# HG changeset patch # User Wolfgang Rosenauer # Date 1628493257 -7200 # Node ID c4aba2fa09086c5bba1ebb181f2d9e5fa8a6d3c4 # Parent 00846b9a35cd39d3285cb288c2c13ed0e9e1903f 90.0.2 diff -r 00846b9a35cd -r c4aba2fa0908 MozillaFirefox/MozillaFirefox.changes --- a/MozillaFirefox/MozillaFirefox.changes Sun Jul 11 10:26:32 2021 +0200 +++ b/MozillaFirefox/MozillaFirefox.changes Mon Aug 09 09:14:17 2021 +0200 @@ -1,4 +1,60 @@ ------------------------------------------------------------------- +Sat Jul 24 07:15:54 UTC 2021 - Andreas Stieger + +- Mozilla Firefox 90.0.2: + * Changed: Updates to support DoH Canada rollout (bmo#1713036) + * Fixed: Fixed truncated output when printing (bmo#1720621) + * Fixed: Fixed menu styling on some Gtk themes (bmo#1720441, + bmo#1720874) + +------------------------------------------------------------------- +Mon Jul 19 20:08:56 UTC 2021 - Andreas Stieger + +- Mozilla Firefox 90.0.1 (boo#1188480): + * Fixed: Fixed busy looping processing some HTTP3 responses + (bmo#1720079) + * Fixed: Fixed transient errors authenticating with some smart + cards (bmo#1715325) + * Fixed: Fixed a rare crash on shutdown (bmo#1707057) + * Fixed: Fixed a race on startup that caused about:support to + end up empty after upgrade (bmo#1717894, boo#1188330) + +------------------------------------------------------------------- +Sun Jul 11 08:53:02 UTC 2021 - Wolfgang Rosenauer + +- Mozilla Firefox 90.0 + MFSA 2021-28 (bsc#1188275) + * CVE-2021-29970 (bmo#1709976) + Use-after-free in accessibility features of a document + * CVE-2021-29971 (bmo#1713638) + Granted permissions only compared host; omitting scheme and + port on Android + * CVE-2021-30547 (bmo#1715766) + Out of bounds write in ANGLE + * CVE-2021-29972 (bmo#1696816) + Use of out-of-date library included use-after-free + vulnerability + * CVE-2021-29973 (bmo#1701932) + Password autofill on HTTP websites was enabled without user + interaction on Android + * CVE-2021-29974 (bmo#1704843) + HSTS errors could be overridden when network partitioning was + enabled + * CVE-2021-29975 (bmo#1713259) + Text message could be overlaid on top of another website + * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910, + bmo#1711576, bmo#1714391) + Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12 + * CVE-2021-29977 (bmo#1665836, bmo#1686138, bmo#1704316, + bmo#1706314, bmo#1709931, bmo#1712084, bmo#1712357, + bmo#1714066) + Memory safety bugs fixed in Firefox 90 +- requires + NSPR 4.31 + NSS 3.66 +- Gtk2 support removed (was only for Flash plugin before) + +------------------------------------------------------------------- Wed Jun 23 16:54:20 UTC 2021 - Andreas Stieger - Mozilla Firefox 89.0.2 (boo#1187648): diff -r 00846b9a35cd -r c4aba2fa0908 MozillaFirefox/MozillaFirefox.spec --- a/MozillaFirefox/MozillaFirefox.spec Sun Jul 11 10:26:32 2021 +0200 +++ b/MozillaFirefox/MozillaFirefox.spec Mon Aug 09 09:14:17 2021 +0200 @@ -32,9 +32,9 @@ # orig_suffix b3 # major 69 # mainver %major.99 -%define major 89 +%define major 90 %define mainver %major.0.2 -%define orig_version 89.0.2 +%define orig_version 90.0.2 %define orig_suffix %{nil} %define update_channel release %define branding 1 @@ -110,8 +110,8 @@ BuildRequires: libiw-devel BuildRequires: libproxy-devel BuildRequires: makeinfo -BuildRequires: mozilla-nspr-devel >= 4.30 -BuildRequires: mozilla-nss-devel >= 3.64 +BuildRequires: mozilla-nspr-devel >= 4.31 +BuildRequires: mozilla-nss-devel >= 3.66 BuildRequires: nasm >= 2.14 BuildRequires: nodejs >= 10.22.1 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000 @@ -142,9 +142,7 @@ BuildRequires: pkgconfig(gdk-x11-2.0) BuildRequires: pkgconfig(glib-2.0) >= 2.22 BuildRequires: pkgconfig(gobject-2.0) -BuildRequires: pkgconfig(gtk+-2.0) >= 2.18.0 BuildRequires: pkgconfig(gtk+-3.0) >= 3.14.0 -BuildRequires: pkgconfig(gtk+-unix-print-2.0) BuildRequires: pkgconfig(gtk+-unix-print-3.0) BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) @@ -439,6 +437,7 @@ mk_add_options MOZ_MAKE_FLAGS=%{?jobs:-j%jobs} mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/../obj . \$topsrcdir/browser/config/mozconfig +ac_add_options --disable-bootstrap ac_add_options --prefix=%{_prefix} ac_add_options --libdir=%{_libdir} ac_add_options --includedir=%{_includedir} @@ -733,8 +732,6 @@ %dir %{progdir}/distribution/ %{progdir}/distribution/extensions/ %{progdir}/defaults/ -%dir %{progdir}/gtk2 -%{progdir}/gtk2/libmozgtk.so %{progdir}/gmp-clearkey/ %attr(755,root,root) %{progdir}/%{progname}.sh %{progdir}/%{progname} diff -r 00846b9a35cd -r c4aba2fa0908 MozillaFirefox/tar_stamps --- a/MozillaFirefox/tar_stamps Sun Jul 11 10:26:32 2021 +0200 +++ b/MozillaFirefox/tar_stamps Mon Aug 09 09:14:17 2021 +0200 @@ -1,11 +1,11 @@ PRODUCT="firefox" CHANNEL="release" -VERSION="89.0.2" +VERSION="90.0.2" VERSION_SUFFIX="" -PREV_VERSION="89.0.1" +PREV_VERSION="90.0.1" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release" -RELEASE_TAG="9fcea995d1dabc5a4f4ef3811dc0e6e00d88cbe3" -RELEASE_TIMESTAMP="20210622155641" +RELEASE_TAG="cda19fb46018c9cb8dc5e6127ebb2cfd04aa9be4" +RELEASE_TIMESTAMP="20210721174149" diff -r 00846b9a35cd -r c4aba2fa0908 mozilla-kde.patch --- a/mozilla-kde.patch Sun Jul 11 10:26:32 2021 +0200 +++ b/mozilla-kde.patch Mon Aug 09 09:14:17 2021 +0200 @@ -3,7 +3,7 @@ # Date 1559294891 -7200 # Fri May 31 11:28:11 2019 +0200 # Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112 -# Parent 53e325f006bd6a31f6f3d40ae248e4058897055a +# Parent c8bc6be5267f16016d506973a2d6a7c58a1cd441 Description: Add KDE integration to Firefox (toolkit parts) Author: Wolfgang Rosenauer Author: Lubos Lunak @@ -356,7 +356,7 @@ diff --git a/toolkit/xre/moz.build b/toolkit/xre/moz.build --- a/toolkit/xre/moz.build +++ b/toolkit/xre/moz.build -@@ -92,17 +92,19 @@ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "co +@@ -93,17 +93,19 @@ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "co "../components/printingui", ] elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "uikit": @@ -841,7 +841,7 @@ diff --git a/uriloader/exthandler/moz.build b/uriloader/exthandler/moz.build --- a/uriloader/exthandler/moz.build +++ b/uriloader/exthandler/moz.build -@@ -77,17 +77,19 @@ else: +@@ -80,17 +80,19 @@ else: SOURCES += [ osdir + "/nsOSHelperAppService.cpp", ] @@ -861,7 +861,7 @@ ] elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "windows": UNIFIED_SOURCES += [ -@@ -125,16 +127,17 @@ include("/ipc/chromium/chromium-config.m +@@ -128,16 +130,17 @@ include("/ipc/chromium/chromium-config.m FINAL_LIBRARY = "xul" LOCAL_INCLUDES += [ @@ -1206,15 +1206,15 @@ #ifdef MOZ_WIDGET_GTK -# include "nsGNOMERegistry.h" +# include "nsCommonRegistry.h" + # ifdef MOZ_BUILD_APP_IS_BROWSER + # include "nsIToolkitShellService.h" + # include "nsIGNOMEShellService.h" + # endif #endif #include "nsISupports.h" #include "nsString.h" #include "nsReadableUtils.h" - #include "nsUnicharUtils.h" - #include "nsIFileStreams.h" - #include "nsILineInputStream.h" - #include "nsIFile.h" -@@ -1020,17 +1020,17 @@ nsresult nsOSHelperAppService::GetHandle +@@ -1024,17 +1024,17 @@ nsresult nsOSHelperAppService::GetHandle nsresult nsOSHelperAppService::OSProtocolHandlerExists( const char* aProtocolScheme, bool* aHandlerExists) { @@ -1233,7 +1233,7 @@ nsCOMPtr handlerSvc = do_GetService(NS_HANDLERSERVICE_CONTRACTID, &rv); if (NS_SUCCEEDED(rv) && handlerSvc) { -@@ -1040,17 +1040,17 @@ nsresult nsOSHelperAppService::OSProtoco +@@ -1044,17 +1044,17 @@ nsresult nsOSHelperAppService::OSProtoco } return rv; @@ -1252,7 +1252,7 @@ NS_IMETHODIMP nsOSHelperAppService::IsCurrentAppOSDefaultForProtocol( const nsACString& aScheme, bool* _retval) { -@@ -1137,17 +1137,17 @@ already_AddRefed nsOSHel +@@ -1147,17 +1147,17 @@ already_AddRefed nsOSHel nsresult rv = LookUpTypeAndDescription(NS_ConvertUTF8toUTF16(aFileExt), majorType, minorType, mime_types_description, true); @@ -1271,7 +1271,7 @@ rv = LookUpTypeAndDescription(NS_ConvertUTF8toUTF16(aFileExt), majorType, minorType, mime_types_description, false); -@@ -1248,17 +1248,17 @@ already_AddRefed nsOSHel +@@ -1258,17 +1258,17 @@ already_AddRefed nsOSHel // Now look up our extensions nsAutoString extensions, mime_types_description; @@ -1293,7 +1293,7 @@ diff --git a/widget/gtk/moz.build b/widget/gtk/moz.build --- a/widget/gtk/moz.build +++ b/widget/gtk/moz.build -@@ -137,16 +137,17 @@ FINAL_LIBRARY = "xul" +@@ -136,16 +136,17 @@ FINAL_LIBRARY = "xul" LOCAL_INCLUDES += [ "/layout/base", @@ -1337,20 +1337,20 @@ #include "nsNetUtil.h" #include "nsReadableUtils.h" #include "MozContainer.h" - #include "gfxPlatformGtk.h" + #include "WidgetUtilsGtk.h" #include "nsFilePicker.h" +#include "nsKDEUtils.h" +#include "nsURLHelper.h" - using namespace mozilla; - - #define MAX_PREVIEW_SIZE 180 - // bug 1184009 - #define MAX_PREVIEW_SOURCE_SIZE 4096 - - nsIFile* nsFilePicker::mPrevDisplayDirectory = nullptr; -@@ -231,17 +234,19 @@ nsFilePicker::AppendFilters(int32_t aFil + #undef LOG + #ifdef MOZ_LOGGING + # include "mozilla/Logging.h" + # include "nsTArray.h" + # include "Units.h" + extern mozilla::LazyLogModule gWidgetLog; + # define LOG(args) MOZ_LOG(gWidgetLog, mozilla::LogLevel::Debug, args) +@@ -242,17 +245,19 @@ nsFilePicker::AppendFilters(int32_t aFil mAllowURLs = !!(aFilterMask & filterAllowURLs); return nsBaseFilePicker::AppendFilters(aFilterMask); } @@ -1371,7 +1371,7 @@ mFilters.AppendElement(filter); mFilterNames.AppendElement(name); -@@ -341,16 +346,39 @@ nsresult nsFilePicker::Show(int16_t* aRe +@@ -352,16 +357,39 @@ nsresult nsFilePicker::Show(int16_t* aRe return NS_OK; } @@ -1411,7 +1411,7 @@ GtkFileChooserAction action = GetGtkFileChooserAction(mMode); const gchar* accept_button; -@@ -570,16 +598,244 @@ void nsFilePicker::Done(void* file_choos +@@ -581,16 +609,244 @@ void nsFilePicker::Done(void* file_choos mCallback->Done(result); mCallback = nullptr; } else { diff -r 00846b9a35cd -r c4aba2fa0908 mozilla-reduce-rust-debuginfo.patch --- a/mozilla-reduce-rust-debuginfo.patch Sun Jul 11 10:26:32 2021 +0200 +++ b/mozilla-reduce-rust-debuginfo.patch Mon Aug 09 09:14:17 2021 +0200 @@ -3,16 +3,16 @@ # Date 1560754926 -7200 # Mon Jun 17 09:02:06 2019 +0200 # Node ID 428161c3b9599083e1b8710eda1760f1f707ab11 -# Parent 2a004fe4d56123f6e73a9436d1a290bbfc5e0b6b +# Parent d55730171edb1935dec80234eba336787ff0e4e8 #Description: reduce the rust debuginfo level on selected architectures where # compiling with debuginfo=2 causes the OOM killer to interrupt the build on # launchpad builders. Initially this was only on 32 bit architectures, but with # firefox 63 it started happening frequently on arm64 and ppc64el too. -diff --git a/build/moz.configure/toolchain.configure b/build/moz.configure/toolchain.configure ---- a/build/moz.configure/toolchain.configure -+++ b/build/moz.configure/toolchain.configure -@@ -2145,18 +2145,19 @@ def rustc_opt_level(opt_level_option, mo +diff --git a/build/moz.configure/rust.configure b/build/moz.configure/rust.configure +--- a/build/moz.configure/rust.configure ++++ b/build/moz.configure/rust.configure +@@ -603,18 +603,19 @@ set_config("CARGO_PROFILE_DEV_OPT_LEVEL" @depends( @@ -33,7 +33,7 @@ # optimization level. Since Cargo only supports 2 profiles, we're in # a bit of a bind. # -@@ -2169,16 +2170,18 @@ def rust_compile_flags(opt_level, debug_ +@@ -627,16 +628,18 @@ def rust_compile_flags(opt_level, debug_ # opt-level=0 implies -C debug-assertions, which may not be desired # unless Rust debugging is enabled. @@ -47,8 +47,8 @@ opts = [] - if opt_level is not None: - opts.append("opt-level=%s" % opt_level) if debug_assertions is not None: opts.append("debug-assertions=%s" % ("yes" if debug_assertions else "no")) if debug_info is not None: + opts.append("debuginfo=%s" % debug_info) + if frame_pointers: