Commit graph

3531 commits

Author SHA1 Message Date
adisbladis 80a4efc3bd
firefox-devedition-bin: 76.0b8 -> 77.0b6 2020-05-16 14:08:19 +01:00
adisbladis 198653e57e
firefox-beta-bin: 76.0b8 -> 77.0b6 2020-05-16 14:07:56 +01:00
Andreas Rammhold b0774e2d0e
Merge pull request #87811 from andir/firefox
firefox: 76.0 -> 76.0.1
2020-05-15 20:21:24 +02:00
Mario Rodas b51a82932f
Merge pull request #87733 from taku0/flashplayer-32.0.0.371
flashplayer: 32.0.0.363 -> 32.0.0.371
2020-05-14 08:05:29 -05:00
Andreas Rammhold b70435e43c
firefox: 76.0 -> 76.0.1 2020-05-14 12:50:34 +02:00
aszlig 8fb49973ce
firefox: Add patch to fix AES GCM IV bit size
Regression introduced by bce5268a21.

The bit size of the initialisation vector for AES GCM has been
introduced in NSS version 3.52 in the CK_GCM_PARMS struct via the
ulIvBits field.

Unfortunately, Firefox 68.8.0 and 76.0 do not set this field and thus it
gets initialised to zero, which in turn causes IV generation to fail.

I found out about this because WebRTC stopped working after updating to
NSS 3.52 and so I started bisecting.

Since there wasn't an obvious error in Firefox hinting towards NSS but
instead just the video stream ended up as a "null" stream, I didn't
suspect the NSS update to be the culprit at first. So I verified a few
times and then also started bisecting the actual commit in NSS that
caused the issue.

This turned out to be the problematic change:

https://phabricator.services.mozilla.com/D63241

> One notable change was caused by an inconsistancy between the spec and
> the released headers in PKCS#11 v2.40. CK_GCM_PARAMS had an extra
> field in the header that was not in the spec. OASIS considers the
> header file to be normative, so PKCS#11 v3.0 resolved the issue in
> favor of the header file definition.

Since the test I've used[1] was a bit flaky, I still didn't believe the
result of the bisect to be accurate, but after running the test several
times leading same results I dug through the above change line by line
to get more clues.

It fortunately didn't take that long to stumble upon the ulIvBits change
(which is actually documented in the NSS 3.52 release notes[4], but I
managed to blatantly ignore it for some reason) and started checking the
Firefox source tree for changes regarding that field.

Initialisation of that new field has been introduced[2] in preparation
for the 76 release, but subsequently got reverted[3] prior to the
release, because Firefox 76 is expected to be shipped with NSS 3.51,
which didn't have the ulIvBits field.

The patch I'm adding here is just a reintroduction of that change,
because we're using NSS 3.52. Not initialising that field will break
WebRTC and WebCrypto, which I think the former seems to gain in
popularity these days ;-)

Tested the change against the mentioned VM test[1] and also by testing
manually using Jitsi Meet and Nextcloud Talk.

[1]: https://github.com/aszlig/avonc/tree/884315838b6f0ebb32b/tests/talk
[2]: https://hg.mozilla.org/mozilla-central/rev/3ed30e6b6de1
[3]: https://hg.mozilla.org/mozilla-central/rev/665137da70ee
[4]: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52_release_notes

Signed-off-by: aszlig <aszlig@nix.build>
2020-05-13 02:23:12 +02:00
Robert Schütz 52fcfd3876 qutebrowser: 1.11.0 -> 1.11.1
fixes CVE-2020-11054
2020-05-12 18:46:09 +02:00
taku0 d8fa222ca2 flashplayer: 32.0.0.363 -> 32.0.0.371 2020-05-12 18:31:02 +09:00
xiorcale ccfe14cb3b github username: kjuvi -> xiorcale 2020-05-09 09:08:18 +02:00
Pavol Rusnak 6abf4a43ad
treewide: per RFC45, remove more unquoted URLs 2020-05-08 15:20:47 +02:00
Vladimír Čunát a2d5351b63
Merge #86788: firefox 75.0 -> 76.0 (critical security)
https://www.mozilla.org/en-US/firefox/76.0/releasenotes/
Some of the changes were in master already, but whatever...
2020-05-07 19:57:16 +02:00
Tim Steinbach 795564a03d
Merge pull request #81997 from eadwu/vivaldi-snapshot/fix-rpath-libdrm_gbm
vivaldi: include libdrm and libgbm
2020-05-07 08:17:27 -04:00
Michael Weiss f00f6a73df
Merge pull request #87021 from primeos/chromium
chromium: 81.0.4044.129 -> 81.0.4044.138
2020-05-06 13:01:58 +02:00
Andreas Rammhold 5040192913
firefox-bin: 75.0 -> 76.0
Discussion: https://github.com/NixOS/nixpkgs/pull/86788
2020-05-06 11:41:38 +02:00
Andreas Rammhold 5bac4f0213
firefox-esr-68: 68.7.0esr -> 68.8.0esr
Discussion: https://github.com/NixOS/nixpkgs/pull/86788
2020-05-06 11:40:28 +02:00
Michael Weiss dec3d5f39f
chromium: 81.0.4044.129 -> 81.0.4044.138
https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop.html

This update includes 3 security fixes.

CVEs: CVE-2020-6831 CVE-2020-6464
2020-05-06 01:11:53 +02:00
Andreas Rammhold d9f4f0645c
Merge pull request #81917 from colemickens/nixpkgs-firefox-libva
firefox: wrapper: add libva to libs
2020-05-05 20:21:43 +02:00
Andreas Rammhold 8996273bee
firefox-devedition-bin: 76.0b4 -> 76.0b8 2020-05-04 17:46:12 +02:00
Andreas Rammhold f3cc8dc6fa
firefox-esr-68: 68.7.0esr -> 68.8.0esr 2020-05-04 17:29:37 +02:00
Andreas Rammhold c186bc893f
firefox-beta-bin: 76.0b4 -> 76.0b8 2020-05-04 17:29:14 +02:00
Andreas Rammhold 3911336cc6
firefox-bin: 75.0 -> 76.0 2020-05-04 17:22:59 +02:00
Andreas Rammhold 324e40f0f4
firefox: 75.0 -> 76.0 2020-05-04 16:31:27 +02:00
R. RyanTM 5be4c34185 ephemeral: 6.3.3 -> 6.4.1 2020-05-04 01:34:33 -07:00
paumr 4a5b85364e qutebrowser: 1.10.1 -> 1.11.0 2020-05-01 16:44:31 +02:00
squalus ae5c4ed886 ungoogled-chromium: 81.0.4044.92-2 -> 81.0.4044.122-2 2020-05-01 09:19:53 +02:00
Michael Weiss bfa2452dc8
Merge pull request #86206 from primeos/chromium
chromium: 81.0.4044.122 -> 81.0.4044.129
2020-04-29 11:15:25 +02:00
Michael Weiss db4aece884
chromium: 81.0.4044.122 -> 81.0.4044.129
https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_27.html

This update includes 2 security fixes.

CVEs: CVE-2020-6462 CVE-2020-6461
2020-04-28 14:39:10 +02:00
Christoph Neidahl 1e814e356a palemoon: 28.8.4 -> 28.9.1, add GTK3 option 2020-04-27 21:02:09 -07:00
Cole Mickens 552d729571
firefox: wrapper: use ffmpeg_4 for vaapi
without this, adding libva is insufficient to get VA-API working in
Firefox.
2020-04-27 05:05:14 -07:00
Cole Mickens 730d542ae0
firefox: wrapper: add libva to libs 2020-04-27 03:48:33 -07:00
worldofpeace b4d7725cfe
Merge pull request #76082 from squalus/ungoogled
ungoogled-chromium: init at 81.0.4044.92-2
2020-04-23 21:03:18 -04:00
Michael Weiss a2df9776f0
chromium: 81.0.4044.113 -> 81.0.4044.122
https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_21.html

This update includes 8 security fixes.

CVEs: CVE-2020-6459 CVE-2020-6460 CVE-2020-645
2020-04-22 01:20:32 +02:00
worldofpeace b0631dc3de
Merge pull request #85469 from JeffLabonte/brave_1_5_123-1_7_92
brave: 1.5.123 -> 1.7.92
2020-04-20 08:04:46 -04:00
worldofpeace 443e544721 firefox-wrapper: don't throw on enableGnomeExtensions
We use the config for the native messaging host below this statement.
2020-04-18 20:36:55 -04:00
taku0 f63bc540cb flashplayer: 32.0.0.344 -> 32.0.0.363 2020-04-18 23:08:58 +02:00
Michael Weiss 267eefcdb7
chromium: Build with VA-API but disable it by default
This makes it possible to enable VA-API without having to rebuild
Chromium: `chromium.override { enableVaapi = true; }`
2020-04-18 13:46:22 +02:00
John Ericson eb4acb6ca9
Merge pull request #85468 from Ericson2314/no-dumpmachine
treewide: Get rid of -dumpmachine in favor of static info
2020-04-18 00:35:19 -04:00
Jeff Labonte 094c35b920 brave: 1.5.123 -> 1.7.92 2020-04-17 19:50:17 -04:00
Michael Weiss cb5c0a4bbc
chromium{Beta,Dev}: M81 -> M83 -> M84 2020-04-17 13:44:45 +02:00
Linus Heckemann 6b23355abb
Merge pull request #85307 from xaverdh/firefox-plugins-cleanup
firefox-wrapper: remove dead npapi plugin code
2020-04-17 07:32:41 +02:00
Dominik Xaver Hörl c415d67284 mozilla-plugins: remove all npapi plugins except for flash player
Firefox from version 52 onwards no longer supports npapi plugins (see https://support.mozilla.org/en-US/kb/npapi-plugins).
2020-04-16 23:04:51 +02:00
Michael Weiss 6109f94f8a
Merge pull request #85360 from primeos/chromium
chromium: 81.0.4044.92 -> 81.0.4044.113
2020-04-16 22:33:45 +02:00
Michael Weiss 16477d764f
google-chrome-{beta,dev}: Fix one substituteInPlace pattern 2020-04-16 13:39:07 +02:00
Michael Weiss ef2c3ab20e
chromium: 81.0.4044.92 -> 81.0.4044.113
https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_15.html

This update includes 1 security fix.

CVEs: CVE-2020-6457
2020-04-16 10:53:53 +02:00
Dominik Xaver Hörl c51b0afd54 firefox-wrapper: remove dead npapi plugin code 2020-04-16 10:12:09 +02:00
worldofpeace c3408adb7d ephemeral: 6.3.1 -> 6.3.3
https://github.com/cassidyjames/ephemeral/releases/tag/6.3.2
https://github.com/cassidyjames/ephemeral/releases/tag/6.3.3
2020-04-16 01:11:28 -04:00
adisbladis 2ac39a1ec6
firefox-devedition-bin: 76.0b1 -> 76.0b4 2020-04-14 09:07:25 +01:00
adisbladis 7767fdad1a
firefox-beta-bin: 76.0b1 -> 76.0b4 2020-04-14 09:06:56 +01:00
John Ericson 204d710405 treewide: Get rid of -dumpmachine in favor of static info 2020-04-13 19:26:19 -04:00
squalus 7205bd64a3 ungoogled-chromium: init at 81.0.4044.92-2 2020-04-13 13:17:05 -07:00