125.0.3 firefox125 tip
authorWolfgang Rosenauer <wr@rosenauer.org>
Wed, 15 May 2024 09:57:54 +0200
branchfirefox125
changeset 1203 1b3d3cfc69c1
parent 1202 28ebbea625bd
125.0.3
MozillaFirefox/MozillaFirefox.changes
MozillaFirefox/MozillaFirefox.spec
MozillaFirefox/mozilla-libproxy-fix.patch
MozillaFirefox/tar_stamps
mozilla-kde.patch
mozilla-libproxy-fix.patch
mozilla-silence-no-return-type.patch
series
--- a/MozillaFirefox/MozillaFirefox.changes	Sun Apr 21 06:46:25 2024 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Wed May 15 09:57:54 2024 +0200
@@ -1,4 +1,153 @@
 -------------------------------------------------------------------
+Mon Apr 29 18:17:48 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Mozilla Firefox 125.0.3
+  * Fixed: Fixed an extra blank tab with an address of
+    `https://0.0.0.1` sometimes appearing when attempting to
+    launch Firefox when it is already running (bmo#1892612).
+  * Fixed: Fixed an issue that could cause incorrect font
+    selection in some situations for users with the Japanese
+    locale set (bmo#1892363).
+  * Fixed: Fixed text corruption when dragging text containing
+    unicode characters on Linux systems (bmo#1888202).
+  * Fixed: Fixed a correctness error when checking
+    `arguments.length` (and not using arguments otherwise) inside
+    of a generator or async function (bmo#1892699).
+  * Fixed: Fixed an issue that could lead to inconsistent focus
+    handling of `<select>` elements when opened (bmo#1893177).
+
+-------------------------------------------------------------------
+Wed Apr 24 08:43:53 UTC 2024 - Manfred Hollstein <manfred.h@gmx.net>
+
+- Fix build on Leap by requiring gcc13 which has been made available
+  as an update.
+
+-------------------------------------------------------------------
+Sun Apr 21 04:49:23 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Firefox 125.0.2
+  * The 125.0 and 125.0.1 releases were skipped due to problems
+    with a feature that proactively blocked downloads from
+    potentially untrustworthy URLs.
+  * New: Firefox now supports the AV1 codec for Encrypted Media
+    Extensions (EME), enabling higher-quality playback from video
+    streaming providers
+  * New: The Firefox PDF viewer now supports text highlighting.
+  * New: Firefox View now displays pinned tabs in the Open tabs
+    section. Tab indicators have also been added to Open tabs, so
+    users can do things like see which tabs are playing media and
+    quickly mute or unmute across windows. Indicators were also
+    added for bookmarks, tabs with notifications, and more!
+    their addresses upon submitting an address form, allowing
+    Firefox to autofill stored address information in the future.
+  * New: The URL Paste Suggestion feature provides a convenient
+    way for users to quickly visit URLs copied to the clipboard
+    in the address bar of Firefox. When the clipboard contains a
+    URL and the URL bar is focused, an autocomplete result
+    appears automatically. Activating the clipboard suggestion
+    will navigate the user to the URL with 1 click.
+  * New: Users of tab-specific Container add-ons can now search
+    in the Address Bar for tabs that are open in different
+    containers. Special thanks to volunteer contributor atararx
+    for kicking off the work on this feature!
+  * New: Firefox now provides an option to enable Web Proxy Auto-
+    Discovery (WPAD) while configured to use system proxy
+    settings.
+  * Changed: In a group of radio buttons where no option is
+    selected, the tab key now only reaches the first option
+    rather than cycling through all available options. The arrow
+    keys navigate between options as they do when there is a
+    selected option. This makes keyboard navigation more
+    efficient and consistent
+  * HTML5: Firefox now supports the `popover` global attribute
+    used for designating an element as a popover element. The
+    element won't be rendered until it is made visible, after
+    which it will appear on top of other page content.
+  * HTML5: WebAssembly multi-memory is now enabled by default.
+    Wasm multi-memory allows wasm modules to use and import
+    multiple independent linear memories. This enables more
+    efficient interoperability between modules and provides
+    better polyfills for upcoming wasm standards, such as the
+    component model.
+  * HTML5: Added support for Unicode Text Segmentation to
+    JavaScript.
+  * HTML5: Added support for `contextlost` and `contextrestored`
+    events on HTMLCanvasElement and OffscreenCanvas to allow user
+    code to recover from context loss with hardware accelerated
+    2d canvas.
+  * HTML5: Firefox now supports the
+    `navigator.clipboard.readText()` web API. A paste context
+    menu will appear for the user to confirm when attempting to
+    read clipboard data not provided by the same-origin page.
+  * HTML5: Added support for the `content-box` and `stroke-box`
+    keywords of the `transform-box` CSS property.
+  * HTML5: The `align-content` property now works in block
+    layout, allowing block direction alignment without needing a
+    flex or grid container.
+  * HTML5: Support for `SVGAElement.text` was removed in favor of
+    the more widely-implemented `SVGAElement.textContent` method.
+  * Developer: Following several requests, we have reintroduced
+    the option to disable the Pause Debugger Overlay
+    (`devtools.debugger.features.overlay`). This overlay appears
+    over the page content when the debugger pauses JavaScript
+    execution. In certain scenarios, the overlay can be
+    intrusive, making it challenging to interact with the page,
+    for instance, evaluating shades of color underneath.
+  * Developer: We've added a new drop-down menu button at the
+    bottom of the source view in the Debugger panel, specifically
+    designed for Source Map related actions. Users can now easily
+    disable or enable Source Maps support, open the Source Map
+    file in a new tab, switch between the original source and the
+    generated bundle, toggle the "open original source by
+    default" option, and view the Source Map status such as
+    errors, loading status, etc.
+    MFSA 2024-18 (bsc#1221327)
+  * CVE-2024-3852 (bmo#1883542)
+    GetBoundName in the JIT returned the wrong object
+  * CVE-2024-3853 (bmo#1884427)
+    Use-after-free if garbage collection runs during realm
+    initialization
+  * CVE-2024-3854 (bmo#1884552)
+    Out-of-bounds-read after mis-optimized switch statement
+  * CVE-2024-3855 (bmo#1885828)
+    Incorrect JIT optimization of MSubstr leads to out-of-bounds
+    reads
+  * CVE-2024-3856 (bmo#1885829)
+    Use-after-free in WASM garbage collection
+  * CVE-2024-3857 (bmo#1886683)
+    Incorrect JITting of arguments led to use-after-free during
+    garbage collection
+  * CVE-2024-3858 (bmo#1888892)
+    Corrupt pointer dereference in
+    js::CheckTracedThing<js::Shape>
+  * CVE-2024-3859 (bmo#1874489)
+    Integer-overflow led to out-of-bounds-read in the OpenType
+    sanitizer
+  * CVE-2024-3860 (bmo#1881417)
+    Crash when tracing empty shape lists
+  * CVE-2024-3861 (bmo#1883158)
+    Potential use-after-free due to AlignedBuffer self-move
+  * CVE-2024-3862 (bmo#1884457)
+    Potential use of uninitialized memory in MarkStack assignment
+    operator on self-assignment
+  * CVE-2024-3863 (bmo#1885855)
+    Download Protections were bypassed by .xrm-ms files on
+    Windows
+  * CVE-2024-3302 (bmo#1881183,
+    bmo#https://kb.cert.org/vuls/id/421644)
+    Denial of Service using HTTP/2 CONTINUATION frames
+  * CVE-2024-3864 (bmo#1888333)
+    Memory safety bug fixed in Firefox 125, Firefox ESR 115.10,
+    and Thunderbird 115.10
+  * CVE-2024-3865 (bmo#1881076, bmo#1884887, bmo#1885359,
+    bmo#1889049)
+    Memory safety bugs fixed in Firefox 125
+- requires
+  NSS 3.99
+  rust 1.76
+- add mozilla-libproxy-fix.patch to fix with-libproxy build variant
+
+-------------------------------------------------------------------
 Wed Apr  3 12:50:27 UTC 2024 - Martin Sirringhaus <martin.sirringhaus@suse.com>
 
 - Mozilla Firefox 124.0.2
--- a/MozillaFirefox/MozillaFirefox.spec	Sun Apr 21 06:46:25 2024 +0200
+++ b/MozillaFirefox/MozillaFirefox.spec	Wed May 15 09:57:54 2024 +0200
@@ -28,9 +28,9 @@
 # orig_suffix b3
 # major 69
 # mainver %%major.99
-%define major          124
-%define mainver        %major.0.2
-%define orig_version   124.0.2
+%define major          125
+%define mainver        %major.0.3
+%define orig_version   125.0.3
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
@@ -98,13 +98,13 @@
 BuildRequires:  fdupes
 BuildRequires:  memory-constraints
 %if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150600
-BuildRequires:  gcc12
-BuildRequires:  gcc12-c++
+BuildRequires:  gcc13
+BuildRequires:  gcc13-c++
 %else
 BuildRequires:  gcc-c++
 %endif
-BuildRequires:  cargo1.71
-BuildRequires:  rust1.71
+BuildRequires:  cargo1.76
+BuildRequires:  rust1.76
 %if 0%{useccache} != 0
 BuildRequires:  ccache
 %endif
@@ -114,7 +114,7 @@
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.35
-BuildRequires:  mozilla-nss-devel >= 3.98
+BuildRequires:  mozilla-nss-devel >= 3.99
 BuildRequires:  nasm >= 2.14
 BuildRequires:  nodejs >= 12.22.12
 %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
@@ -229,6 +229,7 @@
 Patch22:        mozilla-partial-revert-1768632.patch
 Patch23:        mozilla-rust-disable-future-incompat.patch
 Patch24:        mozilla-bmo1822730.patch
+Patch25:        mozilla-libproxy-fix.patch
 # Firefox/browser
 Patch101:       firefox-kde.patch
 Patch102:       firefox-branded-icons.patch
@@ -381,8 +382,8 @@
 export MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=system
 export CFLAGS="%{optflags}"
 %if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150600
-export CC=gcc-12
-export CXX=g++-12
+export CC=gcc-13
+export CXX=g++-13
 %else
 %if 0%{?clang_build} == 0
 export CC=gcc
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/MozillaFirefox/mozilla-libproxy-fix.patch	Wed May 15 09:57:54 2024 +0200
@@ -0,0 +1,1 @@
+../mozilla-libproxy-fix.patch
\ No newline at end of file
--- a/MozillaFirefox/tar_stamps	Sun Apr 21 06:46:25 2024 +0200
+++ b/MozillaFirefox/tar_stamps	Wed May 15 09:57:54 2024 +0200
@@ -1,10 +1,10 @@
 PRODUCT="firefox"
 CHANNEL="release"
-VERSION="124.0.2"
+VERSION="125.0.3"
 VERSION_SUFFIX=""
-PREV_VERSION="124.0.1"
+PREV_VERSION="125.0.2"
 PREV_VERSION_SUFFIX=""
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
-RELEASE_TAG="2718fafaf6b2e4137cff8a71794487d25057e688"
-RELEASE_TIMESTAMP="20240401114208"
+RELEASE_TAG="899257fc1af08f2b141cd16d4b6151c0e0b47a9a"
+RELEASE_TIMESTAMP="20240425211020"
--- a/mozilla-kde.patch	Sun Apr 21 06:46:25 2024 +0200
+++ b/mozilla-kde.patch	Wed May 15 09:57:54 2024 +0200
@@ -155,7 +155,7 @@
 diff --git a/toolkit/mozapps/downloads/HelperAppDlg.sys.mjs b/toolkit/mozapps/downloads/HelperAppDlg.sys.mjs
 --- a/toolkit/mozapps/downloads/HelperAppDlg.sys.mjs
 +++ b/toolkit/mozapps/downloads/HelperAppDlg.sys.mjs
-@@ -1241,36 +1241,66 @@ nsUnknownContentTypeDialog.prototype = {
+@@ -1227,36 +1227,66 @@ nsUnknownContentTypeDialog.prototype = {
          params.handlerApp &&
          params.handlerApp.executable &&
          params.handlerApp.executable.isFile()
@@ -238,7 +238,7 @@
        var nsIFilePicker = Ci.nsIFilePicker;
        var fp = Cc["@mozilla.org/filepicker;1"].createInstance(nsIFilePicker);
        fp.init(
-         this.mDialog,
+         this.mDialog.browsingContext,
          this.dialogElement("strings").getString("chooseAppFilePickerTitle"),
          nsIFilePicker.modeOpen
        );
@@ -283,7 +283,7 @@
  nsUnixSystemProxySettings::GetMainThreadOnly(bool* aMainThreadOnly) {
    // dbus prevents us from being threadsafe, but this routine should not block
    // anyhow
-@@ -388,21 +392,46 @@ nsresult nsUnixSystemProxySettings::GetP
+@@ -388,24 +392,49 @@ nsresult nsUnixSystemProxySettings::GetP
    return NS_OK;
  }
  
@@ -325,11 +325,14 @@
 +  return NS_OK;
 +}
 +
+ NS_IMETHODIMP
+ nsUnixSystemProxySettings::GetSystemWPADSetting(bool* aSystemWPADSetting) {
+   *aSystemWPADSetting = false;
+   return NS_OK;
+ }
+ 
  NS_IMPL_COMPONENT_FACTORY(nsUnixSystemProxySettings) {
    auto result = MakeRefPtr<nsUnixSystemProxySettings>();
-   result->Init();
-   return result.forget().downcast<nsISupports>();
- }
 diff --git a/toolkit/xre/moz.build b/toolkit/xre/moz.build
 --- a/toolkit/xre/moz.build
 +++ b/toolkit/xre/moz.build
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mozilla-libproxy-fix.patch	Wed May 15 09:57:54 2024 +0200
@@ -0,0 +1,25 @@
+# HG changeset patch
+# User Wolfgang Rosenauer <wr@rosenauer.org>
+# Parent  302a32e4a14475d3bae305decad92870ec37bbe5
+
+diff --git a/toolkit/system/unixproxy/nsLibProxySettings.cpp b/toolkit/system/unixproxy/nsLibProxySettings.cpp
+--- a/toolkit/system/unixproxy/nsLibProxySettings.cpp
++++ b/toolkit/system/unixproxy/nsLibProxySettings.cpp
+@@ -94,11 +94,17 @@ nsresult nsUnixSystemProxySettings::GetP
+ 
+     c++;
+   }
+ 
+   free(proxyArray);
+   return NS_OK;
+ }
+ 
++NS_IMETHODIMP
++nsUnixSystemProxySettings::GetSystemWPADSetting(bool* aSystemWPADSetting) {
++  *aSystemWPADSetting = false;
++  return NS_OK;
++}
++
+ NS_IMPL_COMPONENT_FACTORY(nsUnixSystemProxySettings) {
+   return do_AddRef(new nsUnixSystemProxySettings()).downcast<nsISupports>();
+ }
--- a/mozilla-silence-no-return-type.patch	Sun Apr 21 06:46:25 2024 +0200
+++ b/mozilla-silence-no-return-type.patch	Wed May 15 09:57:54 2024 +0200
@@ -1,5 +1,5 @@
 # HG changeset patch
-# Parent  831d03cde86aa6b8803d5ac431e2d28bf85c9289
+# Parent  af0655f894a27ef60aa8438af7939a5ebc498df0
 
 diff --git a/gfx/skia/skia/include/codec/SkEncodedOrigin.h b/gfx/skia/skia/include/codec/SkEncodedOrigin.h
 --- a/gfx/skia/skia/include/codec/SkEncodedOrigin.h
@@ -420,7 +420,7 @@
 diff --git a/js/src/irregexp/imported/regexp-parser.cc b/js/src/irregexp/imported/regexp-parser.cc
 --- a/js/src/irregexp/imported/regexp-parser.cc
 +++ b/js/src/irregexp/imported/regexp-parser.cc
-@@ -2644,16 +2644,17 @@ bool MayContainStrings(ClassSetOperandTy
+@@ -2764,16 +2764,17 @@ bool MayContainStrings(ClassSetOperandTy
        return false;
      case ClassSetOperandType::kCharacterClassEscape:
      case ClassSetOperandType::kClassStringDisjunction:
@@ -434,10 +434,10 @@
  
  }  // namespace
  
- // TODO(v8:11935): Change permalink once proposal is in stage 4.
- // https://arai-a.github.io/ecma262-compare/snapshot.html?pr=2418#prod-ClassUnion
  template <class CharT>
- RegExpTree* RegExpParserImpl<CharT>::ParseClassUnion(
+ void RegExpParserImpl<CharT>::AddMaybeSimpleCaseFoldedRange(
+     ZoneList<CharacterRange>* ranges, CharacterRange new_range) {
+   DCHECK(unicode_sets());
 diff --git a/third_party/libwebrtc/api/adaptation/resource.cc b/third_party/libwebrtc/api/adaptation/resource.cc
 --- a/third_party/libwebrtc/api/adaptation/resource.cc
 +++ b/third_party/libwebrtc/api/adaptation/resource.cc
@@ -684,7 +684,7 @@
 diff --git a/third_party/libwebrtc/media/base/codec.cc b/third_party/libwebrtc/media/base/codec.cc
 --- a/third_party/libwebrtc/media/base/codec.cc
 +++ b/third_party/libwebrtc/media/base/codec.cc
-@@ -201,16 +201,17 @@ bool Codec::Matches(const Codec& codec,
+@@ -200,16 +200,17 @@ bool Codec::Matches(const Codec& codec) 
                 (codec.bitrate == 0 || bitrate <= 0 ||
                  bitrate == codec.bitrate) &&
                 ((codec.channels < 2 && channels < 2) ||
--- a/series	Sun Apr 21 06:46:25 2024 +0200
+++ b/series	Wed May 15 09:57:54 2024 +0200
@@ -20,6 +20,7 @@
 mozilla-partial-revert-1768632.patch
 mozilla-rust-disable-future-incompat.patch
 mozilla-bmo1822730.patch
+mozilla-libproxy-fix.patch
 
 # Firefox patches
 firefox-kde.patch