# HG changeset patch # User Wolfgang Rosenauer # Date 1440227823 -7200 # Node ID 349bcaa18df4ed4c51a99cfa8928cff76c123692 # Parent 3b986c9dbc5f3235d71c5525a5ad8c4e5f9a8847# Parent 2d6ccc01ea9efa75da62cfa320aec0b37ff0287b merge/update from firefox40 branch prepare 41beta phase diff -r 3b986c9dbc5f -r 349bcaa18df4 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Sat Aug 22 09:13:27 2015 +0200 +++ b/MozillaFirefox/MozillaFirefox.changes Sat Aug 22 09:17:03 2015 +0200 @@ -1,7 +1,65 @@ ------------------------------------------------------------------- -Sat Jul 18 12:47:47 UTC 2015 - wr@rosenauer.org - -- update to Firefox 40.0b5 +Fri Aug 7 07:49:49 UTC 2015 - wr@rosenauer.org + +- update to Firefox 40.0 (bnc#940806) + * Added protection against unwanted software downloads + * Suggested Tiles show sites of interest, based on categories + from your recent browsing history + * Hello allows adding a link to conversations to provide context + on what the conversation will be about + * New style for add-on manager based on the in-content + preferences style + * Improved scrolling, graphics, and video playback performance + with off main thread compositing (GNU/Linux only) + * Graphic blocklist mechanism improved: Firefox version ranges + can be specified, limiting the number of devices blocked + security fixes: + * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 + Miscellaneous memory safety hazards + * MFSA 2015-80/CVE-2015-4475 (bmo#1175396) + Out-of-bounds read with malformed MP3 file + * MFSA 2015-81/CVE-2015-4477 (bmo#1179484) + Use-after-free in MediaStream playback + * MFSA 2015-82/CVE-2015-4478 (bmo#1105914) + Redefinition of non-configurable JavaScript object properties + * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493 + Overflow issues in libstagefright + * MFSA 2015-84/CVE-2015-4481 (bmo1171518) + Arbitrary file overwriting through Mozilla Maintenance Service + with hard links (only affected Windows) + * MFSA 2015-85/CVE-2015-4482 (bmo#1184500) + Out-of-bounds write with Updater and malicious MAR file + (does not affect openSUSE RPM packages which do not ship the + updater) + * MFSA 2015-86/CVE-2015-4483 (bmo#1148732) + Feed protocol with POST bypasses mixed content protections + * MFSA 2015-87/CVE-2015-4484 (bmo#1171540) + Crash when using shared memory in JavaScript + * MFSA 2015-88/CVE-2015-4491 (bmo#1184009) + Heap overflow in gdk-pixbuf when scaling bitmap images + * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) + Buffer overflows on Libvpx when decoding WebM video + * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 + Vulnerabilities found through code inspection + * MFSA 2015-91/CVE-2015-4490 (bmo#1086999) + Mozilla Content Security Policy allows for asterisk wildcards + in violation of CSP specification + * MFSA 2015-92/CVE-2015-4492 (bmo#1185820) + Use-after-free in XMLHttpRequest with shared workers +- added mozilla-no-stdcxx-check.patch +- removed obsolete patches + * mozilla-add-glibcxx_use_cxx11_abi.patch + * firefox-multilocale-chrome.patch +- rebased patches +- requires version 40 of the branding package +- removed browser/searchplugins/ location as it's not valid anymore + +------------------------------------------------------------------- +Fri Aug 7 07:09:39 UTC 2015 - wr@rosenauer.org + +- security update to Firefox 39.0.3 (bnc#940918) + * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058) + Same origin violation and local file stealing via PDF reader ------------------------------------------------------------------- Wed Jul 1 06:43:02 UTC 2015 - wr@rosenauer.org diff -r 3b986c9dbc5f -r 349bcaa18df4 MozillaFirefox/MozillaFirefox.spec --- a/MozillaFirefox/MozillaFirefox.spec Sat Aug 22 09:13:27 2015 +0200 +++ b/MozillaFirefox/MozillaFirefox.spec Sat Aug 22 09:17:03 2015 +0200 @@ -18,10 +18,10 @@ # changed with every update -%define major 39 +%define major 40 %define mainver %major.99 %define update_channel beta -%define releasedate 2015071700 +%define releasedate 2015082100 # general build definitions %if "%{update_channel}" != "aurora" @@ -146,18 +146,17 @@ Patch12: mozilla-openaes-decl.patch Patch14: mozilla-skia-be-le.patch Patch15: mozilla-bmo1005535.patch -Patch16: mozilla-add-glibcxx_use_cxx11_abi.patch -Patch17: mozilla-arm64-libjpeg-turbo.patch +Patch16: mozilla-arm64-libjpeg-turbo.patch +Patch17: mozilla-no-stdcxx-check.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-no-default-ualocale.patch -Patch103: firefox-multilocale-chrome.patch -Patch104: firefox-branded-icons.patch +Patch103: firefox-branded-icons.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build Requires(post): coreutils shared-mime-info desktop-file-utils Requires(postun): shared-mime-info desktop-file-utils %if %branding -Requires: %{name}-branding > 20.0 +Requires: %{name}-branding > 39.0 %endif Requires: mozilla-nspr >= %(rpm -q --queryformat '%{VERSION}' mozilla-nspr) Requires: mozilla-nss >= %(rpm -q --queryformat '%{VERSION}' mozilla-nss) @@ -225,7 +224,7 @@ #BRAND: It's also possible to create a file #BRAND: /usr/lib/firefox/defaults/preferences/firefox-$vendor.js to set #BRAND: custom preference overrides. -#BRAND: It's also possible to drop files in /usr/lib/firefox/searchplugins +#BRAND: It's also possible to drop files in /usr/lib/firefox/distribution/searchplugins/common/ %description branding-upstream This package provides upstream look and feel for %{appname}. @@ -267,7 +266,6 @@ %patch101 -p1 %patch102 -p1 %patch103 -p1 -%patch104 -p1 %build # no need to add build time to binaries @@ -380,7 +378,6 @@ mkdir -p %{buildroot}%{progdir} cp -rf $RPM_BUILD_DIR/obj/dist/firefox/* %{buildroot}%{progdir} mkdir -p %{buildroot}%{progdir}/distribution/extensions -mkdir -p %{buildroot}%{progdir}/browser/searchplugins mkdir -p %{buildroot}%{progdir}/browser/defaults/preferences/ # install gre prefs install -m 644 %{SOURCE13} %{buildroot}%{progdir}/defaults/pref/ @@ -558,7 +555,6 @@ %{progdir}/browser/icons/ %{progdir}/browser/chrome/icons %{progdir}/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd} -%{progdir}/browser/searchplugins/ %{progdir}/browser/blocklist.xml %{progdir}/browser/chrome.manifest %{progdir}/browser/omni.ja diff -r 3b986c9dbc5f -r 349bcaa18df4 MozillaFirefox/create-tar.sh --- a/MozillaFirefox/create-tar.sh Sat Aug 22 09:13:27 2015 +0200 +++ b/MozillaFirefox/create-tar.sh Sat Aug 22 09:17:03 2015 +0200 @@ -2,8 +2,8 @@ CHANNEL="beta" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_40_0b5_RELEASE" -VERSION="39.99" +RELEASE_TAG="FIREFOX_41_0b3_RELEASE" +VERSION="40.99" # mozilla if [ -d mozilla ]; then diff -r 3b986c9dbc5f -r 349bcaa18df4 MozillaFirefox/firefox-multilocale-chrome.patch --- a/MozillaFirefox/firefox-multilocale-chrome.patch Sat Aug 22 09:13:27 2015 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../firefox-multilocale-chrome.patch \ No newline at end of file diff -r 3b986c9dbc5f -r 349bcaa18df4 MozillaFirefox/mozilla-add-glibcxx_use_cxx11_abi.patch --- a/MozillaFirefox/mozilla-add-glibcxx_use_cxx11_abi.patch Sat Aug 22 09:13:27 2015 +0200 +++ /dev/null Thu Jan 01 00:00:00 1970 +0000 @@ -1,1 +0,0 @@ -../mozilla-add-glibcxx_use_cxx11_abi.patch \ No newline at end of file diff -r 3b986c9dbc5f -r 349bcaa18df4 MozillaFirefox/mozilla-no-stdcxx-check.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/MozillaFirefox/mozilla-no-stdcxx-check.patch Sat Aug 22 09:17:03 2015 +0200 @@ -0,0 +1,1 @@ +../mozilla-no-stdcxx-check.patch \ No newline at end of file diff -r 3b986c9dbc5f -r 349bcaa18df4 firefox-branded-icons.patch --- a/firefox-branded-icons.patch Sat Aug 22 09:13:27 2015 +0200 +++ b/firefox-branded-icons.patch Sat Aug 22 09:17:03 2015 +0200 @@ -1,10 +1,11 @@ # HG changeset patch # Parent e0751ad74e835e80041a61ea00c2a63bf6fbe2de +# Parent dbca8a673de340999f67eb321169b44cc4109faf diff --git a/browser/app/Makefile.in b/browser/app/Makefile.in --- a/browser/app/Makefile.in +++ b/browser/app/Makefile.in -@@ -62,16 +62,21 @@ GARBAGE += $(addprefix $(FINAL_TARGET)/d +@@ -55,16 +55,21 @@ GARBAGE += $(addprefix $(FINAL_TARGET)/d endif ifdef MOZ_WIDGET_GTK @@ -26,37 +27,31 @@ $(NSINSTALL) -D $(DIST)/bin/defaults/pref $(call py_action,preprocessor,-Fsubstitution $(PREF_PPFLAGS) $(ACDEFINES) $^ -o $(DIST)/bin/defaults/pref/channel-prefs.js) endif -diff --git a/browser/branding/official/Makefile.in b/browser/branding/official/Makefile.in ---- a/browser/branding/official/Makefile.in -+++ b/browser/branding/official/Makefile.in -@@ -35,18 +35,21 @@ BRANDING_FILES := \ - document.icns \ - dsstore \ - $(NULL) - endif - - ifdef MOZ_WIDGET_GTK - BRANDING_FILES := \ - default16.png \ -+ default22.png \ -+ default24.png \ - default32.png \ - default48.png \ -+ default256.png \ - mozicon128.png \ - $(NULL) - endif - - BRANDING_DEST := $(DIST)/branding - BRANDING_TARGET := export - INSTALL_TARGETS += BRANDING - +diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/branding-common.mozbuild +--- a/browser/branding/branding-common.mozbuild ++++ b/browser/branding/branding-common.mozbuild +@@ -32,12 +32,15 @@ elif CONFIG['MOZ_WIDGET_TOOLKIT'] == 'co + 'disk.icns', + 'document.icns', + 'dsstore', + 'firefox.icns', + ] + elif CONFIG['MOZ_WIDGET_GTK']: + BRANDING_FILES += [ + 'default16.png', ++ 'default22.png', ++ 'default24.png', ++ 'default256.png', + 'default32.png', + 'default48.png', + 'mozicon128.png', + ] diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in --- a/browser/installer/package-manifest.in +++ b/browser/installer/package-manifest.in -@@ -654,18 +654,21 @@ +@@ -669,18 +669,21 @@ + @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/icon.png @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf - @RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/icon.png @RESPATH@/chrome/toolkit@JAREXT@ @RESPATH@/chrome/toolkit.manifest @RESPATH@/chrome/recording.manifest diff -r 3b986c9dbc5f -r 349bcaa18df4 firefox-kde.patch --- a/firefox-kde.patch Sat Aug 22 09:13:27 2015 +0200 +++ b/firefox-kde.patch Sat Aug 22 09:17:03 2015 +0200 @@ -1,11 +1,11 @@ # HG changeset patch -# Parent cd94ee18bd0cdda7f5eb5503d8d072efe02a8033 +# Parent c6048238765dab77cd0c9a45e7afb1157316938b diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1308 @@ +@@ -0,0 +1,1314 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -788,6 +788,7 @@ + + + ++ + + + @@ -838,7 +839,7 @@ + ++ onclick="ReadingListUI.buttonClick(event);"/> + +#include tab-shape.inc.svg -+ ++ +#ifndef XP_MACOSX -+ ++ +#else + +#endif + ++#ifdef XP_WIN ++ ++ ++ ++#endif + + + @@ -1336,7 +1342,7 @@