90.0.2 firefox90
authorWolfgang Rosenauer <wr@rosenauer.org>
Mon, 09 Aug 2021 09:14:17 +0200
branchfirefox90
changeset 1159 c4aba2fa0908
parent 1158 00846b9a35cd
child 1160 b28cf22ff7cf
90.0.2
MozillaFirefox/MozillaFirefox.changes
MozillaFirefox/MozillaFirefox.spec
MozillaFirefox/tar_stamps
mozilla-kde.patch
mozilla-reduce-rust-debuginfo.patch
--- a/MozillaFirefox/MozillaFirefox.changes	Sun Jul 11 10:26:32 2021 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Mon Aug 09 09:14:17 2021 +0200
@@ -1,4 +1,60 @@
 -------------------------------------------------------------------
+Sat Jul 24 07:15:54 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 90.0.2:
+  * Changed: Updates to support DoH Canada rollout (bmo#1713036)
+  * Fixed: Fixed truncated output when printing (bmo#1720621)
+  * Fixed: Fixed menu styling on some Gtk themes (bmo#1720441,
+    bmo#1720874)
+
+-------------------------------------------------------------------
+Mon Jul 19 20:08:56 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 90.0.1 (boo#1188480):
+  * Fixed: Fixed busy looping processing some HTTP3 responses
+    (bmo#1720079)
+  * Fixed: Fixed transient errors authenticating with some smart
+    cards (bmo#1715325)
+  * Fixed: Fixed a rare crash on shutdown (bmo#1707057)
+  * Fixed: Fixed a race on startup that caused about:support to
+    end up empty after upgrade (bmo#1717894, boo#1188330)
+
+-------------------------------------------------------------------
+Sun Jul 11 08:53:02 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Firefox 90.0
+  MFSA 2021-28 (bsc#1188275)
+  * CVE-2021-29970 (bmo#1709976)
+    Use-after-free in accessibility features of a document
+  * CVE-2021-29971 (bmo#1713638)
+    Granted permissions only compared host; omitting scheme and
+    port on Android
+  * CVE-2021-30547 (bmo#1715766)
+    Out of bounds write in ANGLE
+  * CVE-2021-29972 (bmo#1696816)
+    Use of out-of-date library included use-after-free
+    vulnerability
+  * CVE-2021-29973 (bmo#1701932)
+    Password autofill on HTTP websites was enabled without user
+    interaction on Android
+  * CVE-2021-29974 (bmo#1704843)
+    HSTS errors could be overridden when network partitioning was
+    enabled
+  * CVE-2021-29975 (bmo#1713259)
+    Text message could be overlaid on top of another website
+  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
+    bmo#1711576, bmo#1714391)
+    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
+  * CVE-2021-29977 (bmo#1665836, bmo#1686138, bmo#1704316,
+    bmo#1706314, bmo#1709931, bmo#1712084, bmo#1712357,
+    bmo#1714066)
+    Memory safety bugs fixed in Firefox 90
+- requires
+  NSPR 4.31
+  NSS 3.66
+- Gtk2 support removed (was only for Flash plugin before)
+
+-------------------------------------------------------------------
 Wed Jun 23 16:54:20 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
 
 - Mozilla Firefox 89.0.2 (boo#1187648):
--- a/MozillaFirefox/MozillaFirefox.spec	Sun Jul 11 10:26:32 2021 +0200
+++ b/MozillaFirefox/MozillaFirefox.spec	Mon Aug 09 09:14:17 2021 +0200
@@ -32,9 +32,9 @@
 # orig_suffix b3
 # major 69
 # mainver %major.99
-%define major          89
+%define major          90
 %define mainver        %major.0.2
-%define orig_version   89.0.2
+%define orig_version   90.0.2
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
@@ -110,8 +110,8 @@
 BuildRequires:  libiw-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
-BuildRequires:  mozilla-nspr-devel >= 4.30
-BuildRequires:  mozilla-nss-devel >= 3.64
+BuildRequires:  mozilla-nspr-devel >= 4.31
+BuildRequires:  mozilla-nss-devel >= 3.66
 BuildRequires:  nasm >= 2.14
 BuildRequires:  nodejs >= 10.22.1
 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
@@ -142,9 +142,7 @@
 BuildRequires:  pkgconfig(gdk-x11-2.0)
 BuildRequires:  pkgconfig(glib-2.0) >= 2.22
 BuildRequires:  pkgconfig(gobject-2.0)
-BuildRequires:  pkgconfig(gtk+-2.0) >= 2.18.0
 BuildRequires:  pkgconfig(gtk+-3.0) >= 3.14.0
-BuildRequires:  pkgconfig(gtk+-unix-print-2.0)
 BuildRequires:  pkgconfig(gtk+-unix-print-3.0)
 BuildRequires:  pkgconfig(libffi)
 BuildRequires:  pkgconfig(libpulse)
@@ -439,6 +437,7 @@
 mk_add_options MOZ_MAKE_FLAGS=%{?jobs:-j%jobs}
 mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/../obj
 . \$topsrcdir/browser/config/mozconfig
+ac_add_options --disable-bootstrap
 ac_add_options --prefix=%{_prefix}
 ac_add_options --libdir=%{_libdir}
 ac_add_options --includedir=%{_includedir}
@@ -733,8 +732,6 @@
 %dir %{progdir}/distribution/
 %{progdir}/distribution/extensions/
 %{progdir}/defaults/
-%dir %{progdir}/gtk2
-%{progdir}/gtk2/libmozgtk.so
 %{progdir}/gmp-clearkey/
 %attr(755,root,root) %{progdir}/%{progname}.sh
 %{progdir}/%{progname}
--- a/MozillaFirefox/tar_stamps	Sun Jul 11 10:26:32 2021 +0200
+++ b/MozillaFirefox/tar_stamps	Mon Aug 09 09:14:17 2021 +0200
@@ -1,11 +1,11 @@
 PRODUCT="firefox"
 CHANNEL="release"
-VERSION="89.0.2"
+VERSION="90.0.2"
 VERSION_SUFFIX=""
-PREV_VERSION="89.0.1"
+PREV_VERSION="90.0.1"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
-RELEASE_TAG="9fcea995d1dabc5a4f4ef3811dc0e6e00d88cbe3"
-RELEASE_TIMESTAMP="20210622155641"
+RELEASE_TAG="cda19fb46018c9cb8dc5e6127ebb2cfd04aa9be4"
+RELEASE_TIMESTAMP="20210721174149"
--- a/mozilla-kde.patch	Sun Jul 11 10:26:32 2021 +0200
+++ b/mozilla-kde.patch	Mon Aug 09 09:14:17 2021 +0200
@@ -3,7 +3,7 @@
 # Date 1559294891 -7200
 #      Fri May 31 11:28:11 2019 +0200
 # Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112
-# Parent  53e325f006bd6a31f6f3d40ae248e4058897055a
+# Parent  c8bc6be5267f16016d506973a2d6a7c58a1cd441
 Description: Add KDE integration to Firefox (toolkit parts)
 Author: Wolfgang Rosenauer <wolfgang@rosenauer.org>
 Author: Lubos Lunak <lunak@suse.com>
@@ -356,7 +356,7 @@
 diff --git a/toolkit/xre/moz.build b/toolkit/xre/moz.build
 --- a/toolkit/xre/moz.build
 +++ b/toolkit/xre/moz.build
-@@ -92,17 +92,19 @@ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "co
+@@ -93,17 +93,19 @@ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "co
          "../components/printingui",
      ]
  elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "uikit":
@@ -841,7 +841,7 @@
 diff --git a/uriloader/exthandler/moz.build b/uriloader/exthandler/moz.build
 --- a/uriloader/exthandler/moz.build
 +++ b/uriloader/exthandler/moz.build
-@@ -77,17 +77,19 @@ else:
+@@ -80,17 +80,19 @@ else:
      SOURCES += [
          osdir + "/nsOSHelperAppService.cpp",
      ]
@@ -861,7 +861,7 @@
      ]
  elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "windows":
      UNIFIED_SOURCES += [
-@@ -125,16 +127,17 @@ include("/ipc/chromium/chromium-config.m
+@@ -128,16 +130,17 @@ include("/ipc/chromium/chromium-config.m
  FINAL_LIBRARY = "xul"
  
  LOCAL_INCLUDES += [
@@ -1206,15 +1206,15 @@
  #ifdef MOZ_WIDGET_GTK
 -#  include "nsGNOMERegistry.h"
 +#  include "nsCommonRegistry.h"
+ #  ifdef MOZ_BUILD_APP_IS_BROWSER
+ #    include "nsIToolkitShellService.h"
+ #    include "nsIGNOMEShellService.h"
+ #  endif
  #endif
  #include "nsISupports.h"
  #include "nsString.h"
  #include "nsReadableUtils.h"
- #include "nsUnicharUtils.h"
- #include "nsIFileStreams.h"
- #include "nsILineInputStream.h"
- #include "nsIFile.h"
-@@ -1020,17 +1020,17 @@ nsresult nsOSHelperAppService::GetHandle
+@@ -1024,17 +1024,17 @@ nsresult nsOSHelperAppService::GetHandle
  
  nsresult nsOSHelperAppService::OSProtocolHandlerExists(
      const char* aProtocolScheme, bool* aHandlerExists) {
@@ -1233,7 +1233,7 @@
      nsCOMPtr<nsIHandlerService> handlerSvc =
          do_GetService(NS_HANDLERSERVICE_CONTRACTID, &rv);
      if (NS_SUCCEEDED(rv) && handlerSvc) {
-@@ -1040,17 +1040,17 @@ nsresult nsOSHelperAppService::OSProtoco
+@@ -1044,17 +1044,17 @@ nsresult nsOSHelperAppService::OSProtoco
    }
  
    return rv;
@@ -1252,7 +1252,7 @@
  
  NS_IMETHODIMP nsOSHelperAppService::IsCurrentAppOSDefaultForProtocol(
      const nsACString& aScheme, bool* _retval) {
-@@ -1137,17 +1137,17 @@ already_AddRefed<nsMIMEInfoBase> nsOSHel
+@@ -1147,17 +1147,17 @@ already_AddRefed<nsMIMEInfoBase> nsOSHel
    nsresult rv =
        LookUpTypeAndDescription(NS_ConvertUTF8toUTF16(aFileExt), majorType,
                                 minorType, mime_types_description, true);
@@ -1271,7 +1271,7 @@
  
      rv = LookUpTypeAndDescription(NS_ConvertUTF8toUTF16(aFileExt), majorType,
                                    minorType, mime_types_description, false);
-@@ -1248,17 +1248,17 @@ already_AddRefed<nsMIMEInfoBase> nsOSHel
+@@ -1258,17 +1258,17 @@ already_AddRefed<nsMIMEInfoBase> nsOSHel
  
    // Now look up our extensions
    nsAutoString extensions, mime_types_description;
@@ -1293,7 +1293,7 @@
 diff --git a/widget/gtk/moz.build b/widget/gtk/moz.build
 --- a/widget/gtk/moz.build
 +++ b/widget/gtk/moz.build
-@@ -137,16 +137,17 @@ FINAL_LIBRARY = "xul"
+@@ -136,16 +136,17 @@ FINAL_LIBRARY = "xul"
  
  LOCAL_INCLUDES += [
      "/layout/base",
@@ -1337,20 +1337,20 @@
  #include "nsNetUtil.h"
  #include "nsReadableUtils.h"
  #include "MozContainer.h"
- #include "gfxPlatformGtk.h"
+ #include "WidgetUtilsGtk.h"
  
  #include "nsFilePicker.h"
 +#include "nsKDEUtils.h"
 +#include "nsURLHelper.h"
  
- using namespace mozilla;
- 
- #define MAX_PREVIEW_SIZE 180
- // bug 1184009
- #define MAX_PREVIEW_SOURCE_SIZE 4096
- 
- nsIFile* nsFilePicker::mPrevDisplayDirectory = nullptr;
-@@ -231,17 +234,19 @@ nsFilePicker::AppendFilters(int32_t aFil
+ #undef LOG
+ #ifdef MOZ_LOGGING
+ #  include "mozilla/Logging.h"
+ #  include "nsTArray.h"
+ #  include "Units.h"
+ extern mozilla::LazyLogModule gWidgetLog;
+ #  define LOG(args) MOZ_LOG(gWidgetLog, mozilla::LogLevel::Debug, args)
+@@ -242,17 +245,19 @@ nsFilePicker::AppendFilters(int32_t aFil
    mAllowURLs = !!(aFilterMask & filterAllowURLs);
    return nsBaseFilePicker::AppendFilters(aFilterMask);
  }
@@ -1371,7 +1371,7 @@
  
    mFilters.AppendElement(filter);
    mFilterNames.AppendElement(name);
-@@ -341,16 +346,39 @@ nsresult nsFilePicker::Show(int16_t* aRe
+@@ -352,16 +357,39 @@ nsresult nsFilePicker::Show(int16_t* aRe
    return NS_OK;
  }
  
@@ -1411,7 +1411,7 @@
    GtkFileChooserAction action = GetGtkFileChooserAction(mMode);
  
    const gchar* accept_button;
-@@ -570,16 +598,244 @@ void nsFilePicker::Done(void* file_choos
+@@ -581,16 +609,244 @@ void nsFilePicker::Done(void* file_choos
      mCallback->Done(result);
      mCallback = nullptr;
    } else {
--- a/mozilla-reduce-rust-debuginfo.patch	Sun Jul 11 10:26:32 2021 +0200
+++ b/mozilla-reduce-rust-debuginfo.patch	Mon Aug 09 09:14:17 2021 +0200
@@ -3,16 +3,16 @@
 # Date 1560754926 -7200
 #      Mon Jun 17 09:02:06 2019 +0200
 # Node ID 428161c3b9599083e1b8710eda1760f1f707ab11
-# Parent  2a004fe4d56123f6e73a9436d1a290bbfc5e0b6b
+# Parent  d55730171edb1935dec80234eba336787ff0e4e8
 #Description: reduce the rust debuginfo level on selected architectures where
 # compiling with debuginfo=2 causes the OOM killer to interrupt the build on
 # launchpad builders. Initially this was only on 32 bit architectures, but with
 # firefox 63 it started happening frequently on arm64 and ppc64el too.
 
-diff --git a/build/moz.configure/toolchain.configure b/build/moz.configure/toolchain.configure
---- a/build/moz.configure/toolchain.configure
-+++ b/build/moz.configure/toolchain.configure
-@@ -2145,18 +2145,19 @@ def rustc_opt_level(opt_level_option, mo
+diff --git a/build/moz.configure/rust.configure b/build/moz.configure/rust.configure
+--- a/build/moz.configure/rust.configure
++++ b/build/moz.configure/rust.configure
+@@ -603,18 +603,19 @@ set_config("CARGO_PROFILE_DEV_OPT_LEVEL"
  
  
  @depends(
@@ -33,7 +33,7 @@
      # optimization level. Since Cargo only supports 2 profiles, we're in
      # a bit of a bind.
      #
-@@ -2169,16 +2170,18 @@ def rust_compile_flags(opt_level, debug_
+@@ -627,16 +628,18 @@ def rust_compile_flags(opt_level, debug_
  
      # opt-level=0 implies -C debug-assertions, which may not be desired
      # unless Rust debugging is enabled.
@@ -47,8 +47,8 @@
  
      opts = []
  
-     if opt_level is not None:
-         opts.append("opt-level=%s" % opt_level)
      if debug_assertions is not None:
          opts.append("debug-assertions=%s" % ("yes" if debug_assertions else "no"))
      if debug_info is not None:
+         opts.append("debuginfo=%s" % debug_info)
+     if frame_pointers: