# HG changeset patch # User Wolfgang Rosenauer # Date 1446321511 -3600 # Node ID ee3c462047d5e082b235d9dd5a9d3a498cb7ab11 # Parent 82af81b0a6c7a3c603b13ab0585e7924206436e3# Parent d9d863421693628af49db58c198502562359be49 42 beta cycle diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Sat Sep 19 22:04:22 2015 +0200 +++ b/MozillaFirefox/MozillaFirefox.changes Sat Oct 31 20:58:31 2015 +0100 @@ -1,11 +1,116 @@ ------------------------------------------------------------------- -Sun Sep 13 21:13:35 UTC 2015 - wr@rosenauer.org - -- update to Firefox 41.0b9 +Sat Oct 31 19:50:03 UTC 2015 - wr@rosenauer.org + +- update to Firefox 42.0 (bnc#952810) + * Private Browsing with Tracking Protection blocks certain Web + elements that could be used to record your behavior across sites + * Control Center that contains site security and privacy controls + * Login Manager improvements + * WebRTC improvements + * Indicator added to tabs that play audio with one-click muting + * Media Source Extension for HTML5 video available for all sites +- requires NSPR 4.10.10 and NSS 3.19.4 +- removed obsolete patches + * mozilla-arm-disable-edsp.patch + * mozilla-icu-strncat.patch + * mozilla-skia-be-le.patch + * toolkit-download-folder.patch +- fixed build with enable-libproxy (bmo#1220399) + * mozilla-libproxy.patch + +------------------------------------------------------------------- +Thu Oct 15 08:25:54 UTC 2015 - wr@rosenauer.org + +- update to Firefox 41.0.2 (bnc#950686) + * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669) + Cross-origin restriction bypass using Fetch +- added explicit appdata provides (bnc#949983) + +------------------------------------------------------------------- +Sun Oct 4 09:20:56 UTC 2015 - wr@rosenauer.org + +- do not build with --enable-stdcxx-compat + (this starts to fail build on various toolchain combinations + and is not required for openSUSE builds in general + +------------------------------------------------------------------- +Thu Oct 1 09:49:57 UTC 2015 - wr@rosenauer.org + +- update to Firefox 41.0.1 + * Fix a startup crash related to Yandex toolbar and Adblock Plus + (bmo#1209124) + * Fix potential hangs with Flash plugins (bmo#1185639) + * Fix a regression in the bookmark creation (bmo#1206376) + * Fix a startup crash with some Intel Media Accelerator 3150 + graphic cards (bmo#1207665) + * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601) + +------------------------------------------------------------------- +Sat Sep 19 20:23:29 UTC 2015 - wr@rosenauer.org + +- update to Firefox 41.0 (bnc#947003) + * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 + Miscellaneous memory safety hazards + * MFSA 2015-97/CVE-2015-4503 (bmo#994337) + Memory leak in mozTCPSocket to servers + * MFSA 2015-98/CVE-2015-4504 (bmo#1132467) + Out of bounds read in QCMS library with ICC V4 profile attributes + * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only) + Site attribute spoofing on Android by pasting URL with unknown scheme + * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only) + Arbitrary file manipulation by local user through Mozilla updater + * MFSA 2015-101/CVE-2015-4506 (bmo#1192226) + Buffer overflow in libvpx while parsing vp9 format video + * MFSA 2015-102/CVE-2015-4507 (bmo#1192401) + Crash when using debugger with SavedStacks in JavaScript + * MFSA 2015-103/CVE-2015-4508 (bmo#1195976) + URL spoofing in reader mode + * MFSA 2015-104/CVE-2015-4510 (bmo#1200004) + Use-after-free with shared workers and IndexedDB + * MFSA 2015-105/CVE-2015-4511 (bmo#1200148) + Buffer overflow while decoding WebM video + * MFSA 2015-106/CVE-2015-4509 (bmo#1198435) + Use-after-free while manipulating HTML media content + * MFSA 2015-107/CVE-2015-4512 (bmo#1170390) + Out-of-bounds read during 2D canvas display on Linux 16-bit + color depth systems + * MFSA 2015-108/CVE-2015-4502 (bmo#1105045) + Scripted proxies can access inner window + * MFSA 2015-109/CVE-2015-4516 (bmo#904886) + JavaScript immutable property enforcement can be bypassed + * MFSA 2015-110/CVE-2015-4519 (bmo#1189814) + Dragging and dropping images exposes final URL after redirects + * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869) + Errors in the handling of CORS preflight request headers + * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/ + CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/ + CVE-2015-7180 + Vulnerabilities found through code inspection + * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860, + bmo#1190526) (Windows only) + Memory safety errors in libGLES in the ANGLE graphics library + * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only) + Information disclosure via the High Resolution Time API - rebased patches - removed obsolete patches * mozilla-arm64-libjpeg-turbo.patch +------------------------------------------------------------------ +Thu Aug 27 06:03:51 UTC 2015 - wr@rosenauer.org + +- update to Firefox 40.0.3 (bnc#943550) + * Disable the asynchronous plugin initialization (bmo#1198590) + * Fix a segmentation fault in the GStreamer support (bmo#1145230) + * Fix a regression with some Japanese fonts used in the + field (bmo#1194055) + * On some sites, the selection in a select combox box using the + mouse could be broken (bmo#1194733) + security fixes + * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278) + Use-after-free when resizing canvas element during restyling + * MFSA 2015-95/CVE-2015-4498 (bmo#1042699) + Add-on notification bypass through data URLs + ------------------------------------------------------------------- Fri Aug 7 07:49:49 UTC 2015 - wr@rosenauer.org diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/MozillaFirefox.spec --- a/MozillaFirefox/MozillaFirefox.spec Sat Sep 19 22:04:22 2015 +0200 +++ b/MozillaFirefox/MozillaFirefox.spec Sat Oct 31 20:58:31 2015 +0100 @@ -18,10 +18,10 @@ # changed with every update -%define major 40 +%define major 41 %define mainver %major.99 %define update_channel beta -%define releasedate 2015091100 +%define releasedate 2015103000 # general build definitions %if "%{update_channel}" != "aurora" @@ -76,8 +76,8 @@ BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo -BuildRequires: mozilla-nspr-devel >= 4.10.8 -BuildRequires: mozilla-nss-devel >= 3.19.2 +BuildRequires: mozilla-nspr-devel >= 4.10.10 +BuildRequires: mozilla-nss-devel >= 3.19.4 BuildRequires: nss-shared-helper-devel BuildRequires: python-devel BuildRequires: startup-notification-devel @@ -107,6 +107,10 @@ %endif Provides: web_browser Provides: browser(npapi) +%if "%{update_channel}" != "aurora" +Provides: appdata() +Provides: appdata(firefox.appdata.xml) +%endif # this is needed to match this package with the kde4 helper package without the main package # having a hard requirement on the kde4 package %define kde_helper_version 6 @@ -133,20 +137,17 @@ Source15: firefox-appdata.xml Source16: MozillaFirefox.changes # Gecko/Toolkit -Patch1: toolkit-download-folder.patch -Patch2: mozilla-nongnome-proxies.patch -Patch4: mozilla-shared-nss-db.patch -Patch5: mozilla-kde.patch -Patch6: mozilla-preferences.patch -Patch7: mozilla-language.patch -Patch8: mozilla-ntlm-full-path.patch -Patch9: mozilla-repo.patch -Patch10: mozilla-icu-strncat.patch -Patch11: mozilla-arm-disable-edsp.patch -Patch12: mozilla-openaes-decl.patch -Patch14: mozilla-skia-be-le.patch -Patch15: mozilla-bmo1005535.patch -Patch16: mozilla-no-stdcxx-check.patch +Patch1: mozilla-nongnome-proxies.patch +Patch2: mozilla-shared-nss-db.patch +Patch3: mozilla-kde.patch +Patch4: mozilla-preferences.patch +Patch5: mozilla-language.patch +Patch6: mozilla-ntlm-full-path.patch +Patch7: mozilla-repo.patch +Patch8: mozilla-openaes-decl.patch +Patch9: mozilla-bmo1005535.patch +Patch10: mozilla-no-stdcxx-check.patch +Patch11: mozilla-libproxy.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-no-default-ualocale.patch @@ -248,18 +249,15 @@ cd $RPM_BUILD_DIR/mozilla %patch1 -p1 %patch2 -p1 +%patch3 -p1 %patch4 -p1 %patch5 -p1 %patch6 -p1 %patch7 -p1 %patch8 -p1 -%patch9 -p1 +#%patch9 -p1 %patch10 -p1 %patch11 -p1 -%patch12 -p1 -%patch14 -p1 -%patch15 -p1 -%patch16 -p1 # Firefox %patch101 -p1 %patch102 -p1 @@ -312,7 +310,6 @@ ac_add_options --mandir=%{_mandir} ac_add_options --includedir=%{_includedir} ac_add_options --enable-release -ac_add_options --enable-stdcxx-compat %ifarch %ix86 %arm %if 0%{?suse_version} > 1230 ac_add_options --disable-optimize diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/create-tar.sh --- a/MozillaFirefox/create-tar.sh Sat Sep 19 22:04:22 2015 +0200 +++ b/MozillaFirefox/create-tar.sh Sat Oct 31 20:58:31 2015 +0100 @@ -2,8 +2,8 @@ CHANNEL="beta" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_41_0b9_RELEASE" -VERSION="40.99" +RELEASE_TAG="FIREFOX_42_0b9_RELEASE" +VERSION="41.99" # mozilla if [ -d mozilla ]; then diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/mozilla-arm-disable-edsp.patch --- a/MozillaFirefox/mozilla-arm-disable-edsp.patch Sat Sep 19 22:04:22 2015 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../mozilla-arm-disable-edsp.patch \ No newline at end of file diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/mozilla-icu-strncat.patch --- a/MozillaFirefox/mozilla-icu-strncat.patch Sat Sep 19 22:04:22 2015 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../mozilla-icu-strncat.patch \ No newline at end of file diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/mozilla-libproxy.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/MozillaFirefox/mozilla-libproxy.patch Sat Oct 31 20:58:31 2015 +0100 @@ -0,0 +1,1 @@ +../mozilla-libproxy.patch \ No newline at end of file diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/mozilla-skia-be-le.patch --- a/MozillaFirefox/mozilla-skia-be-le.patch Sat Sep 19 22:04:22 2015 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../mozilla-skia-be-le.patch \ No newline at end of file diff -r 82af81b0a6c7 -r ee3c462047d5 MozillaFirefox/toolkit-download-folder.patch --- a/MozillaFirefox/toolkit-download-folder.patch Sat Sep 19 22:04:22 2015 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../toolkit-download-folder.patch \ No newline at end of file diff -r 82af81b0a6c7 -r ee3c462047d5 firefox-kde.patch --- a/firefox-kde.patch Sat Sep 19 22:04:22 2015 +0200 +++ b/firefox-kde.patch Sat Oct 31 20:58:31 2015 +0100 @@ -1,11 +1,11 @@ # HG changeset patch -# Parent 8d1e0e3997402b94742eded6477abed4b559f373 +# Parent 95b421ca30846be2b5d7230d72263e6dff042d0b diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1264 @@ +@@ -0,0 +1,1234 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -66,6 +66,7 @@ + screenX="4" screenY="4" + fullscreenbutton="true" + sizemode="normal" ++ retargetdocumentfocus="urlbar" + persist="screenX screenY width height sizemode"> + +# All JS files which are not content (only) dependent that browser.xul @@ -153,7 +154,14 @@ +