diff options
Diffstat (limited to 'newmoon/debian')
| -rw-r--r-- | newmoon/debian/changelog | 13 | ||||
| -rw-r--r-- | newmoon/debian/control | 1 | ||||
| -rw-r--r-- | newmoon/debian/newmoon+devuan.dsc | 4 | ||||
| -rw-r--r-- | newmoon/debian/patches/revert-mach-file.patch | 71 | ||||
| -rw-r--r-- | newmoon/debian/patches/series | 3 | ||||
| -rwxr-xr-x | newmoon/debian/rules | 6 |
6 files changed, 92 insertions, 6 deletions
diff --git a/newmoon/debian/changelog b/newmoon/debian/changelog index 725d65a..b67b300 100644 --- a/newmoon/debian/changelog +++ b/newmoon/debian/changelog @@ -1,3 +1,16 @@ +newmoon (29.4.3-1+devuan) obs; urgency=medium + + - This is a security update with a few extras. + * Restored the FUEL abstraction library again. + * Added some extra sanity checks to timers and text fragments. DiD + * Added a potential crash safeguard in program threading logic. DiD + * Fixed the following security issues: CVE-2021-43537, CVE-2021-43541, + CVE-2021-43536, CVE-2021-43545 and CVE-2021-43542. + * Unified XUL Platform Mozilla Security Patch Summary: 5 fixed, 3 DiD, + 10 not applicable. + + -- B. Stack <bgstack15@gmail.com> Tue, 04 Jan 2022 12:54:49 -0500 + newmoon (29.4.2-1+devuan) obs; urgency=medium - This is a security update. diff --git a/newmoon/debian/control b/newmoon/debian/control index 7d167fd..29a09a3 100644 --- a/newmoon/debian/control +++ b/newmoon/debian/control @@ -14,7 +14,6 @@ Build-Depends: debhelper (>= 12), libssl-dev, libx11-xcb-dev, libxt-dev, - lsb-release, mesa-common-dev, pkg-config, python2 (>= 2.7.18-2~) | python (>= 2.7), diff --git a/newmoon/debian/newmoon+devuan.dsc b/newmoon/debian/newmoon+devuan.dsc index 2a1ef76..53f3d03 100644 --- a/newmoon/debian/newmoon+devuan.dsc +++ b/newmoon/debian/newmoon+devuan.dsc @@ -2,11 +2,11 @@ Format: 3.0 (quilt) Source: newmoon Binary: newmoon Architecture: any -Version: 29.4.2-1+devuan +Version: 29.4.3-1+devuan Maintainer: B. Stack <bgstack15@gmail.com> Homepage: http://www.palemoon.org/ Standards-Version: 4.1.4 -Build-Depends: debhelper (>= 12), gcc (<< 11) | gcc-10, g++ (<< 11) | g++-10, autoconf2.13, libasound2-dev, libdbus-glib-1-dev (>= 0.60), libgconf2-dev (>= 1.2.1), libgtk2.0-dev (>= 2.14), libssl-dev, libx11-xcb-dev, libxt-dev, mesa-common-dev, pkg-config, python2 (>= 2.7.18-2~) | python (>= 2.7), unzip, yasm (>= 1.1), zip, lsb-release +Build-Depends: debhelper (>= 12), gcc (<< 11) | gcc-10, g++ (<< 11) | g++-10, autoconf2.13, libasound2-dev, libdbus-glib-1-dev (>= 0.60), libgconf2-dev (>= 1.2.1), libgtk2.0-dev (>= 2.14), libssl-dev, libx11-xcb-dev, libxt-dev, mesa-common-dev, pkg-config, python2 (>= 2.7.18-2~) | python (>= 2.7), unzip, yasm (>= 1.1), zip Package-List: newmoon deb web optional arch=any Files: diff --git a/newmoon/debian/patches/revert-mach-file.patch b/newmoon/debian/patches/revert-mach-file.patch new file mode 100644 index 0000000..cda3786 --- /dev/null +++ b/newmoon/debian/patches/revert-mach-file.patch @@ -0,0 +1,71 @@ +Description: revert mach file to 29.4.2's to fix FTBFS +Last-Update: 2021-11-12 + +--- palemoon-29.4.2.1.orig/mach ++++ palemoon-29.4.2.1/mach +@@ -1,63 +1,4 @@ + #!/bin/sh + +-MCP_MACH=./platform/mach +-MCP_GIT=`which git 2>/dev/null` +- +-if [ ! -f "$MCP_MACH" ]; then +- printf "Error: There is no platform codebase.\n" +- exit 1 +-fi +- +-MCP_APP=palemoon +-MCP_VERSION=`cat ./$MCP_APP/config/version.txt` +- +-MCP_XZ=`which xz 2>/dev/null` +-MCP_TAR_BASEDIR="s/^./$MCP_APP-source/" +-MCP_TAR_FILENAME="$MCP_APP-$MCP_VERSION.source.tar.xz" +-MCP_TAR_COMMAND="tar cfJv ../$MCP_TAR_FILENAME . --transform $MCP_TAR_BASEDIR --exclude-vcs --warning=no-file-changed" +-MCP_TAR_EXCLUDES=( +- "$MCP_APP/branding/beta" +- "$MCP_APP/branding/unstable" +- "platform/db/mork" +- "platform/docs" +- "platform/ldap" +- "platform/libs/gmp-clearkey" +- "platform/mailnews" +- "platform/python/psutil/*.so" +- "platform/python/psutil/*.pyd" +- "platform/python/psutil/build" +- "platform/xulrunner" +- ".mozconfig" +- ".gitattributes" +- ".gitignore" +- ".gitmodules" +- "*.pyc" +- "*.pyo" +- "*.rej" +- "*.orig" +- "*.source.tar.xz" +-) +- +-if [ "$1" == "source" ]; then +- if [ -z "$MCP_XZ" ]; then +- printf "Error: XZ was not found on the system. NOTE: This won't work on Windows.\n" +- exit 1 +- fi +- +- for _value in "${MCP_TAR_EXCLUDES[@]}"; do +- MCP_TAR_COMMAND+=" --exclude=${_value}" +- done +- +- if [[ -n "$MCP_GIT" && -d "./.git" && -d "./platform/.git" ]]; then +- printf "COMM SHA1: `"${MCP_GIT}" rev-parse --short HEAD 2>/dev/null`\n" +- printf "GRE SHA1: `cd ./platform && "${MCP_GIT}" rev-parse --short HEAD 2>/dev/null`\n" +- fi +- +- printf "Source Filename: $MCP_TAR_FILENAME\n\n" +- read -r -s -p $'Press enter to continue...\n' +- env XZ_OPTS=-9e ${MCP_TAR_COMMAND} +-else +- # We don't know what the command is but real-mach might so just pass +- # all the args to it +- $MCP_MACH $@ +-fi ++MACH_CMD=./platform/mach ++$MACH_CMD $@ diff --git a/newmoon/debian/patches/series b/newmoon/debian/patches/series index baa043e..fd4cf3c 100644 --- a/newmoon/debian/patches/series +++ b/newmoon/debian/patches/series @@ -1,3 +1,6 @@ +# from stevepusser for 29.4.3: +revert-mach-file.patch +# stackrpms small-icons.patch pm-devuan.patch pm-to-nm.patch diff --git a/newmoon/debian/rules b/newmoon/debian/rules index d93a6a0..89ddd3f 100755 --- a/newmoon/debian/rules +++ b/newmoon/debian/rules @@ -5,13 +5,13 @@ export SHELL=/bin/bash ## borrowed from stevepusser's logic ## Build with gcc-10 on releases where default gcc is 11 ## If you enable this, then d/control needs lsb-release as a build dependency. -distrelease := $(shell lsb_release -cs) -ifeq ($(distrelease),$(filter $(distrelease),sid beowulf/ceres)) +#distrelease := $(shell lsb_release -cs) +#ifeq ($(distrelease),$(filter $(distrelease),sid beowulf/ceres)) export CC=gcc-10 export CXX=g++-10 export CPP=cpp-10 export LD=gcc-10 -endif +#endif export MCFILE=debian/mozconfig |