CVS commit: pkgsrc/www/firefox60

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Mon May 27 13:01:20 UTC 2019

Modified Files:
        pkgsrc/www/firefox60: Makefile distinfo

Log Message:
Update to 60.7.0

>From Piotr Meyer, thank you.

Changelog:
changed:
    Font and date adjustments to accommodate the new Reiwa era in Japan

fixed:
#CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
#CVE-2019-9816: Type confusion with object groups and UnboxedObjects
#CVE-2019-9817: Stealing of cross-domain images using canvas
#CVE-2019-9818: Use-after-free in crash generation server
#CVE-2019-9819: Compartment mismatch with fetch API
#CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
#CVE-2019-11691: Use-after-free in XMLHttpRequest
#CVE-2019-11692: Use-after-free removing listeners in the event listener manager
#CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
#CVE-2019-7317: Use-after-free in png_image_free of libpng library
#CVE-2019-9797: Cross-origin theft of images with createImageBitmap
#CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
#CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
#CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
#CVE-2019-5798: Out-of-bounds read in Skia
#CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.23 pkgsrc/www/firefox60/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/firefox60/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox60/Makefile
diff -u pkgsrc/www/firefox60/Makefile:1.22 pkgsrc/www/firefox60/Makefile:1.23
--- pkgsrc/www/firefox60/Makefile:1.22  Sat May 25 20:17:05 2019
+++ pkgsrc/www/firefox60/Makefile       Mon May 27 13:01:20 2019
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.22 2019/05/25 20:17:05 szptvlfn Exp $
+# $NetBSD: Makefile,v 1.23 2019/05/27 13:01:20 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            60.6
-MOZ_BRANCH_MINOR=      .3esr
+MOZ_BRANCH=            60.7
+MOZ_BRANCH_MINOR=      .0esr
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       firefox${MOZ_BRANCH:C/\..*$//}-${MOZ_BRANCH}${MOZ_BRANCH_MINOR:S/b/beta/:S/esr//}

Index: pkgsrc/www/firefox60/distinfo
diff -u pkgsrc/www/firefox60/distinfo:1.11 pkgsrc/www/firefox60/distinfo:1.12
--- pkgsrc/www/firefox60/distinfo:1.11  Sat May 11 04:02:29 2019
+++ pkgsrc/www/firefox60/distinfo       Mon May 27 13:01:20 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.11 2019/05/11 04:02:29 ryoon Exp $
+$NetBSD: distinfo,v 1.12 2019/05/27 13:01:20 ryoon Exp $
 
-SHA1 (firefox-60.6.3esr.source.tar.xz) = 87796801929b453403ffc8a4aea43ab9c2605619
-RMD160 (firefox-60.6.3esr.source.tar.xz) = 94c91de6a9502ad6d44c5c271822ac4be0a6a876
-SHA512 (firefox-60.6.3esr.source.tar.xz) = 227bf3166e648f8d59e3901b7dd7da67e96adcb3ebf0c7e681db6ca467f21cc4b28bddd0deda00289b29a0a671feaa40def133e37fee8454a5bcea69b295f3fe
-Size (firefox-60.6.3esr.source.tar.xz) = 268688628 bytes
+SHA1 (firefox-60.7.0esr.source.tar.xz) = 733187de6b20f8902fa207f08ec85f952a2c2e40
+RMD160 (firefox-60.7.0esr.source.tar.xz) = 21176def2d22c83042d36844c5d148d324199ac6
+SHA512 (firefox-60.7.0esr.source.tar.xz) = c2152857f5f1c816a12fcf5c450268025ee47ee9299ae3355650d86c7c97191b731123a4964154222ca5ba1edc44fee0d1d5f803ae9515841283ecaff6dc9a55
+Size (firefox-60.7.0esr.source.tar.xz) = 268497160 bytes
 SHA1 (patch-aa) = fdabcc9b055f6439fdbda9b38ab7cec08ff3e231
 SHA1 (patch-browser_app_profile_firefox.js) = 9a43095d94f83f315b9a3ce4a7b0a4301e9c40e6
 SHA1 (patch-build_moz.configure_old.configure) = 1df6867eaf73a350fbe8fcd5bd34e1fcab09d707