# HG changeset patch # User Wolfgang Rosenauer # Date 1510863600 -3600 # Node ID d1e06d9e5ef1a394366d3a9c75455b20f5dcb0f0 # Parent 7e424bc150d1996a2bdde4ecd2ff7fc014738cdf Firefox 52.5.0esr diff -r 7e424bc150d1 -r d1e06d9e5ef1 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Sat Nov 11 13:13:22 2017 +0100 +++ b/MozillaFirefox/MozillaFirefox.changes Thu Nov 16 21:20:00 2017 +0100 @@ -1,4 +1,32 @@ ------------------------------------------------------------------- +Tue Nov 14 21:22:11 UTC 2017 - wr@rosenauer.org + +- update to Firefox 52.5.0esr (boo#1068101) + MFSA 2017-25 + * CVE-2017-7828 (bmo#1406750. bmo#1412252) + Use-after-free of PressShell while restyling layout + * CVE-2017-7830 (bmo#1408990) + Cross-origin URL information leak through Resource Timing API + * CVE-2017-7826 + Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 + +------------------------------------------------------------------- +Sun Oct 1 18:25:16 UTC 2017 - stefan.bruens@rwth-aachen.de + +- Correct plugin directory for aarch64 (boo#1061207). The wrapper + script was not detecting aarch64 as a 64 bit architecture, thus + used /usr/lib/browser-plugins/. + +------------------------------------------------------------------- +Sat Sep 30 20:10:50 UTC 2017 - zaitor@opensuse.org + +- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0), + pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0), + pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and + pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure + looks for. + +------------------------------------------------------------------- Fri Sep 29 08:56:27 UTC 2017 - wr@rosenauer.org - update to Firefox 52.4esr (boo#1060445) @@ -26,6 +54,16 @@ (mozilla-bmo1005640.patch, boo#1029917) ------------------------------------------------------------------- +Thu Sep 28 07:53:13 UTC 2017 - dimstar@opensuse.org + +- Add alsa-devel BuildRequires: we care for ALSA support to be + built and thus need to ensure we get the dependencies in place. + In the past, alsa-devel was pulled in by accident: we + buildrequire libgnome-devel. This required esound-devel and that + in turn pulled in alsa-devel for us. libgnome is being fixed to + no longer require esound-devel. + +------------------------------------------------------------------- Wed Aug 9 09:47:39 UTC 2017 - schwab@suse.de - mozilla-ucontext.patch: use ucontext_t instead of struct ucontext @@ -239,7 +277,7 @@ * WebAssembly (wasm) is disabled * Less use of multiprocess architecture Electrolysis (e10s) -+------------------------------------------------------------------- +------------------------------------------------------------------- Mon Apr 3 06:16:26 UTC 2017 - wr@rosenauer.org - update to Firefox 52.0.2 @@ -1319,7 +1357,7 @@ - removed obsolete patches * mozilla-arm64-libjpeg-turbo.patch ------------------------------------------------------------------- +------------------------------------------------------------------- Thu Aug 27 06:03:51 UTC 2015 - wr@rosenauer.org - update to Firefox 40.0.3 (bnc#943550) diff -r 7e424bc150d1 -r d1e06d9e5ef1 MozillaFirefox/MozillaFirefox.spec --- a/MozillaFirefox/MozillaFirefox.spec Sat Nov 11 13:13:22 2017 +0100 +++ b/MozillaFirefox/MozillaFirefox.spec Thu Nov 16 21:20:00 2017 +0100 @@ -19,9 +19,9 @@ # changed with every update %define major 52 -%define mainver %major.4.0 +%define mainver %major.5.0 %define update_channel esr52 -%define releasedate 20170921064520 +%define releasedate 20171107091003 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -69,13 +69,13 @@ Name: %{pkgname} BuildRequires: Mesa-devel +BuildRequires: alsa-devel BuildRequires: autoconf213 BuildRequires: dbus-1-glib-devel BuildRequires: fdupes BuildRequires: gcc-c++ BuildRequires: libXcomposite-devel BuildRequires: libcurl-devel -BuildRequires: libgnomeui-devel BuildRequires: libidl-devel BuildRequires: libiw-devel BuildRequires: libnotify-devel @@ -91,11 +91,15 @@ BuildRequires: xorg-x11-libXt-devel BuildRequires: yasm BuildRequires: zip +BuildRequires: pkgconfig(gconf-2.0) +BuildRequires: pkgconfig(gdk-x11-2.0) +BuildRequires: pkgconfig(glib-2.0) >= 2.22 +BuildRequires: pkgconfig(gobject-2.0) +BuildRequires: pkgconfig(gtk+-2.0) >= 2.18.0 +BuildRequires: pkgconfig(gtk+-unix-print-2.0) BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) %if 0%{?firefox_use_gtk3} -BuildRequires: pkgconfig(glib-2.0) -BuildRequires: pkgconfig(gobject-2.0) BuildRequires: pkgconfig(gtk+-3.0) >= 3.4.0 BuildRequires: pkgconfig(gtk+-unix-print-3.0) %endif diff -r 7e424bc150d1 -r d1e06d9e5ef1 MozillaFirefox/create-tar.sh --- a/MozillaFirefox/create-tar.sh Sat Nov 11 13:13:22 2017 +0100 +++ b/MozillaFirefox/create-tar.sh Thu Nov 16 21:20:00 2017 +0100 @@ -7,8 +7,8 @@ CHANNEL="esr52" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_52_4_0esr_RELEASE" -VERSION="52.4.0" +RELEASE_TAG="FIREFOX_52_5_0esr_RELEASE" +VERSION="52.5.0" # mozilla if [ -d mozilla ]; then diff -r 7e424bc150d1 -r d1e06d9e5ef1 MozillaFirefox/firefox-esr.changes --- a/MozillaFirefox/firefox-esr.changes Sat Nov 11 13:13:22 2017 +0100 +++ b/MozillaFirefox/firefox-esr.changes Thu Nov 16 21:20:00 2017 +0100 @@ -1,4 +1,32 @@ ------------------------------------------------------------------- +Tue Nov 14 21:22:11 UTC 2017 - wr@rosenauer.org + +- update to Firefox 52.5.0esr (boo#1068101) + MFSA 2017-25 + * CVE-2017-7828 (bmo#1406750. bmo#1412252) + Use-after-free of PressShell while restyling layout + * CVE-2017-7830 (bmo#1408990) + Cross-origin URL information leak through Resource Timing API + * CVE-2017-7826 + Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 + +------------------------------------------------------------------- +Sun Oct 1 18:25:16 UTC 2017 - stefan.bruens@rwth-aachen.de + +- Correct plugin directory for aarch64 (boo#1061207). The wrapper + script was not detecting aarch64 as a 64 bit architecture, thus + used /usr/lib/browser-plugins/. + +------------------------------------------------------------------- +Sat Sep 30 20:10:50 UTC 2017 - zaitor@opensuse.org + +- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0), + pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0), + pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and + pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure + looks for. + +------------------------------------------------------------------- Fri Sep 29 08:56:27 UTC 2017 - wr@rosenauer.org - update to Firefox 52.4esr (boo#1060445) @@ -26,6 +54,16 @@ (mozilla-bmo1005640.patch, boo#1029917) ------------------------------------------------------------------- +Thu Sep 28 07:53:13 UTC 2017 - dimstar@opensuse.org + +- Add alsa-devel BuildRequires: we care for ALSA support to be + built and thus need to ensure we get the dependencies in place. + In the past, alsa-devel was pulled in by accident: we + buildrequire libgnome-devel. This required esound-devel and that + in turn pulled in alsa-devel for us. libgnome is being fixed to + no longer require esound-devel. + +------------------------------------------------------------------- Wed Aug 9 09:47:39 UTC 2017 - schwab@suse.de - mozilla-ucontext.patch: use ucontext_t instead of struct ucontext @@ -244,7 +282,7 @@ * WebAssembly (wasm) is disabled * Less use of multiprocess architecture Electrolysis (e10s) -+------------------------------------------------------------------- +------------------------------------------------------------------- Mon Apr 3 06:16:26 UTC 2017 - wr@rosenauer.org - update to Firefox 52.0.2 diff -r 7e424bc150d1 -r d1e06d9e5ef1 MozillaFirefox/firefox-esr.spec --- a/MozillaFirefox/firefox-esr.spec Sat Nov 11 13:13:22 2017 +0100 +++ b/MozillaFirefox/firefox-esr.spec Thu Nov 16 21:20:00 2017 +0100 @@ -19,9 +19,9 @@ # changed with every update %define major 52 -%define mainver %major.4.0 +%define mainver %major.5.0 %define update_channel esr52 -%define releasedate 20170921064520 +%define releasedate 20171107091003 # PIE, full relro (x86_64 for now) %define build_hardened 1 @@ -69,13 +69,13 @@ Name: %{pkgname} BuildRequires: Mesa-devel +BuildRequires: alsa-devel BuildRequires: autoconf213 BuildRequires: dbus-1-glib-devel BuildRequires: fdupes BuildRequires: gcc-c++ BuildRequires: libXcomposite-devel BuildRequires: libcurl-devel -BuildRequires: libgnomeui-devel BuildRequires: libidl-devel BuildRequires: libiw-devel BuildRequires: libnotify-devel @@ -91,11 +91,15 @@ BuildRequires: xorg-x11-libXt-devel BuildRequires: yasm BuildRequires: zip +BuildRequires: pkgconfig(gconf-2.0) +BuildRequires: pkgconfig(gdk-x11-2.0) +BuildRequires: pkgconfig(glib-2.0) >= 2.22 +BuildRequires: pkgconfig(gobject-2.0) +BuildRequires: pkgconfig(gtk+-2.0) >= 2.18.0 +BuildRequires: pkgconfig(gtk+-unix-print-2.0) BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) %if 0%{?firefox_use_gtk3} -BuildRequires: pkgconfig(glib-2.0) -BuildRequires: pkgconfig(gobject-2.0) BuildRequires: pkgconfig(gtk+-3.0) >= 3.4.0 BuildRequires: pkgconfig(gtk+-unix-print-3.0) %endif diff -r 7e424bc150d1 -r d1e06d9e5ef1 MozillaFirefox/mozilla.sh.in --- a/MozillaFirefox/mozilla.sh.in Sat Nov 11 13:13:22 2017 +0100 +++ b/MozillaFirefox/mozilla.sh.in Thu Nov 16 21:20:00 2017 +0100 @@ -72,7 +72,7 @@ mozilla_lib=`file $MOZ_PROGRAM` LIB=lib -echo $mozilla_lib | grep -q -E 'ELF.64-bit.*(x86-64|S/390|PowerPC)' && LIB=lib64 +echo $mozilla_lib | grep -q -E 'ELF.64-bit.*(x86-64|S/390|PowerPC|ARM aarch64)' && LIB=lib64 BROWSER_PLUGIN_DIR=/usr/$LIB/browser-plugins if [ ! -d $BROWSER_PLUGIN_DIR ]; then