Firefox 32.0b3 firefox32
authorWolfgang Rosenauer <wr@rosenauer.org>
Sat, 02 Aug 2014 09:06:35 +0200
branchfirefox32
changeset 753 f3bf114c6639
parent 751 8517d10e87ab
child 756 e4fa9844604e
Firefox 32.0b3
MozillaFirefox/MozillaFirefox.changes
MozillaFirefox/MozillaFirefox.spec
MozillaFirefox/create-tar.sh
firefox-kde.patch
firefox-no-default-ualocale.patch
--- a/MozillaFirefox/MozillaFirefox.changes	Mon Jul 28 09:06:53 2014 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Sat Aug 02 09:06:35 2014 +0200
@@ -1,18 +1,42 @@
 -------------------------------------------------------------------
-Wed Jul  9 05:13:39 UTC 2014 - wr@rosenauer.org
-
-- update to Aurora 32 (20140707)
+Mon Jul 28 07:08:08 UTC 2014 - wr@rosenauer.org
+
+- update to Firefox 32b1
 - rebased patches
 - requires NSS 3.16.3
 - removed upstreamed patch
   * mozilla-aarch64-bmo-810631.patch
 
 -------------------------------------------------------------------
-Sat Jul  5 12:28:20 UTC 2014 - wr@rosenauer.org
-
-- update to Firefox 31beta7
+Sun Jul 20 18:11:44 UTC 2014 - wr@rosenauer.org
+
+- update to Firefox 31.0 (bnc#887746)
+  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
+    Miscellaneous memory safety hazards
+  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
+    Buffer overflow during Web Audio buffering for playback
+  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
+    Use-after-free in Web Audio due to incorrect control message ordering
+  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
+    Toolbar dialog customization event spoofing
+  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
+    Use-after-free with FireOnStateChange event
+  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
+    Exploitable WebGL crash with Cesium JavaScript library
+  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
+    Use-after-free while when manipulating certificates in the trusted cache
+    (solved with NSS 3.16.2 requirement)
+  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
+    Crash in Skia library when scaling high quality images
+  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
+    (bmo#1015973, bmo#1026022, bmo#997795)
+    Certificate parsing broken by non-standard character encoding
+  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
+    IFRAME sandbox same-origin access through redirect
+- use EGL on ARM
 - rebased patches
 - requires NSS 3.16.2
+- requires python-devel (not only python)
 
 -------------------------------------------------------------------
 Mon Jun  9 08:28:17 UTC 2014 - wr@rosenauer.org
--- a/MozillaFirefox/MozillaFirefox.spec	Mon Jul 28 09:06:53 2014 +0200
+++ b/MozillaFirefox/MozillaFirefox.spec	Sat Aug 02 09:06:35 2014 +0200
@@ -74,7 +74,7 @@
 %endif
 Version:        %{mainver}
 Release:        0
-%define         releasedate 2014072700
+%define         releasedate 2014080100
 Provides:       firefox = %{mainver}
 Provides:       firefox = %{version}-%{release}
 Provides:       web_browser
@@ -350,6 +350,10 @@
 %ifnarch %ix86 x86_64
 ac_add_options --disable-webrtc
 %endif
+# try to use OpenGL-ES on ARM
+%ifarch %arm
+ac_add_options --with-gl-provider=EGL
+%endif
 EOF
 make -f client.mk build
 
--- a/MozillaFirefox/create-tar.sh	Mon Jul 28 09:06:53 2014 +0200
+++ b/MozillaFirefox/create-tar.sh	Sat Aug 02 09:06:35 2014 +0200
@@ -2,7 +2,7 @@
 
 CHANNEL="beta"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_32_0b1_RELEASE"
+RELEASE_TAG="FIREFOX_32_0b3_RELEASE"
 VERSION="31.99"
 
 # mozilla
--- a/firefox-kde.patch	Mon Jul 28 09:06:53 2014 +0200
+++ b/firefox-kde.patch	Sat Aug 02 09:06:35 2014 +0200
@@ -2,7 +2,7 @@
 new file mode 100644
 --- /dev/null
 +++ b/browser/base/content/browser-kde.xul
-@@ -0,0 +1,1205 @@
+@@ -0,0 +1,1206 @@
 +#filter substitution
 +<?xml version="1.0"?>
 +# -*- Mode: HTML -*-
@@ -909,6 +909,7 @@
 +                       tooltiptext="&sharePageCmd.label;"
 +                       cui-areatype="toolbar"
 +                       removable="true"
++                       hidden="true"
 +                       command="Social:SharePage"/>
 +      </hbox>
 +
--- a/firefox-no-default-ualocale.patch	Mon Jul 28 09:06:53 2014 +0200
+++ b/firefox-no-default-ualocale.patch	Sat Aug 02 09:06:35 2014 +0200
@@ -1,14 +1,14 @@
 # HG changeset patch
 # User Wolfgang Rosenauer <wr@rosenauer.org>
-# Parent 5ffbb37bbfc52f549620ff67ce45f218a825cf4e
+# Parent b7bc98abc45462dec0f6603f3c9a88e772172f29
 Do not overwrite the locale dynamic pref from xulrunner's all.js with a wrong default value
 
 diff --git a/browser/app/profile/firefox.js b/browser/app/profile/firefox.js
 --- a/browser/app/profile/firefox.js
 +++ b/browser/app/profile/firefox.js
-@@ -253,17 +253,17 @@ pref("browser.uitour.pinnedTabUrl", "htt
- pref("browser.uitour.url", "https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/");
+@@ -254,17 +254,17 @@ pref("browser.uitour.url", "https://www.
  pref("browser.uitour.whitelist.add.260", "www.mozilla.org,support.mozilla.org");
+ pref("browser.uitour.whitelist.add.340", "about:home");
  
  pref("browser.customizemode.tip0.shown", false);
  pref("browser.customizemode.tip0.learnMoreUrl", "https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/customize");