diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index ab6ce45..83bcba2 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,16 @@ +------------------------------------------------------------------- +Sat Dec 26 07:37:19 UTC 2015 - wr@rosenauer.org + +- update to Firefox 43.0.3 + * requires NSS 3.20.2 to fix + MFSA 2015-150/CVE-2015-7575 (bmo#1158489) + MD5 signatures accepted within TLS 1.2 ServerKeyExchange in + server signature + * various changes to support Windows update (SHA-1 vs. SHA-2) + * workaround Youtube user agent detection issue (bmo#1233970) +- fix file download regression for multi user systems + (bmo#1233434) (mozilla-bmo1233434.patch) + ------------------------------------------------------------------- Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index a623399..fd6e060 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -19,9 +19,9 @@ # changed with every update %define major 43 -%define mainver %major.0 +%define mainver %major.0.3 %define update_channel release -%define releasedate 2015121300 +%define releasedate 2015122500 # general build definitions %if "%{update_channel}" != "aurora" @@ -77,7 +77,7 @@ BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.10.10 -BuildRequires: mozilla-nss-devel >= 3.19.4 +BuildRequires: mozilla-nss-devel >= 3.20.2 BuildRequires: nss-shared-helper-devel BuildRequires: python-devel BuildRequires: startup-notification-devel @@ -90,6 +90,17 @@ BuildRequires: pkgconfig(gstreamer-%gstreamer_ver) BuildRequires: pkgconfig(gstreamer-app-%gstreamer_ver) BuildRequires: pkgconfig(gstreamer-plugins-base-%gstreamer_ver) BuildRequires: pkgconfig(libpulse) +# libavcodec is already used if available for H.264 but +# explicitely loaded by FF. For proper H.264 support the +# openSUSE delivered version is not sufficient but currently +# prevents even the use of the GStreamer method +# https://bugzilla.mozilla.org/show_bug.cgi?id=1234157 +# to get H.264 working correctly libavcodec from packman +# is required. As of today the following recommends will +# pull in libavcodec52 from packman since it's the only +# package providing libavcodec but it's not loaded from +# Firefox as the minimal version is 53 +#Recommends: libavcodec %if 0%{?gstreamer} == 1 Requires: libgstreamer-1_0-0 Recommends: gstreamer-fluendo-mp3 @@ -147,6 +158,7 @@ Patch7: mozilla-repo.patch Patch8: mozilla-openaes-decl.patch Patch10: mozilla-no-stdcxx-check.patch Patch11: mozilla-libproxy.patch +Patch12: mozilla-bmo1233434.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-no-default-ualocale.patch @@ -256,6 +268,7 @@ cd $RPM_BUILD_DIR/mozilla %patch8 -p1 %patch10 -p1 %patch11 -p1 +%patch12 -p1 # Firefox %patch101 -p1 %patch102 -p1 diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 88a88b5..4df96ae 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:bd4f98f3d7ed94b9a840f7090e3dbc2d1d9b798835dfe2a47cc9028e7222efa4 +oid sha256:4c4fa751e8d78829db3740eab62b71e605d9b97967f61358b01b8900a6b29bfa size 28416 diff --git a/create-tar.sh b/create-tar.sh index cdfad80..5d6ed51 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_43_0_RELEASE" -VERSION="43.0" +RELEASE_TAG="FIREFOX_43_0_3_RELEASE" +VERSION="43.0.3" # mozilla if [ -d mozilla ]; then diff --git a/firefox-43.0-source.tar.xz b/firefox-43.0-source.tar.xz deleted file mode 100644 index ec24fea..0000000 --- a/firefox-43.0-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:78c2be9ecbf3017cc26a56e5fc148d2ee03c4023242e3f6b41e487e6ab1a2202 -size 185216796 diff --git a/firefox-43.0.3-source.tar.xz b/firefox-43.0.3-source.tar.xz new file mode 100644 index 0000000..2d3141a --- /dev/null +++ b/firefox-43.0.3-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1ce8085c8b0dd4102701d2b442ad3c9076359b2ee522a3d6d10471cd25da970b +size 185751552 diff --git a/l10n-43.0.3.tar.xz b/l10n-43.0.3.tar.xz new file mode 100644 index 0000000..19ac599 --- /dev/null +++ b/l10n-43.0.3.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:93f9aee25ec756147f26e62eb8bbe7c556ada63bd25b24ea626cea96dfdc1963 +size 43068464 diff --git a/l10n-43.0.tar.xz b/l10n-43.0.tar.xz deleted file mode 100644 index b720174..0000000 --- a/l10n-43.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:34ac9b0f951da5d5a89c20f0a8d01ccec7b7c62a0016e7a6fc05b3a0499efeb1 -size 43056884 diff --git a/mozilla-bmo1233434.patch b/mozilla-bmo1233434.patch new file mode 100644 index 0000000..3398699 --- /dev/null +++ b/mozilla-bmo1233434.patch @@ -0,0 +1,45 @@ + +# HG changeset patch +# User Aidin Gharibnavaz +# Date 1450550460 -12600 +# Node ID 07ec362866977f37e638fc88e3079621fd7aef96 +# Parent cb66ffeb6725e8344818e8e2f707ae2eaeb953b4 +Bug 1233434 - Fixing download failure on a multi-user GNU/Linux machine. r?bagder + +diff -r cb66ffeb6725 -r 07ec36286697 uriloader/exthandler/nsExternalHelperAppService.cpp +--- a/uriloader/exthandler/nsExternalHelperAppService.cpp Tue Dec 15 14:45:06 2015 +0100 ++++ b/uriloader/exthandler/nsExternalHelperAppService.cpp Sat Dec 19 22:11:00 2015 +0330 +@@ -416,12 +416,12 @@ + const char* userName = PR_GetEnv("USERNAME"); + if (!userName || !*userName) { + userName = PR_GetEnv("USER"); +- if (!userName || !*userName) { +- userName = PR_GetEnv("LOGNAME"); +- } +- else { +- userName = "mozillaUser"; +- } ++ } ++ if (!userName || !*userName) { ++ userName = PR_GetEnv("LOGNAME"); ++ } ++ if (!userName || !*userName) { ++ userName = "mozillaUser"; + } + + nsAutoString userDir; +@@ -447,7 +447,12 @@ + rv = finalPath->GetPermissions(&permissions); + NS_ENSURE_SUCCESS(rv, rv); + +- if (permissions == PR_IRWXU) { ++ // Ensuring the path is writable by the current user. ++ bool isWritable; ++ rv = finalPath->IsWritable(&isWritable); ++ NS_ENSURE_SUCCESS(rv, rv); ++ ++ if (permissions == PR_IRWXU && isWritable) { + dir = finalPath; + break; + } + diff --git a/source-stamp.txt b/source-stamp.txt index 20778dc..98d6e0d 100644 --- a/source-stamp.txt +++ b/source-stamp.txt @@ -1,2 +1,2 @@ -REV=fc05d86dc310 +REV=f227eec41a24 REPO=http://hg.mozilla.org/releases/mozilla-release