- update to Firefox 58.0.1

MFSA 2018-05
  *  Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- fixed language packs (boo#1077590)
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=630

MozillaFirefox.changes

@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Mon Jan 29 22:32:21 UTC 2018 - wr@rosenauer.org
+
+- update to Firefox 58.0.1
+  MFSA 2018-05
+  *  Arbitrary code execution through unsanitized browser UI (bmo#1432966)
+- fixed language packs (boo#1077590)
+- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
+- allow larger number of nested elements (mozilla-bmo256180.patch)
+
 -------------------------------------------------------------------
 Tue Jan 23 20:40:57 UTC 2018 - wr@rosenauer.org
 

MozillaFirefox.spec

@@ -19,10 +19,10 @@
 
 # changed with every update
 %define major 58
-%define mainver %major.0
+%define mainver %major.0.1
 %define update_channel release
 %define branding 1
-%define releasedate 20180118215408
+%define releasedate 20180128191252
 
 # PIE, full relro (x86_64 for now)
 %define build_hardened 1
@@ -153,6 +153,8 @@ Patch4:         mozilla-openaes-decl.patch
 Patch5:         mozilla-no-stdcxx-check.patch
 Patch6:         mozilla-reduce-files-per-UnifiedBindings.patch
 Patch7:         mozilla-aarch64-startup-crash.patch
+Patch8:         mozilla-enable-csd.patch
+Patch9:         mozilla-bmo256180.patch
 # Firefox/browser
 Patch101:       firefox-kde.patch
 Patch102:       firefox-no-default-ualocale.patch
@@ -263,6 +265,8 @@ cd $RPM_BUILD_DIR/mozilla
 %patch6 -p1
 %endif
 %patch7 -p1
+%patch8 -p1
+%patch9 -p1
 # Firefox
 %patch101 -p1
 %patch102 -p1

compare-locales.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:1a171f89c8c46b7f470b363047e02b6485e33c48ed659d88c83a6940cc9e285c
-size 28364
+oid sha256:088110e577f98b08da247cfe931afdbcec697e74890362d95895360bda0d8989
+size 28404

create-tar.sh

@@ -7,8 +7,8 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="40755aa80f41ee6df8995ae44044caf7a024b128"
-VERSION="58.0"
+RELEASE_TAG="FIREFOX_58_0_1_RELEASE"
+VERSION="58.0.1"
 
 # mozilla
 if [ -d mozilla ]; then
@@ -54,7 +54,7 @@ tar $compression -cf firefox-$VERSION-source.tar.xz --exclude=.hgtags --exclude=
 # l10n
 echo "fetching locales..."
 test ! -d l10n && mkdir l10n
-for locale in $(awk '{ print $1; }' mozilla/browser/locales/shipped-locales); do
+for locale in $(awk '{ print $1; }' l10n_changesets.txt); do
   case $locale in
     ja-JP-mac|en-US)
       ;;
@@ -62,7 +62,7 @@ for locale in $(awk '{ print $1; }' mozilla/browser/locales/shipped-locales); do
       echo "reading changeset information for $locale"
       _changeset=$(grep ^$locale l10n_changesets.txt | awk '{ print $2; }')
       echo "fetching $locale changeset $_changeset ..."
-      hg clone http://hg.mozilla.org/releases/l10n/mozilla-$CHANNEL/$locale l10n/$locale
+      hg clone http://hg.mozilla.org/l10n-central/$locale l10n/$locale
       [ "$RELEASE_TAG" == "default" ] || hg -R l10n/$locale up -C -r $_changeset
       ;;
   esac

firefox-58.0-source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:47f8219c018be26ea7b6e93c8e86b94cba1a34997f5e6a167c4c747b4177a608
-size 264430216

firefox-58.0.1-source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:423e214603cf8e0d6b16bfbb428be20e2b868278129821f017b659fc0934253a
+size 265350860

l10n-58.0.1.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:34ed9161fda7110953d067f9de94377a085d9b30a438e7402865f3382726fc6b
+size 48920352

l10n-58.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c76bce9a1acdccdfcb81aca97b9622ab5347f8ffc7425e4e48bef3f630429aa0
-size 47820012

mozilla-bmo256180.patch

@@ -0,0 +1,11 @@
+--- a/layout/generic/nsIFrame.h.old	2016-07-11 13:41:39.688276559 +0200
++++ b/layout/generic/nsIFrame.h	2016-07-11 13:42:12.791406976 +0200
+@@ -13,7 +13,7 @@
+ #error This header/class should only be used within Mozilla code. It should not be used by extensions.
+ #endif
+ 
+-#define MAX_REFLOW_DEPTH 200
++#define MAX_REFLOW_DEPTH 1000
+ 
+ /* nsIFrame is in the process of being deCOMtaminated, i.e., this file is eventually
+    going to be eliminated, and all callers will use nsFrame instead.  At the moment

source-stamp.txt

@@ -1,2 +1,2 @@
-REV=40755aa80f41
+REV=c2db4a50dc5c
 REPO=http://hg.mozilla.org/releases/mozilla-release