diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 81c0765..5fa9f57 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,84 @@ +------------------------------------------------------------------- +Mon Nov 14 21:07:03 UTC 2016 - wr@rosenauer.org + +- update to Firefox 50.0 (boo#1009026) + * requires NSS 3.26.2 + new features + * Updates to keyboard shortcuts + Set a preference to have Ctrl+Tab cycle through tabs in recently + used order + View a page in Reader Mode by using Ctrl+Alt+R + * Added option to Find in page that allows users to limit search to + whole words only + * Added download protection for a large number of executable file + types on Windows, Mac and Linux + * Fixed rendering of dashed and dotted borders with rounded corners + (border-radius) + * Added a built-in Emoji set for operating systems without native + Emoji fonts (Windows 8.0 and lower and Linux) + * Blocked versions of libavcodec older than 54.35.1 + * additional locale + security fixes: + * MFSA 2016-89 + CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1 + (bmo#1292443) + CVE-2016-5292: URL parsing causes crash (bmo#1288482) + CVE-2016-5293: Write to arbitrary file with updater and moz + maintenance service using updater.log hardlink + (Windows only) (bmo#1246945) + CVE-2016-5294: Arbitrary target directory for result files of + update process (Windows only) (bmo#1246972) + CVE-2016-5297: Incorrect argument length checking in Javascript + (bmo#1303678) + CVE-2016-9064: Addons update must verify IDs match between + current and new versions (bmo#1303418) + CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen + (Android only) (bmo#1306696) + CVE-2016-9066: Integer overflow leading to a buffer overflow in + nsScriptLoadHandler (bmo#1299686) + CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore + (bmo#1301777, bmo#1308922 (CVE-2016-9069)) + CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973) + CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile + (bmo#1300083) (Windows only) + CVE-2016-9075: WebExtensions can access the mozAddonManager API + and use it to gain elevated privileges (bmo#1295324) + CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied + to cross-origin images, allowing timing attacks on them + (bmo#1298552) + CVE-2016-5291: Same-origin policy violation using local HTML file + and saved shortcut file (bmo#1292159) + CVE-2016-5295: Mozilla Maintenance Service: Ability to read + arbitrary files as SYSTEM (Windows only) (bmo#1247239) + CVE-2016-5298: SSL indicator can mislead the user about the real + URL visited (bmo#1227538) (Android only) + CVE-2016-5299: Firefox AuthToken in broadcast protected with + signature-level permission can be accessed by an + application installed beforehand that defines the + same permissions (bmo#1245791) (Android only) + CVE-2016-9061: API Key (glocation) in broadcast protected with + signature-level permission can be accessed by an + application installed beforehand that defines the + same permissions (Android only) (bmo#1245795) + CVE-2016-9062: Private browsing browser traces (android) in + browser.db and wal file (Android only) (bmo#1294438) + CVE-2016-9070: Sidebar bookmark can have reference to chrome window + (bmo#1281071) + CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl" + (bmo#1289273) + CVE-2016-9074: Insufficient timing side-channel resistance in + divSpoiler (bmo#1293334) (fixed via NSS 3.26.1) + CVE-2016-9076: select dropdown menu can be used for URL bar + spoofing on e10s (bmo#1276976) + CVE-2016-9063: Possible integer overflow to fix inside XML_Parse + in expat (bmo#1274777) + CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP + (bmo#1285003) + CVE-2016-5289: Memory safety bugs fixed in Firefox 50 + CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5 +- make aarch64 build more similar to x86_64 build (remove conditionals + that don't seem to be necessary anymore) + ------------------------------------------------------------------- Mon Oct 24 09:41:17 UTC 2016 - astieger@suse.com diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index 95cd985..f3ed841 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,10 +18,10 @@ # changed with every update -%define major 49 -%define mainver %major.0.2 +%define major 50 +%define mainver %major.0 %define update_channel release -%define releasedate 20161020000000 +%define releasedate 20161113000000 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -54,10 +54,10 @@ %define branding 1 %endif %define localize 1 -%ifarch aarch64 ppc ppc64 ppc64le s390 s390x ia64 %arm -%define crashreporter 0 -%else +%ifarch %ix86 x86_64 %define crashreporter 1 +%else +%define crashreporter 0 %endif Name: %{pkgname} @@ -75,7 +75,7 @@ BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.12 -BuildRequires: mozilla-nss-devel >= 3.25 +BuildRequires: mozilla-nss-devel >= 3.26.2 BuildRequires: nss-shared-helper-devel BuildRequires: python-devel BuildRequires: startup-notification-devel @@ -203,6 +203,7 @@ of %{appname}. Summary: Extra translations for %{appname} Group: System/Localization Provides: locale(%{name}:ach;af;ak;as;ast;be;bg;bn_BD;bn_IN;br;bs;csb;cy;en_ZA;eo;es_MX;et;eu;fa;ff;fy_NL;ga_IE;gd;gl;gu_IN;he;hi_IN;hr;hy_AM;id;is;kk;km;kn;ku;lg;lij;lt;lv;mai;mk;ml;mr;nn_NO;nso;or;pa_IN;rm;ro;si;sk;sl;son;sq;sr;ta;ta_LK;te;th;tr;uk;uz;vi;zu) +Provides: locale(%{name}:ach;af;an;as;ast;az;be;bg;bn_BD;bn_IN;br;bs;cak;cy;dsb;en_ZA;eo;es_MX;et;eu;fa;ff;fy_NL;ga_IE;gd;gl;gn;gu_IN;he;hi_IN;hr;hsb;hy_AM;id;is;kk;km;kn;lij;lt;lv;mai;mk;ml;mr;ms;nn_NO;or;pa_IN;rm;ro;si;sk;sl;son;sq;sr;ta;te;th;tr;uk;uz;vi;xh) Requires: %{name} = %{version} Obsoletes: %{name}-translations < %{version}-%{release} @@ -334,7 +335,7 @@ ac_add_options --enable-pie ac_add_options --disable-optimize %endif %endif -%ifarch ppc ppc64 ppc64le aarch64 %arm +%ifarch ppc ppc64 ppc64le %arm ac_add_options --disable-elf-hack %endif ac_add_options --with-system-nspr @@ -363,7 +364,7 @@ ac_add_options --with-fpu=vfpv3-d16 ac_add_options --with-float-abi=hard ac_add_options --with-arch=armv7-a %endif -%ifarch %arm aarch64 s390x +%ifarch %arm s390x ac_add_options --disable-webrtc %endif EOF @@ -583,6 +584,7 @@ exit 0 %{progdir}/*.so %{progdir}/icudt56l.dat %{progdir}/omni.ja +%{progdir}/fonts/ %{progdir}/platform.ini %{progdir}/plugin-container %if %crashreporter diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index 601530d..bb6a467 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:4db574a02cfa3f08719ec55e13d7a13cfddfc6fb035fe29ed2cf32deedac4525 -size 28504 +oid sha256:19dcb04b06fba9065298bea01bdf323624b0a7a714d6018b07e2ce7e4c6eca60 +size 28404 diff --git a/create-tar.sh b/create-tar.sh index 789cc23..b00043b 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_49_0_2_RELEASE" -VERSION="49.0.2" +RELEASE_TAG="dc617d65c9f0cdbbe4351cc1e5c288b05f25f8f7" +VERSION="50.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-49.0.2-source.tar.xz b/firefox-49.0.2-source.tar.xz deleted file mode 100644 index 20c2d12..0000000 --- a/firefox-49.0.2-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ef493886c97977dca44c440f97d8bd373582636a2ea025f5f0b9950477db0b00 -size 199458100 diff --git a/firefox-50.0-source.tar.xz b/firefox-50.0-source.tar.xz new file mode 100644 index 0000000..3e675ac --- /dev/null +++ b/firefox-50.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e39b1740e6e76f2b218117f32e4885f740f7ffb4e5aa7b882ba7e694ec70c75a +size 205269544 diff --git a/firefox-kde.patch b/firefox-kde.patch index e7437c0..e2c4a87 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 2704257a50b4ff60fa43eca8d4a547c6d70bb30e +# Parent 2cb2f829aabd7e3efaa973a0a8cf99aca9605bdc diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1179 @@ +@@ -0,0 +1,1200 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -19,7 +19,7 @@ new file mode 100644 + + + -+ ++ + + + @@ -112,6 +112,12 @@ new file mode 100644 + hidden="true" + oncommand="gBrowser.openNonRemoteWindow(TabContextMenu.contextTab);"/> +#endif ++