- added workaround for extensions problems on glibc 2.34

- rel 2

diff --git a/firefox.spec b/firefox.spec
index 81221e25fb85e11e0a0510103dc36f2015725690..9a4113388f5501990d120e8a03b4b0bdd3ffd422 100644 (file)
--- a/firefox.spec
+++ b/firefox.spec
@@ -49,7 +49,7 @@ Summary(hu.UTF-8):    Firefox web böngésző
 Summary(pl.UTF-8):     Firefox - przeglądarka WWW
 Name:          firefox
 Version:       93.0
-Release:       1
+Release:       2
 License:       MPL v2.0
 Group:         X11/Applications/Networking
 Source0:       https://releases.mozilla.org/pub/firefox/releases/%{version}/source/firefox-%{version}.source.tar.xz
@@ -262,6 +262,8 @@ Patch8:             %{name}-system-virtualenv.patch
 Patch9:                %{name}-Disable-Firefox-Health-Report.patch
 Patch10:       system-cairo.patch
 Patch11:       glibc-double.patch
+# Test if it can be removed when updating package
+Patch12:       glibc-2.34.patch
 URL:           https://www.mozilla.org/firefox/
 BuildRequires: OpenGL-devel
 BuildRequires: alsa-lib-devel
@@ -2113,6 +2115,7 @@ unpack() {
 %patch9 -p1
 %{?with_system_cairo:%patch10 -p1}
 %patch11 -p1
+%patch12 -p1
 
 %if %{with pgo}
 %{__sed} -i -e 's@__BROWSER_PATH__@"../../dist/bin/firefox-bin"@' build/automation.py.in

diff --git a/glibc-2.34.patch b/glibc-2.34.patch
new file mode 100644 (file)
index 0000000..d2cef94
--- /dev/null
+++ b/glibc-2.34.patch
@@ -0,0 +1,14 @@
+--- firefox-93.0/modules/libpref/init/all.js~  2021-10-06 00:00:30.000000000 +0200
++++ firefox-93.0/modules/libpref/init/all.js   2021-10-06 09:47:55.616984455 +0200
+@@ -216,6 +216,11 @@
+ pref("security.crash_tracking.js_load_1.prevCrashes", 0);
+ pref("security.crash_tracking.js_load_1.maxCrashes", 0);
+ 
++// Lower from 4 to 2 due to extension problems on glibc 2.34
++// https://lists.pld-linux.org/mailman/pipermail/pld-devel-en/2021-October/026375.html
++// https://wiki.mozilla.org/Security/Sandbox#Content_Levels
++pref("security.sandbox.content.level", 2);
++
+ pref("general.useragent.compatMode.firefox", false);
+ 
+ pref("general.config.obscure_value", 13); // for MCD .cfg files