- Mozilla Firefox 103.0

https://www.mozilla.org/en-US/firefox/103.0/releasenotes
  MFSA 2022-28 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36317 (bmo#1759951)
    Long URL would hang Firefox for Android
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local <code>.lnk</code> files could cause unexpected
    network loads
  * CVE-2022-36315 (bmo#1762520)
    Preload Cache Bypasses Subresource Integrity
  * CVE-2022-36316 (bmo#1768583)
    Performance API leaked whether a cross-site resource is
    redirecting
  * CVE-2022-36320 (bmo#1759794, bmo#1760998)
    Memory safety bugs fixed in Firefox 103
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- requires
  NSS >= 3.80
  rust = 1.61
  rust-cbindgen >= 0.24.3

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=988

MozillaFirefox.changes

@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Wed Jul 27 07:13:07 UTC 2022 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Firefox 103.0
+  https://www.mozilla.org/en-US/firefox/103.0/releasenotes
+  MFSA 2022-28 (bsc#1201758)
+  * CVE-2022-36319 (bmo#1737722)
+    Mouse Position spoofing with CSS transforms
+  * CVE-2022-36317 (bmo#1759951)
+    Long URL would hang Firefox for Android
+  * CVE-2022-36318 (bmo#1771774)
+    Directory indexes for bundled resources reflected URL
+    parameters
+  * CVE-2022-36314 (bmo#1773894)
+    Opening local <code>.lnk</code> files could cause unexpected
+    network loads
+  * CVE-2022-36315 (bmo#1762520)
+    Preload Cache Bypasses Subresource Integrity
+  * CVE-2022-36316 (bmo#1768583)
+    Performance API leaked whether a cross-site resource is
+    redirecting
+  * CVE-2022-36320 (bmo#1759794, bmo#1760998)
+    Memory safety bugs fixed in Firefox 103
+  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
+    Memory safety bugs fixed in Firefox 103 and 102.1
+- requires
+  NSS >= 3.80
+  rust = 1.61
+  rust-cbindgen >= 0.24.3
+
 -------------------------------------------------------------------
 Wed Jul 13 07:54:21 UTC 2022 - Guillaume GARDET <guillaume.gardet@opensuse.org>
 

MozillaFirefox.spec

@@ -28,9 +28,9 @@
 # orig_suffix b3
 # major 69
 # mainver %major.99
-%define major          102
+%define major          103
-%define mainver        %major.0.1
+%define mainver        %major.0
-%define orig_version   102.0.1
+%define orig_version   103.0
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
@@ -106,8 +106,8 @@ BuildRequires:  rust >= 1.59
 # minimal requirement:
 BuildRequires:  rust+cargo >= 1.59
 # actually used upstream:
-BuildRequires:  cargo1.60
+BuildRequires:  cargo1.61
-BuildRequires:  rust1.60
+BuildRequires:  rust1.61
 %endif
 %if 0%{useccache} != 0
 BuildRequires:  ccache
@@ -118,7 +118,7 @@ BuildRequires:  libiw-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.34
-BuildRequires:  mozilla-nss-devel >= 3.79
+BuildRequires:  mozilla-nss-devel >= 3.80
 BuildRequires:  nasm >= 2.14
 BuildRequires:  nodejs >= 10.22.1
 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
@@ -128,7 +128,7 @@ BuildRequires:  python36
 BuildRequires:  python3 >= 3.5
 BuildRequires:  python3-devel
 %endif
-BuildRequires:  rust-cbindgen >= 0.23.0
+BuildRequires:  rust-cbindgen >= 0.24.3
 BuildRequires:  unzip
 BuildRequires:  update-desktop-files
 BuildRequires:  xorg-x11-libXt-devel

firefox-102.0.1.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7bba6ffd6e8e42d5c38aa2a453f5fa30dfc9ef150f2175aa0625edb68fddae70
-size 477609884

firefox-102.0.1.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEQ2D+IQnEl2MYb44h6+QekPbxL20FAmLEMLQACgkQ6+QekPbx
-L20L7RAAkop4N86YuMe3M78SJNRDNtGw6F/+URA3oBT+Mk8mcJtTx9t1wgjcI+NJ
-7oLHX+D13VlFuouFjh+K6/VCVlFdAM+oxF3KtQpYPUlfMxUUuMpZ1kBr3yFC/izG
-Dq3H4KqUD57rK07u7UKrcQY7iVY9/V5T3pd50inBsSaRDNAkL8d5FvYcOlbxm1ig
-wfwIFXftoTCsDQlIncz12piACJLk+wA5UMBnkc0UL3CNkRaejtbY3aTpm4MTDxIS
-6ZmwpLJMmPQYoA/ak90b966XbN0MKQEX57M+E4zPvZYQUOlHgO0j7rYzMCT3DYFc
-QjyAWp5nIQvEBmoc672pMC20xb90uVRl9ZBxAridVnA8q9+Z3iqI7gPedKr6DtlJ
-YM2RuzfY97fZ2ETMcO98ep3aOgym5FT+9DKojX0KpVkmU0yR5evI8eUO860qUqsA
-7IA8ZI0FXBe4NsWjBDb4PH9FlGkJD9WQIroFB8oo4QP6QSbaQv4YGE4/bnRk3LQN
-DFWKiFQkEtRp0xdZKBEi0yAe1qn1jYzP/ZgNxzPeeNCfPNjd9QywZXOt/nkiHE4s
-hL1G4ZJUAqCnHy2XIkq5oyslKWnmhpvMyHGVSk/cYbWQUbF18jt0PXwmr+pwm9+5
-GwuSxp1FVZ9Hgli7mRM8+COlzMgTKAhueChq/qv7t1FjKbCKtfk=
-=2DkT
------END PGP SIGNATURE-----

firefox-103.0.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:acc41d050560db4c4177ea86e2d00e47d74229041fea4c02c0e9e87e64093773
+size 475708060

firefox-103.0.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=iCIw
+-----END PGP SIGNATURE-----

l10n-102.0.1.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1e84c860104cb0a506b39f5886be4db16c272955c6b8c4fb466a8061dc1326a6
-size 49084872

l10n-103.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d4c33bb3e2763be808ff7f316c8f693f2d399422284084f1cf2579c1b0d41bfd
+size 49358796

mozilla-kde.patch

@@ -3,7 +3,7 @@
 # Date 1559294891 -7200
 #      Fri May 31 11:28:11 2019 +0200
 # Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112
-# Parent  edd7284c391b503b76bb5bb6321f24ab2f5f8bdf
+# Parent  b7a9df31234bb6342e8b01dcfa98b7d8ecdfd1dd
 Description: Add KDE integration to Firefox (toolkit parts)
 Author: Wolfgang Rosenauer <wolfgang@rosenauer.org>
 Author: Lubos Lunak <lunak@suse.com>
@@ -31,7 +31,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
  #ifdef MOZ_MEMORY
  #  include "mozmemory.h"
  #endif
-@@ -4767,16 +4768,27 @@ nsresult Preferences::InitInitialObjects
+@@ -4791,16 +4792,27 @@ nsresult Preferences::InitInitialObjects
      "unix.js"
  #  if defined(_AIX)
      ,
@@ -59,7 +59,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
  
    // Load jar:$app/omni.jar!/defaults/preferences/*.js
    // or jar:$gre/omni.jar!/defaults/preferences/*.js.
-@@ -4841,17 +4853,17 @@ nsresult Preferences::InitInitialObjects
+@@ -4865,17 +4877,17 @@ nsresult Preferences::InitInitialObjects
        }
  
        nsCOMPtr<nsIFile> path = do_QueryInterface(elem);
@@ -255,7 +255,7 @@ diff --git a/toolkit/mozapps/downloads/HelperAppDlg.jsm b/toolkit/mozapps/downlo
 diff --git a/toolkit/system/unixproxy/nsUnixSystemProxySettings.cpp b/toolkit/system/unixproxy/nsUnixSystemProxySettings.cpp
 --- a/toolkit/system/unixproxy/nsUnixSystemProxySettings.cpp
 +++ b/toolkit/system/unixproxy/nsUnixSystemProxySettings.cpp
-@@ -10,16 +10,17 @@
+@@ -10,16 +10,18 @@
  #include "prnetdb.h"
  #include "prenv.h"
  #include "nsInterfaceHashtable.h"
@@ -264,6 +264,7 @@ diff --git a/toolkit/system/unixproxy/nsUnixSystemProxySettings.cpp b/toolkit/sy
  #include "nsNetUtil.h"
  #include "nsISupportsPrimitives.h"
  #include "nsIGSettingsService.h"
++#include "nsPrintfCString.h"
 +#include "nsKDEUtils.h"
  
  using namespace mozilla;
@@ -273,7 +274,7 @@ diff --git a/toolkit/system/unixproxy/nsUnixSystemProxySettings.cpp b/toolkit/sy
    NS_DECL_ISUPPORTS
    NS_DECL_NSISYSTEMPROXYSETTINGS
  
-@@ -33,16 +34,18 @@ class nsUnixSystemProxySettings final : 
+@@ -33,16 +35,18 @@ class nsUnixSystemProxySettings final : 
    nsCOMPtr<nsIGSettingsCollection> mProxySettings;
    nsInterfaceHashtable<nsCStringHashKey, nsIGSettingsCollection>
        mSchemeProxySettings;
@@ -292,7 +293,7 @@ diff --git a/toolkit/system/unixproxy/nsUnixSystemProxySettings.cpp b/toolkit/sy
  nsUnixSystemProxySettings::GetMainThreadOnly(bool* aMainThreadOnly) {
    // dbus prevents us from being threadsafe, but this routine should not block
    // anyhow
-@@ -378,21 +381,50 @@ nsresult nsUnixSystemProxySettings::GetP
+@@ -378,21 +382,50 @@ nsresult nsUnixSystemProxySettings::GetP
    return NS_OK;
  }
  
@@ -1244,7 +1245,7 @@ diff --git a/uriloader/exthandler/unix/nsOSHelperAppService.cpp b/uriloader/exth
 diff --git a/widget/gtk/moz.build b/widget/gtk/moz.build
 --- a/widget/gtk/moz.build
 +++ b/widget/gtk/moz.build
-@@ -154,16 +154,17 @@ FINAL_LIBRARY = "xul"
+@@ -146,16 +146,17 @@ FINAL_LIBRARY = "xul"
  
  LOCAL_INCLUDES += [
      "/layout/base",
@@ -1788,8 +1789,8 @@ diff --git a/xpcom/components/moz.build b/xpcom/components/moz.build
 diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp
 --- a/xpcom/io/nsLocalFileUnix.cpp
 +++ b/xpcom/io/nsLocalFileUnix.cpp
-@@ -54,16 +54,17 @@
+@@ -46,16 +46,17 @@
- #include "prproces.h"
+ #include "nsString.h"
  #include "nsIDirectoryEnumerator.h"
  #include "nsSimpleEnumerator.h"
  #include "private/pprio.h"
@@ -1806,7 +1807,7 @@ diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp
  #  include "prmem.h"
  #  include "plbase64.h"
  
-@@ -2097,20 +2098,29 @@ nsLocalFile::SetPersistentDescriptor(con
+@@ -2083,20 +2084,29 @@ nsLocalFile::SetPersistentDescriptor(con
  
  NS_IMETHODIMP
  nsLocalFile::Reveal() {
@@ -1838,7 +1839,7 @@ diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp
      ::CFRelease(url);
      return rv;
    }
-@@ -2122,16 +2132,23 @@ nsLocalFile::Reveal() {
+@@ -2108,16 +2118,23 @@ nsLocalFile::Reveal() {
  
  NS_IMETHODIMP
  nsLocalFile::Launch() {

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="firefox"
 CHANNEL="release"
-VERSION="102.0.1"
+VERSION="103.0"
 VERSION_SUFFIX=""
-PREV_VERSION="102.0"
+PREV_VERSION="102.0.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
-RELEASE_TAG="a7294bfb43712ab3225c76087cd359a22ea8fa7d"
+RELEASE_TAG="5c3227d2de55585def91bf8c3eb60794c3865b87"
-RELEASE_TIMESTAMP="20220705093820"
+RELEASE_TIMESTAMP="20220718155818"