- openSUSE Factory Mozilla

[opensuse-factory-mozilla] Re: [opensuse-factory] xulrunner/firefox split revisited
by Wolfgang Rosenauer 05 Oct '10

05 Oct '10

Hi, [cross-posting not needed I think] Am 29.09.2010 14:14, schrieb Frederic Crozat: > Le mercredi 29 septembre 2010 à 14:02 +0200, Wolfgang Rosenauer a > écrit : > Probably a stupid question, but have you discussed with other > distribution maintainers to see how they are handling the move ? Not stupid at all. And yes, I have talked to Ubuntu and Debian already. Fedora to go actually. Status: Ubuntu already started to do exactly what I want to do. Even more (as I've been told) they are not inheriting any more system libraries as upstream does. NSPR, NSS, JPG whatever is apparently statically built into their Firefox. The reasons were ongoing issues with upstream about using too old or broken system libraries and (startup) performance. Debian and Ubuntu never had the split running as smoothly as we did. My localization packaging and split between xulrunner/firefox was almost perfect. Debian hasn't had localized xulrunner but only Firefox. We had both without overlapping packaging. Last I heard was that Debian wants to keep the split but hasn't yet really looked into the issues I'm facing already. AFAIK Fedora also has a different localization packaging using ready made XPIs from upstream for the locales. Otherwise I'm failing to find their current package for FF4 (if they have it). But thanks for the reminder. I guess I'll just contact them all again. > It might useful to have a "common" way of packaging xulrunner / firefox > across distributions, which "could" help influence Mozilla in the > future. The only reason why Firefox-on-top-of-xulrunner still works somehow is the work of the distributions. Mozilla doesn't really care and breaks it very often (not really intentionally but they do not test this setup and they ignore it for their design plans). I'm really starting to wonder if it's worth the effort. Wolfgang -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 1

[opensuse-factory-mozilla] xulrunner/firefox split revisited
by Wolfgang Rosenauer 29 Sep '10

29 Sep '10

Hi, a few years ago I have driven an effort to split the Firefox package in openSUSE so that Firefox is a pretty small addon based on the xulrunner packages. We already had a xulrunner package at that time to satisfy consumers/applications which want to embed Gecko and to be able to run XUL applications designed to run under xulrunner. Back then I stripped out almost all duplication from the Firefox package and based it on xulrunner. That went fairly well up to Firefox 3.6 now but starting with Firefox 4 Mozilla did some heavy changes to Firefox' extension and chrome system which makes it very hard to do it as we did. Some things are just impossible and we would need to configure Firefox differently as upstream does to keep compatibility with the above app design. One difference you can notice right now with the Firefox 4 betas I ship is that localization doesn't work anymore which is one outcome of the changes. Another feature (omnijar; performance related) is currently disabled because it's not possible with our structure. Because of all the above I'm thinking about taking back that split and ship Firefox as (almost) static build again. I don't want to drop the xulrunner packages as they still make sense though. That also shouldn't be a problem of maintenance since we already had to keep xulrunner and firefox exactly in sync and built from the same sources. Basically the only thing which is affected is the size of the package but I _think_ going from 1MB to 10MB (something like that) will kill our installation media? This is more or less just a heads up to give people the chance to raise their voice or concerns since it might be possible to keep it as it is with some constraints (and unfortunately some ongoing work to keep up with upstream). Any comments? Wolfgang -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 0

[opensuse-factory-mozilla] Fwd: Re: Security issues: How do users, maintainers and developers work together? Second Example: Thunderbird 3.0.6, Firefox 3.6.8
by pistazienfresser (see profile) 17 Sep '10

17 Sep '10

Hello maintainers of Mozilla programs, hello all, there seems to be a 'known' security related bug (potential Cross-Site Scripting Attacks) on several versions of Thunderbird and Firefox. Is it also known to you (pl.)? Regards pistazienfresser http://forums.opensuse.org/english/community/general-chit-chat/445980-secur… -------- Original Message -------- Subject: Re: Security issues: How do users, maintainers and developers work together? Second Example: Thunderbird 3.0.6, Firefox 3.6.8 Date: Fri, 10 Sep 2010 08:00:54 GMT From: pistazienfresser <pistazienfresser(a)no-mx.forums.opensuse.org> Newsgroups: opensuse.org.no-support.general-chit-chat References: <pistazienfresser.4h11o0(a)no-mx.forums.opensuse.org> <Chrysantine.4h14fz(a)no-mx.forums.opensuse.org> [...] @ all: Does anyone how to act to speed up a update related on a (not by personal experience) know security issue without being able to maintain by myself? A fake bugreport? Opera 10.62 of 2010-09-09 seems to fix no security issues at all.[6] But how could I speed things up in a case like my Mozilla Thunderbird 3.0.6 or my Mozilla Firefox 3.6.8?[7][8][9][10] Regards pistazienfresser Footnotes [1a] http://www.opera.com/support/kb/view/966/ [6]http://www.opera.com/docs/changelogs/unix/1062/ [7]http://www.mozilla.org/security/announce/2010/mfsa2010-49.html "Title: Miscellaneous memory safety hazards (rv:1.9.2.9/ 1.9.1.12) Impact: Critical Announced: September 7, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey 2.0.7" [8] Mozilla Thunderbird Bugs Let Remote Users Conduct Cross-Site Scripting Attacks, Obtain Potentially Sensitive Information, and Execute Arbitrary Code SecurityTracker; SecurityTracker URL: http://securitytracker.com/id?1024403 (2010-09-08) "Impact: A remote user can create a HTML that, when loaded by the target user, will execute arbitrary code on the target user's system. A remote user can access the target user's cookies (including authentication cookies), if any, associated with the target site, access data recently submitted by the target user via web form to the site, or take actions on the site acting as the target user. A remote user can obtain potentially sensitive information. Solution: The vendor has issued a fix (3.0.7, 3.1.3). " [9] Mozilla Firefox DLL Loading Error Lets Remote Users Execute Arbitrary Code; SecurityTracker URL: http://securitytracker.com/id?1024406 (2010-09-08) [10] Mozilla Firefox Bugs Let Remote Users Conduct Cross-Site Scripting Attacks, Obtain Potentially Sensitive Information, and Execute Arbitrary Code, SecurityTracker URL: http://securitytracker.com/id?1024401 (2010-09-08) -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

3 12

[opensuse-factory-mozilla] Re: [opensuse-buildservice] Updated distro packages
by Wolfgang Rosenauer 29 Jul '10

29 Jul '10

Hi, Am 29.07.2010 20:03, schrieb Stephen Shaw: > On Thu, Jul 29, 2010 at 10:39, Wolfgang Rosenauer > <wolfgang(a)rosenauer.org> wrote: >> Am 29.07.2010 16:38, schrieb Stephen Shaw: >>> This particular package is xulrunner191. I need to patch it (working >>> on upstream the patch) and want to make sure that I'm providing the >>> latest version in hopes to make sure that I include all the latest >>> security patches. The problem I'm running into with this however is >>> that it requires newer versions of other packages which so far has >>> turned in to a big mess with no success. >> >> Not really buildservice related but can you please explain a bit more >> which packages are needed for your work? The mentioned package awoke my >> curiosity. >> Feel free to PM or use another mailing list in case. >> >> Wolfgang > > We have a patch for xulrunner that helps with accessibility and > plugins. We are going through the review process with our patch and > its taking some time. However we need that patch in order for our > stuff to work. I'm just building xulrunner191, xulrunner192, and soon > xulrunner193 with our patch. > > This is just an effort to rebuild the latest xulrunner 1.9.1.11 with > our patch. It seems that the latest xulrunner needs a newer/patched > version of mozilla-nss and so beginning the chain. Ok, I can remember there was something about that. If NSPR and NSS is your main concern that should be rather easy so I'm wondering what your issues are. IIRC 3.12.6 is the version of NSS which is currently required (mainly because the SSL renegotiation stuff). But if you build stuff against the update repositories that should be covered already. Wolfgang -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 0

[opensuse-factory-mozilla] xulrunner devel packages have file conflicts (moonlight plugin build)
by Andrew Jorgensen 30 Apr '10

30 Apr '10

Moonlight needs to be built for several versions of firefox at once (Firefox 2, 3, and 3.6 - yay for API changes!). To do this we install multiple xulrunnerXXX-devel packages. Unfortunately 191 and 192 conflict, or rather they don't conflict but they have file conflicts as follows (reported by SUSE Studio when trying to build a VM for the plugin builds). file /usr/lib/pkgconfig/libxul-embedding.pc conflicts between attempted installs of mozilla-xulrunner192-devel-1.9.2.3-1.2.i586 and mozilla-xulrunner191-devel-1.9.1.9-3.2.i586 file /usr/lib/pkgconfig/libxul.pc conflicts between attempted installs of mozilla-xulrunner192-devel-1.9.2.3-1.2.i586 and mozilla-xulrunner191-devel-1.9.1.9-3.2.i586 file /usr/lib/pkgconfig/mozilla-gtkmozembed-embedding.pc conflicts between attempted installs of mozilla-xulrunner192-devel-1.9.2.3-1.2.i586 and mozilla-xulrunner191-devel-1.9.1.9-3.2.i586 file /usr/lib/pkgconfig/mozilla-gtkmozembed.pc conflicts between attempted installs of mozilla-xulrunner192-devel-1.9.2.3-1.2.i586 and mozilla-xulrunner191-devel-1.9.1.9-3.2.i586 file /usr/lib/pkgconfig/mozilla-js.pc conflicts between attempted installs of mozilla-xulrunner192-devel-1.9.2.3-1.2.i586 and mozilla-xulrunner191-devel-1.9.1.9-3.2.i586 file /usr/lib/pkgconfig/mozilla-plugin.pc conflicts between attempted installs of mozilla-xulrunner192-devel-1.9.2.3-1.2.i586 and mozilla-xulrunner191-devel-1.9.1.9-3.2.i586 Is there some way we can resolve this conflict and still build for all three APIs? -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

2 1

[opensuse-factory-mozilla] A thin buttons and drop down menus in KDE´s Firefox
by Rastislav Krupanský 11 Dec '09

11 Dec '09

Hi. I have a question. Is any way how can i get thicker button and drop down menu in KDE´s Firefox. They are thin a little bit for me in comparing to Chromium, Opera or Firefox in Windows. I mean e.g. "Search" button on http://open-tran.eu/ or, "Translate" on http://translate.google.com/# and drop down menus. And could it be possible make them thicker to the factory/future releases? Thanks a lot -- S pozdravom / Best regards, Rasto -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 0

[opensuse-factory-mozilla] public repositories
by Wolfgang Rosenauer 02 Dec '09

02 Dec '09

Hi, as Factory moved to a more strict patch handling (fuzz=0) (and I always wanted something for myself with version management) I've created a mercurial repository containing the patches (as used with Mercurial's MQ system) and the source files from the RPMs. https://www.rosenauer.org/hg/mozilla-1.9.2/ As Firefox 3.5.x is mainly "done" and I'm currently working towards Firefox 3.6 which is based on Gecko 1.9.2 that's the only tree available now. This is just a small note as I'm not sure who's following here and interested in working with that stuff but in case there is any interest I can describe in more detail how one can work with that repo (and probably provide push access for individuals). It's a Mercurial repo because that way it's easy to integrate with upstreams Mercurial repository. For completeness there is also a repository for the susefox extension which is shipped since openSUSE 11.2 together with Firefox: http://gitorious.org/opensuse/susefox Wolfgang -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 0

[opensuse-factory-mozilla] Fwd: Ebuild of Dooble Web Browser
by Max 07 Oct '09

07 Oct '09

---------- Forwarded message ---------- From: Ian Whyman <v00d00(a)v00d00.net> Date: Wed, Oct 7, 2009 at 1:38 AM I managed to create an ebuild if anyone wants to try this. It seems to be nothing special currently but please do try it as the ebuild took a while to get right and I would be unhappy if no one used it. ebuild: http://gitweb.sabayon.org/?p=overlay.git;a=commit;h=7fd998de110ebb6d9ed6890… Can I have a cookie now?? lol Ian -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 0

[opensuse-factory-mozilla] Dooble Web Browser needs RPM packaging
by Max 06 Oct '09

06 Oct '09

Hello, new Web Browser Dooble http://dooble.sf.net is out Is anyone able to make a rpm Suse Build? then we can link it on the homepage Thanks for a feedback Max ---------- Forwarded message ---------- Date: Tue, Oct 6, 2009 at 8:57 PM Subject: New Armel & Ubuntu Builds SVN 874 of Dooble Web Browser https://launchpad.net/ubuntu/karmic/+source/dooble/0.0+svn874-0ubuntu1 lpia build of dooble 0.0+svn874-0ubuntu1 in ubuntu karmic RELEASE https://launchpad.net/ubuntu/+source/dooble/0.0+svn874-0ubuntu1/+build/1278… armel build of dooble 0.0+svn874-0ubuntu1 in ubuntu karmic RELEASE debhttps://launchpad.net/ubuntu/+source/dooble/0.0+svn874-0ubuntu1/+build/1…. see the releases soon on the homepage: http://dooble.sf.net -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 0

[opensuse-factory-mozilla] openSuse 10.3 Firefox 3.5 Problem
by Newbie 02 Aug '09

02 Aug '09

I'm not sure if this is the appropriate place to post this tread, but I think the feedback might be helpful to you. I am running OpenSuse 10.3 on a 64-bit system. I had evoulution and Firefox running on the system and unfortunately did an update to Firefox 3.5. When I attempted to use the browser, it displayed a blank page for any web site that I attempted to view. I tried going back to the 64 bit version of latest 3.0 version and got the same result. Moving from the 64 bit version of Firefox to the 32 bit version corrected the issue in the 3.0 version. Now when I attempt to start evolution it fails to start. Starting it from the command line gives the following error: evolution-smime-WARNING **: Failed all methods for initializing NSS Segmentation fault I've tried reinstalling evolution and got the same result after deleting and reinstalling it. The version of Evolution installed is 2.12.0-5.8 x86-64. The version of Firefox installed is 3.0.12-0.1 i586. Firefox is not the x86-64 version because that version does not load any web pages after installing the 3.5 version. Help please. -- To unsubscribe, e-mail: opensuse-factory-mozilla+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory-mozilla+help(a)opensuse.org

1 0