# HG changeset patch # User Wolfgang Rosenauer # Date 1465386300 -7200 # Node ID 2f9f2e040647bc38d76be984f775eaa97a496744 # Parent e969636be1888d70bb571254c7e6e675bfaf97d7 Firefox 47.0 - removed obsolete patches - xulrunner is dead (mozilla-pkgconfig.patch) - added new patches from Factory - rebased existing patches diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Tue Jun 07 21:44:20 2016 +0200 +++ b/MozillaFirefox/MozillaFirefox.changes Wed Jun 08 13:45:00 2016 +0200 @@ -1,4 +1,82 @@ ------------------------------------------------------------------- +Tue Jun 7 19:47:25 UTC 2016 - wr@rosenauer.org + +- update to Firefox 47.0 (boo#983549) + * Enable VP9 video codec for users with fast machines + * Embedded YouTube videos now play with HTML5 video if Flash is + not installed + * View and search open tabs from your smartphone or another + computer in a sidebar + * Allow no-cache on back/forward navigations for https resources + security fixes: + * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818 + (boo#983638) + (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743, + bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493, + bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752, + bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130, + bmo#1269729, bmo#1273202, bmo#1273701) + Miscellaneous memory safety hazards (rv:47.0 / rv:45.2) + * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381) + Buffer overflow parsing HTML5 fragments + * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460) + Use-after-free deleting tables from a contenteditable document + * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129) + Addressbar spoofing though the SELECT element + * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580) + Out-of-bounds write with WebGL shader + * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093) + Partial same-origin-policy through setting location.host + through data URI + * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810) + Use-after-free when textures are used in WebGL operations + after recycle pool destruction + * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329) + Incorrect icon displayed on permissions notifications + * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933) + Entering fullscreen and persistent pointerlock without user + permission + * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267) + Information disclosure of disabled plugins through CSS + pseudo-classes + * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933) + Java applets bypass CSP protections + * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283, + bmo#1221620, bmo#1241034, bmo#1241037) + Network Security Services (NSS) vulnerabilities + fixed by requiring NSS 3.23 + packaging changes: + * cleanup configure options (boo#981695): + - notably remove GStreamer support which is gone from FF + * remove obsolete patches + - mozilla-libproxy.patch + - mozilla-repo.patch + +------------------------------------------------------------------- +Wed May 25 16:36:23 UTC 2016 - badshah400@gmail.com + +- The conditional testing for gcc was failing for different + openSUSE versions, drop it and apply patches unconditionally. + +------------------------------------------------------------------- +Mon May 23 15:30:27 UTC 2016 - badshah400@gmail.com + +- Add patches to fix building with gcc6: + + mozilla-gcc6.patch: fix building with gcc >= 6.1; patch + taken from upstream: + https://hg.mozilla.org/mozilla-central/rev/55212130f19d. + + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp + from unified compilation because #include in other + source files causes gcc6 compilation failure; patch taken from + upstream: + https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc. + +------------------------------------------------------------------- +Fri May 13 00:00:00 CEST 2016 - dsterba@suse.cz + +- enable build with PIE and full relro on x86_64 (boo#980384) + +------------------------------------------------------------------- Wed May 4 10:27:43 UTC 2016 - wr@rosenauer.org - update to Firefox 46.0.1 diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/MozillaFirefox.spec --- a/MozillaFirefox/MozillaFirefox.spec Tue Jun 07 21:44:20 2016 +0200 +++ b/MozillaFirefox/MozillaFirefox.spec Wed Jun 08 13:45:00 2016 +0200 @@ -18,10 +18,13 @@ # changed with every update -%define major 46 -%define mainver %major.0.1 +%define major 47 +%define mainver %major.0 %define update_channel release -%define releasedate 2016050300 +%define releasedate 20160606000000 + +# PIE, full relro (x86_64 for now) +%define build_hardened 1 # general build definitions %if "%{update_channel}" != "aurora" @@ -41,12 +44,6 @@ %define __find_requires sh %{SOURCE4} %global provfind sh -c "grep -v '.so' | %__find_provides" %global __find_provides %provfind -%if 0%{?suse_version} > 1310 -%define gstreamer_ver 1.0 -%define gstreamer 1 -%else -%define gstreamer_ver 0.10 -%endif # Set up Google API keys, see http://www.chromium.org/developers/how-tos/api-keys # Note: these are for the openSUSE Firefox builds ONLY. For your own distribution, # please get your own set of keys. @@ -78,7 +75,7 @@ BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.12 -BuildRequires: mozilla-nss-devel >= 3.22.3 +BuildRequires: mozilla-nss-devel >= 3.23 BuildRequires: nss-shared-helper-devel BuildRequires: python-devel BuildRequires: startup-notification-devel @@ -87,9 +84,6 @@ BuildRequires: xorg-x11-libXt-devel BuildRequires: yasm BuildRequires: zip -BuildRequires: pkgconfig(gstreamer-%gstreamer_ver) -BuildRequires: pkgconfig(gstreamer-app-%gstreamer_ver) -BuildRequires: pkgconfig(gstreamer-plugins-base-%gstreamer_ver) BuildRequires: pkgconfig(libpulse) %if 0%{?firefox_use_gtk3} BuildRequires: pkgconfig(glib-2.0) @@ -97,26 +91,11 @@ BuildRequires: pkgconfig(gtk+-3.0) >= 3.4.0 BuildRequires: pkgconfig(gtk+-unix-print-3.0) %endif -# libavcodec is already used if available for H.264 but -# explicitely loaded by FF. For proper H.264 support the -# openSUSE delivered version is not sufficient but currently -# prevents even the use of the GStreamer method -# https://bugzilla.mozilla.org/show_bug.cgi?id=1234157 -# to get H.264 working correctly libavcodec from packman -# is required. As of today the following recommends will -# pull in libavcodec52 from packman since it's the only -# package providing libavcodec but it's not loaded from -# Firefox as the minimal version is 53 +# libavcodec is required for H.264 support but the +# openSUSE version is currently not able to play H.264 +# therefore the Packman version is required +# minimum version of libavcodec is 53 #Recommends: libavcodec -%if 0%{?gstreamer} == 1 -Requires: libgstreamer-1_0-0 -Recommends: gstreamer-fluendo-mp3 -Recommends: gstreamer-plugins-libav -%else -Requires: libgstreamer-0_10-0 -Recommends: gstreamer-0_10-fluendo-mp3 -Recommends: gstreamer-0_10-plugins-ffmpeg -%endif Version: %{mainver} Release: 0 %if "%{name}" == "MozillaFirefox" @@ -162,13 +141,13 @@ Patch4: mozilla-preferences.patch Patch5: mozilla-language.patch Patch6: mozilla-ntlm-full-path.patch -Patch7: mozilla-repo.patch Patch8: mozilla-openaes-decl.patch Patch10: mozilla-no-stdcxx-check.patch -Patch11: mozilla-libproxy.patch -Patch12: mozilla-reduce-files-per-UnifiedBindings.patch -Patch13: mozilla-gtk3_20.patch -Patch14: mozilla-check_return.patch +Patch11: mozilla-reduce-files-per-UnifiedBindings.patch +Patch12: mozilla-gtk3_20.patch +Patch13: mozilla-check_return.patch +Patch14: mozilla-gcc6.patch +Patch15: mozilla-exclude-nametablecpp.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-no-default-ualocale.patch @@ -274,15 +253,15 @@ %patch4 -p1 %patch5 -p1 %patch6 -p1 -%patch7 -p1 %patch8 -p1 %patch10 -p1 %patch11 -p1 +%if 0%{?firefox_use_gtk3} %patch12 -p1 -%if 0%{?firefox_use_gtk3} +%endif %patch13 -p1 -%endif %patch14 -p1 +%patch15 -p1 # Firefox %patch101 -p1 %patch102 -p1 @@ -301,7 +280,7 @@ exit 1 fi source %{SOURCE5} -export MOZ_SOURCE_STAMP=$REV +export MOZ_SOURCE_CHANGESET=$REV export SOURCE_REPO=$REPO export source_repo=$REPO export MOZ_SOURCE_REPO=$REPO @@ -318,6 +297,11 @@ # Limit RAM usage during link export LDFLAGS="${LDFLAGS} -Wl,--no-keep-memory -Wl,--reduce-memory-overheads" %endif +%if 0%{?build_hardened} +%ifarch x86_64 +export LDFLAGS="${LDFLAGS} -Wl,-z,relro,-z,now" +%endif +%endif %ifarch ppc64 ppc64le export CFLAGS="$CFLAGS -mminimal-toc" %endif @@ -340,13 +324,16 @@ %else ac_add_options --enable-default-toolkit=cairo-gtk2 %endif +%if 0%{?build_hardened} +ac_add_options --enable-pie +%endif %ifarch %ix86 %arm %if 0%{?suse_version} > 1230 ac_add_options --disable-optimize %endif %endif -%ifnarch ppc ppc64 ppc64le aarch64 -ac_add_options --enable-elf-hack +%ifarch ppc ppc64 ppc64le aarch64 %arm +ac_add_options --disable-elf-hack %endif ac_add_options --with-system-nspr ac_add_options --with-system-nss @@ -356,16 +343,12 @@ #ac_add_options --with-system-jpeg # libjpeg-turbo is used internally #ac_add_options --with-system-png # doesn't work because of missing APNG support ac_add_options --with-system-zlib -ac_add_options --disable-installer ac_add_options --disable-updater ac_add_options --disable-tests ac_add_options --disable-debug ac_add_options --enable-startup-notification #ac_add_options --enable-chrome-format=jar ac_add_options --enable-update-channel=%{update_channel} -%if 0%{?gstreamer} == 1 -ac_add_options --enable-gstreamer=1.0 -%endif %if %branding ac_add_options --enable-official-branding %endif @@ -374,7 +357,6 @@ ac_add_options --disable-crashreporter %endif %ifarch %arm -ac_add_options --disable-elf-hack ac_add_options --with-fpu=vfpv3-d16 ac_add_options --with-float-abi=hard ac_add_options --with-arch=armv7-a diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/create-tar.sh --- a/MozillaFirefox/create-tar.sh Tue Jun 07 21:44:20 2016 +0200 +++ b/MozillaFirefox/create-tar.sh Wed Jun 08 13:45:00 2016 +0200 @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_46_0_1_RELEASE" -VERSION="46.0.1" +RELEASE_TAG="FIREFOX_47_0_RELEASE" +VERSION="47.0" # mozilla if [ -d mozilla ]; then diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/l10n_changesets.txt --- a/MozillaFirefox/l10n_changesets.txt Tue Jun 07 21:44:20 2016 +0200 +++ b/MozillaFirefox/l10n_changesets.txt Wed Jun 08 13:45:00 2016 +0200 @@ -1,90 +1,92 @@ -ach 658769a76613 +ach 9a0c8e338b70 af 431e02c10881 an fe436c75f71d ar bbcf06888dc5 as 8313f975ae77 ast 0300b60cd340 -az fd96727d2a26 +az db362112cd4d be b72077740aac bg 9f7507dd2b92 -bn-BD fe0a6bb82a2d +bn-BD 1dac94619464 bn-IN a2ea6b87d80d -br 95b028350e29 +br e4c45f737a88 bs cfee6f5b1e50 -ca e8ca2d46b4a8 -cs ed6004b91b51 -cy 5bbcbba9b054 -da 324fe068c0b9 -de 217ff3f0054a -dsb 7cdfb5d9dc5d +ca 55814ed0a2ee +cak 244b8a568146 +cs a98b5d34950d +cy 02a8a09a2a24 +da 1976f45a00fb +de 69c491b3e8dd +dsb 60185ee5350d el 22b959c9a739 -en-GB 36012ab486ad -en-ZA 1c91f05aae5a -eo 049c1b065f4c -es-AR b3647b1d5927 -es-CL e45186f983b9 -es-ES 6fe131a8b07f -es-MX 4cd511663283 +en-GB ac4d309f11aa +en-ZA 52a936eeeea1 +eo 9402e7dc1816 +es-AR d3e6fdb0980e +es-CL 247114b95260 +es-ES 05251e5fad44 +es-MX 198b582408f2 et ecae9df9c92a -eu 1a65e2c03dda -fa e5993d9fb76e +eu 5b00fd411da4 +fa c64ea222eb3a ff 8373353b43c4 -fi b743718650bc -fr 7d0bb8edc149 -fy-NL 02ee99ad3f83 -ga-IE 713ecb614f77 -gd e5b86736a5f9 +fi 485cd6730972 +fr 262385fe83a0 +fy-NL d133532b4a76 +ga-IE 2217b283ff59 +gd 664cfe62d15b gl c869caff337a gn 65b2894520b6 gu-IN 6245b4309461 -he ee92b661d299 +he 2d122d643e0b hi-IN bba2a926e4f8 -hr 8502beb4ee68 -hsb c91a11523487 -hu 09bbddfef7ee -hy-AM 3d7a9324fb25 -id cb8f841d30d2 -is 46c99105eb3b -it 6063a6d94e13 -ja 5ff86cadfe9a -ja-JP-mac ab760b3dcdd1 -kk 5a7bd05bf942 +hr 5e68406d5630 +hsb ed7044697b0a +hu ea25586b7644 +hy-AM 723627d1c0a4 +id d84757c01f40 +is 0b19292ab8a3 +it 9ada32a4f24b +ja 6374f9dd3854 +ja-JP-mac 28d0060377c0 +kk 58b2a6152124 km 339790840ac1 -kn b23d8fbcf41a -ko 5f303ed16778 +kn a7e2c93d27ad +ko 4c2bafb385f3 lij e9113fac3a93 -lt 628e96e62e44 -lv 063998fdecf8 +lt 64c104a758bf +lv 918ea0cd0aca mai ce010a305377 mk ffdf2a789185 ml 1b85d75836cd -mr 553ff31f4edd +mr 943d62e6e06d ms 41bbf86ac0d9 -nb-NO 5e6e5710fac9 -nl ac486141ab40 -nn-NO be9e3eeb75fb +nb-NO bee48c9ea2d4 +nl 3bdea753600d +nn-NO 1deb8231f357 or febd1b04dbfc pa-IN 6c5ed1be55fb -pl 49e141118acb -pt-BR cd1aef7b5045 -pt-PT 2e4fd2a1f98f -rm 0a52db6a6117 -ro c6ac34be77b1 -ru 3f0b3c8e19a4 +pl c9e8c3b4977c +pt-BR ba6e3510ab03 +pt-PT 89d85625e259 +rm 5c20929daf23 +ro b1baa279bda4 +ru 2248b98b11c2 si 03a3b09a2203 -sk 3505a5f99bff -sl 1e098ab8c27a +sk b1a81bf66ed4 +sl 6079300745a1 son 3ae9a4ff0453 -sq c24e570a4207 -sr 896d72a0fa21 -sv-SE ea1de38fe731 +sq bc47aefcea37 +sr 93d5749016bd +sv-SE 711ed419239c ta f9dbc2cca1fb te 286ff9885ea2 th d630f05d665f -tr b751d2d9b6ee -uk c5cdb9068667 -uz dc28cf99c5cf +tr 4c05084f5ef2 +uk 6b23f6bb9dcb +uz 1209fe62df1c vi 68ce305343a3 -xh f3eb8f92afe8 -zh-CN d73d448f89d6 -zh-TW 44c9950bb3e6 +xh 8466fb6c8797 +zh-CN bedbf795f45e +zh-TW 8a8fcc28bce0 + diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/mozilla-exclude-nametablecpp.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/MozillaFirefox/mozilla-exclude-nametablecpp.patch Wed Jun 08 13:45:00 2016 +0200 @@ -0,0 +1,1 @@ +../mozilla-exclude-nametablecpp.patch \ No newline at end of file diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/mozilla-gcc6.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/MozillaFirefox/mozilla-gcc6.patch Wed Jun 08 13:45:00 2016 +0200 @@ -0,0 +1,1 @@ +../mozilla-gcc6.patch \ No newline at end of file diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/mozilla-libproxy.patch --- a/MozillaFirefox/mozilla-libproxy.patch Tue Jun 07 21:44:20 2016 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../mozilla-libproxy.patch \ No newline at end of file diff -r e969636be188 -r 2f9f2e040647 MozillaFirefox/mozilla-repo.patch --- a/MozillaFirefox/mozilla-repo.patch Tue Jun 07 21:44:20 2016 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../mozilla-repo.patch \ No newline at end of file diff -r e969636be188 -r 2f9f2e040647 firefox-kde.patch --- a/firefox-kde.patch Tue Jun 07 21:44:20 2016 +0200 +++ b/firefox-kde.patch Wed Jun 08 13:45:00 2016 +0200 @@ -1,11 +1,11 @@ # HG changeset patch -# Parent fd5629206dcf3f64d85ab177be6bc6076f0f1619 +# Parent 4311c6bdf61ac317bc60b25cd89ff67662a75049 diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1175 @@ +@@ -0,0 +1,1160 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -77,6 +77,8 @@ + +