summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--palemoon/bgstack15-palemoon-prefs.js (renamed from palemoon/bgstack15-prefs.js)9
-rw-r--r--palemoon/bgstack15-palemoon.patch11
-rw-r--r--palemoon/debian/bgstack15-palemoon-prefs.js (renamed from palemoon/debian/bgstack15-prefs.js)9
-rw-r--r--palemoon/debian/changelog16
-rw-r--r--palemoon/debian/control30
-rw-r--r--palemoon/debian/install2
-rw-r--r--palemoon/palemoon-stackrpms.spec16
-rw-r--r--palemoon/palemoon.spec16
8 files changed, 85 insertions, 24 deletions
diff --git a/palemoon/bgstack15-prefs.js b/palemoon/bgstack15-palemoon-prefs.js
index ec7ab94..d944010 100644
--- a/palemoon/bgstack15-prefs.js
+++ b/palemoon/bgstack15-palemoon-prefs.js
@@ -1,13 +1,16 @@
-// file: /usr/lib/palemoon/browser/defaults/preferences/bgstack15-prefs.js
+// file: /usr/lib/palemoon/browser/defaults/preferences/bgstack15-palemoon-prefs.js
+// deployed with palemoon-stackrpms package (rpm or dpkg) built by bgstack15
+// last modified 2019-03-27
// reference:
// https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig
-pref("browser.backspace_action", 0);
pref("browser.allTabs.previews", false);
+pref("browser.backspace_action", 0);
pref("browser.ctrlTab.previews", false);
pref("browser.download.useDownloadDir", true);
pref("browser.newtab.choice", 1);
pref("browser.newtabpage.storageVersion", 1);
pref("browser.search.update", false);
+pref("browser.sessionstore.restore_on_demand", false);
pref("browser.startup.page", 3);
pref("browser.tabs.closeWindowWithLastTab", false);
pref("captivedetect.canonicalURL", "http://127.0.0.1:9980");
@@ -15,7 +18,9 @@ pref("extensions.enabledAddons", "%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.
pref("extensions.shownSelectionUI", true);
pref("extensions.update.autoUpdateDefault", false);
pref("general.warnOnAboutConfig", false);
+pref("network.automatic-ntlm-auth.trusted-uris", ".ipa.smith122.com");
pref("network.cookie.prefsMigrated", true);
+pref("network.negotiate-auth.trusted-uris", ".ipa.smith122.com");
pref("network.stricttransportsecurity.preloadlist", false);
pref("privacy.sanitize.migrateFx3Prefs", true);
pref("security.cert_pinning.enforcement_level", 0);
diff --git a/palemoon/bgstack15-palemoon.patch b/palemoon/bgstack15-palemoon.patch
new file mode 100644
index 0000000..94f9470
--- /dev/null
+++ b/palemoon/bgstack15-palemoon.patch
@@ -0,0 +1,11 @@
+diff -Naur 28.4.1-0/application/palemoon/branding/shared/locales/browserconfig.properties 28.4.1-1/application/palemoon/branding/shared/locales/browserconfig.properties
+--- 28.4.1-0/application/palemoon/branding/shared/locales/browserconfig.properties 2019-03-26 13:33:15.000000000 -0400
++++ 28.4.1-1/application/palemoon/branding/shared/locales/browserconfig.properties 2019-03-27 10:44:23.578435642 -0400
+@@ -3,5 +3,5 @@
+ # file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+ # Do NOT localize or otherwise change these values
+-browser.startup.homepage=http://start.palemoon.org/
+-browser.startup.homepage_reset=http://start.palemoon.org/
++browser.startup.homepage=http://start.duckduckgo.com/
++browser.startup.homepage_reset=http://start.duckduckgo.com/
diff --git a/palemoon/debian/bgstack15-prefs.js b/palemoon/debian/bgstack15-palemoon-prefs.js
index ec7ab94..d944010 100644
--- a/palemoon/debian/bgstack15-prefs.js
+++ b/palemoon/debian/bgstack15-palemoon-prefs.js
@@ -1,13 +1,16 @@
-// file: /usr/lib/palemoon/browser/defaults/preferences/bgstack15-prefs.js
+// file: /usr/lib/palemoon/browser/defaults/preferences/bgstack15-palemoon-prefs.js
+// deployed with palemoon-stackrpms package (rpm or dpkg) built by bgstack15
+// last modified 2019-03-27
// reference:
// https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig
-pref("browser.backspace_action", 0);
pref("browser.allTabs.previews", false);
+pref("browser.backspace_action", 0);
pref("browser.ctrlTab.previews", false);
pref("browser.download.useDownloadDir", true);
pref("browser.newtab.choice", 1);
pref("browser.newtabpage.storageVersion", 1);
pref("browser.search.update", false);
+pref("browser.sessionstore.restore_on_demand", false);
pref("browser.startup.page", 3);
pref("browser.tabs.closeWindowWithLastTab", false);
pref("captivedetect.canonicalURL", "http://127.0.0.1:9980");
@@ -15,7 +18,9 @@ pref("extensions.enabledAddons", "%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.
pref("extensions.shownSelectionUI", true);
pref("extensions.update.autoUpdateDefault", false);
pref("general.warnOnAboutConfig", false);
+pref("network.automatic-ntlm-auth.trusted-uris", ".ipa.smith122.com");
pref("network.cookie.prefsMigrated", true);
+pref("network.negotiate-auth.trusted-uris", ".ipa.smith122.com");
pref("network.stricttransportsecurity.preloadlist", false);
pref("privacy.sanitize.migrateFx3Prefs", true);
pref("security.cert_pinning.enforcement_level", 0);
diff --git a/palemoon/debian/changelog b/palemoon/debian/changelog
index 54456ae..24911ec 100644
--- a/palemoon/debian/changelog
+++ b/palemoon/debian/changelog
@@ -1,3 +1,19 @@
+palemoon (28.4.1-1devuan) manual; urgency=low
+
+ * New 28.4.1 security and bugfix release:
+ - Fixed hover state arrows on some controls.
+ - Fixed potential denial-of-service issues involving FTP (loading of subresources and spamming errors).
+ - Disabled Microsoft Family Safety (Win 8.1) by default. This prevents security issues as a result of a local MitM setup.
+ - Added several site-specific overrides (Firefox Send and polyfill.io) to work around website UA-sniffing isues.
+ - Implemented the origin-clean algorithm for controlling access to image resources.
+ - Cleaned up the helper application service code.
+ - Ported applicable security fixes from Mozilla (CVE-2019-9791, CVE-2019-9792, CVE-2019-9796, CVE-2019-9801, CVE-2019-9793, CVE-2019-9794, CVE-2019-9808 and ZDI-CAN-8368).
+ - Implemented several defense-in-depth measures (for CVE-2019-9790, CVE-2019-9797, CVE-2019-9804, and a JavaScript issue).
+ - Fixed several memory safety hazards and crashes.
+ - Binaries are now code-signed again (including the setup program for the installer).
+
+ -- B Stack <bgstack15@gmail.com> Fri, 29 Mar 2019 14:42:19 -0500
+
palemoon (28.4.0-1devuan) manual; urgency=low
* Import new 28.4.0 major development and security release:
diff --git a/palemoon/debian/control b/palemoon/debian/control
index a7f177f..f005f55 100644
--- a/palemoon/debian/control
+++ b/palemoon/debian/control
@@ -4,27 +4,27 @@ Priority: optional
Maintainer: B Stack <bgstack15@gmail.com>
Bugs: mailto: <bgstack15@gmail.com>
XSBC-Original-Maintainer: Steven Pusser <stevep@mxlinux.org>
-Build-Depends: debhelper (>= 9),
+Build-Depends: autoconf2.13,
+ debhelper (>= 9),
gcc (>= 4.9),
- autoconf2.13,
- python (>= 2.7),
- unzip,
- zip,
- pkg-config,
+ libasound2-dev,
+ libbz2-dev,
+ libdbus-glib-1-dev (>= 0.60),
+ libegl1-mesa-dev,
libgconf2-dev (>= 1.2.1),
libgtk2.0-dev (>= 2.14),
- libdbus-glib-1-dev (>= 0.60),
- yasm (>= 1.1),
- libasound2-dev,
libpulse-dev,
- libxt-dev,
- libegl1-mesa-dev,
- libx11-xcb-dev,
- zlib1g-dev,
- libssl-dev,
libsqlite3-dev,
- libbz2-dev,
+ libssl-dev,
+ libx11-xcb-dev,
+ libxt-dev,
+ pkg-config,
+ python (>= 2.7),
python-dbus,
+ unzip,
+ yasm (>= 1.1),
+ zip,
+ zlib1g-dev,
Standards-Version: 3.9.6
Homepage: http://www.palemoon.org/
diff --git a/palemoon/debian/install b/palemoon/debian/install
index e04cc8f..506544e 100644
--- a/palemoon/debian/install
+++ b/palemoon/debian/install
@@ -1,2 +1,2 @@
application/palemoon/branding/official/palemoon.desktop usr/share/applications
-debian/bgstack15-prefs.js /usr/lib/palemoon/browser/defaults/preferences/
+debian/bgstack15-palemoon-prefs.js /usr/lib/palemoon/browser/defaults/preferences/
diff --git a/palemoon/palemoon-stackrpms.spec b/palemoon/palemoon-stackrpms.spec
index 33058ba..34a22b7 100644
--- a/palemoon/palemoon-stackrpms.spec
+++ b/palemoon/palemoon-stackrpms.spec
@@ -27,6 +27,11 @@
%define scl_buildreq devtoolset-7-toolchain
%endif
+# suppress binary strippping on el6 which fails for some reason
+%if 0%{?el6}
+ %global __os_install_post %{nil}
+%endif
+
%if 0%{stackrpms_custom}
Name: palemoon-stackrpms
Summary: Pale Moon web browser with stackrpms prefs
@@ -35,7 +40,7 @@ Summary: Pale Moon web browser with stackrpms prefs
Name: palemoon
Summary: Pale Moon web browser
%endif
-Version: 28.4.0
+Version: 28.4.1
Release: 1
Group: Networking/Web
@@ -46,8 +51,9 @@ Source1: palemoon-mozconfig
Source2: palemoon.desktop
Source3: palemoon-mimeinfo.xml
%if 0%{stackrpms_custom}
-Source4: bgstack15-prefs.js
+Source4: bgstack15-palemoon-prefs.js
Patch0: small-icons.patch
+Patch1: bgstack15-palemoon.patch
%endif
Packager: Bgstack15 <bgstack15@gmail.com>
@@ -103,6 +109,7 @@ and themes to make the browser truly your own.
%if 0%{stackrpms_custom}
%patch0 -p1
+%patch1 -p1
%endif
%build
@@ -135,6 +142,11 @@ rm -rf %{buildroot}
installdir=%{_libdir}/%{name} \
sdkdir=%{_libdir}/%{name}-devel \
install
+ rm -rf %{buildroot}%{_datadir}/idl \
+ %{buildroot}%{_libdir}/%{name}-devel \
+ %{buildroot}%{_includedir} || :
+ # remove vestigial duplicate file
+ rm -rf %{buildroot}%{_libdir}/%{name}/%{appname}-bin || :
%endif
%if "%{?scl_env}" != ""
popd || :
diff --git a/palemoon/palemoon.spec b/palemoon/palemoon.spec
index a0b97f5..7de11a1 100644
--- a/palemoon/palemoon.spec
+++ b/palemoon/palemoon.spec
@@ -27,6 +27,11 @@
%define scl_buildreq devtoolset-7-toolchain
%endif
+# suppress binary strippping on el6 which fails for some reason
+%if 0%{?el6}
+ %global __os_install_post %{nil}
+%endif
+
%if 0%{stackrpms_custom}
Name: palemoon-stackrpms
Summary: Pale Moon web browser with stackrpms prefs
@@ -35,7 +40,7 @@ Summary: Pale Moon web browser with stackrpms prefs
Name: palemoon
Summary: Pale Moon web browser
%endif
-Version: 28.4.0
+Version: 28.4.1
Release: 1
Group: Networking/Web
@@ -46,8 +51,9 @@ Source1: palemoon-mozconfig
Source2: palemoon.desktop
Source3: palemoon-mimeinfo.xml
%if 0%{stackrpms_custom}
-Source4: bgstack15-prefs.js
+Source4: bgstack15-palemoon-prefs.js
Patch0: small-icons.patch
+Patch1: bgstack15-palemoon.patch
%endif
Packager: Bgstack15 <bgstack15@gmail.com>
@@ -103,6 +109,7 @@ and themes to make the browser truly your own.
%if 0%{stackrpms_custom}
%patch0 -p1
+%patch1 -p1
%endif
%build
@@ -135,6 +142,11 @@ rm -rf %{buildroot}
installdir=%{_libdir}/%{name} \
sdkdir=%{_libdir}/%{name}-devel \
install
+ rm -rf %{buildroot}%{_datadir}/idl \
+ %{buildroot}%{_libdir}/%{name}-devel \
+ %{buildroot}%{_includedir} || :
+ # remove vestigial duplicate file
+ rm -rf %{buildroot}%{_libdir}/%{name}/%{appname}-bin || :
%endif
%if "%{?scl_env}" != ""
popd || :
bgstack15