Hello community, here is the log from the commit of package MozillaFirefox for openSUSE:Factory checked in at 2020-07-30 09:56:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaFirefox (Old) and /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3592 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaFirefox" Thu Jul 30 09:56:32 2020 rev:317 rq:823315 version:79.0 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaFirefox/MozillaFirefox.changes 2020-07-21 15:47:29.408080529 +0200 +++ /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3592/MozillaFirefox.changes 2020-07-30 09:57:38.383092914 +0200 @@ -1,0 +2,40 @@ +Thu Jul 23 21:00:34 UTC 2020 - Wolfgang Rosenauer <w...@rosenauer.org> + +- Mozilla Firefox 79.0 + MFSA 2020-30 (bsc#1174538) + * CVE-2020-15652 (bmo#1634872) + Potential leak of redirect targets when loading scripts in a worker + * CVE-2020-6514 (bmo#1642792) + WebRTC data channel leaks internal address to peer + * CVE-2020-15655 (bmo#1645204) + Extension APIs could be used to bypass Same-Origin Policy + * CVE-2020-15653 (bmo#1521542) + Bypassing iframe sandbox when allowing popups + * CVE-2020-6463 (bmo#1635293) + Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture + * CVE-2020-15656 (bmo#1647293) + Type confusion for special arguments in IonMonkey + * CVE-2020-15658 (bmo#1637745) + Overriding file type when saving to disk + * CVE-2020-15657 (bmo#1644954) + DLL hijacking due to incorrect loading path + * CVE-2020-15654 (bmo#1648333) + Custom cursor can overlay user interface + * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1638856, + bmo#1643613, bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646220, + bmo#1646787, bmo#1649347, bmo#1650811, bmo#1651678) + Memory safety bugs fixed in Firefox 79 +- updated dependency requirements: + * mozilla-nspr >= 4.26 + * mozilla-nss >= 3.54 + * rust >= 1.43 + * rust-cbindgen >= 0.14.3 +- removed obsolete patch + mozilla-bmo1463035.patch + +------------------------------------------------------------------- +Tue Jul 21 21:31:20 UTC 2020 - Wolfgang Rosenauer <w...@rosenauer.org> + +- fixed syntax issue in desktop file (boo#1174360) + +------------------------------------------------------------------- Old: ---- firefox-78.0.2.source.tar.xz firefox-78.0.2.source.tar.xz.asc l10n-78.0.2.tar.xz mozilla-bmo1463035.patch New: ---- firefox-79.0.source.tar.xz firefox-79.0.source.tar.xz.asc l10n-79.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaFirefox.spec ++++++ --- /var/tmp/diff_new_pack.UJ8Lgg/_old 2020-07-30 09:58:08.331119763 +0200 +++ /var/tmp/diff_new_pack.UJ8Lgg/_new 2020-07-30 09:58:08.335119767 +0200 @@ -25,9 +25,9 @@ # orig_suffix b3 # major 69 # mainver %major.99 -%define major 78 -%define mainver %major.0.2 -%define orig_version 78.0.2 +%define major 79 +%define mainver %major.0 +%define orig_version 79.0 %define orig_suffix %{nil} %define update_channel release %define branding 1 @@ -88,15 +88,15 @@ %else BuildRequires: gcc-c++ %endif -BuildRequires: cargo >= 1.41 +BuildRequires: cargo >= 1.43 BuildRequires: libXcomposite-devel BuildRequires: libcurl-devel BuildRequires: libidl-devel BuildRequires: libiw-devel BuildRequires: libproxy-devel BuildRequires: makeinfo -BuildRequires: mozilla-nspr-devel >= 4.25 -BuildRequires: mozilla-nss-devel >= 3.53.1 +BuildRequires: mozilla-nspr-devel >= 4.26 +BuildRequires: mozilla-nss-devel >= 3.54 BuildRequires: nasm >= 2.14 BuildRequires: nodejs10 >= 10.21.0 BuildRequires: python-devel @@ -107,8 +107,8 @@ BuildRequires: python2-xml BuildRequires: python3 >= 3.5 %endif -BuildRequires: rust >= 1.41 -BuildRequires: rust-cbindgen >= 0.14.1 +BuildRequires: rust >= 1.43 +BuildRequires: rust-cbindgen >= 0.14.3 BuildRequires: unzip BuildRequires: update-desktop-files BuildRequires: xorg-x11-libXt-devel @@ -186,7 +186,6 @@ Patch2: mozilla-kde.patch Patch3: mozilla-ntlm-full-path.patch Patch4: mozilla-aarch64-startup-crash.patch -Patch5: mozilla-bmo1463035.patch Patch6: mozilla-sandbox-fips.patch Patch7: mozilla-fix-aarch64-libopus.patch Patch8: mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch @@ -326,7 +325,6 @@ %patch2 -p1 %patch3 -p1 %patch4 -p1 -%patch5 -p1 %patch6 -p1 %patch7 -p1 %patch8 -p1 ++++++ MozillaFirefox.desktop ++++++ --- /var/tmp/diff_new_pack.UJ8Lgg/_old 2020-07-30 09:58:08.451119871 +0200 +++ /var/tmp/diff_new_pack.UJ8Lgg/_new 2020-07-30 09:58:08.451119871 +0200 @@ -15,7 +15,7 @@ [Desktop Action new-window] Name=New Window -Exec==%EXEC --new-windows %u +Exec=%EXEC --new-window %u [Desktop Action PrivateBrowsing] Name=New Private Browsing Window ++++++ firefox-78.0.2.source.tar.xz -> firefox-79.0.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaFirefox/firefox-78.0.2.source.tar.xz /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3592/firefox-79.0.source.tar.xz differ: char 15, line 1 ++++++ firefox.1 ++++++ --- /var/tmp/diff_new_pack.UJ8Lgg/_old 2020-07-30 09:58:08.535119946 +0200 +++ /var/tmp/diff_new_pack.UJ8Lgg/_new 2020-07-30 09:58:08.535119946 +0200 @@ -60,7 +60,7 @@ \fB\-\-UILocale\fR \fIlocale\fR Start with \fIlocale\fR resources as UI Locale. .TP -\fB\-\-save\-mode\fR +\fB\-\-safe\-mode\fR Disables extensions and themes for this session. .TP \fB\-\-headless\fR ++++++ l10n-78.0.2.tar.xz -> l10n-79.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/MozillaFirefox/l10n-78.0.2.tar.xz /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3592/l10n-79.0.tar.xz differ: char 26, line 1 ++++++ mozilla-kde.patch ++++++ --- /var/tmp/diff_new_pack.UJ8Lgg/_old 2020-07-30 09:58:08.659120057 +0200 +++ /var/tmp/diff_new_pack.UJ8Lgg/_new 2020-07-30 09:58:08.663120060 +0200 @@ -3,7 +3,7 @@ # Date 1559294891 -7200 # Fri May 31 11:28:11 2019 +0200 # Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112 -# Parent aa58e8c70d1448a08407c6c191ea8b76d61e8bf6 +# Parent 43647626f7204e312a4e38cac0414a461b06667f Description: Add KDE integration to Firefox (toolkit parts) Author: Wolfgang Rosenauer <wolfg...@rosenauer.org> Author: Lubos Lunak <lu...@suse.com> @@ -31,7 +31,7 @@ #ifdef MOZ_MEMORY # include "mozmemory.h" #endif -@@ -4566,25 +4567,37 @@ nsresult Preferences::InitInitialObjects +@@ -4570,25 +4571,37 @@ nsresult Preferences::InitInitialObjects // application pref files for backwards compatibility. static const char* specialFiles[] = { #if defined(XP_MACOSX) @@ -69,7 +69,7 @@ // Load jar:$app/omni.jar!/defaults/preferences/*.js // or jar:$gre/omni.jar!/defaults/preferences/*.js. -@@ -4630,17 +4643,17 @@ nsresult Preferences::InitInitialObjects +@@ -4634,17 +4647,17 @@ nsresult Preferences::InitInitialObjects } nsCOMPtr<nsIFile> path = do_QueryInterface(elem); @@ -91,7 +91,7 @@ diff --git a/modules/libpref/moz.build b/modules/libpref/moz.build --- a/modules/libpref/moz.build +++ b/modules/libpref/moz.build -@@ -114,16 +114,20 @@ EXPORTS.mozilla += [ +@@ -117,16 +117,20 @@ EXPORTS.mozilla += [ ] EXPORTS.mozilla += sorted(['!' + g for g in gen_h]) @@ -106,12 +106,12 @@ + gen_all_tuple = tuple(gen_h + gen_cpp + gen_rs) - GENERATED_FILES += [gen_all_tuple] - - static_pref_list = GENERATED_FILES[gen_all_tuple] - static_pref_list.script = 'init/generate_static_pref_list.py:emit_code' - static_pref_list.inputs = ['init/StaticPrefList.yaml'] + GeneratedFile(*gen_all_tuple, script='init/generate_static_pref_list.py', + entry_point='emit_code', inputs=['init/StaticPrefList.yaml']) + PYTHON_UNITTEST_MANIFESTS += [ + 'test/python.ini', + ] diff --git a/python/mozbuild/mozpack/chrome/flags.py b/python/mozbuild/mozpack/chrome/flags.py --- a/python/mozbuild/mozpack/chrome/flags.py +++ b/python/mozbuild/mozpack/chrome/flags.py @@ -356,7 +356,7 @@ diff --git a/toolkit/xre/moz.build b/toolkit/xre/moz.build --- a/toolkit/xre/moz.build +++ b/toolkit/xre/moz.build -@@ -88,17 +88,19 @@ elif CONFIG['MOZ_WIDGET_TOOLKIT'] == 'co +@@ -90,17 +90,19 @@ elif CONFIG['MOZ_WIDGET_TOOLKIT'] == 'co '../components/printingui', ] elif CONFIG['MOZ_WIDGET_TOOLKIT'] == 'uikit': @@ -1293,7 +1293,7 @@ diff --git a/widget/gtk/moz.build b/widget/gtk/moz.build --- a/widget/gtk/moz.build +++ b/widget/gtk/moz.build -@@ -131,16 +131,17 @@ include('/ipc/chromium/chromium-config.m +@@ -133,16 +133,17 @@ include('/ipc/chromium/chromium-config.m FINAL_LIBRARY = 'xul' ++++++ mozilla-pipewire-0-3.patch ++++++ ++++ 645 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/MozillaFirefox/mozilla-pipewire-0-3.patch ++++ and /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3592/mozilla-pipewire-0-3.patch ++++++ tar_stamps ++++++ --- /var/tmp/diff_new_pack.UJ8Lgg/_old 2020-07-30 09:58:08.759120147 +0200 +++ /var/tmp/diff_new_pack.UJ8Lgg/_new 2020-07-30 09:58:08.763120150 +0200 @@ -1,11 +1,11 @@ PRODUCT="firefox" CHANNEL="release" -VERSION="78.0.2" +VERSION="79.0" VERSION_SUFFIX="" -PREV_VERSION="78.0.1" +PREV_VERSION="78.0.2" PREV_VERSION_SUFFIX="" #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release" -RELEASE_TAG="e56adbbfe01c2443bae35e3d6f34867e36c3828e" -RELEASE_TIMESTAMP="20200708170202" +RELEASE_TAG="df3ed76cf46b23c9b658cd5be4cdd4162d86f736" +RELEASE_TIMESTAMP="20200720193547"