Hello community, here is the log from the commit of package seamonkey for openSUSE:Factory checked in at 2012-08-31 10:01:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/seamonkey (Old) and /work/SRC/openSUSE:Factory/.seamonkey.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "seamonkey", Maintainer is "gnome-maintainers@suse.de" Changes: -------- --- /work/SRC/openSUSE:Factory/seamonkey/seamonkey.changes 2012-07-30 11:45:55.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.seamonkey.new/seamonkey.changes 2012-08-31 10:01:25.000000000 +0200 @@ -1,0 +2,32 @@ +Mon Aug 27 12:26:38 UTC 2012 - wr@rosenauer.org + +- update to SeaMonkey 2.12 (bnc#777588) + * MFSA 2012-57/CVE-2012-1970 + Miscellaneous memory safety hazards + * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975 + CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959 + CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964 + Use-after-free issues found using Address Sanitizer + * MFSA 2012-59/CVE-2012-1956 (bmo#756719) + Location object can be shadowed using Object.defineProperty + * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) + Memory corruption with bitmap format images with negative height + * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 + WebGL use-after-free and memory corruption + * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 + SVG buffer overflow and use-after-free issues + * MFSA 2012-64/CVE-2012-3971 + Graphite 2 memory corruption + * MFSA 2012-65/CVE-2012-3972 (bmo#746855) + Out-of-bounds read in format-number in XSLT + * MFSA 2012-68/CVE-2012-3975 (bmo#770684) + DOMParser loads linked resources in extensions when parsing + text/html + * MFSA 2012-69/CVE-2012-3976 (bmo#768568) + Incorrect site SSL certificate data display + * MFSA 2012-70/CVE-2012-3978 (bmo#770429) + Location object security checks bypassed by chrome code +- enable GStreamer for 12.1 and higher +- use internal libjpeg + +------------------------------------------------------------------- Old: ---- l10n-2.11.tar.bz2 mozilla-gcc47.patch mozilla-yarr-pcre.patch seamonkey-2.11-source.tar.bz2 New: ---- l10n-2.12.tar.bz2 mozilla-gstreamer.patch seamonkey-2.12-source.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ seamonkey.spec ++++++ --- /var/tmp/diff_new_pack.7nmAFH/_old 2012-08-31 10:01:36.000000000 +0200 +++ /var/tmp/diff_new_pack.7nmAFH/_new 2012-08-31 10:01:36.000000000 +0200 @@ -41,10 +41,16 @@ %else BuildRequires: wireless-tools %endif +%if %suse_version > 1140 +BuildRequires: pkgconfig(gstreamer-0.10) +BuildRequires: pkgconfig(gstreamer-app-0.10) +BuildRequires: pkgconfig(gstreamer-plugins-base-0.10) +%endif Provides: web_browser -Version: 2.11 +Provides: browser(npapi) +Version: 2.12 Release: 0 -%define releasedate 2012071300 +%define releasedate 2012082600 Summary: The successor of the Mozilla Application Suite License: MPL-2.0 Group: Productivity/Networking/Web/Browsers @@ -65,11 +71,10 @@ Patch3: mozilla-shared-nss-db.patch Patch4: mozilla-sle11.patch Patch5: mozilla-language.patch -Patch8: mozilla-ntlm-full-path.patch -Patch10: mozilla-ua-locale.patch -Patch11: mozilla-gcc47.patch -Patch12: mozilla-yarr-pcre.patch -Patch13: mozilla-ppc.patch +Patch6: mozilla-gstreamer.patch +Patch7: mozilla-ntlm-full-path.patch +Patch8: mozilla-ua-locale.patch +Patch9: mozilla-ppc.patch Patch20: seamonkey-ua-locale.patch Patch21: seamonkey-shared-nss-db.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -94,7 +99,7 @@ # so using %opensuse_bs is secure for now BuildRequires: mozilla-nspr-devel PreReq: mozilla-nspr >= %(rpm -q --queryformat '%{VERSION}' mozilla-nspr) -BuildRequires: mozilla-nss-devel >= 3.13.5 +BuildRequires: mozilla-nss-devel >= 3.13.6 PreReq: mozilla-nss >= %(rpm -q --queryformat '%{VERSION}' mozilla-nss) %description @@ -167,11 +172,10 @@ %patch4 -p1 %endif %patch5 -p1 +%patch6 -p1 +%patch7 -p1 %patch8 -p1 -%patch10 -p1 -%patch11 -p1 -%patch12 -p1 -%patch13 -p1 +%patch9 -p1 popd # comm patches %patch20 -p1 @@ -208,13 +212,14 @@ ac_add_options --enable-libxul ac_add_options --with-system-nspr ac_add_options --with-system-nss -ac_add_options --with-system-jpeg ac_add_options --with-system-zlib +#ac_add_options --with-system-jpeg # ac_add_options--with-system-png # no apng support ac_add_options --enable-ldap-experimental ac_add_options --disable-installer ac_add_options --disable-mochitest ac_add_options --disable-crashreporter +ac_add_options --disable-updater ac_add_options --enable-startup-notification ac_add_options --enable-system-hunspell #ac_add_options --enable-system-mozldap @@ -229,6 +234,11 @@ ac_add_options --enable-libproxy EOF %endif +%if %suse_version > 1140 +cat << EOF >> $MOZCONFIG +ac_add_options --enable-gstreamer +EOF +%endif make -f client.mk build # @@ -257,6 +267,7 @@ make -C suite/locales langpack-$locale || continue cp -rL mozilla/dist/xpi-stage/locale-$locale \ $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@seamonkey.mozilla.org + rm $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@seamonkey.mozilla.org/chrome/.mkdir.done # remove prefs and profile defaults from langpack rm -rf $RPM_BUILD_ROOT%{progdir}/extensions/langpack-$locale@seamonkey.mozilla.org/defaults # check against the fixed common list and sort into the right filelist @@ -309,6 +320,7 @@ rm -f $RPM_BUILD_ROOT%{progdir}/updater rm -f $RPM_BUILD_ROOT%{progdir}/updater.ini rm -f $RPM_BUILD_ROOT%{progdir}/update.locale +rm -f $RPM_BUILD_ROOT%{progdir}/update-settings.ini rm -f $RPM_BUILD_ROOT%{progdir}/icons/updater.png rm -f $RPM_BUILD_ROOT%{progdir}/dictionaries/* # Some sites use different partitions for /usr/(lib|lib64) and /usr/share. Since you ++++++ compare-locales.tar.bz2 ++++++ ++++++ create-tar.sh ++++++ --- /var/tmp/diff_new_pack.7nmAFH/_old 2012-08-31 10:01:36.000000000 +0200 +++ /var/tmp/diff_new_pack.7nmAFH/_new 2012-08-31 10:01:36.000000000 +0200 @@ -2,8 +2,8 @@ CHANNEL="release" BRANCH="releases/comm-$CHANNEL" -RELEASE_TAG="SEAMONKEY_2_11_RELEASE" -VERSION="2.11" +RELEASE_TAG="SEAMONKEY_2_12_RELEASE" +VERSION="2.12" echo "cloning $BRANCH..." hg clone http://hg.mozilla.org/$BRANCH seamonkey ++++++ l10n-2.11.tar.bz2 -> l10n-2.12.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/seamonkey/l10n-2.11.tar.bz2 /work/SRC/openSUSE:Factory/.seamonkey.new/l10n-2.12.tar.bz2 differ: char 11, line 1 ++++++ mozilla-gstreamer.patch ++++++ # HG changeset patch # Parent a9a49c20c491011f981b6c110aadfa6a01a1431e # User Wolfgang Rosenauer <wr@rosenauer.org> Bug 761030 - Crash with HTML 5 video with gstreamer enabled (TM: 16) No Bug - use GStreamer _only_ for MP4 (not WebM/OGG) diff --git a/content/html/content/src/nsHTMLMediaElement.cpp b/content/html/content/src/nsHTMLMediaElement.cpp --- a/content/html/content/src/nsHTMLMediaElement.cpp +++ b/content/html/content/src/nsHTMLMediaElement.cpp @@ -2278,21 +2278,17 @@ nsHTMLMediaElement::CreateDecoder(const nsRefPtr<nsRawDecoder> decoder = new nsRawDecoder(); if (decoder->Init(this)) { return decoder.forget(); } } #endif #ifdef MOZ_OGG if (IsOggType(aType)) { -#ifdef MOZ_GSTREAMER - nsRefPtr<nsGStreamerDecoder> decoder = new nsGStreamerDecoder(); -#else nsRefPtr<nsOggDecoder> decoder = new nsOggDecoder(); -#endif if (decoder->Init(this)) { return decoder.forget(); } } #endif #ifdef MOZ_WAVE if (IsWaveType(aType)) { nsRefPtr<nsWaveDecoder> decoder = new nsWaveDecoder(); @@ -2306,21 +2302,17 @@ nsHTMLMediaElement::CreateDecoder(const nsRefPtr<nsMediaPluginDecoder> decoder = new nsMediaPluginDecoder(aType); if (decoder->Init(this)) { return decoder.forget(); } } #endif #ifdef MOZ_WEBM if (IsWebMType(aType)) { -#ifdef MOZ_GSTREAMER - nsRefPtr<nsGStreamerDecoder> decoder = new nsGStreamerDecoder(); -#else nsRefPtr<nsWebMDecoder> decoder = new nsWebMDecoder(); -#endif if (decoder->Init(this)) { return decoder.forget(); } } #endif #ifdef MOZ_GSTREAMER if (IsH264Type(aType)) { diff --git a/content/media/gstreamer/nsGStreamerReader.cpp b/content/media/gstreamer/nsGStreamerReader.cpp --- a/content/media/gstreamer/nsGStreamerReader.cpp +++ b/content/media/gstreamer/nsGStreamerReader.cpp @@ -447,16 +447,18 @@ bool nsGStreamerReader::DecodeVideoFrame for(int i = 0; i < 3; i++) { b.mPlanes[i].mData = data + gst_video_format_get_component_offset(format, i, width, height); b.mPlanes[i].mStride = gst_video_format_get_row_stride(format, i, width); b.mPlanes[i].mHeight = gst_video_format_get_component_height(format, i, height); b.mPlanes[i].mWidth = gst_video_format_get_component_width(format, i, width); + b.mPlanes[i].mOffset = 0; + b.mPlanes[i].mSkip = 0; } bool isKeyframe = !GST_BUFFER_FLAG_IS_SET(buffer, GST_BUFFER_FLAG_DELTA_UNIT); /* XXX ? */ PRInt64 offset = 0; VideoData *video = VideoData::Create(mInfo, mDecoder->GetImageContainer(), ++++++ mozilla-ppc.patch ++++++ --- /var/tmp/diff_new_pack.7nmAFH/_old 2012-08-31 10:01:37.000000000 +0200 +++ /var/tmp/diff_new_pack.7nmAFH/_new 2012-08-31 10:01:37.000000000 +0200 @@ -1,5 +1,5 @@ # HG changeset patch -# Parent 67e6f1e1d06ca3d54cea1d26877c2a68f0c096e5 +# Parent 0f6722dd9d75458124795d22e9240887c9b4aeca # User Wolfgang Rosenauer <wr@rosenauer.org> Bug 746112 - RegExp hang on ppc64 in execute. Bug 750620 - Make double-conversion portable to exotic architectures. TM: mozilla15 @@ -93,23 +93,22 @@ diff --git a/mfbt/double-conversion/utils.h b/mfbt/double-conversion/utils.h --- a/mfbt/double-conversion/utils.h +++ b/mfbt/double-conversion/utils.h -@@ -49,17 +49,18 @@ - // evaluate: 89255.0/1e22. If the floating-point stack is 64 bits wide then +@@ -50,17 +50,17 @@ // the result is equal to 89255e-22. // The best way to test this, is to create a division-function and to compare // the output of the division with the expected result. (Inlining must be // disabled.) // On Linux,x86 89255e-22 != Div_double(89255.0/1e22) #if defined(_M_X64) || defined(__x86_64__) || \ - defined(__ARMEL__) || \ -- defined(_MIPS_ARCH_MIPS32R2) -+ defined(_MIPS_ARCH_MIPS32R2) || \ -+ defined(__powerpc__) || defined(__powerpc64__) + defined(__ARMEL__) || defined(__avr32__) || \ + defined(__hppa__) || defined(__ia64__) || \ +- defined(__mips__) || defined(__powerpc__) || \ ++ defined(__mips__) || defined(__powerpc__) || defined(__powerpc64__) || \ + defined(__sparc__) || defined(__sparc) || defined(__s390__) || \ + defined(__SH4__) || defined(__alpha__) || \ + defined(_MIPS_ARCH_MIPS32R2) #define DOUBLE_CONVERSION_CORRECT_DOUBLE_OPERATIONS 1 - #elif defined(_M_IX86) || defined(__i386__) + #elif defined(_M_IX86) || defined(__i386__) || defined(__i386) #if defined(_WIN32) // Windows uses a 64bit wide floating point stack. #define DOUBLE_CONVERSION_CORRECT_DOUBLE_OPERATIONS 1 - #else - #undef DOUBLE_CONVERSION_CORRECT_DOUBLE_OPERATIONS - #endif // _WIN32 ++++++ mozilla-shared-nss-db.patch ++++++ --- /var/tmp/diff_new_pack.7nmAFH/_old 2012-08-31 10:01:37.000000000 +0200 +++ /var/tmp/diff_new_pack.7nmAFH/_new 2012-08-31 10:01:37.000000000 +0200 @@ -7,7 +7,7 @@ diff --git a/config/autoconf.mk.in b/config/autoconf.mk.in --- a/config/autoconf.mk.in +++ b/config/autoconf.mk.in -@@ -590,16 +590,20 @@ MOZ_ENABLE_LIBNOTIFY = @MOZ_ENABLE_LIBNO +@@ -573,16 +573,20 @@ MOZ_ENABLE_LIBNOTIFY = @MOZ_ENABLE_LIBNO MOZ_ALSA_LIBS = @MOZ_ALSA_LIBS@ MOZ_ALSA_CFLAGS = @MOZ_ALSA_CFLAGS@ @@ -31,7 +31,7 @@ diff --git a/configure.in b/configure.in --- a/configure.in +++ b/configure.in -@@ -8180,16 +8180,31 @@ AC_SUBST(QCMS_LIBS) +@@ -8270,16 +8270,31 @@ AC_SUBST(QCMS_LIBS) dnl ======================================================== dnl HarfBuzz @@ -66,7 +66,7 @@ diff --git a/security/manager/ssl/src/Makefile.in b/security/manager/ssl/src/Makefile.in --- a/security/manager/ssl/src/Makefile.in +++ b/security/manager/ssl/src/Makefile.in -@@ -119,12 +119,14 @@ EXTRA_DEPS = $(NSS_DEP_LIBS) +@@ -86,12 +86,14 @@ EXTRA_DEPS = $(NSS_DEP_LIBS) DEFINES += \ -DNSS_ENABLE_ECC \ -DDLL_PREFIX=\"$(DLL_PREFIX)\" \ @@ -85,14 +85,12 @@ diff --git a/security/manager/ssl/src/nsNSSComponent.cpp b/security/manager/ssl/src/nsNSSComponent.cpp --- a/security/manager/ssl/src/nsNSSComponent.cpp +++ b/security/manager/ssl/src/nsNSSComponent.cpp -@@ -39,16 +39,23 @@ - * use your version of this file under the terms of the MPL, indicate your - * decision by deleting the provisions above and replace them with the notice - * and other provisions required by the GPL or the LGPL. If you do not delete - * the provisions above, a recipient may use your version of this file under - * the terms of any one of the MPL, the GPL or the LGPL. +@@ -1,14 +1,21 @@ + /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- * - * ***** END LICENSE BLOCK ***** */ + * This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ +#ifdef MOZ_ENABLE_NSSHELPER +#pragma GCC visibility push(default) @@ -109,7 +107,7 @@ #include "nsNetUtil.h" #include "nsAppDirectoryServiceDefs.h" #include "nsDirectoryService.h" -@@ -1776,18 +1783,34 @@ nsNSSComponent::InitializeNSS(bool showW +@@ -1738,18 +1745,34 @@ nsNSSComponent::InitializeNSS(bool showW ConfigureInternalPKCS11Token(); // The NSS_INIT_NOROOTINIT flag turns off the loading of the root certs @@ -149,7 +147,7 @@ diff --git a/toolkit/library/Makefile.in b/toolkit/library/Makefile.in --- a/toolkit/library/Makefile.in +++ b/toolkit/library/Makefile.in -@@ -439,17 +439,17 @@ EXTRA_DSO_LDOPTS += -INCREMENTAL:NO +@@ -446,17 +446,17 @@ EXTRA_DSO_LDOPTS += -INCREMENTAL:NO endif endif endif ++++++ seamonkey-2.11-source.tar.bz2 -> seamonkey-2.12-source.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/seamonkey/seamonkey-2.11-source.tar.bz2 /work/SRC/openSUSE:Factory/.seamonkey.new/seamonkey-2.12-source.tar.bz2 differ: char 11, line 1 ++++++ seamonkey-ua-locale.patch ++++++ --- /var/tmp/diff_new_pack.7nmAFH/_old 2012-08-31 10:01:37.000000000 +0200 +++ /var/tmp/diff_new_pack.7nmAFH/_new 2012-08-31 10:01:37.000000000 +0200 @@ -1,12 +1,10 @@ diff --git a/suite/locales/en-US/suite-l10n.js b/suite/locales/en-US/suite-l10n.js --- a/suite/locales/en-US/suite-l10n.js +++ b/suite/locales/en-US/suite-l10n.js -@@ -31,10 +31,10 @@ - # and other provisions required by the GPL or the LGPL. If you do not delete - # the provisions above, a recipient may use your version of this file under - # the terms of any one of the MPL, the GPL or the LGPL. - # - # ***** END LICENSE BLOCK ***** +@@ -1,8 +1,8 @@ + # This Source Code Form is subject to the terms of the Mozilla Public + # License, v. 2.0. If a copy of the MPL was not distributed with this + # file, You can obtain one at http://mozilla.org/MPL/2.0/. #filter substitution -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org