Hello community, here is the log from the commit of package MozillaFirefox for openSUSE:Factory checked in at 2020-06-05 20:04:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaFirefox (Old) and /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3606 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaFirefox" Fri Jun 5 20:04:07 2020 rev:313 rq:811277 version:77.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaFirefox/MozillaFirefox.changes 2020-05-14 23:24:06.424890973 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3606/MozillaFirefox.changes 2020-06-05 20:05:35.768916295 +0200 @@ -1,0 +2,40 @@ +Wed Jun 3 21:39:11 UTC 2020 - Andreas Stieger <[email protected]> + +- Mozilla Firefox 77.0.1 + * Disable automatic selection of DNS over HTTPS providers during + a test to enable wider deployment in a more controlled way + (bmo#1642723) + +------------------------------------------------------------------- +Fri May 29 11:49:36 UTC 2020 - Wolfgang Rosenauer <[email protected]> + +- Mozilla Firefox 77.0 + * view and manage web certificates more easily on the new + about:certificate page + * improvements in accessibility + * significant improvements to JavaScript debugging + MFSA 2020-20 (bsc#1172402) + * CVE-2020-12399 (bmo#1631576) + Timing attack on DSA signatures in NSS library + (fixed with external NSS >= 3.52.1) + * CVE-2020-12405 (bmo#1631618) + Use-after-free in SharedWorkerService + * CVE-2020-12406 (bmo#1639590) + JavaScript type confusion with NativeTypes + * CVE-2020-12407 (bmo#1637112) + WebRender leaking GPU memory when using border-image CSS + directive + * CVE-2020-12408 (bmo#1623888) + URL spoofing when using IP addresses + * CVE-2020-12409 (bmo#1619305, bmo#1632717) + Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 + * CVE-2020-12411 (bmo#1620972, bmo#1625333) + Memory safety bugs fixed in Firefox 77 +- requires + * NSS >= 3.52.1 + * rust-cbindgen >= 1.14.1 + * clang >= 5 +- added mozilla-bmo1634646.patch as part of fixing PGO build + (still not working) + +------------------------------------------------------------------- Old: ---- firefox-76.0.1.source.tar.xz firefox-76.0.1.source.tar.xz.asc l10n-76.0.1.tar.xz New: ---- firefox-77.0.1.source.tar.xz firefox-77.0.1.source.tar.xz.asc l10n-77.0.1.tar.xz mozilla-bmo1634646.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaFirefox.spec ++++++ --- /var/tmp/diff_new_pack.pS9p2K/_old 2020-06-05 20:08:03.141314210 +0200 +++ /var/tmp/diff_new_pack.pS9p2K/_new 2020-06-05 20:08:03.145314223 +0200 @@ -18,18 +18,18 @@ # changed with every update -%define major 76 +%define major 77 %define mainver %major.0.1 -%define orig_version 76.0.1 +%define orig_version 77.0.1 %define orig_suffix %{nil} %define update_channel release %define branding 1 %define devpkg 1 -# disable for FF73 for now as it fails for unknown reason +# PGO builds do not work in TW currently (bmo#1642410) %define do_profiling 0 -# always build with GCC as SUSE Security Team requires that +# upstream default is clang (to use gcc for large parts set to 0) %define clang_build 0 # PIE, full relro @@ -84,14 +84,14 @@ BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.25 -BuildRequires: mozilla-nss-devel >= 3.51.1 +BuildRequires: mozilla-nss-devel >= 3.52.1 BuildRequires: nasm >= 2.14 BuildRequires: nodejs10 >= 10.19.0 BuildRequires: python-devel BuildRequires: python2-xml BuildRequires: python3 >= 3.5 BuildRequires: rust >= 1.41 -BuildRequires: rust-cbindgen >= 0.13.1 +BuildRequires: rust-cbindgen >= 0.14.1 BuildRequires: startup-notification-devel BuildRequires: unzip BuildRequires: update-desktop-files @@ -104,6 +104,7 @@ %if 0%{?suse_version} < 1550 BuildRequires: pkgconfig(gconf-2.0) >= 1.2.1 %endif +BuildRequires: clang-devel >= 5 BuildRequires: pkgconfig(gdk-x11-2.0) BuildRequires: pkgconfig(glib-2.0) >= 2.22 BuildRequires: pkgconfig(gobject-2.0) @@ -113,12 +114,6 @@ BuildRequires: pkgconfig(gtk+-unix-print-3.0) BuildRequires: pkgconfig(libffi) BuildRequires: pkgconfig(libpulse) -%if 0%{?suse_version} > 1320 -BuildRequires: llvm-clang-devel >= 3.9.0 -%else -# this covers the workaround to compile on Leap 42 in OBS -BuildRequires: clang4-devel -%endif # libavcodec is required for H.264 support but the # openSUSE version is currently not able to play H.264 # therefore the Packman version is required @@ -186,6 +181,7 @@ Patch20: mozilla-fix-top-level-asm.patch Patch21: mozilla-bmo1504834-part4.patch Patch22: mozilla-bmo849632.patch +Patch23: mozilla-bmo1634646.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-branded-icons.patch @@ -321,6 +317,7 @@ %patch20 -p1 %patch21 -p1 %patch22 -p1 +%patch23 -p1 # Firefox %patch101 -p1 %patch102 -p1 ++++++ firefox-76.0.1.source.tar.xz -> firefox-77.0.1.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaFirefox/firefox-76.0.1.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3606/firefox-77.0.1.source.tar.xz differ: char 15, line 1 ++++++ firefox-kde.patch ++++++ --- /var/tmp/diff_new_pack.pS9p2K/_old 2020-06-05 20:08:03.349314904 +0200 +++ /var/tmp/diff_new_pack.pS9p2K/_new 2020-06-05 20:08:03.349314904 +0200 @@ -3,7 +3,7 @@ # Date 1559300151 -7200 # Fri May 31 12:55:51 2019 +0200 # Node ID 54d41b0033b8d649d842a1f862c6fed8b9874dec -# Parent 5db49d25901f390e985c8e4bb5e0ec0b22cadeec +# Parent 0fd58e0df883086574263e0881e1503cf110562a How to apply this patch: 1. Import and apply it 2. cp browser/base/content/browser.xul browser/base/content/browser-kde.xul @@ -11,10 +11,10 @@ 4. Replace #ifndef with #ifdef in the line above (this hanges the button order from Gnome-style to KDE-style) 5. hg qrefresh -diff --git a/browser/components/preferences/in-content/main.js b/browser/components/preferences/in-content/main.js ---- a/browser/components/preferences/in-content/main.js -+++ b/browser/components/preferences/in-content/main.js -@@ -333,16 +333,23 @@ var gMainPane = { +diff --git a/browser/components/preferences/main.js b/browser/components/preferences/main.js +--- a/browser/components/preferences/main.js ++++ b/browser/components/preferences/main.js +@@ -336,16 +336,23 @@ var gMainPane = { }, backoffTimes[this._backoffIndex + 1 < backoffTimes.length ? this._backoffIndex++ : backoffTimes.length - 1]); }; @@ -38,7 +38,7 @@ ); let performanceSettingsUrl = Services.urlFormatter.formatURLPref("app.support.baseURL") + -@@ -1296,16 +1303,27 @@ var gMainPane = { +@@ -1301,16 +1308,27 @@ var gMainPane = { this._backoffIndex = 0; let shellSvc = getShellService(); @@ -69,7 +69,7 @@ diff --git a/browser/components/shell/moz.build b/browser/components/shell/moz.build --- a/browser/components/shell/moz.build +++ b/browser/components/shell/moz.build -@@ -28,16 +28,18 @@ if CONFIG['MOZ_WIDGET_TOOLKIT'] == 'coco +@@ -34,16 +34,18 @@ if CONFIG['MOZ_WIDGET_TOOLKIT'] == 'coco ] elif CONFIG['MOZ_WIDGET_TOOLKIT'] == 'gtk': XPIDL_SOURCES += [ @@ -81,13 +81,13 @@ + 'nsKDEShellService.cpp', + 'nsUnixShellService.cpp', ] - elif CONFIG['OS_ARCH'] == 'WINNT': - XPIDL_SOURCES += [ - 'nsIWindowsShellService.idl', - ] - SOURCES += [ - 'nsWindowsShellService.cpp', - ] + if CONFIG['MOZ_ENABLE_DBUS']: + SOURCES += [ + 'nsGNOMEShellDBusHelper.cpp', + 'nsGNOMEShellSearchProvider.cpp', + ] + include('/ipc/chromium/chromium-config.mozbuild') + diff --git a/browser/components/shell/nsKDEShellService.cpp b/browser/components/shell/nsKDEShellService.cpp new file mode 100644 --- /dev/null ++++++ l10n-76.0.1.tar.xz -> l10n-77.0.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaFirefox/l10n-76.0.1.tar.xz /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3606/l10n-77.0.1.tar.xz differ: char 26, line 1 ++++++ mozilla-bmo1634646.patch ++++++ # HG changeset patch # User Wolfgang Rosenauer <[email protected]> # Parent 43820d9e289abee98a2e3cdb4314848de3bc8622 diff --git a/build/pgo/profileserver.py b/build/pgo/profileserver.py --- a/build/pgo/profileserver.py +++ b/build/pgo/profileserver.py @@ -127,17 +127,17 @@ if __name__ == '__main__': # Bug 1553850 considers fixing this. env["MOZ_DISABLE_CONTENT_SANDBOX"] = "1" env["MOZ_DISABLE_RDD_SANDBOX"] = "1" # Ensure different pids write to different files env["LLVM_PROFILE_FILE"] = "default_%p_random_%m.profraw" # Write to an output file if we're running in automation - process_args = {} + process_args = {'universal_newlines': True} if 'UPLOAD_PATH' in env: process_args['logfile'] = os.path.join(env['UPLOAD_PATH'], 'profile-run-1.log') # Run Firefox a first time to initialize its profile runner = FirefoxRunner(profile=profile, binary=binary, cmdargs=['data:text/html,<script>Quitter.quit()</script>'], env=env, ++++++ mozilla-kde.patch ++++++ --- /var/tmp/diff_new_pack.pS9p2K/_old 2020-06-05 20:08:03.529315503 +0200 +++ /var/tmp/diff_new_pack.pS9p2K/_new 2020-06-05 20:08:03.533315517 +0200 @@ -3,7 +3,7 @@ # Date 1559294891 -7200 # Fri May 31 11:28:11 2019 +0200 # Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112 -# Parent 04c2cbd396b26a8e08980304a436e5e12fb6a205 +# Parent b517aa8dfa37d729db9590fe699caa38f899dfba Description: Add KDE integration to Firefox (toolkit parts) Author: Wolfgang Rosenauer <[email protected]> Author: Lubos Lunak <[email protected]> @@ -31,7 +31,7 @@ #ifdef MOZ_MEMORY # include "mozmemory.h" #endif -@@ -4539,25 +4540,37 @@ nsresult Preferences::InitInitialObjects +@@ -4566,25 +4567,37 @@ nsresult Preferences::InitInitialObjects // application pref files for backwards compatibility. static const char* specialFiles[] = { #if defined(XP_MACOSX) @@ -69,7 +69,7 @@ // Load jar:$app/omni.jar!/defaults/preferences/*.js // or jar:$gre/omni.jar!/defaults/preferences/*.js. -@@ -4603,17 +4616,17 @@ nsresult Preferences::InitInitialObjects +@@ -4630,17 +4643,17 @@ nsresult Preferences::InitInitialObjects } nsCOMPtr<nsIFile> path = do_QueryInterface(elem); @@ -302,7 +302,7 @@ nsUnixSystemProxySettings::GetMainThreadOnly(bool* aMainThreadOnly) { // dbus prevents us from being threadsafe, but this routine should not block // anyhow -@@ -380,21 +383,50 @@ nsresult nsUnixSystemProxySettings::GetP +@@ -384,21 +387,50 @@ nsresult nsUnixSystemProxySettings::GetP return NS_OK; } @@ -974,7 +974,7 @@ new file mode 100644 --- /dev/null +++ b/uriloader/exthandler/unix/nsKDERegistry.cpp -@@ -0,0 +1,87 @@ +@@ -0,0 +1,86 @@ +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this @@ -985,7 +985,6 @@ +#include "prmem.h" +#include "nsString.h" +#include "nsMIMEInfoUnix.h" -+#include "nsAutoPtr.h" +#include "nsKDEUtils.h" + +/* static */ bool @@ -1351,7 +1350,7 @@ #define MAX_PREVIEW_SOURCE_SIZE 4096 nsIFile* nsFilePicker::mPrevDisplayDirectory = nullptr; -@@ -227,17 +230,19 @@ nsFilePicker::AppendFilters(int32_t aFil +@@ -223,17 +226,19 @@ nsFilePicker::AppendFilters(int32_t aFil mAllowURLs = !!(aFilterMask & filterAllowURLs); return nsBaseFilePicker::AppendFilters(aFilterMask); } @@ -1372,7 +1371,7 @@ mFilters.AppendElement(filter); mFilterNames.AppendElement(name); -@@ -337,16 +342,39 @@ nsresult nsFilePicker::Show(int16_t* aRe +@@ -333,16 +338,39 @@ nsresult nsFilePicker::Show(int16_t* aRe return NS_OK; } @@ -1412,7 +1411,7 @@ GtkFileChooserAction action = GetGtkFileChooserAction(mMode); const gchar* accept_button; -@@ -571,16 +599,244 @@ void nsFilePicker::Done(void* file_choos +@@ -562,16 +590,244 @@ void nsFilePicker::Done(void* file_choos mCallback->Done(result); mCallback = nullptr; } else { @@ -1831,10 +1830,10 @@ if CONFIG['MOZ_WIDGET_TOOLKIT'] == 'gtk': CXXFLAGS += CONFIG['TK_CFLAGS'] + if CONFIG['MOZ_ENABLE_DBUS']: + CXXFLAGS += CONFIG['MOZ_DBUS_GLIB_CFLAGS'] if CONFIG['MOZ_LAYOUT_DEBUGGER']: - DEFINES['MOZ_LAYOUT_DEBUGGER'] = True - diff --git a/xpcom/io/nsLocalFileUnix.cpp b/xpcom/io/nsLocalFileUnix.cpp --- a/xpcom/io/nsLocalFileUnix.cpp +++ b/xpcom/io/nsLocalFileUnix.cpp ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.pS9p2K/_old 2020-06-05 20:08:03.629315837 +0200 +++ /var/tmp/diff_new_pack.pS9p2K/_new 2020-06-05 20:08:03.629315837 +0200 @@ -1,11 +1,11 @@ PRODUCT="firefox" CHANNEL="release" -VERSION="76.0.1" +VERSION="77.0.1" VERSION_SUFFIX="" -PREV_VERSION="76.0" +PREV_VERSION="77.0" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release" -RELEASE_TAG="e2de5f11bc0afd9a3024d32b83cb9f0ada95717a" -RELEASE_TIMESTAMP="20200507114007" +RELEASE_TAG="b8d272601020250ac2897e113b3fc3b53b72cf4b" +RELEASE_TIMESTAMP="20200602222727"
