From 8834f8ff8e553402178f1d044ad96ba25f5dc2890a5e8787b1d29b89cf23bbe2 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 9 Nov 2011 12:04:11 +0000 Subject: [PATCH] - update to Firefox 8 (bnc#728520) * MFSA 2011-47/CVE-2011-3648 (bmo#690225) Potential XSS against sites using Shift-JIS * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654 Miscellaneous memory safety hazards * MFSA 2011-49/CVE-2011-3650 (bmo#674776) Memory corruption while profiling using Firebug * MFSA 2011-52/CVE-2011-3655 (bmo#672182) Code execution via NoWaiverWrapper - rebased patches - enable telemetry prompt - set intl.locale.matchOS=true in the base package as it causes too much confusion when it's only available with branding-openSUSE OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=237 --- MozillaFirefox.changes | 21 ++++++++ MozillaFirefox.spec | 43 ++++++++------- compare-locales.tar.bz2 | 4 +- create-tar.sh | 9 ++-- firefox-7.0.1-source.tar.bz2 | 3 -- firefox-8.0-source.tar.bz2 | 3 ++ firefox-branded-icons.patch | 20 +++---- firefox-kde.patch | 65 ++++++++++++++--------- l10n-7.0.1.tar.bz2 | 3 -- l10n-8.0.tar.bz2 | 3 ++ mozilla-cairo-return.patch | 21 -------- mozilla-curl.patch | 89 ------------------------------- mozilla-kde.patch | 100 +++++++++++++++++------------------ mozilla-preferences.patch | 30 +++++++++++ mozilla-repo.patch | 10 ++-- mozilla-shared-nss-db.patch | 8 +-- source-stamp.txt | 2 +- 17 files changed, 198 insertions(+), 236 deletions(-) delete mode 100644 firefox-7.0.1-source.tar.bz2 create mode 100644 firefox-8.0-source.tar.bz2 delete mode 100644 l10n-7.0.1.tar.bz2 create mode 100644 l10n-8.0.tar.bz2 delete mode 100644 mozilla-cairo-return.patch delete mode 100644 mozilla-curl.patch create mode 100644 mozilla-preferences.patch diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 0d81e45..cee7021 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,8 +1,29 @@ +------------------------------------------------------------------- +Sun Nov 6 08:20:59 UTC 2011 - wr@rosenauer.org + +- update to Firefox 8 (bnc#728520) + * MFSA 2011-47/CVE-2011-3648 (bmo#690225) + Potential XSS against sites using Shift-JIS + * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654 + Miscellaneous memory safety hazards + * MFSA 2011-49/CVE-2011-3650 (bmo#674776) + Memory corruption while profiling using Firebug + * MFSA 2011-52/CVE-2011-3655 (bmo#672182) + Code execution via NoWaiverWrapper +- rebased patches + +------------------------------------------------------------------- +Thu Oct 20 12:34:47 UTC 2011 - wr@rosenauer.org + +- enable telemetry prompt + ------------------------------------------------------------------- Fri Sep 30 10:52:36 UTC 2011 - wr@rosenauer.org - update to minor release 7.0.1 * fixed staged addon updates +- set intl.locale.matchOS=true in the base package as it causes + too much confusion when it's only available with branding-openSUSE ------------------------------------------------------------------- Fri Sep 23 11:22:22 UTC 2011 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index eecbcc4..519589b 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,7 +18,7 @@ # norootforbuild -%define major 7 +%define major 8 %define mainver %major.0 Name: MozillaFirefox @@ -33,9 +33,9 @@ BuildRequires: mozilla-nspr-devel >= 4.8.8 BuildRequires: mozilla-nss-devel >= 3.12.10 BuildRequires: nss-shared-helper-devel License: MPLv1.1 or GPLv2+ or LGPLv2+ -Version: %{mainver}.1 +Version: %{mainver} Release: 1 -%define releasedate 2011092900 +%define releasedate 2011110500 Provides: web_browser Provides: firefox = %{version}-%{release} Provides: firefox = %{mainver} @@ -66,14 +66,13 @@ Patch2: mozilla-nongnome-proxies.patch Patch3: mozilla-prefer_plugin_pref.patch Patch4: mozilla-shared-nss-db.patch Patch5: mozilla-kde.patch +Patch6: mozilla-preferences.patch Patch7: mozilla-language.patch -Patch9: mozilla-cairo-return.patch -Patch10: mozilla-ntlm-full-path.patch -Patch12: mozilla-repo.patch -Patch13: mozilla-dump_syms-static.patch -Patch14: mozilla-sle11.patch -Patch15: mozilla-linux3.patch -Patch16: mozilla-curl.patch +Patch8: mozilla-ntlm-full-path.patch +Patch9: mozilla-repo.patch +Patch10: mozilla-dump_syms-static.patch +Patch11: mozilla-sle11.patch +Patch12: mozilla-linux3.patch # Firefox/browser Patch31: firefox-browser-css.patch Patch32: firefox-cross-desktop.patch @@ -196,16 +195,15 @@ cd $RPM_BUILD_DIR/mozilla %patch3 -p1 %patch4 -p1 %patch5 -p1 +%patch6 -p1 %patch7 -p1 +%patch8 -p1 %patch9 -p1 %patch10 -p1 -%patch12 -p1 -%patch13 -p1 %if %suse_version < 1120 -%patch14 -p1 +%patch11 -p1 %endif -%patch15 -p1 -%patch16 -p1 +%patch12 -p1 # %patch31 -p1 %patch32 -p1 @@ -238,6 +236,7 @@ export MOZ_SOURCE_REPO=$REPO export MOZ_BUILD_DATE=%{releasedate} export MOZILLA_OFFICIAL=1 export BUILD_OFFICIAL=1 +export MOZ_TELEMETRY_REPORTING=1 export CFLAGS="$RPM_OPT_FLAGS -Os -fno-strict-aliasing" %ifarch ppc64 export CFLAGS="$CFLAGS -mminimal-toc" @@ -303,9 +302,6 @@ make -C browser/installer STRIP=/bin/true mkdir -p $RPM_BUILD_ROOT/%{progdir} cp -rf $RPM_BUILD_DIR/obj/dist/firefox/* $RPM_BUILD_ROOT%{progdir} mkdir -p $RPM_BUILD_ROOT/%{progdir}/distribution/extensions -# remove some executable permissions -find $RPM_BUILD_ROOT%{progdir} \ - -name "*.js" -o -name "*.jsm" -o -name "*.rdf" | xargs chmod a-x mkdir -p $RPM_BUILD_ROOT%{progdir}/searchplugins # install kde.js %if %suse_version >= 1110 @@ -331,8 +327,8 @@ for locale in $(awk '{ print $1; }' ../mozilla/browser/locales/shipped-locales); popd LOCALE_MERGEDIR=$RPM_BUILD_DIR/l10n-merged/$locale \ make -C browser/locales langpack-$locale - cp -r dist/xpi-stage/locale-$locale \ - $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org + cp -rL dist/xpi-stage/locale-$locale \ + $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org # remove prefs and profile defaults from langpack rm -rf $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org/defaults # check against the fixed common list and sort into the right filelist @@ -346,6 +342,13 @@ for locale in $(awk '{ print $1; }' ../mozilla/browser/locales/shipped-locales); esac done %endif +# remove some executable permissions +find $RPM_BUILD_ROOT%{progdir} \ + -name "*.js" -o \ + -name "*.jsm" -o \ + -name "*.rdf" -o \ + -name "*.properties" -o \ + -name "*.dtd" | xargs chmod a-x # overwrite the mozilla start-script and link it to /usr/bin mkdir --parents $RPM_BUILD_ROOT/usr/bin sed "s:%%PREFIX:%{_prefix}:g diff --git a/compare-locales.tar.bz2 b/compare-locales.tar.bz2 index 5d945cc..94d2caf 100644 --- a/compare-locales.tar.bz2 +++ b/compare-locales.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:873db0259c66f9bab193470cb2b407b7c33080638efc0c98dbf08a0f3cf21156 -size 25677 +oid sha256:3ca29edc09eda06374e682f7976d07d79ce7af4878a48cf277b20970f07d6995 +size 25675 diff --git a/create-tar.sh b/create-tar.sh index d928c70..a7ff168 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -1,8 +1,9 @@ #!/bin/bash -BRANCH="releases/mozilla-release" -RELEASE_TAG="FIREFOX_7_0_1_RELEASE" -VERSION="7.0.1" +CHANNEL="release" +BRANCH="releases/mozilla-$CHANNEL" +RELEASE_TAG="FIREFOX_8_0_RELEASE" +VERSION="8.0" # mozilla hg clone http://hg.mozilla.org/$BRANCH mozilla @@ -23,7 +24,7 @@ for locale in $(awk '{ print $1; }' mozilla/browser/locales/shipped-locales); do ja-JP-mac|en-US) ;; *) - hg clone http://hg.mozilla.org/releases/l10n/mozilla-release/$locale l10n/$locale + hg clone http://hg.mozilla.org/releases/l10n/mozilla-$CHANNEL/$locale l10n/$locale [ "$RELEASE_TAG" == "default" ] || hg -R l10n/$locale up -C -r $RELEASE_TAG ;; esac diff --git a/firefox-7.0.1-source.tar.bz2 b/firefox-7.0.1-source.tar.bz2 deleted file mode 100644 index a586d96..0000000 --- a/firefox-7.0.1-source.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:47bd239a09caa0f8f866030f1190b1db81376022083e065fb8e4420aadfc8a4e -size 68815916 diff --git a/firefox-8.0-source.tar.bz2 b/firefox-8.0-source.tar.bz2 new file mode 100644 index 0000000..0167c3e --- /dev/null +++ b/firefox-8.0-source.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:52ec651f4a7a0a22f317b5d3cf45e6b7817deea686178715ec8d87cf45732257 +size 70118504 diff --git a/firefox-branded-icons.patch b/firefox-branded-icons.patch index 620d2c3..83ecc40 100644 --- a/firefox-branded-icons.patch +++ b/firefox-branded-icons.patch @@ -1,10 +1,10 @@ # HG changeset patch -# Parent 6948d58326d5c2e46936e186079421e7d76445e2 +# Parent 87462739809ad0f41fd335f9a68203fd70f9883c diff --git a/browser/app/Makefile.in b/browser/app/Makefile.in --- a/browser/app/Makefile.in +++ b/browser/app/Makefile.in -@@ -199,16 +199,21 @@ DEFINES += -DMOZILLA_OFFICIAL +@@ -194,16 +194,21 @@ DEFINES += -DMOZILLA_OFFICIAL endif ifeq ($(MOZ_WIDGET_TOOLKIT),gtk2) @@ -20,16 +20,16 @@ diff --git a/browser/app/Makefile.in b/browser/app/Makefile.in +endif endif - ifdef MOZ_SPLASHSCREEN - ifeq ($(MOZ_WIDGET_TOOLKIT),windows) - libs:: - $(INSTALL) $(IFLAGS1) $(DIST)/branding/splash.bmp $(DIST)/bin - endif - endif + libs:: $(srcdir)/profile/prefs.js + $(INSTALL) $(IFLAGS1) $^ $(DIST)/bin/defaults/profile + + libs:: $(srcdir)/blocklist.xml + $(INSTALL) $(IFLAGS1) $^ $(DIST)/bin + diff --git a/browser/branding/official/Makefile.in b/browser/branding/official/Makefile.in --- a/browser/branding/official/Makefile.in +++ b/browser/branding/official/Makefile.in -@@ -69,18 +69,21 @@ OSX_BRANDING_FILES = \ +@@ -65,18 +65,21 @@ OSX_BRANDING_FILES = \ firefox.icns \ disk.icns \ document.icns \ @@ -54,7 +54,7 @@ diff --git a/browser/branding/official/Makefile.in b/browser/branding/official/M diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in --- a/browser/installer/package-manifest.in +++ b/browser/installer/package-manifest.in -@@ -421,18 +421,21 @@ +@@ -415,18 +415,21 @@ #ifdef SHIP_FEEDBACK @BINPATH@/distribution/extensions/testpilot@labs.mozilla.com.xpi #endif diff --git a/firefox-kde.patch b/firefox-kde.patch index 2e0653e..123fa8f 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -2,7 +2,7 @@ diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1038 @@ +@@ -0,0 +1,1055 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -239,14 +239,6 @@ new file mode 100644 + close="true" + onpopuphiding="InspectorUI.closeInspectorUI();" + label="&inspectPanelTitle.label;"> -+ -+ -+ + + + @@ -286,10 +278,10 @@ new file mode 100644 + oncommand="BrowserFullScreen();"/> + + -+ + + ++ ++ ++ ++ ++ ++ + + +#ifdef CAN_DRAW_IN_TITLEBAR @@ -473,12 +483,12 @@ new file mode 100644 + label="&backCmd.label;" + command="Browser:BackOrBackDuplicate" + onclick="checkForMiddleClick(this, event);" -+ tooltiptext="&backButton.tooltip;"/> ++ tooltip="back-button-tooltip"/> + ++ tooltip="forward-button-tooltip"/> + + + + + ++ + + + -+ ++ + + + @@ -1029,12 +1052,6 @@ new file mode 100644 +#endif + + -+#