diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 39906e7..b99c4dd 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,44 @@ +------------------------------------------------------------------- +Sun Aug 26 13:47:43 UTC 2012 - wr@rosenauer.org + +- update to Firefox 15.0 (bnc#777588) + * MFSA 2012-57/CVE-2012-1970 + Miscellaneous memory safety hazards + * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975 + CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959 + CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964 + Use-after-free issues found using Address Sanitizer + * MFSA 2012-59/CVE-2012-1956 (bmo#756719) + Location object can be shadowed using Object.defineProperty + * MFSA 2012-60/CVE-2012-3965 (bmo#769108) + Escalation of privilege through about:newtab + * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) + Memory corruption with bitmap format images with negative height + * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 + WebGL use-after-free and memory corruption + * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 + SVG buffer overflow and use-after-free issues + * MFSA 2012-64/CVE-2012-3971 + Graphite 2 memory corruption + * MFSA 2012-65/CVE-2012-3972 (bmo#746855) + Out-of-bounds read in format-number in XSLT + * MFSA 2012-66/CVE-2012-3973 (bmo#757128) + HTTPMonitor extension allows for remote debugging without explicit + activation + * MFSA 2012-68/CVE-2012-3975 (bmo#770684) + DOMParser loads linked resources in extensions when parsing + text/html + * MFSA 2012-69/CVE-2012-3976 (bmo#768568) + Incorrect site SSL certificate data display + * MFSA 2012-70/CVE-2012-3978 (bmo#770429) + Location object security checks bypassed by chrome code + * MFSA 2012-72/CVE-2012-3980 (bmo#771859) + Web console eval capable of executing chrome-privileged code +- fix HTML5 video crash with GStreamer enabled (bmo#761030) +- GStreamer is only used for MP4 (no WebM, OGG) +- updated filelist +- moved browser specific preferences to correct location + ------------------------------------------------------------------- Sun Jul 29 08:34:39 UTC 2012 - aj@suse.de diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index cc4f140..f02c48f 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -17,8 +17,8 @@ # -%define major 14 -%define mainver %major.0.1 +%define major 15 +%define mainver %major.0 %define update_channel release Name: MozillaFirefox @@ -44,8 +44,8 @@ BuildRequires: libproxy-devel %else BuildRequires: wireless-tools %endif -BuildRequires: mozilla-nspr-devel >= 4.9.0 -BuildRequires: mozilla-nss-devel >= 3.13.5 +BuildRequires: mozilla-nspr-devel >= 4.9.1 +BuildRequires: mozilla-nss-devel >= 3.13.6 BuildRequires: nss-shared-helper-devel %if %suse_version > 1140 BuildRequires: pkgconfig(gstreamer-0.10) @@ -54,7 +54,7 @@ BuildRequires: pkgconfig(gstreamer-plugins-base-0.10) %endif Version: %{mainver} Release: 0 -%define releasedate 2012071300 +%define releasedate 2012082500 Provides: firefox = %{mainver} Provides: firefox = %{version}-%{release} Provides: web_browser @@ -91,14 +91,12 @@ Patch6: mozilla-preferences.patch Patch7: mozilla-language.patch Patch8: mozilla-ntlm-full-path.patch Patch9: mozilla-repo.patch -Patch10: mozilla-dump_syms-static.patch -Patch11: mozilla-sle11.patch -Patch12: mozilla-disable-neon-option.patch -Patch13: mozilla-yarr-pcre.patch -Patch14: mozilla-gcc47.patch -Patch15: mozilla-arm-disable-edsp.patch -Patch16: mozilla-crashreporter-restart-args.patch -Patch17: mozilla-ppc.patch +Patch10: mozilla-sle11.patch +Patch11: mozilla-disable-neon-option.patch +Patch13: mozilla-arm-disable-edsp.patch +Patch14: mozilla-crashreporter-restart-args.patch +Patch15: mozilla-gstreamer.patch +Patch16: mozilla-ppc.patch # Firefox/browser Patch30: firefox-browser-css.patch Patch31: firefox-kde.patch @@ -220,16 +218,14 @@ cd $RPM_BUILD_DIR/mozilla %patch7 -p1 %patch8 -p1 %patch9 -p1 -%patch10 -p1 %if %suse_version < 1120 -%patch11 -p1 +%patch10 -p1 %endif -#%patch12 -p1 +#%patch11 -p1 %patch13 -p1 %patch14 -p1 %patch15 -p1 %patch16 -p1 -%patch17 -p1 # %patch30 -p1 %if %suse_version >= 1110 @@ -340,12 +336,10 @@ mkdir -p $RPM_BUILD_ROOT/%{progdir} cp -rf $RPM_BUILD_DIR/obj/dist/firefox/* $RPM_BUILD_ROOT%{progdir} mkdir -p $RPM_BUILD_ROOT/%{progdir}/distribution/extensions mkdir -p $RPM_BUILD_ROOT%{progdir}/searchplugins +mkdir -p $RPM_BUILD_ROOT%{progdir}/defaults/preferences/ # install kde.js %if %suse_version >= 1110 -install -m 644 %{SOURCE6} $RPM_BUILD_ROOT%{progdir}/defaults/pref/kde.js -# make sure that instantApply is true by default -# (TODO: mozilla-kde.patch needs to be improved to really not load kde.js in non-KDE envs) -echo 'pref("browser.preferences.instantApply", true);' > $RPM_BUILD_ROOT%{progdir}/defaults/pref/firefox.js +install -m 644 %{SOURCE6} $RPM_BUILD_ROOT%{progdir}/defaults/preferences/kde.js %endif # install add-plugins.sh sed "s:%%PROGDIR:%{progdir}:g" \ @@ -369,6 +363,7 @@ for locale in $(awk '{ print $1; }' ../mozilla/browser/locales/shipped-locales); make -C browser/locales langpack-$locale cp -rL dist/xpi-stage/locale-$locale \ $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org + rm $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org/chrome/.mkdir.done # remove prefs, profile defaults, and hyphenation from langpack rm -rf $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org/defaults rm -rf $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@firefox.mozilla.org/hyphenation @@ -543,7 +538,6 @@ exit 0 %{progdir}/distribution/extensions/ %{progdir}/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd} %{progdir}/icons/ -%{progdir}/jssubloader/ %{progdir}/searchplugins/ %attr(755,root,root) %{progdir}/%{progname}.sh %{progdir}/firefox diff --git a/compare-locales.tar.bz2 b/compare-locales.tar.bz2 index 6334ed9..ab87479 100644 --- a/compare-locales.tar.bz2 +++ b/compare-locales.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:c5db07512eadf48bc052e496c603bde33899193b61d2cfb478869875ab90f01b -size 29352 +oid sha256:89d95a1e2f9a6d0c37fd94a5f3bfc2be7704c94a7cff9297e304acddcb92132e +size 29359 diff --git a/create-tar.sh b/create-tar.sh index 1e02f7a..d94a680 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_14_0_1_RELEASE" -VERSION="14.0.1" +RELEASE_TAG="FIREFOX_15_0_RELEASE" +VERSION="15.0" # mozilla echo "cloning $BRANCH..." diff --git a/firefox-14.0.1-source.tar.bz2 b/firefox-14.0.1-source.tar.bz2 deleted file mode 100644 index b6681d8..0000000 --- a/firefox-14.0.1-source.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b4a2a21aad66f5ae0c0fe769fc3c4914168b9d45568c1e1100f16ceef4d229b9 -size 82284070 diff --git a/firefox-15.0-source.tar.bz2 b/firefox-15.0-source.tar.bz2 new file mode 100644 index 0000000..cec58e6 --- /dev/null +++ b/firefox-15.0-source.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9f01d95f6d1af06db05ed6d2a16897a8c954d8e5a1fede027b97ed9b5b8ac589 +size 83655558 diff --git a/firefox-branded-icons.patch b/firefox-branded-icons.patch index 40b2625..b8daf6f 100644 --- a/firefox-branded-icons.patch +++ b/firefox-branded-icons.patch @@ -1,10 +1,10 @@ # HG changeset patch -# Parent 7f0b0738f036cd9d2e51c51c3552dc608ac598f9 +# Parent 7272ee3a4df832b885fec122f02d32f23dcc9cdb diff --git a/browser/app/Makefile.in b/browser/app/Makefile.in --- a/browser/app/Makefile.in +++ b/browser/app/Makefile.in -@@ -160,16 +160,21 @@ endif +@@ -127,16 +127,21 @@ endif endif #} LIBXUL_SDK ifeq ($(MOZ_WIDGET_TOOLKIT),gtk2) @@ -29,7 +29,7 @@ diff --git a/browser/app/Makefile.in b/browser/app/Makefile.in diff --git a/browser/branding/official/Makefile.in b/browser/branding/official/Makefile.in --- a/browser/branding/official/Makefile.in +++ b/browser/branding/official/Makefile.in -@@ -65,18 +65,21 @@ OSX_BRANDING_FILES = \ +@@ -35,18 +35,21 @@ OSX_BRANDING_FILES = \ firefox.icns \ disk.icns \ document.icns \ @@ -54,8 +54,8 @@ diff --git a/browser/branding/official/Makefile.in b/browser/branding/official/M diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in --- a/browser/installer/package-manifest.in +++ b/browser/installer/package-manifest.in -@@ -476,18 +476,21 @@ - @BINPATH@/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/preview.png +@@ -496,18 +496,21 @@ + @BINPATH@/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/icon.png #ifdef SHIP_FEEDBACK @BINPATH@/distribution/extensions/testpilot@labs.mozilla.com.xpi #endif diff --git a/firefox-kde-114.patch b/firefox-kde-114.patch index e82b53c..3986bce 100644 --- a/firefox-kde-114.patch +++ b/firefox-kde-114.patch @@ -1,27 +1,25 @@ # HG changeset patch # User Wolfgang Rosenauer -# Parent 51bf77cf40165f6567ca7d9a5ff90286739e525a +# Parent 0db25ab919ad61d91a46d7700d3f06e2b66f9feb With openSUSE 11.4 the desktop file name changed from MozillaFirefox to firefox diff --git a/browser/components/preferences/advanced.js b/browser/components/preferences/advanced.js --- a/browser/components/preferences/advanced.js +++ b/browser/components/preferences/advanced.js -@@ -705,17 +705,17 @@ var gAdvancedPane = { - shellSvc.setDefaultBrowser(true, false); - if (kde_session == 1) { - var shellObj = Components.classes["@mozilla.org/file/local;1"] - .createInstance(Components.interfaces.nsILocalFile); - shellObj.initWithPath("/usr/bin/kwriteconfig"); - var process = Components.classes["@mozilla.org/process/util;1"] - .createInstance(Components.interfaces.nsIProcess); - process.init(shellObj); -- var args = ["--file", "kdeglobals", "--group", "General", "--key", "BrowserApplication", "MozillaFirefox"]; -+ var args = ["--file", "kdeglobals", "--group", "General", "--key", "BrowserApplication", "firefox"]; - process.run(false, args, args.length); - } - } +@@ -719,15 +719,15 @@ var gAdvancedPane = { + if (kde_session == 1) { + var shellObj = Components.classes["@mozilla.org/file/local;1"] + .createInstance(Components.interfaces.nsILocalFile); + shellObj.initWithPath("/usr/bin/kwriteconfig"); + var process = Components.classes["@mozilla.org/process/util;1"] + .createInstance(Components.interfaces.nsIProcess); + process.init(shellObj); + var args = ["--file", "kdeglobals", "--group", "General", "--key", +- "BrowserApplication", "MozillaFirefox"]; ++ "BrowserApplication", "firefox"]; + process.run(false, args, args.length); } - else { - promptMessage = shellBundle.getFormattedString("alreadyDefaultBrowser", - [brandShortName]); - psvc.alert(window, promptTitle, promptMessage); + document.getElementById("setDefaultPane").selectedIndex = 1; + } + #endif + }; diff --git a/firefox-kde.patch b/firefox-kde.patch index 73711b1..0d9fb08 100644 --- a/firefox-kde.patch +++ b/firefox-kde.patch @@ -2,62 +2,14 @@ diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1122 @@ +@@ -0,0 +1,1126 @@ +#filter substitution + +# -*- Mode: HTML -*- +# -+# ***** BEGIN LICENSE BLOCK ***** -+# Version: MPL 1.1/GPL 2.0/LGPL 2.1 -+# -+# The contents of this file are subject to the Mozilla Public License Version -+# 1.1 (the "License"); you may not use this file except in compliance with -+# the License. You may obtain a copy of the License at -+# http://www.mozilla.org/MPL/ -+# -+# Software distributed under the License is distributed on an "AS IS" basis, -+# WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License -+# for the specific language governing rights and limitations under the -+# License. -+# -+# The Original Code is Mozilla Communicator client code, released -+# March 31, 1998. -+# -+# The Initial Developer of the Original Code is -+# Netscape Communications Corporation. -+# Portions created by the Initial Developer are Copyright (C) 1998-2000 -+# the Initial Developer. All Rights Reserved. -+# -+# Contributor(s): -+# Blake Ross -+# David Hyatt -+# Joe Hewitt -+# Pierre Chanial -+# Dean Tessman -+# Johnathan Nightingale -+# Dão Gottwald -+# Ehsan Akhgari -+# Robert Strong -+# Rob Campbell -+# Patrick Walton -+# David Dahl -+# Frank Yan -+# Victor Porof -+# Paul Rouget -+# -+# Alternatively, the contents of this file may be used under the terms of -+# either the GNU General Public License Version 2 or later (the "GPL"), or -+# the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), -+# in which case the provisions of the GPL or the LGPL are applicable instead -+# of those above. If you wish to allow use of your version of this file only -+# under the terms of either the GPL or the LGPL, and not to allow others to -+# use your version of this file under the terms of the MPL, indicate your -+# decision by deleting the provisions above and replace them with the notice -+# and other provisions required by the GPL or the LGPL. If you do not delete -+# the provisions above, a recipient may use your version of this file under -+# the terms of any one of the MPL, the GPL or the LGPL. -+# -+# ***** END LICENSE BLOCK ***** ++# This Source Code Form is subject to the terms of the Mozilla Public ++# License, v. 2.0. If a copy of the MPL was not distributed with this ++# file, You can obtain one at http://mozilla.org/MPL/2.0/. + + + @@ -257,7 +209,6 @@ new file mode 100644 + type="checkbox" + label="&viewTabsOnTop.label;" + accesskey="&viewTabsOnTop.accesskey;"/> -+ + @@ -414,7 +365,7 @@ new file mode 100644 +