[Dev] [PATCH] Update iceweasel to 70.0

grizzlyuser grizzlyuser at protonmail.com
Wed Oct 30 19:29:59 GMT 2019


New version of Firefox has various security fixes [1]. I didn't dig deep into
new "surprises" that Mozilla constantly brings to us. And of course, Iceweasel
is far from polished state. But it looks like getting a new working build is
better security-wise. Please find patches in the attachments.

List of changes:

1. Update version to 70.0 in PKGBUILD.

2. Update depends to reflect the changes from Arch firefox (see commit [1] in
Arch).

3. Add 0001-Use-remoting-name-for-GDK-application-names.patch from Arch firefox.
Although this patch is already used in PKGBUILD, it's missing in abslibre for
some reason.

4. Update version of branding package archive and root folder version inside
to 70.0. Was not able to find git repo of these files, so created the patch that
has to be applied to the tar.xz archive the PKGBUILD downloads. Do not use
'patch' to apply it, because it won't handle symlink renaming; use 'git apply'
instead.

5. Update Determine-which-phishing-shavar-to-use.patch in branding archive,
otherwise it won't apply.

6. Update branding config files to be more inline with what Tor Browser Bundle
9.0 does for rebranding. Did this to avoid the following crash on launch of the
built package:
    Marionette	FATAL	XML Parsing Error: undefined entity
    Location: chrome://browser/content/browser.xhtml
    Line Number 1918, Column 9:        <toolbaritem id="appMenu-fxa-status"
Not sure which of the changed lines fixed that issue though.

7. Add prefs to fix [3] about nonfree recommendations in about:addons page.

8. Update checksums in PKGBUILD. Please note that they still need to be updated
for the branding archive, as I sent only a patch to it and not the archive
itself.

[1] https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/
[2] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/firefox&id=243fb0e99fb0a66f1e0bb9990ce67c0e082025ea
[3] https://labs.parabola.nu/issues/2409


-------------- next part --------------
A non-text attachment was scrubbed...
Name: iceweasel_70.0-1.patch
Type: text/x-patch
Size: 3961 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20191030/ac99aac7/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: iceweasel-branding-70.0-1.patch
Type: text/x-patch
Size: 12496 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20191030/ac99aac7/attachment-0003.bin>


More information about the Dev mailing list