Changeset 883e376

Timestamp:

08/11/2021 02:48:08 AM (3 years ago)

Author:

Ken Moffat <ken@…>

Branches:

11.0, 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

bb78d32

Parents:

6c815f9

Message:

Firefox security updates:

Firefox-91.0esr
JS78 using firefox-78.13.0esr
and introducing firefox-78.13.0esr as Firefox Legacy.

The first two have been tested and measured on glibc-2.34 systems.
The latter has been measured on a slightly older system where 91.0
fails to build.

If anyone likes ff78 so much that they want to use it on a
glibc-2.34 system, feel free to create the necessary patches
but note that I expect to remove Firefox Legacy in November,
it is only a transitional item.

Files:

• general/genlib/js78.xml (modified) (3 diffs)
• introduction/welcome/changelog.xml (modified) (1 diff)
• packages.ent (modified) (2 diffs)
• xsoft/graphweb/firefox-legacy.xml (added)
• xsoft/graphweb/firefox.xml (modified) (6 diffs)
• xsoft/graphweb/graphweb.xml (modified) (1 diff)

general/genlib/js78.xml

@@ -11 +11 @@
   <!ENTITY ff78-version       "&JS78-version;"> -->
 
-  <!ENTITY ff78-version       "&firefox-version;">
-  <!ENTITY js78-download-http "&mozilla-http;/firefox/releases/&ff78-version;esr/source/firefox-&ff78-version;esr.source.tar.xz">
+<!-- <!ENTITY ff78-version       "&firefox-version;">-->
+  <!ENTITY js78-download-http "&mozilla-http;/firefox/releases/&JS78-version;esr/source/firefox-&JS78-version;esr.source.tar.xz">
   <!ENTITY js78-download-ftp  " ">
-  <!ENTITY js78-md5sum        "9bcaaa0482703530c5d6429ad8862148">
+  <!ENTITY js78-md5sum        "872623fc9f93ea8d3f3290024f0c0925">
   <!ENTITY js78-size          "319 MB">
   <!ENTITY js78-buildsize     "3.0 GB (36 MB installed after removing 34MB static lib)">
-  <!ENTITY js78-time          "2.6 SBU (on a 4-core machine with parallelism=4)">
+  <!ENTITY js78-time          "2.4 SBU (on a 4-core machine with parallelism=4)">
 ]>
 
-<sect1 id="js78" xreflabel="js78-&ff78-version;">
+<sect1 id="js78" xreflabel="js78-&JS78-version;">
   <?dbhtml filename="js78.html"?>
 
@@ -27 +27 @@
   </sect1info>
 
-  <title>JS-&ff78-version;</title>
+  <title>JS-&JS78-version;</title>
 
   <indexterm zone="js78">
@@ -115 +115 @@
       <para>
         Unlike most other packages in BLFS, the instructions below require you
-        to untar <filename>firefox-&ff78-version;esr.tar.xz</filename> and
-        change into the <filename>firefox-&ff78-version;</filename> folder.
+        to untar <filename>firefox-&JS78-version;esr.tar.xz</filename> and
+        change into the <filename>firefox-&JS78-version;</filename> folder.
       </para>
 

introduction/welcome/changelog.xml

@@ -45 +45 @@
       <para>August 10th, 2021</para>
       <itemizedlist>
+        <listitem>
+          <para>[ken] - Update to JS-78.13.0, firefox-91.0esr and introduce a
+          firefox-legacy page for firefox-78.13.0esr (all are security fixes).
+          Fixes <ulink url="&blfs-ticket-root;15367">#15367</ulink> and
+          <ulink url="&blfs-ticket-root;15369">#15369</ulink>. If in doubt
+          about which version of firefox to use, consult the firefox page in
+          the wiki which is linked from both.</para>
+        </listitem>
         <listitem>
           <para>[bdubbs] - Update to ModemManager-1.16.10. Fixes

packages.ent

@@ -118 +118 @@
 <!--<!ENTITY JS68-version                 "68.12.0">-->
 <!-- for JS78 see firefox -->
-<!-- temporary, until JS78.8.0 is approved for gnome -->  
-<!--<!ENTITY JS78-version                 "78.7.1">-->
+<!-- temporary, until JS91 is approved for gnome -->  
+<!ENTITY JS78-version                 "78.13.0">
 <!ENTITY json-c-version               "0.15">
 <!ENTITY json-glib-version            "1.6.2">
@@ -928 +928 @@
 <!ENTITY falkon-minor-version         "0">
 <!ENTITY falkon-version               "&falkon-major-version;.&falkon-minor-version;">
-<!ENTITY firefox-version              "78.12.0">
+<!-- for firefox-legacy-version use JS78-version -->
+<!ENTITY firefox-version              "91.0">
 <!ENTITY flashplayer-version          "27.0.0.187">
 <!ENTITY qupzilla-version             "2.2.6">

xsoft/graphweb/firefox.xml

@@ -7 +7 @@
   <!ENTITY firefox-download-http "&mozilla-http;/firefox/releases/&firefox-version;esr/source/firefox-&firefox-version;esr.source.tar.xz">
   <!ENTITY firefox-download-ftp  " ">
-  <!ENTITY firefox-md5sum        "9bcaaa0482703530c5d6429ad8862148">
-  <!ENTITY firefox-size          "319 MB">
+  <!ENTITY firefox-md5sum        "18045807c2f3969b41867f08fb645210">
+  <!ENTITY firefox-size          "365 MB">
   <!-- NB with stylo, much of the build uses rust, and therefore cargo files.
     But the extra cached cargo files, if any, seem to be minimal -->
-  <!ENTITY firefox-buildsize     "5.2 GB (186 MB installed) without tests">
+  <!ENTITY firefox-buildsize     "6.7 GB (196 MB installed) without tests">
   <!-- editors: with ff63 and rust-1.29, ./mach build -j4 is probably the
    most practical way to get a timing on a machine with more cores, if taking
    cores offline is not practical. If in doubt, round up -->
-  <!ENTITY firefox-time          "28 SBU (on a 4-core machine) without tests">
+  <!ENTITY firefox-time          "28 SBU (on a typical 4-core machine) without tests">
 ]>
 
@@ -75 +75 @@
     </itemizedlist>
 
-<!--<bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing="compact">
       <listitem>
         <para>
           Required patch:
-          <ulink url="&patch-root;/firefox-&firefox-version;esr-rust1520-1.patch"/>
+          <ulink url="&patch-root;/firefox-&firefox-version;esr-glibc234-1.patch"/>
         </para>
       </listitem>
-    </itemizedlist>-->
+    </itemizedlist>
 
     <note>
+
+      <!-- temporary note -->
+      <para>
+        With the 91 ESR series, firefox no-longer works on ftp: links. Also,
+        on a few machines which have been adequately updated for the necessary
+        dependencies 91.0 fails to build with a message that a python check on
+        libgkrust.a identified 1 networking function (getsockname) in the rust
+        static library. The reason for this is not understood, but systems with
+        binutils-2.37, gcc-11.2.0 and glibc-2.34 appear to be unaffected.
+      </para>
+      <!-- end of temporary note -->
+
       <para>
         The directory name is firefox-&firefox-version;
@@ -281 +293 @@
 ac_add_options --enable-system-pixman
 
-# --with-system-bz2 was removed in firefox-78
 ac_add_options --with-system-jpeg
 ac_add_options --with-system-png
@@ -302 +313 @@
     </para>
 
-<!--<para>
-      Apply a patch that prevent a crash when opening HTML videos if
-      compiling against rust-1.52.0 or higher:
-    </para>
-
-<screen><userinput>patch -Np1 -i ../firefox-&firefox-version;esr-rust1520-1.patch</userinput></screen>-->
-
-    <para>
-      In the esr version of firefox-78, the code to ensure that add-ons
-      are signed by the trusted root has been disabled, presumably for
-      organizations which require their own add-ons. To enable it as an
-      added security measure issue the following command:
-    </para>
-
-<screen><userinput>sed -e 's/Disable/Enable/'            \
-    -e '/^MOZ_REQUIRE_SIGNING/s/0/1/' \
-    -i build/mozconfig.common</userinput></screen>
+    <para>
+      Apply a patch which allows compilation on systems running glibc-2.34:
+    </para>
+
+<screen><userinput>patch -Np1 -i ../firefox-&firefox-version;esr-glibc234-1.patch</userinput></screen>
 
     <para>
@@ -374 +373 @@
 <screen><userinput>export CC=gcc CXX=g++ &amp;&amp;
 export MOZBUILD_STATE_PATH=${PWD}/mozbuild &amp;&amp;
+./mach create-mach-environment             &amp;&amp;
 ./mach configure                           &amp;&amp;
 ./mach build</userinput></screen>
@@ -436 +436 @@
       Creating this in the build directory, and deleting that after the
       installation, prevents it being used. If you wish to participate in
-      telemetry, export MOZBUILD_STATE_PATH to point to its default directory.
+      telemetry, export MOZBUILD_STATE_PATH to point to its default directory
+      and remove the entry from the <filename>mozconfig</filename>.
+    </para>
+
+    <para>
+      <command>./mach create-mach-environment</command>: This uses the system
+      python to create a virtual environment for <command>mach</command>.
+    </para>
+
+    <para>
+      <command>./mach configure</command>: This validates the supplied
+      dependencies and the <filename>mozconfig</filename>.
     </para>
 

xsoft/graphweb/graphweb.xml

@@ -19 +19 @@
   <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="epiphany.xml"/>
   <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="falkon.xml"/>
+  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="firefox-legacy.xml"/>
   <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="firefox.xml"/>
   <!--<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="midori.xml"/>-->