 +VERSION="56.0.2" # mozilla if [ -d mozilla ]; then diff --git a/firefox-56.0-source.tar.xz b/firefox-56.0-source.tar.xz deleted file mode 100644 index 60e0930..0000000 --- a/firefox-56.0-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:59eae64165c9d5917e4c934862a956fcc7aad424d4afd056e3941a210d0735e3 -size 271865016 diff --git a/firefox-56.0.2-source.tar.xz b/firefox-56.0.2-source.tar.xz new file mode 100644 index 0000000..5362368 --- /dev/null +++ b/firefox-56.0.2-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:35af0610782685d9e43fc53d7af53e91eb605993dd1be215f3145ec6f68521eb +size 271922384 diff --git a/l10n-56.0.2.tar.xz b/l10n-56.0.2.tar.xz new file mode 100644 index 0000000..affc342 --- /dev/null +++ b/l10n-56.0.2.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ffbe131f588deccb90f4041143be4a6a93221abb9eabaf7677c33ddb07b27ca9 +size 47686956 diff --git a/l10n-56.0.tar.xz b/l10n-56.0.tar.xz deleted file mode 100644 index 6937746..0000000 --- a/l10n-56.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0a4704c6ae33b92f0f861cba02ab93bc5fe05b7429b7adc7e9180793556ef398 -size 47661016 diff --git a/mozilla-kde.patch b/mozilla-kde.patch index cab663d..f9ce5e5 100644 --- a/mozilla-kde.patch +++ b/mozilla-kde.patch @@ -1,5 +1,5 @@ # HG changeset patch -# Parent faadbf89d1cb02eefec4c5dfd3ab86bc20d815d5 +# Parent a930d4c1c3fba77f61071becdc51e3232e0b72ca Description: Add KDE integration to Firefox (toolkit parts) Author: Wolfgang Rosenauer Author: Lubos Lunak @@ -3276,7 +3276,7 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp mFilters.AppendElement(filter); mFilterNames.AppendElement(name); -@@ -371,16 +375,34 @@ nsFilePicker::Show(int16_t *aReturn) +@@ -371,16 +375,37 @@ nsFilePicker::Show(int16_t *aReturn) NS_IMETHODIMP nsFilePicker::Open(nsIFilePickerShownCallback *aCallback) @@ -3287,19 +3287,22 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp + // KDE file picker is not handled via callback + if( nsKDEUtils::kdeSupport()) { -+ int16_t result; + mCallback = aCallback; + mRunning = true; -+ NS_ADDREF_THIS(); -+ kdeFileDialog(&result); -+ if (mCallback) { -+ mCallback->Done(result); -+ mCallback = nullptr; -+ } else { -+ mResult = result; -+ } -+ mRunning = false; -+ NS_RELEASE_THIS(); ++ g_idle_add([](gpointer data) -> gboolean { ++ nsFilePicker* queuedPicker = (nsFilePicker*) data; ++ int16_t result; ++ queuedPicker->kdeFileDialog(&result); ++ if (queuedPicker->mCallback) { ++ queuedPicker->mCallback->Done(result); ++ queuedPicker->mCallback = nullptr; ++ } else { ++ queuedPicker->mResult = result; ++ } ++ queuedPicker->mRunning = false; ++ return G_SOURCE_REMOVE; ++ }, this); ++ + return NS_OK; + } + @@ -3311,7 +3314,7 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp GtkFileChooserAction action = GetGtkFileChooserAction(mMode); -@@ -603,8 +625,235 @@ nsFilePicker::Done(GtkWidget* file_choos +@@ -603,8 +628,233 @@ nsFilePicker::Done(GtkWidget* file_choos if (mCallback) { mCallback->Done(result); mCallback = nullptr; @@ -3408,8 +3411,6 @@ diff --git a/widget/gtk/nsFilePicker.cpp b/widget/gtk/nsFilePicker.cpp + else + startdir = ToNewUTF8String(mDefault); + } -+ if( startdir.IsEmpty()) -+ startdir = "."; + + nsAutoCString filters; + PRInt32 count = mFilters.Length(); diff --git a/source-stamp.txt b/source-stamp.txt index a8fb502..60b7da1 100644 --- a/source-stamp.txt +++ b/source-stamp.txt @@ -1,2 +1,2 @@ -REV=8fbf05f4b921 +REV=66ffd1657af8 REPO=http://hg.mozilla.org/releases/mozilla-release From c3624659ef7c595b1143366a7c6717ad19674acbce9d2c728c086f6b3d718bf6 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Tue, 14 Nov 2017 23:17:59 +0000 Subject: [PATCH 2/3] - update to Firefox 57.0b14 * Firefox Quantum * Photon UI * Unified address and search bar * AMD VP9 hardware video decoder support * Added support for Date/Time input * stricter security sandbox blocking filesystem reading and writing on Linux systems * middle mouse paste in the content area no longer navigates to URLs by default on Unix systems MFSA 2017-24 * CVE-2017-7828 (bmo#1406750. bmo#1412252) Use-after-free of PressShell while restyling layout * CVE-2017-7830 (bmo#1408990) Cross-origin URL information leak through Resource Timing API * CVE-2017-7831 (bmo#1392026) Information disclosure of exposed properties on JavaScript proxy objects * CVE-2017-7832 (bmo#1408782) Domain spoofing through use of dotless 'i' character followed by accent markers * CVE-2017-7833 (bmo#1370497) Domain spoofing with Arabic and Indic vowel marker characters * CVE-2017-7834 (bmo#1358009) data: URLs opened in new tabs bypass CSP protections * CVE-2017-7835 (bmo#1402363) Mixed content blocking incorrectly applies with redirects * CVE-2017-7836 (bmo#1401339) Pingsender dynamically loads libcurl on Linux and OS X * CVE-2017-7837 (bmo#1325923) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=610 --- MozillaFirefox.changes | 57 ++ MozillaFirefox.spec | 42 +- compare-locales.tar.xz | 4 +- create-tar.sh | 4 +- firefox-56.0.2-source.tar.xz | 3 - firefox-57.0-source.tar.xz | 3 + firefox-branded-icons.patch | 6 +- firefox-kde.patch | 617 ++++++++---------- firefox-no-default-ualocale.patch | 10 +- l10n-56.0.2.tar.xz | 3 - l10n-57.0.tar.xz | 3 + l10n_changesets.txt | 190 +++--- mozilla-aarch64-startup-crash.patch | 4 +- mozilla-bindgen-systemlibs.patch | 102 +++ mozilla-kde.patch | 61 +- mozilla-language.patch | 65 -- mozilla-no-stdcxx-check.patch | 4 +- mozilla-ntlm-full-path.patch | 2 +- mozilla-openaes-decl.patch | 2 +- ...lla-reduce-files-per-UnifiedBindings.patch | 19 +- mozilla-ucontext.patch | 313 --------- source-stamp.txt | 2 +- 22 files changed, 618 insertions(+), 898 deletions(-) delete mode 100644 firefox-56.0.2-source.tar.xz create mode 100644 firefox-57.0-source.tar.xz delete mode 100644 l10n-56.0.2.tar.xz create mode 100644 l10n-57.0.tar.xz create mode 100644 mozilla-bindgen-systemlibs.patch delete mode 100644 mozilla-language.patch delete mode 100644 mozilla-ucontext.patch diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 57dd1e3..ba54fa2 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,60 @@ +------------------------------------------------------------------- +Thu Nov 9 15:01:30 UTC 2017 - wr@rosenauer.org + +- update to Firefox 57.0b14 + * Firefox Quantum + * Photon UI + * Unified address and search bar + * AMD VP9 hardware video decoder support + * Added support for Date/Time input + * stricter security sandbox blocking filesystem reading and + writing on Linux systems + * middle mouse paste in the content area no longer navigates to + URLs by default on Unix systems + MFSA 2017-24 + * CVE-2017-7828 (bmo#1406750. bmo#1412252) + Use-after-free of PressShell while restyling layout + * CVE-2017-7830 (bmo#1408990) + Cross-origin URL information leak through Resource Timing API + * CVE-2017-7831 (bmo#1392026) + Information disclosure of exposed properties on JavaScript proxy + objects + * CVE-2017-7832 (bmo#1408782) + Domain spoofing through use of dotless 'i' character followed + by accent markers + * CVE-2017-7833 (bmo#1370497) + Domain spoofing with Arabic and Indic vowel marker characters + * CVE-2017-7834 (bmo#1358009) + data: URLs opened in new tabs bypass CSP protections + * CVE-2017-7835 (bmo#1402363) + Mixed content blocking incorrectly applies with redirects + * CVE-2017-7836 (bmo#1401339) + Pingsender dynamically loads libcurl on Linux and OS X + * CVE-2017-7837 (bmo#1325923) + SVG loaded as can use meta tags to set cookies + * CVE-2017-7838 (bmo#1399540) + Failure of individual decoding of labels in international domain + names triggers punycode display of entire IDN + * CVE-2017-7839 (bmo#1402896) + Control characters before javascript: URLs defeats self-XSS + prevention mechanism + * CVE-2017-7840 (bmo#1366420) + Exported bookmarks do not strip script elements from user-supplied + tags + * CVE-2017-7842 (bmo#1397064) + Referrer Policy is not always respected for elements + * CVE-2017-7827 + Memory safety bugs fixed in Firefox 57 + * CVE-2017-7826 + Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 +- requires NSPR 4.17, NSS 3.33 and rustc 1.19 +- rebased patches +- added mozilla-bindgen-systemlibs.patch to allow stylo build + with system libs (bmo#1341234) +- removed mozilla-language.patch since the whole locale code + changed in Firefox and is relying on ICU now +- removed obsolete mozilla-ucontext.patch + ------------------------------------------------------------------- Sat Oct 28 06:30:37 UTC 2017 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index cb86d16..2aae3e1 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,11 +18,11 @@ # changed with every update -%define major 56 -%define mainver %major.0.2 +%define major 57 +%define mainver %major.0 %define update_channel release %define branding 1 -%define releasedate 20171024165158 +%define releasedate 20171109183137 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -72,10 +72,10 @@ BuildRequires: libiw-devel BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo -BuildRequires: mozilla-nspr-devel >= 4.16 -BuildRequires: mozilla-nss-devel >= 3.32.1 +BuildRequires: mozilla-nspr-devel >= 4.17 +BuildRequires: mozilla-nss-devel >= 3.33 BuildRequires: python-devel -BuildRequires: rust >= 1.15.1 +BuildRequires: rust >= 1.19 BuildRequires: rust-std BuildRequires: startup-notification-devel BuildRequires: unzip @@ -95,6 +95,9 @@ BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) %if 0%{?suse_version} > 1320 BuildRequires: llvm-clang-devel >= 3.9.0 +%else +# this covers the workaround to compile on Leap 42 in OBS +BuildRequires: clang4-devel %endif # libavcodec is required for H.264 support but the # openSUSE version is currently not able to play H.264 @@ -143,14 +146,13 @@ Source18: mozilla-api-key Source19: google-api-key # Gecko/Toolkit Patch1: mozilla-nongnome-proxies.patch -Patch3: mozilla-kde.patch -Patch5: mozilla-language.patch -Patch6: mozilla-ntlm-full-path.patch -Patch7: mozilla-openaes-decl.patch -Patch8: mozilla-no-stdcxx-check.patch -Patch9: mozilla-reduce-files-per-UnifiedBindings.patch -Patch10: mozilla-aarch64-startup-crash.patch -Patch11: mozilla-ucontext.patch +Patch2: mozilla-kde.patch +Patch3: mozilla-ntlm-full-path.patch +Patch4: mozilla-openaes-decl.patch +Patch5: mozilla-no-stdcxx-check.patch +Patch6: mozilla-reduce-files-per-UnifiedBindings.patch +Patch7: mozilla-aarch64-startup-crash.patch +Patch8: mozilla-bindgen-systemlibs.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-no-default-ualocale.patch @@ -253,16 +255,15 @@ symbols meant for upload to Mozilla's crash collector database. %endif cd $RPM_BUILD_DIR/mozilla %patch1 -p1 +%patch2 -p1 %patch3 -p1 +%patch4 -p1 %patch5 -p1 +%ifarch %ix86 %patch6 -p1 +%endif %patch7 -p1 %patch8 -p1 -%ifarch %ix86 -%patch9 -p1 -%endif -%patch10 -p1 -%patch11 -p1 # Firefox %patch101 -p1 %patch102 -p1 @@ -357,9 +358,6 @@ ac_add_options --enable-startup-notification ac_add_options --enable-update-channel=%{update_channel} ac_add_options --with-mozilla-api-keyfile=%{SOURCE18} ac_add_options --with-google-api-keyfile=%{SOURCE19} -%if 0%{?suse_version} <= 1320 -ac_add_options --disable-stylo -%endif %if %branding ac_add_options --enable-official-branding %endif diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index a6a1147..990f926 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:e74ef907b2f1e30c66f69bc3246c18f826faf18ed360ed2640ac825a1f4e5dee -size 28384 +oid sha256:28d155fac8c430f5305e095670073b6072af87e9063ce9a37344f397fa85e927 +size 28368 diff --git a/create-tar.sh b/create-tar.sh index 469f2b8..88d52cd 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_56_0_2_RELEASE" # 56.0.1 build2 -VERSION="56.0.2" +RELEASE_TAG="8af8bd128bd014669ad89774f47668b0b8109337" # build 3 +VERSION="57.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-56.0.2-source.tar.xz b/firefox-56.0.2-source.tar.xz deleted file mode 100644 index 5362368..0000000 --- a/firefox-56.0.2-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:35af0610782685d9e43fc53d7af53e91eb605993dd1be215f3145ec6f68521eb -size 271922384 diff --git a/firefox-57.0-source.tar.xz b/firefox-57.0-source.tar.xz new file mode 100644 index 0000000..abc9c8e --- /dev/null +++ b/firefox-57.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d3dc10e75d32884e0a52f785210feb24ed6564375444d85c26f36544f405008f +size 266361856 diff --git a/firefox-branded-icons.patch b/firefox-branded-icons.patch index f4aa29c..8a47c13 100644 --- a/firefox-branded-icons.patch +++ b/firefox-branded-icons.patch @@ -1,11 +1,11 @@ # HG changeset patch # Parent e0751ad74e835e80041a61ea00c2a63bf6fbe2de -# Parent 6309c3625e39216f9cf5a7a35cbf6932adfabc1d +# Parent 75308bbaaf73d672c88cb283591d4aefc7db9804 diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/branding-common.mozbuild --- a/browser/branding/branding-common.mozbuild +++ b/browser/branding/branding-common.mozbuild -@@ -41,18 +41,24 @@ def FirefoxBranding(): +@@ -38,18 +38,24 @@ def FirefoxBranding(): 'disk.icns', 'document.icns', 'dsstore', @@ -33,7 +33,7 @@ diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/brandi diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in --- a/browser/installer/package-manifest.in +++ b/browser/installer/package-manifest.in -@@ -599,18 +599,21 @@ +@@ -618,18 +618,21 @@ @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/chrome.manifest @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf @RESPATH@/chrome/toolkit@JAREXT@ diff --git a/firefox-kde.patch b/firefox-kde.patch index 8a9d72e..a840dc4 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 05209af7fdfec897f5f574c691184ba27049b0ff +# Parent 9f19902f8bcde21fa63172a85818fb11714878d8 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1320 @@ +@@ -0,0 +1,1252 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -73,7 +73,9 @@ new file mode 100644 +# so that they can be shared by macBrowserOverlay.xul. +#include global-scripts.inc + -+ + +# All sets except for popupsets (commands, keys, stringbundles and broadcasters) *must* go into the +# browser-sets.inc file for sharing with hiddenWindow.xul. @@ -95,6 +97,9 @@ new file mode 100644 +