diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 57dd1e3..ba54fa2 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,60 @@ +------------------------------------------------------------------- +Thu Nov 9 15:01:30 UTC 2017 - wr@rosenauer.org + +- update to Firefox 57.0b14 + * Firefox Quantum + * Photon UI + * Unified address and search bar + * AMD VP9 hardware video decoder support + * Added support for Date/Time input + * stricter security sandbox blocking filesystem reading and + writing on Linux systems + * middle mouse paste in the content area no longer navigates to + URLs by default on Unix systems + MFSA 2017-24 + * CVE-2017-7828 (bmo#1406750. bmo#1412252) + Use-after-free of PressShell while restyling layout + * CVE-2017-7830 (bmo#1408990) + Cross-origin URL information leak through Resource Timing API + * CVE-2017-7831 (bmo#1392026) + Information disclosure of exposed properties on JavaScript proxy + objects + * CVE-2017-7832 (bmo#1408782) + Domain spoofing through use of dotless 'i' character followed + by accent markers + * CVE-2017-7833 (bmo#1370497) + Domain spoofing with Arabic and Indic vowel marker characters + * CVE-2017-7834 (bmo#1358009) + data: URLs opened in new tabs bypass CSP protections + * CVE-2017-7835 (bmo#1402363) + Mixed content blocking incorrectly applies with redirects + * CVE-2017-7836 (bmo#1401339) + Pingsender dynamically loads libcurl on Linux and OS X + * CVE-2017-7837 (bmo#1325923) + SVG loaded as can use meta tags to set cookies + * CVE-2017-7838 (bmo#1399540) + Failure of individual decoding of labels in international domain + names triggers punycode display of entire IDN + * CVE-2017-7839 (bmo#1402896) + Control characters before javascript: URLs defeats self-XSS + prevention mechanism + * CVE-2017-7840 (bmo#1366420) + Exported bookmarks do not strip script elements from user-supplied + tags + * CVE-2017-7842 (bmo#1397064) + Referrer Policy is not always respected for elements + * CVE-2017-7827 + Memory safety bugs fixed in Firefox 57 + * CVE-2017-7826 + Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 +- requires NSPR 4.17, NSS 3.33 and rustc 1.19 +- rebased patches +- added mozilla-bindgen-systemlibs.patch to allow stylo build + with system libs (bmo#1341234) +- removed mozilla-language.patch since the whole locale code + changed in Firefox and is relying on ICU now +- removed obsolete mozilla-ucontext.patch + ------------------------------------------------------------------- Sat Oct 28 06:30:37 UTC 2017 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index cb86d16..2aae3e1 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -18,11 +18,11 @@ # changed with every update -%define major 56 -%define mainver %major.0.2 +%define major 57 +%define mainver %major.0 %define update_channel release %define branding 1 -%define releasedate 20171024165158 +%define releasedate 20171109183137 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -72,10 +72,10 @@ BuildRequires: libiw-devel BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo -BuildRequires: mozilla-nspr-devel >= 4.16 -BuildRequires: mozilla-nss-devel >= 3.32.1 +BuildRequires: mozilla-nspr-devel >= 4.17 +BuildRequires: mozilla-nss-devel >= 3.33 BuildRequires: python-devel -BuildRequires: rust >= 1.15.1 +BuildRequires: rust >= 1.19 BuildRequires: rust-std BuildRequires: startup-notification-devel BuildRequires: unzip @@ -95,6 +95,9 @@ BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) %if 0%{?suse_version} > 1320 BuildRequires: llvm-clang-devel >= 3.9.0 +%else +# this covers the workaround to compile on Leap 42 in OBS +BuildRequires: clang4-devel %endif # libavcodec is required for H.264 support but the # openSUSE version is currently not able to play H.264 @@ -143,14 +146,13 @@ Source18: mozilla-api-key Source19: google-api-key # Gecko/Toolkit Patch1: mozilla-nongnome-proxies.patch -Patch3: mozilla-kde.patch -Patch5: mozilla-language.patch -Patch6: mozilla-ntlm-full-path.patch -Patch7: mozilla-openaes-decl.patch -Patch8: mozilla-no-stdcxx-check.patch -Patch9: mozilla-reduce-files-per-UnifiedBindings.patch -Patch10: mozilla-aarch64-startup-crash.patch -Patch11: mozilla-ucontext.patch +Patch2: mozilla-kde.patch +Patch3: mozilla-ntlm-full-path.patch +Patch4: mozilla-openaes-decl.patch +Patch5: mozilla-no-stdcxx-check.patch +Patch6: mozilla-reduce-files-per-UnifiedBindings.patch +Patch7: mozilla-aarch64-startup-crash.patch +Patch8: mozilla-bindgen-systemlibs.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-no-default-ualocale.patch @@ -253,16 +255,15 @@ symbols meant for upload to Mozilla's crash collector database. %endif cd $RPM_BUILD_DIR/mozilla %patch1 -p1 +%patch2 -p1 %patch3 -p1 +%patch4 -p1 %patch5 -p1 +%ifarch %ix86 %patch6 -p1 +%endif %patch7 -p1 %patch8 -p1 -%ifarch %ix86 -%patch9 -p1 -%endif -%patch10 -p1 -%patch11 -p1 # Firefox %patch101 -p1 %patch102 -p1 @@ -357,9 +358,6 @@ ac_add_options --enable-startup-notification ac_add_options --enable-update-channel=%{update_channel} ac_add_options --with-mozilla-api-keyfile=%{SOURCE18} ac_add_options --with-google-api-keyfile=%{SOURCE19} -%if 0%{?suse_version} <= 1320 -ac_add_options --disable-stylo -%endif %if %branding ac_add_options --enable-official-branding %endif diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index a6a1147..990f926 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:e74ef907b2f1e30c66f69bc3246c18f826faf18ed360ed2640ac825a1f4e5dee -size 28384 +oid sha256:28d155fac8c430f5305e095670073b6072af87e9063ce9a37344f397fa85e927 +size 28368 diff --git a/create-tar.sh b/create-tar.sh index 469f2b8..88d52cd 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_56_0_2_RELEASE" # 56.0.1 build2 -VERSION="56.0.2" +RELEASE_TAG="8af8bd128bd014669ad89774f47668b0b8109337" # build 3 +VERSION="57.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-56.0.2-source.tar.xz b/firefox-56.0.2-source.tar.xz deleted file mode 100644 index 5362368..0000000 --- a/firefox-56.0.2-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:35af0610782685d9e43fc53d7af53e91eb605993dd1be215f3145ec6f68521eb -size 271922384 diff --git a/firefox-57.0-source.tar.xz b/firefox-57.0-source.tar.xz new file mode 100644 index 0000000..abc9c8e --- /dev/null +++ b/firefox-57.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d3dc10e75d32884e0a52f785210feb24ed6564375444d85c26f36544f405008f +size 266361856 diff --git a/firefox-branded-icons.patch b/firefox-branded-icons.patch index f4aa29c..8a47c13 100644 --- a/firefox-branded-icons.patch +++ b/firefox-branded-icons.patch @@ -1,11 +1,11 @@ # HG changeset patch # Parent e0751ad74e835e80041a61ea00c2a63bf6fbe2de -# Parent 6309c3625e39216f9cf5a7a35cbf6932adfabc1d +# Parent 75308bbaaf73d672c88cb283591d4aefc7db9804 diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/branding-common.mozbuild --- a/browser/branding/branding-common.mozbuild +++ b/browser/branding/branding-common.mozbuild -@@ -41,18 +41,24 @@ def FirefoxBranding(): +@@ -38,18 +38,24 @@ def FirefoxBranding(): 'disk.icns', 'document.icns', 'dsstore', @@ -33,7 +33,7 @@ diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/brandi diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in --- a/browser/installer/package-manifest.in +++ b/browser/installer/package-manifest.in -@@ -599,18 +599,21 @@ +@@ -618,18 +618,21 @@ @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/chrome.manifest @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf @RESPATH@/chrome/toolkit@JAREXT@ diff --git a/firefox-kde.patch b/firefox-kde.patch index 8a9d72e..a840dc4 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 05209af7fdfec897f5f574c691184ba27049b0ff +# Parent 9f19902f8bcde21fa63172a85818fb11714878d8 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1320 @@ +@@ -0,0 +1,1252 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -73,7 +73,9 @@ new file mode 100644 +# so that they can be shared by macBrowserOverlay.xul. +#include global-scripts.inc + -+ + +# All sets except for popupsets (commands, keys, stringbundles and broadcasters) *must* go into the +# browser-sets.inc file for sharing with hiddenWindow.xul. @@ -95,6 +97,9 @@ new file mode 100644 +