Hello community, here is the log from the commit of package epiphany for openSUSE:Leap:15.2 checked in at 2020-02-09 11:25:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/epiphany (Old) and /work/SRC/openSUSE:Leap:15.2/.epiphany.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "epiphany" Sun Feb 9 11:25:03 2020 rev:27 rq:770543 version:3.34.3.1 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/epiphany/epiphany.changes 2020-01-15 14:54:08.541546366 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.epiphany.new.26092/epiphany.changes 2020-02-09 11:25:07.447288885 +0100 @@ -2 +2 @@ -Wed Oct 9 10:49:06 UTC 2019 - Michael Gorse <[email protected]> +Thu Jan 23 09:48:38 UTC 2020 - Bjørn Lie <[email protected]> @@ -4,2 +4,679 @@ -- Add CVE-2018-11396.patch: fix JS crash when opening an invalid - URI (boo#1094464 CVE-2018-11396). +- Add backported patch from upstream: + epiphany-fix-compile-warning.patch: sync-utils: use getrandom() + to generate randomness. +- Drop epiphany-lang Recommends: No longer needed, lang + supplements will take care of it. + +------------------------------------------------------------------- +Sun Jan 5 12:59:49 UTC 2020 - Bjørn Lie <[email protected]> + +- Update to version 3.34.3.1: + + Forgot to update version number. +- Changes from version 3.34.3: + + Try harder to avoid session data loss. + + Reenable on-demand hardware acceleration. + + Fix localization of reader mode preferences. + + Security popover's per-website adblocker preference now + actually works. + + Fix search provider crash when there are no bookmarks. + + Disable Search the Web in application mode. + + Fix crashes on web app creation dialog. + +------------------------------------------------------------------- +Fri Nov 22 19:21:24 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.34.2: + + Fix bookmarks import error handling. + + Prevent detaching pinned tabs. + + Exclude pinned tabs from "close other tabs" and "close tabs to + left/right". + + Adjust icon to not use clipping masks for compatibility with + KDE. + + Correctly handle zero matches in find toolbar. + + Fix remember passwords setting. + + Updated translations. + +------------------------------------------------------------------- +Sat Oct 5 08:11:33 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.34.1: + + Fix maximize state not being remembered. + + Middle click should not close pinned tabs. + + Fix Ctrl+Shift+G for Find Previous shortcut. + + Fix searching for special characters in address bar. + + Fix warning about invalid signal handler when closing browser. + + Focus web view after creation in automation mode. + + Various fixes to new adblocker. + + Separate font rows in preferences dialog. + + Improve about:applications on small screens. + +------------------------------------------------------------------- +Mon Sep 9 23:41:15 UTC 2019 - Bjørn Lie <[email protected]> + +- Drop pkgconfig(evince-document-3.0) and + pkgconfig(evince-view-3.0) BuildRequires: Not needed, nor used + since version 3.31.90. + +------------------------------------------------------------------- +Sat Sep 7 16:56:13 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.34.0: + + New improved adblocker. + + Pinned tabs. + + Web process sandbox. + + Improved overview page design. + + Further enhancements for mobile devices. + +------------------------------------------------------------------- +Sat Sep 7 16:56:12 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.33.92: + + Fix overview snapshot removal animation. + + Fix mistake in construction of web app icon URL. + + Ensure adblocker is ready before loading any resources. + + Failure to start web extension connection is now fatal. + +------------------------------------------------------------------- +Sat Sep 7 16:56:11 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.33.91: + + Partially fix regressions from overview redesign. + + Fix crash when dragging tab to new window. + + Fix load state tracking regression. + + Disable accelerated compositing again. + +------------------------------------------------------------------- +Sat Sep 7 16:56:10 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.33.90: + + New adblocker based on WebKit content extensions + + Close window after drag/drop last tab to another window + + Adjust address bar popover position + + Use Alt+Enter for opening pages in new tab + + Add Ctrl+G shortcut to search bar for next search result + + Fix search bar text highlighting + + Redesigned about:overview, the new tab page + + Add emoji picker context menu item + + Remove context menu item for inserting Unicode control + characters + + Fix inappropriate context menu entries for non-downloadable + videos + + Fix web app section of the preferences dialog + + On-demand accelerated compositing is once again enabled by + default + + Enabled bubblewrap web process sandbox +- Changes from version 3.33.4: + + Support switching spellchecker languages + + Fix hangs when syncing bookmarks + + Fix glitched state when closing final tab from tabs popover + + Fix position of spinner in tabs + + Indicate when title of pinned tab has changed + + Fix tabs opening in strange places + + Don't refresh history dialog when loading page from history + + Allow loading more history dialog history using keyboard + + Make web view infobars work properly in mobile mode + + Add Ctrl+Tab and Ctrl+Shift+Tab to keyboard shortcuts dialog + + Fix crash when web app profile lacks .app file + + Ensure web apps broken beyond repair crash nicely + + Various improvements to history dialog + + Major rework of the preferences dialog + + Fix password manager error on forms without action attributes + + Show number of open pages in mobile mode + + Fix overview thumbnails improperly displaying placeholder icons + + Expose mouse gesture setting in preferences dialog +- Changes from version 3.33.3: + + More fixes for web app migration + + More password manager fixes + + Add mobile user agent setting +- Changes from version 3.33.2: + + Fix password manager for pages in iframes + + Search engines now have favicons in address bar dropdown + + Allow searching for open tabs with address bar + + Show error message for moved or deleted downloads + + Fix preferences language button sensitivity + + Continue downloads in background when last window is closed + + Add custom error page for missing files when loading file URIs + + Add visual feedback for importing Firefox bookmarks + + Fix crash opening preferences dialog in weird locales + + Fix manage additional URLs web apps preference + + Fix downloading blob URIs in web apps + + Add search match counter + + Pages popover should not exceed window size in X11 + + Fix HTTP auth dialog losing focus when switching tabs + + Fix tab order reversing in session if tab is pinned + + Fix issues with ordering of pinned tabs + + Pinned tabs should not have a close button in tabs popover + + Add tooltips to items in address bar + + Log message to inspector console when adblocker blocks a + resource + + New redesigned cookies dialogs +- Changes from version 3.33.1: + + Change Tech Preview app ID to org.gnome.Epiphany.Devel + + Improve tab order when opening links in new tabs + + Use elementary-style headerbar icons in Pantheon + + Remember zoom state for file URIs + + Prompt to set as default browser + + Add preference to ask where to save downloads + + Fix yellow search highlight disappearing when repeating search + + Allow pinning tabs + + Expose saving pages as HTML or PNGs in addition to MHTML + + Warn user when closing window with multiple tabs + + Comprehensively update user help + + Add preference to always start in incognito mode + + Add open in new incognito window to web app context menu + + Allow setting per-site permissions from security popover + + Allow writing HTTP and HTTPS URLs without slashes + + Fix tab list alignment with tabs not on top + + Fix low-resolution overview thumbnails in hidpi + + Add Ctrl+Enter shortcut to prepend www. and append .com to URL + + Always show tabs bar + + Incognito mode landing page is now adaptive + + Add drop shadow to icon in about:web + + Add empty state to about:applications + + Keep URL entry centered + + Fix icons overlapping with URL entry in right-to-left locales + + Adjust margins of suggestions popover + + Allow Ctrl+click to open new tab in back/forward lists + + Remove process model and process count settings (Spectre + mitigation) + + Use page instead of popover for mobile tab menu + + Always try saved HTTP auth credentials before prompting user + + Use WebKit's code for processing punycode and IDN + + Add swipe gesture to keyboard shortcuts dialog + + Update reader mode to latest readibility.js + + libdazzle is now required as a system dependency + +------------------------------------------------------------------- +Sat Sep 7 16:56:09 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.32.5: + + Fix certain page loads not entering history since WebKitGTK + 2.24.1. + + Fix overview page snapshots sometimes not being updated since ++++ 490 more lines (skipped) ++++ between /work/SRC/openSUSE:Leap:15.2/epiphany/epiphany.changes ++++ and /work/SRC/openSUSE:Leap:15.2/.epiphany.new.26092/epiphany.changes Old: ---- CVE-2018-11396.patch epiphany-3.28.1.1.tar.xz New: ---- epiphany-3.34.3.1.tar.xz epiphany-fix-compile-warning.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ epiphany.spec ++++++ --- /var/tmp/diff_new_pack.6z34BM/_old 2020-02-09 11:25:07.999289199 +0100 +++ /var/tmp/diff_new_pack.6z34BM/_new 2020-02-09 11:25:07.999289199 +0100 @@ -1,7 +1,7 @@ # # spec file for package epiphany # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,39 +12,43 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # Name: epiphany -Version: 3.28.1.1 +Version: 3.34.3.1 Release: 0 Summary: GNOME Web Browser License: GPL-3.0-or-later Group: Productivity/Networking/Web/Browsers URL: https://wiki.gnome.org/Apps/Web -Source0: http://download.gnome.org/sources/epiphany/3.28/%{name}-%{version}.tar.xz +Source0: https://download.gnome.org/sources/epiphany/3.34/%{name}-%{version}.tar.xz Source99: %{name}-rpmlintrc -# PATCH-FIX-UPSTREAM CVE-2018-11396.patch boo#1094464 [email protected] -- Fix crash when JS opens an invalid URI. -Patch0: CVE-2018-11396.patch +# PATCH-FIX-UPSTREAM epiphany-fix-compile-warning.patch -- sync-utils: use getrandom() to generate randomness +Patch0: epiphany-fix-compile-warning.patch + BuildRequires: fdupes -BuildRequires: meson +BuildRequires: meson >= 0.42.0 BuildRequires: pkgconfig BuildRequires: translation-update-upstream BuildRequires: yelp-tools BuildRequires: pkgconfig(cairo) >= 1.2 BuildRequires: pkgconfig(gcr-3) >= 3.5.5 -BuildRequires: pkgconfig(gdk-3.0) >= 3.22.13 +BuildRequires: pkgconfig(gdk-3.0) >= 3.24.0 BuildRequires: pkgconfig(gdk-pixbuf-2.0) >= 2.36.5 -BuildRequires: pkgconfig(gio-2.0) >= 2.52.0 -BuildRequires: pkgconfig(gio-unix-2.0) >= 2.52.0 -BuildRequires: pkgconfig(glib-2.0) >= 2.52.0 +BuildRequires: pkgconfig(gio-2.0) >= 2.61.2 +BuildRequires: pkgconfig(gio-unix-2.0) >= 2.61.2 +BuildRequires: pkgconfig(glib-2.0) >= 2.61.2 +BuildRequires: pkgconfig(gsettings-desktop-schemas) BuildRequires: pkgconfig(gtk+-3.0) >= 3.22.13 BuildRequires: pkgconfig(gtk+-unix-print-3.0) >= 3.22.13 BuildRequires: pkgconfig(hogweed) >= 3.2 BuildRequires: pkgconfig(icu-uc) >= 4.6 BuildRequires: pkgconfig(iso-codes) >= 0.35 -BuildRequires: pkgconfig(json-glib-1.0) >= 1.2.0 +BuildRequires: pkgconfig(json-glib-1.0) >= 1.2.4 +BuildRequires: pkgconfig(libdazzle-1.0) >= 3.31.90 +BuildRequires: pkgconfig(libhandy-0.0) >= 0.0.9 BuildRequires: pkgconfig(libnotify) >= 0.5.1 BuildRequires: pkgconfig(libsecret-1) >= 0.14 BuildRequires: pkgconfig(libsoup-2.4) >= 2.48.0 @@ -52,11 +56,10 @@ BuildRequires: pkgconfig(libxslt) >= 1.1.7 BuildRequires: pkgconfig(nettle) >= 3.2 BuildRequires: pkgconfig(sqlite3) >= 3.0 -BuildRequires: pkgconfig(webkit2gtk-4.0) >= 2.19.4 -BuildRequires: pkgconfig(webkit2gtk-web-extension-4.0) >= 2.19.2 +BuildRequires: pkgconfig(webkit2gtk-4.0) >= 2.25.1 +BuildRequires: pkgconfig(webkit2gtk-web-extension-4.0) >= 2.25.1 Requires: %{name}-branding = %{version} Requires: iso-codes -Recommends: %{name}-lang Recommends: ca-certificates %description @@ -102,7 +105,7 @@ %meson \ -Ddeveloper_mode=false \ -Ddistributor_name=openSUSE \ - -Dunit_tests=false \ + -Dunit_tests=disabled \ %{nil} %meson_build @@ -113,7 +116,7 @@ %files %license COPYING -%doc HACKING NEWS README TODO +%doc CONTRIBUTING.md NEWS README.md TODO %doc %{_datadir}/help/C/%{name}/ %{_bindir}/epiphany %dir %{_datadir}/metainfo @@ -126,8 +129,8 @@ %{_datadir}/icons/hicolor/*/apps/org.gnome.Epiphany* %{_mandir}/man1/epiphany.1%{ext_man} %dir %{_libdir}/epiphany -%dir %{_libdir}/epiphany/web-extensions -%{_libdir}/epiphany/web-extensions/libephywebextension.so +%dir %{_libdir}/epiphany/web-process-extensions +%{_libdir}/epiphany/web-process-extensions/libephywebprocessextension.so %{_libdir}/epiphany/libephymain.so %{_libdir}/epiphany/libephymisc.so %{_libdir}/epiphany/libephysync.so @@ -141,7 +144,7 @@ %{_datadir}/dbus-1/services/org.gnome.Epiphany.SearchProvider.service %dir %{_datadir}/gnome-shell %dir %{_datadir}/gnome-shell/search-providers -%{_datadir}/gnome-shell/search-providers/org.gnome.Epiphany.search-provider.ini +%{_datadir}/gnome-shell/search-providers/org.gnome.Epiphany.SearchProvider.ini %{_libexecdir}/epiphany-search-provider %files lang -f %{name}.lang ++++++ epiphany-3.28.1.1.tar.xz -> epiphany-3.34.3.1.tar.xz ++++++ ++++ 318649 lines of diff (skipped) ++++++ epiphany-fix-compile-warning.patch ++++++ >From 929f8f4d9e89c7751e6a6f15c1915349a2851c97 Mon Sep 17 00:00:00 2001 From: Michael Catanzaro <[email protected]> Date: Wed, 22 Jan 2020 16:11:58 -0600 Subject: [PATCH] sync-utils: use getrandom() to generate randomness GCC complains that we ignore the return value from fread(), which is important for error checking. This is easy to fix, but might as well switch to getrandom() while we're at it, since this is the nice/modern way to get randomness. Note: requires glibc 2.25 or a newish FreeBSD. --- lib/ephy-sync-utils.c | 15 ++++++++++----- 1 file changed, 10 insertions(+), 5 deletions(-) diff --git a/lib/ephy-sync-utils.c b/lib/ephy-sync-utils.c index 6c8a37a85..4ae56220b 100644 --- a/lib/ephy-sync-utils.c +++ b/lib/ephy-sync-utils.c @@ -23,12 +23,14 @@ #include "ephy-settings.h" +#include <errno.h> #include <glib/gi18n.h> #include <inttypes.h> #include <json-glib/json-glib.h> #include <libsoup/soup.h> #include <stdio.h> #include <string.h> +#include <sys/random.h> static const char hex_digits[] = "0123456789abcdef"; @@ -165,21 +167,24 @@ ephy_sync_utils_base64_urlsafe_decode (const char *text, * This is mainly required by Nettle's RSA support. * From Nettle's documentation: random_ctx and random is a randomness generator. * random(random_ctx, length, dst) should generate length random octets and store them at dst. - * We don't really use random_ctx, since we have /dev/urandom available. + * We don't use random_ctx. */ void ephy_sync_utils_generate_random_bytes (void *random_ctx, gsize num_bytes, guint8 *out) { - FILE *fp; + gssize ret; g_assert (num_bytes > 0); g_assert (out); - fp = fopen ("/dev/urandom", "r"); - fread (out, sizeof (guint8), num_bytes, fp); - fclose (fp); + do { + ret = getrandom (out, num_bytes, 0); + } while (ret < (gssize)num_bytes && errno == EINTR); + + if (ret != (gssize)num_bytes) + g_error ("Failed to generate randomness: %s", g_strerror (errno)); } char * -- 2.24.1
