Changeset 883e376


Ignore:
Timestamp:
08/11/2021 02:48:08 AM (14 months ago)
Author:
Ken Moffat <ken@…>
Branches:
11.0, 11.1, 11.2, lazarus, qt5new, trunk, upgradedb, xry111/intltool, xry111/soup3, xry111/test-20220226
Children:
bb78d32
Parents:
6c815f9
Message:

Firefox security updates:

Firefox-91.0esr
JS78 using firefox-78.13.0esr
and introducing firefox-78.13.0esr as Firefox Legacy.

The first two have been tested and measured on glibc-2.34 systems.
The latter has been measured on a slightly older system where 91.0
fails to build.

If anyone likes ff78 so much that they want to use it on a
glibc-2.34 system, feel free to create the necessary patches
but note that I expect to remove Firefox Legacy in November,
it is only a transitional item.

Files:
1 added
5 edited

Legend:

Unmodified
Added
Removed
  • general/genlib/js78.xml

    r6c815f9 r883e376  
    1111  <!ENTITY ff78-version       "&JS78-version;"> -->
    1212
    13   <!ENTITY ff78-version       "&firefox-version;">
    14   <!ENTITY js78-download-http "&mozilla-http;/firefox/releases/&ff78-version;esr/source/firefox-&ff78-version;esr.source.tar.xz">
     13<!-- <!ENTITY ff78-version       "&firefox-version;">-->
     14  <!ENTITY js78-download-http "&mozilla-http;/firefox/releases/&JS78-version;esr/source/firefox-&JS78-version;esr.source.tar.xz">
    1515  <!ENTITY js78-download-ftp  " ">
    16   <!ENTITY js78-md5sum        "9bcaaa0482703530c5d6429ad8862148">
     16  <!ENTITY js78-md5sum        "872623fc9f93ea8d3f3290024f0c0925">
    1717  <!ENTITY js78-size          "319 MB">
    1818  <!ENTITY js78-buildsize     "3.0 GB (36 MB installed after removing 34MB static lib)">
    19   <!ENTITY js78-time          "2.6 SBU (on a 4-core machine with parallelism=4)">
     19  <!ENTITY js78-time          "2.4 SBU (on a 4-core machine with parallelism=4)">
    2020]>
    2121
    22 <sect1 id="js78" xreflabel="js78-&ff78-version;">
     22<sect1 id="js78" xreflabel="js78-&JS78-version;">
    2323  <?dbhtml filename="js78.html"?>
    2424
     
    2727  </sect1info>
    2828
    29   <title>JS-&ff78-version;</title>
     29  <title>JS-&JS78-version;</title>
    3030
    3131  <indexterm zone="js78">
     
    115115      <para>
    116116        Unlike most other packages in BLFS, the instructions below require you
    117         to untar <filename>firefox-&ff78-version;esr.tar.xz</filename> and
    118         change into the <filename>firefox-&ff78-version;</filename> folder.
     117        to untar <filename>firefox-&JS78-version;esr.tar.xz</filename> and
     118        change into the <filename>firefox-&JS78-version;</filename> folder.
    119119      </para>
    120120
  • introduction/welcome/changelog.xml

    r6c815f9 r883e376  
    4545      <para>August 10th, 2021</para>
    4646      <itemizedlist>
     47        <listitem>
     48          <para>[ken] - Update to JS-78.13.0, firefox-91.0esr and introduce a
     49          firefox-legacy page for firefox-78.13.0esr (all are security fixes).
     50          Fixes <ulink url="&blfs-ticket-root;15367">#15367</ulink> and
     51          <ulink url="&blfs-ticket-root;15369">#15369</ulink>. If in doubt
     52          about which version of firefox to use, consult the firefox page in
     53          the wiki which is linked from both.</para>
     54        </listitem>
    4755        <listitem>
    4856          <para>[bdubbs] - Update to ModemManager-1.16.10. Fixes
  • packages.ent

    r6c815f9 r883e376  
    118118<!--<!ENTITY JS68-version                 "68.12.0">-->
    119119<!-- for JS78 see firefox -->
    120 <!-- temporary, until JS78.8.0 is approved for gnome --> 
    121 <!--<!ENTITY JS78-version                 "78.7.1">-->
     120<!-- temporary, until JS91 is approved for gnome --> 
     121<!ENTITY JS78-version                 "78.13.0">
    122122<!ENTITY json-c-version               "0.15">
    123123<!ENTITY json-glib-version            "1.6.2">
     
    928928<!ENTITY falkon-minor-version         "0">
    929929<!ENTITY falkon-version               "&falkon-major-version;.&falkon-minor-version;">
    930 <!ENTITY firefox-version              "78.12.0">
     930<!-- for firefox-legacy-version use JS78-version -->
     931<!ENTITY firefox-version              "91.0">
    931932<!ENTITY flashplayer-version          "27.0.0.187">
    932933<!ENTITY qupzilla-version             "2.2.6">
  • xsoft/graphweb/firefox.xml

    r6c815f9 r883e376  
    77  <!ENTITY firefox-download-http "&mozilla-http;/firefox/releases/&firefox-version;esr/source/firefox-&firefox-version;esr.source.tar.xz">
    88  <!ENTITY firefox-download-ftp  " ">
    9   <!ENTITY firefox-md5sum        "9bcaaa0482703530c5d6429ad8862148">
    10   <!ENTITY firefox-size          "319 MB">
     9  <!ENTITY firefox-md5sum        "18045807c2f3969b41867f08fb645210">
     10  <!ENTITY firefox-size          "365 MB">
    1111  <!-- NB with stylo, much of the build uses rust, and therefore cargo files.
    1212    But the extra cached cargo files, if any, seem to be minimal -->
    13   <!ENTITY firefox-buildsize     "5.2 GB (186 MB installed) without tests">
     13  <!ENTITY firefox-buildsize     "6.7 GB (196 MB installed) without tests">
    1414  <!-- editors: with ff63 and rust-1.29, ./mach build -j4 is probably the
    1515   most practical way to get a timing on a machine with more cores, if taking
    1616   cores offline is not practical. If in doubt, round up -->
    17   <!ENTITY firefox-time          "28 SBU (on a 4-core machine) without tests">
     17  <!ENTITY firefox-time          "28 SBU (on a typical 4-core machine) without tests">
    1818]>
    1919
     
    7575    </itemizedlist>
    7676
    77 <!--<bridgehead renderas="sect3">Additional Downloads</bridgehead>
     77    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    7878    <itemizedlist spacing="compact">
    7979      <listitem>
    8080        <para>
    8181          Required patch:
    82           <ulink url="&patch-root;/firefox-&firefox-version;esr-rust1520-1.patch"/>
     82          <ulink url="&patch-root;/firefox-&firefox-version;esr-glibc234-1.patch"/>
    8383        </para>
    8484      </listitem>
    85     </itemizedlist>-->
     85    </itemizedlist>
    8686
    8787    <note>
     88
     89      <!-- temporary note -->
     90      <para>
     91        With the 91 ESR series, firefox no-longer works on ftp: links. Also,
     92        on a few machines which have been adequately updated for the necessary
     93        dependencies 91.0 fails to build with a message that a python check on
     94        libgkrust.a identified 1 networking function (getsockname) in the rust
     95        static library. The reason for this is not understood, but systems with
     96        binutils-2.37, gcc-11.2.0 and glibc-2.34 appear to be unaffected.
     97      </para>
     98      <!-- end of temporary note -->
     99
    88100      <para>
    89101        The directory name is firefox-&firefox-version;
     
    281293ac_add_options --enable-system-pixman
    282294
    283 # --with-system-bz2 was removed in firefox-78
    284295ac_add_options --with-system-jpeg
    285296ac_add_options --with-system-png
     
    302313    </para>
    303314
    304 <!--<para>
    305       Apply a patch that prevent a crash when opening HTML videos if
    306       compiling against rust-1.52.0 or higher:
    307     </para>
    308 
    309 <screen><userinput>patch -Np1 -i ../firefox-&firefox-version;esr-rust1520-1.patch</userinput></screen>-->
    310 
    311     <para>
    312       In the esr version of firefox-78, the code to ensure that add-ons
    313       are signed by the trusted root has been disabled, presumably for
    314       organizations which require their own add-ons. To enable it as an
    315       added security measure issue the following command:
    316     </para>
    317 
    318 <screen><userinput>sed -e 's/Disable/Enable/'            \
    319     -e '/^MOZ_REQUIRE_SIGNING/s/0/1/' \
    320     -i build/mozconfig.common</userinput></screen>
     315    <para>
     316      Apply a patch which allows compilation on systems running glibc-2.34:
     317    </para>
     318
     319<screen><userinput>patch -Np1 -i ../firefox-&firefox-version;esr-glibc234-1.patch</userinput></screen>
    321320
    322321    <para>
     
    374373<screen><userinput>export CC=gcc CXX=g++ &amp;&amp;
    375374export MOZBUILD_STATE_PATH=${PWD}/mozbuild &amp;&amp;
     375./mach create-mach-environment             &amp;&amp;
    376376./mach configure                           &amp;&amp;
    377377./mach build</userinput></screen>
     
    436436      Creating this in the build directory, and deleting that after the
    437437      installation, prevents it being used. If you wish to participate in
    438       telemetry, export MOZBUILD_STATE_PATH to point to its default directory.
     438      telemetry, export MOZBUILD_STATE_PATH to point to its default directory
     439      and remove the entry from the <filename>mozconfig</filename>.
     440    </para>
     441
     442    <para>
     443      <command>./mach create-mach-environment</command>: This uses the system
     444      python to create a virtual environment for <command>mach</command>.
     445    </para>
     446
     447    <para>
     448      <command>./mach configure</command>: This validates the supplied
     449      dependencies and the <filename>mozconfig</filename>.
    439450    </para>
    440451
  • xsoft/graphweb/graphweb.xml

    r6c815f9 r883e376  
    1919  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="epiphany.xml"/>
    2020  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="falkon.xml"/>
     21  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="firefox-legacy.xml"/>
    2122  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="firefox.xml"/>
    2223  <!--<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="midori.xml"/>-->
Note: See TracChangeset for help on using the changeset viewer.