- update to Firefox 43.0.3

* requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=475

MozillaFirefox.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Sat Dec 26 07:37:19 UTC 2015 - wr@rosenauer.org
+
+- update to Firefox 43.0.3
+  * requires NSS 3.20.2 to fix
+    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
+    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
+    server signature
+  * various changes to support Windows update (SHA-1 vs. SHA-2)
+  * workaround Youtube user agent detection issue (bmo#1233970)
+- fix file download regression for multi user systems
+  (bmo#1233434) (mozilla-bmo1233434.patch)
+
 -------------------------------------------------------------------
 Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org
 

MozillaFirefox.spec

@@ -19,9 +19,9 @@
 
 # changed with every update
 %define major 43
-%define mainver %major.0
+%define mainver %major.0.3
 %define update_channel release
-%define releasedate 2015121300
+%define releasedate 2015122500
 
 # general build definitions
 %if "%{update_channel}" != "aurora"
@@ -77,7 +77,7 @@ BuildRequires:  libnotify-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.10.10
-BuildRequires:  mozilla-nss-devel >= 3.19.4
+BuildRequires:  mozilla-nss-devel >= 3.20.2
 BuildRequires:  nss-shared-helper-devel
 BuildRequires:  python-devel
 BuildRequires:  startup-notification-devel
@@ -90,6 +90,17 @@ BuildRequires:  pkgconfig(gstreamer-%gstreamer_ver)
 BuildRequires:  pkgconfig(gstreamer-app-%gstreamer_ver)
 BuildRequires:  pkgconfig(gstreamer-plugins-base-%gstreamer_ver)
 BuildRequires:  pkgconfig(libpulse)
+# libavcodec is already used if available for H.264 but
+# explicitely loaded by FF. For proper H.264 support the
+# openSUSE delivered version is not sufficient but currently
+# prevents even the use of the GStreamer method
+# https://bugzilla.mozilla.org/show_bug.cgi?id=1234157
+# to get H.264 working correctly libavcodec from packman
+# is required. As of today the following recommends will
+# pull in libavcodec52 from packman since it's the only
+# package providing libavcodec but it's not loaded from
+# Firefox as the minimal version is 53
+#Recommends:     libavcodec
 %if 0%{?gstreamer} == 1
 Requires:       libgstreamer-1_0-0
 Recommends:     gstreamer-fluendo-mp3
@@ -147,6 +158,7 @@ Patch7:         mozilla-repo.patch
 Patch8:         mozilla-openaes-decl.patch
 Patch10:        mozilla-no-stdcxx-check.patch
 Patch11:        mozilla-libproxy.patch
+Patch12:        mozilla-bmo1233434.patch
 # Firefox/browser
 Patch101:       firefox-kde.patch
 Patch102:       firefox-no-default-ualocale.patch
@@ -256,6 +268,7 @@ cd $RPM_BUILD_DIR/mozilla
 %patch8 -p1
 %patch10 -p1
 %patch11 -p1
+%patch12 -p1
 # Firefox
 %patch101 -p1
 %patch102 -p1

compare-locales.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:bd4f98f3d7ed94b9a840f7090e3dbc2d1d9b798835dfe2a47cc9028e7222efa4
+oid sha256:4c4fa751e8d78829db3740eab62b71e605d9b97967f61358b01b8900a6b29bfa
 size 28416

create-tar.sh

@@ -2,8 +2,8 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_43_0_RELEASE"
+RELEASE_TAG="FIREFOX_43_0_3_RELEASE"
-VERSION="43.0"
+VERSION="43.0.3"
 
 # mozilla
 if [ -d mozilla ]; then

firefox-43.0-source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:78c2be9ecbf3017cc26a56e5fc148d2ee03c4023242e3f6b41e487e6ab1a2202
-size 185216796

firefox-43.0.3-source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1ce8085c8b0dd4102701d2b442ad3c9076359b2ee522a3d6d10471cd25da970b
+size 185751552

l10n-43.0.3.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:93f9aee25ec756147f26e62eb8bbe7c556ada63bd25b24ea626cea96dfdc1963
+size 43068464

l10n-43.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:34ac9b0f951da5d5a89c20f0a8d01ccec7b7c62a0016e7a6fc05b3a0499efeb1
-size 43056884

mozilla-bmo1233434.patch

@@ -0,0 +1,45 @@
+
+# HG changeset patch
+# User Aidin Gharibnavaz <aidin@aidinhut.com>
+# Date 1450550460 -12600
+# Node ID 07ec362866977f37e638fc88e3079621fd7aef96
+# Parent  cb66ffeb6725e8344818e8e2f707ae2eaeb953b4
+Bug 1233434 - Fixing download failure on a multi-user GNU/Linux machine. r?bagder
+
+diff -r cb66ffeb6725 -r 07ec36286697 uriloader/exthandler/nsExternalHelperAppService.cpp
+--- a/uriloader/exthandler/nsExternalHelperAppService.cpp	Tue Dec 15 14:45:06 2015 +0100
++++ b/uriloader/exthandler/nsExternalHelperAppService.cpp	Sat Dec 19 22:11:00 2015 +0330
+@@ -416,12 +416,12 @@
+     const char* userName = PR_GetEnv("USERNAME");
+     if (!userName || !*userName) {
+       userName = PR_GetEnv("USER");
+-      if (!userName || !*userName) {
+-        userName = PR_GetEnv("LOGNAME");
+-      }
+-      else {
+-        userName = "mozillaUser";
+-      }
++    }
++    if (!userName || !*userName) {
++      userName = PR_GetEnv("LOGNAME");
++    }
++    if (!userName || !*userName) {
++      userName = "mozillaUser";
+     }
+ 
+     nsAutoString userDir;
+@@ -447,7 +447,12 @@
+         rv = finalPath->GetPermissions(&permissions);
+         NS_ENSURE_SUCCESS(rv, rv);
+ 
+-        if (permissions == PR_IRWXU) {
++        // Ensuring the path is writable by the current user.
++        bool isWritable;
++        rv = finalPath->IsWritable(&isWritable);
++        NS_ENSURE_SUCCESS(rv, rv);
++
++        if (permissions == PR_IRWXU && isWritable) {
+           dir = finalPath;
+           break;
+         }
+

source-stamp.txt

@@ -1,2 +1,2 @@
-REV=fc05d86dc310
+REV=f227eec41a24
 REPO=http://hg.mozilla.org/releases/mozilla-release