update to final release firefox30
authorWolfgang Rosenauer <wr@rosenauer.org>
Wed, 11 Jun 2014 14:32:12 +0200
branchfirefox30
changeset 741 f3cef88a34e9
parent 737 8ce6c378e34d
child 742 8aaf86df3c83
update to final release
MozillaFirefox/MozillaFirefox.changes
MozillaFirefox/MozillaFirefox.spec
MozillaFirefox/create-tar.sh
firefox-kde.patch
mozilla-kde.patch
--- a/MozillaFirefox/MozillaFirefox.changes	Wed May 28 22:14:46 2014 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Wed Jun 11 14:32:12 2014 +0200
@@ -1,7 +1,31 @@
 -------------------------------------------------------------------
-Thu May 15 07:27:58 UTC 2014 - wr@rosenauer.org
-
-- update to Firefox 30.0b4
+Mon Jun  9 08:28:17 UTC 2014 - wr@rosenauer.org
+
+- update to Firefox 30.0 (bnc#881874)
+  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
+    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
+     bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
+     bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
+     bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
+     bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
+     bmo#1009952, bmo#1011007)
+    Miscellaneous memory safety hazards (rv:30.0)
+  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
+    (bmo#989994, bmo#999274, bmo#1005584)
+    Use-after-free and out of bounds issues found using Address
+    Sanitizer
+  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
+    Clickjacking through cursor invisability after Flash interaction
+  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
+    Use-after-free in Event Listener Manager
+  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
+    Use-after-free with SMIL Animation Controller
+  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
+    Buffer overflow in Web Audio Speex resampler
+  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
+    Buffer overflow in Gamepad API
+  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
+    Out of bounds write in NSPR
 - rebased patches
 - removed obsolete patches
   * firefox-browser-css.patch
@@ -15,7 +39,7 @@
   * mozilla-ppc64le-mfbt.patch
   * mozilla-ppc64le-webrtc.patch
   * mozilla-ppc64le-xpcom.patch
-- requires NSPR 4.10.4
+- requires NSPR 4.10.6
 - enabled GStreamer 1.0 usage for 13.2 and above
 
 -------------------------------------------------------------------
--- a/MozillaFirefox/MozillaFirefox.spec	Wed May 28 22:14:46 2014 +0200
+++ b/MozillaFirefox/MozillaFirefox.spec	Wed Jun 11 14:32:12 2014 +0200
@@ -17,9 +17,9 @@
 #
 
 
-%define major 29
-%define mainver %major.99
-%define update_channel beta
+%define major 30
+%define mainver %major.0
+%define update_channel release
 
 %if %suse_version > 1210
 %if %suse_version > 1310
@@ -54,7 +54,7 @@
 %else
 BuildRequires:  wireless-tools
 %endif
-BuildRequires:  mozilla-nspr-devel >= 4.10.4
+BuildRequires:  mozilla-nspr-devel >= 4.10.6
 BuildRequires:  mozilla-nss-devel >= 3.16
 BuildRequires:  nss-shared-helper-devel
 BuildRequires:  pkgconfig(libpulse)
@@ -74,7 +74,7 @@
 %endif
 Version:        %{mainver}
 Release:        0
-%define         releasedate 2014051400
+%define         releasedate 2014060900
 Provides:       firefox = %{mainver}
 Provides:       firefox = %{version}-%{release}
 Provides:       web_browser
--- a/MozillaFirefox/create-tar.sh	Wed May 28 22:14:46 2014 +0200
+++ b/MozillaFirefox/create-tar.sh	Wed Jun 11 14:32:12 2014 +0200
@@ -1,9 +1,9 @@
 #!/bin/bash
 
-CHANNEL="beta"
+CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_30_0b4_RELEASE"
-VERSION="29.99"
+RELEASE_TAG="FIREFOX_30_0_RELEASE"
+VERSION="30.0"
 
 # mozilla
 if [ -d mozilla ]; then
--- a/firefox-kde.patch	Wed May 28 22:14:46 2014 +0200
+++ b/firefox-kde.patch	Wed Jun 11 14:32:12 2014 +0200
@@ -2,7 +2,7 @@
 new file mode 100644
 --- /dev/null
 +++ b/browser/base/content/browser-kde.xul
-@@ -0,0 +1,1213 @@
+@@ -0,0 +1,1219 @@
 +#filter substitution
 +<?xml version="1.0"?>
 +# -*- Mode: HTML -*-
@@ -810,6 +810,12 @@
 +                      oncommand="toggleSidebar('viewBookmarksSidebar');">
 +              <observes element="viewBookmarksSidebar" attribute="checked"/>
 +            </menuitem>
++            <!-- NB: temporary solution for bug 985024, this should go away soon. -->
++            <menuitem id="BMB_bookmarksShowAllTop"
++                      class="menuitem-iconic subviewbutton"
++                      label="&showAllBookmarks2.label;"
++                      command="Browser:ShowAllBookmarks"
++                      key="manBookmarkKb"/>
 +            <menuseparator/>
 +            <menuitem id="BMB_subscribeToPageMenuitem"
 +#ifndef XP_MACOSX
@@ -1219,7 +1225,7 @@
 diff --git a/browser/base/jar.mn b/browser/base/jar.mn
 --- a/browser/base/jar.mn
 +++ b/browser/base/jar.mn
-@@ -66,16 +66,18 @@ browser.jar:
+@@ -62,16 +62,18 @@ browser.jar:
          content/browser/aboutRobots-icon.png          (content/aboutRobots-icon.png)
          content/browser/aboutRobots-widget-left.png   (content/aboutRobots-widget-left.png)
          content/browser/aboutSocialError.xhtml        (content/aboutSocialError.xhtml)
--- a/mozilla-kde.patch	Wed May 28 22:14:46 2014 +0200
+++ b/mozilla-kde.patch	Wed Jun 11 14:32:12 2014 +0200
@@ -339,7 +339,7 @@
 +        <xul:button dlgtype="cancel" class="dialog-button"/>
 +        <xul:button dlgtype="accept" class="dialog-button" xbl:inherits="disabled=buttondisabledaccept"/>
 +#elif XP_UNIX
-+                pack="end">
++                >
 +	<xul:button dlgtype="help" class="dialog-button" hidden="true"/>
 +	<xul:button dlgtype="extra2" class="dialog-button" hidden="true"/>
 +	<xul:spacer anonid="spacer" flex="1" hidden="true"/>
@@ -1346,7 +1346,7 @@
 +        <xul:button dlgtype="cancel" class="dialog-button" icon="cancel"/>
 +        <xul:button dlgtype="accept" class="dialog-button" icon="accept"/>
 +#elif XP_UNIX
-+                pack="end">
++                >
 +	<xul:button dlgtype="help" class="dialog-button" hidden="true" icon="help"/>
 +	<xul:button dlgtype="extra2" class="dialog-button" hidden="true"/>
 +	<xul:spacer anonid="spacer" flex="1"/>