diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index eccec6c..f94b5fb 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,42 @@ +------------------------------------------------------------------- +Sun Mar 16 13:39:15 UTC 2014 - wr@rosenauer.org + +- update to Firefox 28.0 (bnc#868603) + * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 + Miscellaneous memory safety hazards + * MFSA 2014-17/CVE-2014-1497 (bmo#966311) + Out of bounds read during WAV file decoding + * MFSA 2014-18/CVE-2014-1498 (bmo#935618) + crypto.generateCRMFRequest does not validate type of key + * MFSA 2014-19/CVE-2014-1499 (bmo#961512) + Spoofing attack on WebRTC permission prompt + * MFSA 2014-20/CVE-2014-1500 (bmo#956524) + onbeforeunload and Javascript navigation DOS + * MFSA 2014-22/CVE-2014-1502 (bmo#972622) + WebGL content injection from one domain to rendering in another + * MFSA 2014-23/CVE-2014-1504 (bmo#911547) + Content Security Policy for data: documents not preserved by + session restore + * MFSA 2014-26/CVE-2014-1508 (bmo#963198) + Information disclosure through polygon rendering in MathML + * MFSA 2014-27/CVE-2014-1509 (bmo#966021) + Memory corruption in Cairo during PDF font rendering + * MFSA 2014-28/CVE-2014-1505 (bmo#941887) + SVG filters information disclosure through feDisplacementMap + * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909) + Privilege escalation using WebIDL-implemented APIs + * MFSA 2014-30/CVE-2014-1512 (bmo#982957) + Use-after-free in TypeObject + * MFSA 2014-31/CVE-2014-1513 (bmo#982974) + Out-of-bounds read/write through neutering ArrayBuffer objects + * MFSA 2014-32/CVE-2014-1514 (bmo#983344) + Out-of-bounds write through TypedArrayObject after neutering +- requires NSPR 4.10.3 and NSS 3.15.5 +- new build dependency (and recommends): + * libpulse +- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com) +- rebased patches + ------------------------------------------------------------------- Mon Feb 17 11:59:28 UTC 2014 - wr@rosenauer.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index 767e645..60a0eb9 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -17,8 +17,8 @@ # -%define major 27 -%define mainver %major.0.1 +%define major 28 +%define mainver %major.0 %define update_channel release %if %suse_version > 1220 @@ -50,9 +50,10 @@ BuildRequires: libproxy-devel %else BuildRequires: wireless-tools %endif -BuildRequires: mozilla-nspr-devel >= 4.10.2 -BuildRequires: mozilla-nss-devel >= 3.15.4 +BuildRequires: mozilla-nspr-devel >= 4.10.3 +BuildRequires: mozilla-nss-devel >= 3.15.5 BuildRequires: nss-shared-helper-devel +BuildRequires: pkgconfig(libpulse) %if %suse_version > 1210 BuildRequires: pkgconfig(gstreamer-%gstreamer_ver) BuildRequires: pkgconfig(gstreamer-app-%gstreamer_ver) @@ -63,7 +64,7 @@ Recommends: gstreamer-0_10-plugins-ffmpeg %endif Version: %{mainver} Release: 0 -%define releasedate 2014021500 +%define releasedate 2014031500 Provides: firefox = %{mainver} Provides: firefox = %{version}-%{release} Provides: web_browser @@ -105,9 +106,12 @@ Patch10: mozilla-sle11.patch Patch12: mozilla-arm-disable-edsp.patch Patch13: mozilla-ppc.patch Patch14: mozilla-libproxy-compat.patch -Patch15: mozilla-ppc64le.patch -Patch16: mozilla-libffi-ppc64le.patch -Patch17: mozilla-xpcom-ppc64le.patch +Patch15: mozilla-ppc64le-build.patch +Patch16: mozilla-ppc64le-javascript.patch +Patch17: mozilla-ppc64le-libffi.patch +Patch18: mozilla-ppc64le-mfbt.patch +Patch19: mozilla-ppc64le-webrtc.patch +Patch20: mozilla-ppc64le-xpcom.patch # Firefox/browser Patch30: firefox-browser-css.patch Patch31: firefox-kde.patch @@ -122,6 +126,7 @@ Requires: %{name}-branding > 20.0 Requires: mozilla-nspr >= %(rpm -q --queryformat '%{VERSION}' mozilla-nspr) Requires: mozilla-nss >= %(rpm -q --queryformat '%{VERSION}' mozilla-nss) Recommends: libcanberra0 +Recommends: libpulse0 # libproxy's mozjs pacrunner crashes FF (bnc#759123) %if %suse_version < 1220 Obsoletes: libproxy1-pacrunner-mozjs <= 0.4.7 @@ -170,7 +175,6 @@ Requires: perl(XML::Simple) Development files for Firefox to make packaging of addons easier. %if %localize - %package translations-common Summary: Common translations for Firefox Group: System/Localization @@ -185,7 +189,7 @@ of Firefox. %package translations-other Summary: Extra translations for Firefox Group: System/Localization -Provides: locale(%{name}:ach;af;an;as;ast;be;bg;bn_BD;bn_IN;br;bs;csb;cy;en_ZA;eo;es_MX;et;eu;fa;ff;fy_NL;ga_IE;gd;gl;gu_IN;he;hi_IN;hr;hy_AM;id;is;kk;km;kn;ku;lij;lt;lv;mai;mk;ml;mr;nn_NO;or;pa_IN;rm;ro;si;sk;sl;son;sq;sr;ta;te;th;tr;uk;vi;xh;zu +Provides: locale(%{name}:ach;af;ak;as;ast;be;bg;bn_BD;bn_IN;br;bs;csb;cy;en_ZA;eo;es_MX;et;eu;fa;ff;fy_NL;ga_IE;gd;gl;gu_IN;he;hi_IN;hr;hy_AM;id;is;kk;km;kn;ku;lg;lij;lt;lv;mai;mk;ml;mr;nn_NO;nso;or;pa_IN;rm;ro;si;sk;sl;son;sq;sr;ta;ta_LK;te;th;tr;uk;vi;zu) Requires: %{name} = %{version} Obsoletes: %{name}-translations < %{version}-%{release} @@ -226,7 +230,11 @@ symbols meant for upload to Mozilla's crash collector database. %endif %prep +%if %localize %setup -q -n mozilla -b 7 -b 10 +%else +%setup -q -n mozilla +%endif cd $RPM_BUILD_DIR/mozilla %patch1 -p1 %patch2 -p1 @@ -246,11 +254,12 @@ cd $RPM_BUILD_DIR/mozilla %patch15 -p1 %patch16 -p1 %patch17 -p1 +%patch18 -p1 +%patch19 -p1 +%patch20 -p1 # %patch30 -p1 -%if %suse_version >= 1110 %patch31 -p1 -%endif %if %suse_version >= 1140 %patch32 -p1 %endif @@ -302,7 +311,9 @@ ac_add_options --mandir=%{_mandir} ac_add_options --includedir=%{_includedir} ac_add_options --with-system-nspr ac_add_options --with-system-nss +%if %{localize} ac_add_options --with-l10n-base=$RPM_BUILD_DIR/l10n +%endif #ac_add_options --with-system-jpeg # libjpeg-turbo is used internally #ac_add_options --with-system-png # doesn't work because of missing APNG support ac_add_options --with-system-zlib @@ -313,44 +324,30 @@ ac_add_options --disable-debug ac_add_options --enable-startup-notification #ac_add_options --enable-chrome-format=jar ac_add_options --enable-update-channel=%{update_channel} -EOF %if %suse_version > 1130 -cat << EOF >> $MOZCONFIG ac_add_options --disable-gnomevfs ac_add_options --enable-gio -EOF %endif %if %suse_version < 1220 -cat << EOF >> $MOZCONFIG ac_add_options --disable-gstreamer -EOF %endif %if %branding -cat << EOF >> $MOZCONFIG ac_add_options --enable-official-branding -EOF %endif %if %suse_version > 1110 -cat << EOF >> $MOZCONFIG ac_add_options --enable-libproxy -EOF %endif %if ! %crashreporter -cat << EOF >> $MOZCONFIG ac_add_options --disable-crashreporter -EOF %endif # Disable neon for arm as it does not build correctly %ifarch %arm -cat << EOF >> $MOZCONFIG ac_add_options --disable-neon -EOF %endif %ifnarch %ix86 x86_64 -cat << EOF >> $MOZCONFIG ac_add_options --disable-webrtc -EOF %endif +EOF make -f client.mk build %install @@ -368,10 +365,8 @@ mkdir -p $RPM_BUILD_ROOT%{progdir}/distribution/extensions mkdir -p $RPM_BUILD_ROOT%{progdir}/browser/searchplugins mkdir -p $RPM_BUILD_ROOT%{progdir}/browser/defaults/preferences/ # install kde.js -%if %suse_version >= 1110 install -m 644 %{SOURCE6} $RPM_BUILD_ROOT%{progdir}/browser/defaults/preferences/kde.js install -m 644 %{SOURCE9} $RPM_BUILD_ROOT%{progdir}/browser/defaults/preferences/firefox.js -%endif # install add-plugins.sh sed "s:%%PROGDIR:%{progdir}:g" \ %{SOURCE13} > $RPM_BUILD_ROOT%{progdir}/add-plugins.sh diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz index e67cf28..c94d1d7 100644 --- a/compare-locales.tar.xz +++ b/compare-locales.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:fce50becd6e1179c7c5b5f230465ba32e94e5351dd8d7fbc1abf3b8e860360a9 -size 28504 +oid sha256:e314d25e2d99f393947616e6428585a652a0540cbbbaad7eab0e2bc1719c3edb +size 28428 diff --git a/create-tar.sh b/create-tar.sh index 2715024..3641dc9 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_27_0_1_RELEASE" -VERSION="27.0.1" +RELEASE_TAG="FIREFOX_28_0_RELEASE" +VERSION="28.0" # mozilla if [ -d mozilla ]; then diff --git a/firefox-27.0.1-source.tar.xz b/firefox-27.0.1-source.tar.xz deleted file mode 100644 index 2f3849e..0000000 --- a/firefox-27.0.1-source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:eebf7ed7703fe0ca6ad7a4a2b3fb5e2d09fb23c17415eb98b2302b099d024bb0 -size 109073252 diff --git a/firefox-28.0-source.tar.xz b/firefox-28.0-source.tar.xz new file mode 100644 index 0000000..3b7cb66 --- /dev/null +++ b/firefox-28.0-source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:49c9d4f95133071a6b062f01b6478e5c757401637223f1b4925ce50970962108 +size 113703808 diff --git a/firefox-kde.patch b/firefox-kde.patch index 1772818..1ac10ec 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -2,7 +2,7 @@ diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1184 @@ +@@ -0,0 +1,1177 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -30,19 +30,19 @@ new file mode 100644 + xmlns:html="http://www.w3.org/1999/xhtml" + xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" + onload="gBrowserInit.onLoad()" onunload="gBrowserInit.onUnload()" onclose="return WindowIsClosing();" -+ title="&mainWindow.title;@PRE_RELEASE_SUFFIX@" -+ title_normal="&mainWindow.title;@PRE_RELEASE_SUFFIX@" ++ title="&mainWindow.title;" ++ title_normal="&mainWindow.title;" +#ifdef XP_MACOSX -+ title_privatebrowsing="&mainWindow.title;@PRE_RELEASE_SUFFIX@&mainWindow.titlemodifiermenuseparator;&mainWindow.titlePrivateBrowsingSuffix;" -+ titledefault="&mainWindow.title;@PRE_RELEASE_SUFFIX@" ++ title_privatebrowsing="&mainWindow.title;&mainWindow.titlemodifiermenuseparator;&mainWindow.titlePrivateBrowsingSuffix;" ++ titledefault="&mainWindow.title;" + titlemodifier="" + titlemodifier_normal="" + titlemodifier_privatebrowsing="&mainWindow.titlePrivateBrowsingSuffix;" +#else -+ title_privatebrowsing="&mainWindow.titlemodifier;@PRE_RELEASE_SUFFIX@ &mainWindow.titlePrivateBrowsingSuffix;" -+ titlemodifier="&mainWindow.titlemodifier;@PRE_RELEASE_SUFFIX@" -+ titlemodifier_normal="&mainWindow.titlemodifier;@PRE_RELEASE_SUFFIX@" -+ titlemodifier_privatebrowsing="&mainWindow.titlemodifier;@PRE_RELEASE_SUFFIX@ &mainWindow.titlePrivateBrowsingSuffix;" ++ title_privatebrowsing="&mainWindow.titlemodifier; &mainWindow.titlePrivateBrowsingSuffix;" ++ titlemodifier="&mainWindow.titlemodifier;" ++ titlemodifier_normal="&mainWindow.titlemodifier;" ++ titlemodifier_privatebrowsing="&mainWindow.titlemodifier; &mainWindow.titlePrivateBrowsingSuffix;" +#endif + titlemenuseparator="&mainWindow.titlemodifiermenuseparator;" + lightweightthemes="true" @@ -143,7 +143,6 @@ new file mode 100644 + footertype="promobox" + orient="vertical" + ignorekeys="true" -+ consumeoutsideclicks="true" + hidden="true" + onpopupshown="StarUI.panelShown(event);" + aria-labelledby="editBookmarkPanelTitle"> @@ -192,7 +191,6 @@ new file mode 100644 +