# HG changeset patch # User Wolfgang Rosenauer # Date 1422180738 -3600 # Node ID 3caf8b25f1460bb178c3271254cc14c60868bf1c # Parent 5551f1ff7e1d7c5832c883fde9fa1172592a9951# Parent 677ef48cf29b3291c66cd3a7b2e8c9fa8a65076f merge from ff35 diff -r 5551f1ff7e1d -r 3caf8b25f146 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Sat Dec 06 19:15:35 2014 +0100 +++ b/MozillaFirefox/MozillaFirefox.changes Sun Jan 25 11:12:18 2015 +0100 @@ -1,8 +1,31 @@ ------------------------------------------------------------------- -Sun Nov 16 15:03:49 UTC 2014 - wr@rosenauer.org - -- Aurora 35 (20141115) aka Firefox Developer Edition - * Aurora does not use branding subpackages anymore +Sat Jan 10 18:36:37 UTC 2015 - wr@rosenauer.org + +- update to Firefox 35.0 (bnc#910669) + notable features: + * Firefox Hello with new rooms-based conversations model + * Implemented HTTP Public Key Pinning Extension (for enhanced + authentication of encrypted connections) + security fixes: + * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 + Miscellaneous memory safety hazards + * MFSA 2015-02/CVE-2014-8637 (bmo#1094536) + Uninitialized memory use during bitmap rendering + * MFSA 2015-03/CVE-2014-8638 (bmo#1080987) + sendBeacon requests lack an Origin header + * MFSA 2015-04/CVE-2014-8639 (bmo#1095859) + Cookie injection through Proxy Authenticate responses + * MFSA 2015-05/CVE-2014-8640 (bmo#1100409) + Read of uninitialized memory in Web Audio + * MFSA 2015-06/CVE-2014-8641 (bmo#1108455) + Read-after-free in WebRTC + * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only) + Gecko Media Plugin sandbox escape + * MFSA 2015-08/CVE-2014-8642 (bmo#1079658) + Delegated OCSP responder certificates failure with + id-pkix-ocsp-nocheck extension + * MFSA 2015-09/CVE-2014-8636 (bmo#987794) + XrayWrapper bypass through DOM objects - rebased patches - dropped explicit support for everything older than 12.3 (including SLES11) @@ -11,6 +34,13 @@ - reworked specfile to build conditionally based on release channel either Firefox or Firefox Developer Edition - added mozilla-openaes-decl.patch to fix implicit declarations +- obsolete tracker-miner-firefox < 0.15 because it leads to startup + crashes (bnc#908892) + +------------------------------------------------------------------- +Sat Dec 13 22:13:00 UTC 2014 - Led + +- fix bashism in mozilla.sh script ------------------------------------------------------------------- Sat Nov 29 21:23:03 UTC 2014 - wr@rosenauer.org diff -r 5551f1ff7e1d -r 3caf8b25f146 MozillaFirefox/MozillaFirefox.spec --- a/MozillaFirefox/MozillaFirefox.spec Sat Dec 06 19:15:35 2014 +0100 +++ b/MozillaFirefox/MozillaFirefox.spec Sun Jan 25 11:12:18 2015 +0100 @@ -1,8 +1,8 @@ # # spec file for package MozillaFirefox # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. -# 2006-2014 Wolfgang Rosenauer +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# 2006-2015 Wolfgang Rosenauer # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,10 +17,10 @@ # # changed with every update -%define major 34 -%define mainver %major.98 -%define update_channel aurora -%define releasedate 2014111500 +%define major 35 +%define mainver %major.0 +%define update_channel release +%define releasedate 2015010900 # general build definitions %if "%{update_channel}" != "aurora" @@ -159,6 +159,8 @@ Requires: mozilla-nss >= %(rpm -q --queryformat '%{VERSION}' mozilla-nss) Recommends: libcanberra0 Recommends: libpulse0 +# addon leads to startup crash (bnc#908892) +Obsoletes: tracker-miner-firefox < 0.15 # libproxy's mozjs pacrunner crashes FF (bnc#759123) %if 0%{?suse_version} < 1220 Obsoletes: libproxy1-pacrunner-mozjs <= 0.4.7 diff -r 5551f1ff7e1d -r 3caf8b25f146 MozillaFirefox/create-tar.sh --- a/MozillaFirefox/create-tar.sh Sat Dec 06 19:15:35 2014 +0100 +++ b/MozillaFirefox/create-tar.sh Sun Jan 25 11:12:18 2015 +0100 @@ -1,9 +1,9 @@ #!/bin/bash -CHANNEL="aurora" +CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="default" -VERSION="34.98" +RELEASE_TAG="FIREFOX_35_0_RELEASE" +VERSION="35.0" # mozilla if [ -d mozilla ]; then diff -r 5551f1ff7e1d -r 3caf8b25f146 MozillaFirefox/mozilla.sh.in --- a/MozillaFirefox/mozilla.sh.in Sat Dec 06 19:15:35 2014 +0100 +++ b/MozillaFirefox/mozilla.sh.in Sun Jan 25 11:12:18 2015 +0100 @@ -131,7 +131,8 @@ if [ $moz_debug -eq 1 ]; then tmpfile=`mktemp /tmp/mozargs.XXXXXX` || { echo "Cannot create temporary file" >&2; exit 1; } trap " [ -f \"$tmpfile\" ] && /bin/rm -f -- \"$tmpfile\"" 0 1 2 3 13 15 - echo -e "set args ${1+"$@"}\nrun" > $tmpfile + echo "set args ${1+"$@"}" > $tmpfile + echo "run" >> $tmpfile echo "$moz_debugger $MOZ_PROGRAM -x $tmpfile" exec $moz_debugger "$MOZ_PROGRAM" -x $tmpfile else diff -r 5551f1ff7e1d -r 3caf8b25f146 firefox-kde.patch --- a/firefox-kde.patch Sat Dec 06 19:15:35 2014 +0100 +++ b/firefox-kde.patch Sun Jan 25 11:12:18 2015 +0100 @@ -1,8 +1,11 @@ +# HG changeset patch +# Parent 6697591ddc0a1b18171c31a7bf18d99be9825aab + diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul new file mode 100644 --- /dev/null +++ b/browser/base/content/browser-kde.xul -@@ -0,0 +1,1224 @@ +@@ -0,0 +1,1272 @@ +#filter substitution + +# -*- Mode: HTML -*- @@ -145,6 +148,9 @@ + +